[go: nahoru, domu]

blob: 18bed2128814c43074a88ea37a27265964445e64 [file] [log] [blame]
// Copyright 2012 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#define _CRT_SECURE_NO_WARNINGS
#include <stddef.h>
#include <stdint.h>
#include <limits>
#include <tuple>
#include "base/command_line.h"
#include "base/debug/alias.h"
#include "base/debug/stack_trace.h"
#include "base/files/file_enumerator.h"
#include "base/files/file_path.h"
#include "base/files/file_util.h"
#include "base/files/scoped_file.h"
#include "base/functional/bind.h"
#include "base/logging.h"
#include "base/path_service.h"
#include "base/posix/eintr_wrapper.h"
#include "base/process/kill.h"
#include "base/process/launch.h"
#include "base/process/memory.h"
#include "base/process/process.h"
#include "base/process/process_metrics.h"
#include "base/strings/string_number_conversions.h"
#include "base/strings/string_piece.h"
#include "base/strings/utf_string_conversions.h"
#include "base/synchronization/waitable_event.h"
#include "base/test/multiprocess_test.h"
#include "base/test/task_environment.h"
#include "base/test/test_timeouts.h"
#include "base/threading/platform_thread.h"
#include "base/threading/simple_thread.h"
#include "base/threading/thread.h"
#include "build/build_config.h"
#include "testing/gtest/include/gtest/gtest.h"
#include "testing/multiprocess_func_list.h"
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
#include <malloc.h>
#include <sched.h>
#include <sys/syscall.h>
#endif
#if BUILDFLAG(IS_POSIX)
#include <sys/resource.h>
#endif
#if BUILDFLAG(IS_POSIX)
#include <dlfcn.h>
#include <errno.h>
#include <sched.h>
#include <signal.h>
#include <sys/wait.h>
#include <unistd.h>
#endif
#if BUILDFLAG(IS_POSIX) || BUILDFLAG(IS_FUCHSIA)
#include <fcntl.h>
#include <sys/socket.h>
#include <sys/types.h>
#endif
#if BUILDFLAG(IS_WIN)
#include <windows.h>
#endif
#if BUILDFLAG(IS_APPLE)
#include <mach/vm_param.h>
#include <malloc/malloc.h>
#endif
#if BUILDFLAG(IS_ANDROID)
#include "third_party/lss/linux_syscall_support.h"
#endif
#if BUILDFLAG(IS_FUCHSIA)
#include <lib/fdio/fdio.h>
#include <lib/fdio/limits.h>
#include <lib/fdio/spawn.h>
#include <lib/sys/cpp/component_context.h>
#include <zircon/process.h>
#include <zircon/processargs.h>
#include <zircon/syscalls.h>
#include "base/files/scoped_temp_dir.h"
#include "base/fuchsia/file_utils.h"
#include "base/fuchsia/filtered_service_directory.h"
#include "base/fuchsia/fuchsia_logging.h"
#include "base/fuchsia/process_context.h"
#include "base/test/bind.h"
#endif
namespace base {
namespace {
const char kSignalFileSlow[] = "SlowChildProcess.die";
const char kSignalFileKill[] = "KilledChildProcess.die";
const char kTestHelper[] = "test_child_process";
#if BUILDFLAG(IS_POSIX)
const char kSignalFileTerm[] = "TerminatedChildProcess.die";
#endif
#if BUILDFLAG(IS_FUCHSIA)
const char kSignalFileClone[] = "ClonedDir.die";
const char kFooDirHasStaged[] = "FooDirHasStaged.die";
#endif
#if BUILDFLAG(IS_WIN)
const int kExpectedStillRunningExitCode = 0x102;
const int kExpectedKilledExitCode = 1;
#elif BUILDFLAG(IS_POSIX) || BUILDFLAG(IS_FUCHSIA)
const int kExpectedStillRunningExitCode = 0;
#endif
// Sleeps until file filename is created.
void WaitToDie(const char* filename) {
FILE* fp;
do {
PlatformThread::Sleep(Milliseconds(10));
fp = fopen(filename, "r");
} while (!fp);
fclose(fp);
}
// Signals children they should die now.
void SignalChildren(const char* filename) {
FILE* fp = fopen(filename, "w");
fclose(fp);
}
// Using a pipe to the child to wait for an event was considered, but
// there were cases in the past where pipes caused problems (other
// libraries closing the fds, child deadlocking). This is a simple
// case, so it's not worth the risk. Using wait loops is discouraged
// in most instances.
