From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id tA6IFZjA028090 for ; Fri, 6 Nov 2015 13:15:35 -0500 Received: by oiad129 with SMTP id d129so70029371oia.0 for ; Fri, 06 Nov 2015 10:14:56 -0800 (PST) From: Paul Moore To: Jan Stancek Cc: selinux@tycho.nsa.gov, sds@tycho.nsa.gov Subject: Re: [selinux-testsuite PATCH 3/4] mmap/mprotect_heap: make sure memory is allocated from heap Date: Fri, 06 Nov 2015 13:14:54 -0500 Message-ID: <1457848.Jk6pGUaKPb@sifl> In-Reply-To: <53398a996e0230fa07c82955624a474524bee50b.1446805443.git.jstancek@redhat.com> References: <53398a996e0230fa07c82955624a474524bee50b.1446805443.git.jstancek@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: On Friday, November 06, 2015 02:07:23 PM Jan Stancek wrote: > This test failed on ppc64 with 64k pagesize because memory > allocation used mmap() instead of advancing heap. > > Use mallopt(M_MMAP_THRESHOLD,..) with large enough value > to discourage use of mmap(). > > Also set length in mprotect to pagesize, kernel silently aligns > it to pagesize anyway. > > Signed-off-by: Jan Stancek > Cc: Paul Moore > Cc: Stephen Smalley > --- > tests/mmap/mprotect_heap.c | 9 ++++++++- > 1 file changed, 8 insertions(+), 1 deletion(-) > > diff --git a/tests/mmap/mprotect_heap.c b/tests/mmap/mprotect_heap.c > index 691299493c3f..8b4321d6fc0b 100644 > --- a/tests/mmap/mprotect_heap.c > +++ b/tests/mmap/mprotect_heap.c > @@ -3,6 +3,7 @@ > #include > #include > #include > +#include > > int main(void) > { > @@ -10,13 +11,19 @@ int main(void) > int rc; > int pagesize = getpagesize(); > > + rc = mallopt(M_MMAP_THRESHOLD, pagesize * 16); > + if (rc != 1) { > + fprintf(stderr, "mallopt failed: %d\n", rc); > + exit(1); > + } Can you explain how you arrived at 16? It looks a bit like a magic number to me, which always gives me pause. Based on a quick read of the man page, it would seem like any value greater than "pagesize" would work, yes? > rc = posix_memalign(&ptr, pagesize, pagesize); > if (rc) { > fprintf(stderr, "posix_memalign failed: %d\n", rc); > exit(1); > } > > - rc = mprotect(ptr, 4096, PROT_READ | PROT_EXEC); > + rc = mprotect(ptr, pagesize, PROT_READ | PROT_EXEC); > if (rc < 0) { > perror("mprotect"); > exit(1); -- paul moore www.paul-moore.com