b781b21d50
Fail the XCOPY tests if no appropriate target descriptor is available instead of causing memory corruption or truncating the descriptor.
87 lines
3.1 KiB
C
87 lines
3.1 KiB
C
/*
|
|
Copyright (c) 2015 SanDisk Corp.
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <stdlib.h>
|
|
|
|
#include <CUnit/CUnit.h>
|
|
|
|
#include "iscsi.h"
|
|
#include "scsi-lowlevel.h"
|
|
#include "iscsi-test-cu.h"
|
|
|
|
void
|
|
test_extendedcopy_validate_seg_descr(void)
|
|
{
|
|
int tgt_desc_len = 0, seg_desc_len = 0, offset = XCOPY_DESC_OFFSET, len;
|
|
struct iscsi_data data;
|
|
unsigned char *xcopybuf;
|
|
|
|
logging(LOG_VERBOSE, LOG_BLANK_LINE);
|
|
logging(LOG_VERBOSE, "Test EXTENDED COPY segment descriptor fields");
|
|
|
|
CHECK_FOR_DATALOSS;
|
|
|
|
data.size = XCOPY_DESC_OFFSET +
|
|
get_desc_len(IDENT_DESCR_TGT_DESCR) +
|
|
get_desc_len(BLK_TO_BLK_SEG_DESCR);
|
|
data.data = alloca(data.size);
|
|
xcopybuf = data.data;
|
|
memset(xcopybuf, 0, data.size);
|
|
|
|
logging(LOG_VERBOSE, "Send invalid target descriptor index");
|
|
len = populate_tgt_desc(xcopybuf+offset, IDENT_DESCR_TGT_DESCR,
|
|
LU_ID_TYPE_LUN, 0, 0, 0, 0, sd);
|
|
if (len < 0) {
|
|
CU_FAIL("Populating target descriptor failed");
|
|
return;
|
|
}
|
|
offset += len;
|
|
tgt_desc_len = offset - XCOPY_DESC_OFFSET;
|
|
/* Inaccessible DESTINATION TARGET DESCRIPTOR INDEX */
|
|
offset += populate_seg_desc_b2b(xcopybuf+offset, 0, 0, 0, 1,
|
|
2048, 0, num_blocks - 2048);
|
|
seg_desc_len = offset - XCOPY_DESC_OFFSET - tgt_desc_len;
|
|
populate_param_header(xcopybuf, 1, 0, 0, 0,
|
|
tgt_desc_len, seg_desc_len, 0);
|
|
|
|
EXTENDEDCOPY(sd, &data, EXPECT_COPY_ABORTED);
|
|
|
|
logging(LOG_VERBOSE,
|
|
"Number of copy blocks beyond destination block device capacity");
|
|
memset(xcopybuf, 0, data.size);
|
|
offset = XCOPY_DESC_OFFSET;
|
|
len = populate_tgt_desc(xcopybuf+offset, IDENT_DESCR_TGT_DESCR,
|
|
LU_ID_TYPE_LUN, 0, 0, 0, 0, sd);
|
|
if (len < 0) {
|
|
CU_FAIL("Populating target descriptor failed");
|
|
return;
|
|
}
|
|
offset += len;
|
|
tgt_desc_len = offset - XCOPY_DESC_OFFSET;
|
|
/* Beyond EOL */
|
|
offset += populate_seg_desc_b2b(xcopybuf+offset, 0, 0, 0, 0,
|
|
2048, 0, num_blocks - 1);
|
|
seg_desc_len = offset - XCOPY_DESC_OFFSET - tgt_desc_len;
|
|
populate_param_header(xcopybuf, 1, 0, 0, 0,
|
|
tgt_desc_len, seg_desc_len, 0);
|
|
|
|
EXTENDEDCOPY(sd, &data, EXPECT_COPY_ABORTED);
|
|
}
|