TerminationStatus WaitForChildTermination(ProcessHandle handle,
int* exit_code) {
// Now we wait until the result is something other than STILL_RUNNING.
TerminationStatus status = TERMINATION_STATUS_STILL_RUNNING;
const TimeDelta kInterval = Milliseconds(20);
TimeDelta waited;
do {
status = GetTerminationStatus(handle, exit_code);
PlatformThread::Sleep(kInterval);
waited += kInterval;
} while (status == TERMINATION_STATUS_STILL_RUNNING &&
waited < TestTimeouts::action_max_timeout());
return status;
}
} // namespace
const int kSuccess = 0;
class ProcessUtilTest : public MultiProcessTest {
public:
void SetUp() override {
ASSERT_TRUE(PathService::Get(DIR_OUT_TEST_DATA_ROOT, &test_helper_path_));
test_helper_path_ = test_helper_path_.AppendASCII(kTestHelper);
}
#if BUILDFLAG(IS_POSIX) || BUILDFLAG(IS_FUCHSIA)
// Spawn a child process that counts how many file descriptors are open.
int CountOpenFDsInChild();
#endif
// Converts the filename to a platform specific filepath.
// On Android files can not be created in arbitrary directories.
static std::string GetSignalFilePath(const char* filename);
protected:
FilePath test_helper_path_;
};
std::string ProcessUtilTest::GetSignalFilePath(const char* filename) {
#if BUILDFLAG(IS_ANDROID) || BUILDFLAG(IS_FUCHSIA)
FilePath tmp_dir;
PathService::Get(DIR_TEMP, &tmp_dir);
// Ensure the directory exists to avoid harder to debug issues later.
CHECK(PathExists(tmp_dir));
tmp_dir = tmp_dir.Append(filename);
return tmp_dir.value();
#else
return filename;
#endif
}
MULTIPROCESS_TEST_MAIN(SimpleChildProcess) {
return kSuccess;
}
// TODO(viettrungluu): This should be in a "MultiProcessTestTest".
TEST_F(ProcessUtilTest, SpawnChild) {
Process process = SpawnChild("SimpleChildProcess");
ASSERT_TRUE(process.IsValid());
int exit_code;
EXPECT_TRUE(process.WaitForExitWithTimeout(TestTimeouts::action_max_timeout(),
&exit_code));
}
MULTIPROCESS_TEST_MAIN(SlowChildProcess) {
WaitToDie(ProcessUtilTest::GetSignalFilePath(kSignalFileSlow).c_str());
return kSuccess;
}
TEST_F(ProcessUtilTest, KillSlowChild) {
const std::string signal_file = GetSignalFilePath(kSignalFileSlow);
remove(signal_file.c_str());
Process process = SpawnChild("SlowChildProcess");
ASSERT_TRUE(process.IsValid());
SignalChildren(signal_file.c_str());
int exit_code;
EXPECT_TRUE(process.WaitForExitWithTimeout(TestTimeouts::action_max_timeout(),
&exit_code));
remove(signal_file.c_str());
}
// Times out on Linux and Win, flakes on other platforms, http://crbug.com/95058
#if BUILDFLAG(IS_FUCHSIA)
#define MAYBE_GetTerminationStatusExit GetTerminationStatusExit
#else
#define MAYBE_GetTerminationStatusExit DISABLED_GetTerminationStatusExit
#endif
TEST_F(ProcessUtilTest, MAYBE_GetTerminationStatusExit) {
const std::string signal_file = GetSignalFilePath(kSignalFileSlow);
remove(signal_file.c_str());
Process process = SpawnChild("SlowChildProcess");
ASSERT_TRUE(process.IsValid());
int exit_code = 42;
EXPECT_EQ(TERMINATION_STATUS_STILL_RUNNING,
GetTerminationStatus(process.Handle(), &exit_code));
EXPECT_EQ(kExpectedStillRunningExitCode, exit_code);
SignalChildren(signal_file.c_str());
exit_code = 42;
TerminationStatus status =
WaitForChildTermination(process.Handle(), &exit_code);
EXPECT_EQ(TERMINATION_STATUS_NORMAL_TERMINATION, status);
EXPECT_EQ(kSuccess, exit_code);
remove(signal_file.c_str());
}
#if BUILDFLAG(IS_FUCHSIA)
MULTIPROCESS_TEST_MAIN(ShouldNotBeLaunched) {
return 1;
}
// Test that duplicate transfer & cloned paths cause the launch to fail.
