1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
|
import py
import errno, os, StringIO
from rpython.tool.sourcetools import func_with_new_name
from rpython.rtyper.lltypesystem import rffi
from rpython.translator.sandbox.sandlib import SandboxedProc
from rpython.translator.sandbox.sandlib import SimpleIOSandboxedProc
from rpython.translator.sandbox.sandlib import VirtualizedSandboxedProc
from rpython.translator.sandbox.sandlib import VirtualizedSocketProc
from rpython.translator.sandbox.test.test_sandbox import compile
from rpython.translator.sandbox.vfs import Dir, File, RealDir, RealFile
class MockSandboxedProc(SandboxedProc):
"""A sandbox process wrapper that replays expected syscalls."""
def __init__(self, args, expected):
SandboxedProc.__init__(self, args)
self.expected = expected
self.seen = 0
def _make_method(name):
def do_xxx(self, *input):
print "decoded from subprocess: %s%r" % (name, input)
expectedmsg, expectedinput, output = self.expected[self.seen]
assert name == expectedmsg
assert input == expectedinput
self.seen += 1
if isinstance(output, Exception):
raise output
return output
return func_with_new_name(do_xxx, 'do_%s' % name)
do_ll_os__ll_os_open = _make_method("open")
do_ll_os__ll_os_read = _make_method("read")
do_ll_os__ll_os_write = _make_method("write")
do_ll_os__ll_os_close = _make_method("close")
def test_lib():
def entry_point(argv):
fd = os.open("/tmp/foobar", os.O_RDONLY, 0777)
assert fd == 77
res = os.read(fd, 123)
assert res == "he\x00llo"
count = os.write(fd, "world\x00!\x00")
assert count == 42
for arg in argv:
count = os.write(fd, arg)
assert count == 61
os.close(fd)
return 0
exe = compile(entry_point)
proc = MockSandboxedProc([exe, 'x1', 'y2'], expected = [
("open", ("/tmp/foobar", os.O_RDONLY, 0777), 77),
("read", (77, 123), "he\x00llo"),
("write", (77, "world\x00!\x00"), 42),
("write", (77, exe), 61),
("write", (77, "x1"), 61),
("write", (77, "y2"), 61),
("close", (77,), None),
])
proc.handle_forever()
assert proc.seen == len(proc.expected)
def test_foobar():
py.test.skip("to be updated")
foobar = rffi.llexternal("foobar", [rffi.CCHARP], rffi.LONG)
def entry_point(argv):
s = rffi.str2charp(argv[1]); n = foobar(s); rffi.free_charp(s)
s = rffi.str2charp(argv[n]); n = foobar(s); rffi.free_charp(s)
return n
exe = compile(entry_point)
proc = MockSandboxedProc([exe, 'spam', 'egg'], expected = [
("foobar", ("spam",), 2),
("foobar", ("egg",), 0),
])
proc.handle_forever()
assert proc.seen == len(proc.expected)
def test_simpleio():
def entry_point(argv):
print "Please enter a number:"
buf = ""
while True:
t = os.read(0, 1) # 1 character from stdin
if not t:
raise EOFError
if t == '\n':
break
buf += t
num = int(buf)
print "The double is:", num * 2
return 0
exe = compile(entry_point)
proc = SimpleIOSandboxedProc([exe, 'x1', 'y2'])
output, error = proc.communicate("21\n")
assert output == "Please enter a number:\nThe double is: 42\n"
assert error == ""
def test_socketio():
class SocketProc(VirtualizedSocketProc, SimpleIOSandboxedProc):
def build_virtual_root(self):
pass
def entry_point(argv):
fd = os.open("tcp://python.org:80", os.O_RDONLY, 0777)
os.write(fd, 'GET /\n')
print os.read(fd, 50)
return 0
exe = compile(entry_point)
proc = SocketProc([exe])
output, error = proc.communicate("")
assert output.startswith('HTTP/1.1 301 Moved Permanently')
def test_oserror():
def entry_point(argv):
try:
os.open("/tmp/foobar", os.O_RDONLY, 0777)
except OSError as e:
os.close(e.errno) # nonsense, just to see outside
return 0
exe = compile(entry_point)
proc = MockSandboxedProc([exe], expected = [
("open", ("/tmp/foobar", os.O_RDONLY, 0777), OSError(-42, "baz")),
("close", (-42,), None),
])
proc.handle_forever()
assert proc.seen == len(proc.expected)
class SandboxedProcWithFiles(VirtualizedSandboxedProc, SimpleIOSandboxedProc):
"""A sandboxed process with a simple virtualized filesystem.
