From nobody Mon May 4 17:28:22 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4g8TBb1bHQz6bwNs for ; Mon, 04 May 2026 17:28:23 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4g8TBZ5cXzz47HQ for ; Mon, 04 May 2026 17:28:22 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1777915702; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=JOqHTccQfLt80L7HNrXk9Zz6aQitVxmebS8+EOPoDig=; b=cX55IHfrI7y8jklEv3PcKjxLQeUPQOHpDWVUWokKUB6CJag2/vi7PKTjz5m0zDhV6/q/+f SkKkElmr9ZrbmSpsvt4I67oib0HiGeh/D+0Agguc+RvDDpmSOKi4rZ0GAuBVu83G2Zq6H0 IB6Oo3L/lFDZQkKhk4ju1GiQYS7y9Ja3TdSsg5/jVExhlSK9etB7v0mP4CPvIeaIUXxL/4 T4bliSzFQUKmcvka6Y5gj4fPKTDOVLD/BUyAnIUofp0Gqtdf0CY9HNd8TGbqSRmotHITtT wAx37zodnraCGppAR5O2RVzK4wVLrq4BYkVlItpELaGftKJXSPJWv+MfREUDdg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1777915702; a=rsa-sha256; cv=none; b=cH65iAmNt6KF9iWbktyWIMQYbGg7Led6oiVK1LyJWPZr2ZVq2Teh1VXR+rMSh4UHXvcr3z LfYuk1k/VWTTDq+kPhRcIuWLgrXJ9AR6zlJ5y6gc/tw3GuzOvozA2cAlRpBjdhdQIuYWmt mW8oYZbIsnp1unV4QChlNxBXFEzd7DIjmn9a5H3EMAiWMOhwS8OnfkXBtFX2azj5MAY6fn 5QcarLd9vZFiV8RNYmmjVO50qtVQ8qe15hV31nDaH4bbifm9Ur/JMi4SQpzq9sJs3EM+RH mLquzyuDN/aaxIXpqujo1N3ao+O8abjXgi1xMdh12f4Nw1CinyNSqgUYIQCikQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1777915702; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=JOqHTccQfLt80L7HNrXk9Zz6aQitVxmebS8+EOPoDig=; b=oDxTzkqvRRXhkU5MT/RlfXGFYngcBSqlOSAGaguOhyxKy/txETMr/C7qQ4bxfLBZW/jIyD 7Ckz/UDervJOqUQSMeRV84vTheSLANRRG1S0k00dXobziPyCkUS8skDHZ2ljlbialxQXVo 2Odyjuy8OKSbEPUuOnokV8hYZkQ5f85DdhS5GYVtulaRVEbGzsfIKW/BUWporxDzPVHRXV LXQuzUT9Yni6RWiDaVFYecppaJulB22gtUiLGYz83jjHuxO1R5lMAFgyr/UrIgPWtI10xL /FZYQ+uFl/t7nfu8+JVKJkd3lQsvaLjgMMlAJJYYQo9s9thJXmnkltyLAHCqow== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4g8TBZ4xcmzVBR for ; Mon, 04 May 2026 17:28:22 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 322ba by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Mon, 04 May 2026 17:28:22 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Mark Johnston Subject: git: 41b03932e590 - main - tests: Add a simple regression test for an execve overflow bug List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: markj X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 41b03932e59068decf03b7975889841f71c73ec4 Auto-Submitted: auto-generated Date: Mon, 04 May 2026 17:28:22 +0000 Message-Id: <69f8d736.322ba.1871d479@gitrepo.freebsd.org> The branch main has been updated by markj: URL: https://cgit.FreeBSD.org/src/commit/?id=41b03932e59068decf03b7975889841f71c73ec4 commit 41b03932e59068decf03b7975889841f71c73ec4 Author: Mark Johnston AuthorDate: 2026-05-04 15:39:55 +0000 Commit: Mark Johnston CommitDate: 2026-05-04 17:28:02 +0000 tests: Add a simple regression test for an execve overflow bug MFC after: 2 weeks --- tests/sys/kern/Makefile | 1 + tests/sys/kern/execve_overflow.c | 46 ++++++++++++++++++++++++++++++++++++++++ 2 files changed, 47 insertions(+) diff --git a/tests/sys/kern/Makefile b/tests/sys/kern/Makefile index a5a2af67e39d..a06e8702f16d 100644 --- a/tests/sys/kern/Makefile +++ b/tests/sys/kern/Makefile @@ -17,6 +17,7 @@ ATF_TESTS_C+= kern_copyin ATF_TESTS_C+= kern_descrip_test # One test modifies the maxfiles limit, which can cause spurious test failures. TEST_METADATA.kern_descrip_test+= is_exclusive="true" +PLAIN_TESTS_C+= execve_overflow ATF_TESTS_C+= exterr_test ATF_TESTS_C+= fdgrowtable_test ATF_TESTS_C+= getdirentries_test diff --git a/tests/sys/kern/execve_overflow.c b/tests/sys/kern/execve_overflow.c new file mode 100644 index 000000000000..462f36ac5154 --- /dev/null +++ b/tests/sys/kern/execve_overflow.c @@ -0,0 +1,46 @@ +/* + * Copyright (c) 2026 Mark Johnston + * + * SPDX-License-Identifier: BSD-2-Clause + */ + +/* + * A minimal regression test for FreeBSD-SA-26:13.exec. + */ + +#include +#include +#include +#include +#include +#include + +#define SCRIPTNAME "script" +#define SCRIPTBODY "#!/bin/sh\nexit 0\n" + +int +main(void) +{ + char *argv; + size_t size; + int fd; + + fd = open(SCRIPTNAME, O_WRONLY | O_CREAT | O_TRUNC, 0700); + if (fd == -1) + err(1, "open"); + if (write(fd, SCRIPTBODY, sizeof(SCRIPTBODY) - 1) != + sizeof(SCRIPTBODY) - 1) + err(1, "write"); + close(fd); + + size = ARG_MAX / 2; + argv = malloc(size); + if (argv == NULL) + err(1, "malloc"); + memset(argv, 'a', size - 1); + argv[size - 1] = '\0'; + + execve(SCRIPTNAME, (char *[]){ argv, NULL }, (char *[]){ NULL }); + + exit(1); +}