// TODO(fxbug.dev/124840): Re-enable once the platform behaviour is fixed.
TEST_F(ProcessUtilTest, DISABLED_DuplicateTransferAndClonePaths_Fail) {
// Create a tempdir to transfer a duplicate "/data".
ScopedTempDir tmpdir;
ASSERT_TRUE(tmpdir.CreateUniqueTempDir());
LaunchOptions options;
options.spawn_flags = FDIO_SPAWN_CLONE_STDIO;
// Attach the tempdir to "data", but also try to duplicate the existing "data"
// directory.
options.paths_to_clone.push_back(FilePath(kPersistedDataDirectoryPath));
options.paths_to_clone.push_back(FilePath("/tmp"));
options.paths_to_transfer.push_back(
{FilePath(kPersistedDataDirectoryPath),
OpenDirectoryHandle(tmpdir.GetPath()).TakeChannel().release()});
// Verify that the process fails to launch.
Process process(SpawnChildWithOptions("ShouldNotBeLaunched", options));
ASSERT_FALSE(process.IsValid());
}
// Test that attempting to transfer/clone to a path (e.g. "/data"), and also to
// a sub-path of that path (e.g. "/data/staged"), causes the process launch to
// fail.
// TODO(fxbug.dev/124840): Re-enable once the platform behaviour is fixed.
TEST_F(ProcessUtilTest, DISABLED_OverlappingPaths_Fail) {
// Create a tempdir to transfer to a sub-directory path.
ScopedTempDir tmpdir;
ASSERT_TRUE(tmpdir.CreateUniqueTempDir());
LaunchOptions options;
options.spawn_flags = FDIO_SPAWN_CLONE_STDIO;
// Attach the tempdir to "data", but also try to duplicate the existing "data"
// directory.
options.paths_to_clone.push_back(FilePath(kPersistedDataDirectoryPath));
options.paths_to_clone.push_back(FilePath("/tmp"));
options.paths_to_transfer.push_back(
{FilePath(kPersistedDataDirectoryPath).Append("staged"),
OpenDirectoryHandle(tmpdir.GetPath()).TakeChannel().release()});
// Verify that the process fails to launch.
Process process(SpawnChildWithOptions("ShouldNotBeLaunched", options));
ASSERT_FALSE(process.IsValid());
}
MULTIPROCESS_TEST_MAIN(CheckMountedDir) {
if (!PathExists(FilePath("/foo/staged"))) {
return 1;
}
WaitToDie(ProcessUtilTest::GetSignalFilePath(kFooDirHasStaged).c_str());
return kSuccess;
}
// Test that we can install an opaque handle in the child process' namespace.
TEST_F(ProcessUtilTest, TransferHandleToPath) {
const std::string signal_file = GetSignalFilePath(kFooDirHasStaged);
remove(signal_file.c_str());
// Create a tempdir with "staged" as its contents.