For testing file operations.
"""
def build_virtual_root(self):
return Dir({
'hi.txt': File("Hello, world!\n"),
'this.pyc': RealFile(__file__),
})
def test_too_many_opens():
def entry_point(argv):
try:
open_files = []
for i in range(500):
fd = os.open('/hi.txt', os.O_RDONLY, 0777)
open_files.append(fd)
txt = os.read(fd, 100)
if txt != "Hello, world!\n":
print "Wrong content: %s" % txt
except OSError as e:
# We expect to get EMFILE, for opening too many files.
if e.errno != errno.EMFILE:
print "OSError: %s!" % (e.errno,)
else:
print "We opened 500 fake files! Shouldn't have been able to."
for fd in open_files:
os.close(fd)
try:
open_files = []
for i in range(500):
fd = os.open('/this.pyc', os.O_RDONLY, 0777)
open_files.append(fd)
except OSError as e:
# We expect to get EMFILE, for opening too many files.
if e.errno != errno.EMFILE:
print "OSError: %s!" % (e.errno,)
else:
print "We opened 500 real files! Shouldn't have been able to."
print "All ok!"
return 0
exe = compile(entry_point)
proc = SandboxedProcWithFiles([exe])
output, error = proc.communicate("")
assert output == "All ok!\n"
assert error == ""
def test_fstat():
def compare(a, b, i):
if a != b:
print "stat and fstat differ @%d: %s != %s" % (i, a, b)
def entry_point(argv):
try:
# Open a file, and compare stat and fstat
fd = os.open('/hi.txt', os.O_RDONLY, 0777)
st = os.stat('/hi.txt')
fs = os.fstat(fd)
# RPython requires the index for stat to be a constant.. :(
compare(st[0], fs[0], 0)
compare(st[1], fs[1], 1)
compare(st[2], fs[2], 2)
compare(st[3], fs[3], 3)
compare(st[4], fs[4], 4)
compare(st[5], fs[5], 5)
compare(st[6], fs[6], 6)
compare(st[7], fs[7], 7)
compare(st[8], fs[8], 8)
compare(st[9], fs[9], 9)
except OSError as e:
print "OSError: %s" % (e.errno,)
print "All ok!"
return 0
exe = compile(entry_point)
proc = SandboxedProcWithFiles([exe])
output, error = proc.communicate("")
assert output == "All ok!\n"
assert error == ""
def test_lseek():
def char_should_be(c, should):
if c != should:
print "Wrong char: '%s' should be '%s'" % (c, should)
def entry_point(argv):
fd = os.open('/hi.txt', os.O_RDONLY, 0777)
char_should_be(os.read(fd, 1), "H")
new = os.lseek(fd, 3, os.SEEK_CUR)
if new != 4:
print "Wrong offset, %d should be 4" % new
char_should_be(os.read(fd, 1), "o")
new = os.lseek(fd, -3, os.SEEK_END)
if new != 11:
print "Wrong offset, %d should be 11" % new
char_should_be(os.read(fd, 1), "d")
new = os.lseek(fd, 7, os.SEEK_SET)
if new != 7:
print "Wrong offset, %d should be 7" % new
char_should_be(os.read(fd, 1), "w")
print "All ok!"
return 0
exe = compile(entry_point)
proc = SandboxedProcWithFiles([exe])
output, error = proc.communicate("")
assert output == "All ok!\n"
assert error == ""
def test_getuid():
if not hasattr(os, 'getuid'):
py.test.skip("posix only")
def entry_point(argv):
import os
print "uid is %s" % os.getuid()
print "euid is %s" % os.geteuid()
print "gid is %s" % os.getgid()
print "egid is %s" % os.getegid()
return 0
exe = compile(entry_point)
proc = SandboxedProcWithFiles([exe])
output, error = proc.communicate("")
assert output == "uid is 1000\neuid is 1000\ngid is 1000\negid is 1000\n"
assert error == ""
|