ScopedTempDir new_tmpdir;
ASSERT_TRUE(new_tmpdir.CreateUniqueTempDir());
FilePath staged_file_path = new_tmpdir.GetPath().Append("staged");
File staged_file(staged_file_path, File::FLAG_CREATE | File::FLAG_WRITE);
ASSERT_TRUE(staged_file.created());
staged_file.Close();
// Mount the tempdir to "/foo".
zx::channel tmp_channel =
OpenDirectoryHandle(new_tmpdir.GetPath()).TakeChannel();
ASSERT_TRUE(tmp_channel.is_valid());
LaunchOptions options;
options.paths_to_clone.push_back(FilePath("/tmp"));
options.paths_to_transfer.push_back(
{FilePath("/foo"), tmp_channel.release()});
options.spawn_flags = FDIO_SPAWN_CLONE_STDIO;
// Verify from that "/foo/staged" exists from the child process' perspective.
Process process(SpawnChildWithOptions("CheckMountedDir", options));
ASSERT_TRUE(process.IsValid());
SignalChildren(signal_file.c_str());
int exit_code = 42;
EXPECT_TRUE(process.WaitForExit(&exit_code));
EXPECT_EQ(kSuccess, exit_code);
}
// Look through the filesystem to ensure that no other directories
// besides |expected_path| are in the namespace.
// Since GetSignalFilePath() uses "/tmp", tests for paths other than this must
// include two paths. "/tmp" must always be last.
int CheckOnlyOnePathExists(StringPiece expected_path) {
bool is_expected_path_tmp = expected_path == "/tmp";
std::vector<FilePath> paths;
FileEnumerator enumerator(
FilePath("/"), false,
FileEnumerator::FILES | FileEnumerator::DIRECTORIES);
for (auto path = enumerator.Next(); !path.empty(); path = enumerator.Next()) {
paths.push_back(std::move(path));
}
EXPECT_EQ(paths.size(), is_expected_path_tmp ? 1u : 2u);
EXPECT_EQ(paths[0], FilePath(expected_path))
<< "Clone policy violation: found non-tmp directory "
<< paths[0].MaybeAsASCII();
if (!is_expected_path_tmp) {
EXPECT_EQ(paths[1], FilePath("/tmp"));
}
WaitToDie(ProcessUtilTest::GetSignalFilePath(kSignalFileClone).c_str());
return kSuccess;
}
MULTIPROCESS_TEST_MAIN(CheckOnlyTmpExists) {
return CheckOnlyOnePathExists("/tmp");
}
TEST_F(ProcessUtilTest, CloneTmp) {
const std::string signal_file = GetSignalFilePath(kSignalFileClone);
remove(signal_file.c_str());
LaunchOptions options;
options.paths_to_clone.push_back(FilePath("/tmp"));
options.spawn_flags = FDIO_SPAWN_CLONE_STDIO;
Process process(SpawnChildWithOptions("CheckOnlyTmpExists", options));
ASSERT_TRUE(process.IsValid());
SignalChildren(signal_file.c_str());
int exit_code = 42;
EXPECT_TRUE(process.WaitForExit(&exit_code));
EXPECT_EQ(kSuccess, exit_code);
}
MULTIPROCESS_TEST_MAIN(NeverCalled) {
CHECK(false) << "Process should not have been launched.";
return 99;
}
TEST_F(ProcessUtilTest, TransferInvalidHandleFails) {
LaunchOptions options;
options.paths_to_clone.push_back(FilePath("/tmp"));
options.paths_to_transfer.push_back({FilePath("/foo"), ZX_HANDLE_INVALID});
options.spawn_flags = FDIO_SPAWN_CLONE_STDIO;
// Verify that the process is never constructed.
Process process(SpawnChildWithOptions("NeverCalled", options));
EXPECT_FALSE(process.IsValid());
}
TEST_F(ProcessUtilTest, CloneInvalidDirFails) {
const std::string signal_file = GetSignalFilePath(kSignalFileClone);
remove(signal_file.c_str());
LaunchOptions options;
options.paths_to_clone.push_back(FilePath("/tmp"));
options.paths_to_clone.push_back(FilePath("/definitely_not_a_dir"));
options.spawn_flags = FDIO_SPAWN_CLONE_STDIO;
Process process(SpawnChildWithOptions("NeverCalled", options));
EXPECT_FALSE(process.IsValid());
}
MULTIPROCESS_TEST_MAIN(CheckOnlyDataExists) {
return CheckOnlyOnePathExists("/data");
}
TEST_F(ProcessUtilTest, CloneAlternateDir) {
const std::string signal_file = GetSignalFilePath(kSignalFileClone);
remove(signal_file.c_str());
LaunchOptions options;
options.paths_to_clone.push_back(FilePath("/data"));
// The DIR_TEMP path is used by GetSignalFilePath().
options.paths_to_clone.push_back(FilePath("/tmp"));
options.spawn_flags = FDIO_SPAWN_CLONE_STDIO;
Process process(SpawnChildWithOptions("CheckOnlyDataExists", options));
ASSERT_TRUE(process.IsValid());
SignalChildren(signal_file.c_str());
int exit_code = 42;
EXPECT_TRUE(process.WaitForExit(&exit_code));
EXPECT_EQ(kSuccess, exit_code);
}
TEST_F(ProcessUtilTest, HandlesToTransferClosedOnSpawnFailure) {
zx::handle handles[2];
zx_status_t result = zx_channel_create(0, handles[0].reset_and_get_address(),
handles[1].reset_and_get_address());
ZX_CHECK(ZX_OK == result, result) << "zx_channel_create";
LaunchOptions options;
options.handles_to_transfer.push_back({0, handles[0].get()});
// Launch a non-existent binary, causing fdio_spawn() to fail.
CommandLine command_line(FilePath(
FILE_PATH_LITERAL("💩magical_filename_that_will_never_exist_ever")));
Process process(LaunchProcess(command_line, options));
ASSERT_FALSE(process.IsValid());
// If LaunchProcess did its job then handles[0] is no longer valid, and
// handles[1] should observe a channel-closed signal.
EXPECT_EQ(
zx_object_wait_one(handles[1].get(), ZX_CHANNEL_PEER_CLOSED, 0, nullptr),
ZX_OK);
EXPECT_EQ(ZX_ERR_BAD_HANDLE, zx_handle_close(handles[0].get()));
std::ignore = handles[0].release();
}
TEST_F(ProcessUtilTest, HandlesToTransferClosedOnBadPathToMapFailure) {
zx::handle handles[2];
zx_status_t result = zx_channel_create(0, handles[0].reset_and_get_address(),
handles[1].reset_and_get_address());
ZX_CHECK(ZX_OK == result, result) << "zx_channel_create";
LaunchOptions options;
options.handles_to_transfer.push_back({0, handles[0].get()});
options.spawn_flags = options.spawn_flags & ~FDIO_SPAWN_CLONE_NAMESPACE;
options.paths_to_clone.emplace_back(
"💩magical_path_that_will_never_exist_ever");
// LaunchProces should fail to open() the path_to_map, and fail before
// fdio_spawn().
Process process(LaunchProcess(CommandLine(FilePath()), options));
ASSERT_FALSE(process.IsValid());
// If LaunchProcess did its job then handles[0] is no longer valid, and
// handles[1] should observe a channel-closed signal.
EXPECT_EQ(
zx_object_wait_one(handles[1].get(), ZX_CHANNEL_PEER_CLOSED, 0, nullptr),
ZX_OK);
EXPECT_EQ(ZX_ERR_BAD_HANDLE, zx_handle_close(handles[0].get()));
std::ignore = handles[0].release();
}
TEST_F(ProcessUtilTest, FuchsiaProcessNameSuffix) {
LaunchOptions options;
options.process_name_suffix = "#test";
Process process(SpawnChildWithOptions("SimpleChildProcess", options));
char name[256] = {};
size_t name_size = sizeof(name);
zx_status_t status =
zx_object_get_property(process.Handle(), ZX_PROP_NAME, name, name_size);
ASSERT_EQ(status, ZX_OK);
EXPECT_EQ(std::string(name),
CommandLine::ForCurrentProcess()->GetProgram().BaseName().value() +
"#test");
}
#endif // BUILDFLAG(IS_FUCHSIA)
// On Android SpawnProcess() doesn't use LaunchProcess() and doesn't support
// LaunchOptions::current_directory.
#if !BUILDFLAG(IS_ANDROID)
static void CheckCwdIsExpected(FilePath expected) {
FilePath actual;
CHECK(GetCurrentDirectory(&actual));
actual = MakeAbsoluteFilePath(actual);
CHECK(!actual.empty());
CHECK_EQ(expected, actual);
}
// N.B. This test does extra work to check the cwd on multiple threads, because
// on macOS a per-thread cwd is set when using LaunchProcess().
MULTIPROCESS_TEST_MAIN(CheckCwdProcess) {
// Get the expected cwd.
FilePath temp_dir;
CHECK(GetTempDir(&temp_dir));
temp_dir = MakeAbsoluteFilePath(temp_dir);
CHECK(!temp_dir.empty());
// Test that the main thread has the right cwd.
CheckCwdIsExpected(temp_dir);
// Create a non-main thread.
Thread thread("CheckCwdThread");
thread.Start();
auto task_runner = thread.task_runner();
// A synchronization primitive used to wait for work done on the non-main
// thread.
WaitableEvent event(WaitableEvent::ResetPolicy::AUTOMATIC);
RepeatingClosure signal_event =
BindRepeating(&WaitableEvent::Signal, Unretained(&event));
// Test that a non-main thread has the right cwd.
task_runner->PostTask(FROM_HERE, BindOnce(&CheckCwdIsExpected, temp_dir));
task_runner->PostTask(FROM_HERE, signal_event);
event.Wait();
// Get a new cwd for the process.
const FilePath home_dir = PathService::CheckedGet(DIR_HOME);
// Change the cwd on the secondary thread. IgnoreResult is used when setting
// because it is checked immediately after.
task_runner->PostTask(FROM_HERE,
BindOnce(IgnoreResult(&SetCurrentDirectory), home_dir));
task_runner->PostTask(FROM_HERE, BindOnce(&CheckCwdIsExpected, home_dir));
task_runner->PostTask(FROM_HERE, signal_event);
event.Wait();
// Make sure the main thread sees the cwd from the secondary thread.
CheckCwdIsExpected(home_dir);
// Change the directory back on the main thread.
CHECK(SetCurrentDirectory(temp_dir));
CheckCwdIsExpected(temp_dir);
// Ensure that the secondary thread sees the new cwd too.
task_runner->PostTask(FROM_HERE, BindOnce(&CheckCwdIsExpected, temp_dir));
task_runner->PostTask(FROM_HERE, signal_event);
event.Wait();
// Change the cwd on the secondary thread one more time and join the thread.
task_runner->PostTask(FROM_HERE,
BindOnce(IgnoreResult(&SetCurrentDirectory), home_dir));
thread.Stop();
// Make sure that the main thread picked up the new cwd.
CheckCwdIsExpected(home_dir);
return kSuccess;
}
TEST_F(ProcessUtilTest, CurrentDirectory) {
// TODO(rickyz): Add support for passing arguments to multiprocess children,
// then create a special directory for this test.
FilePath tmp_dir;
ASSERT_TRUE(GetTempDir(&tmp_dir));
LaunchOptions options;
options.current_directory = tmp_dir;
Process process(SpawnChildWithOptions("CheckCwdProcess", options));
ASSERT_TRUE(process.IsValid());
int exit_code = 42;
EXPECT_TRUE(process.WaitForExit(&exit_code));
EXPECT_EQ(kSuccess, exit_code);
}
#endif // !BUILDFLAG(IS_ANDROID)
#if BUILDFLAG(IS_WIN)
// TODO(cpu): figure out how to test this in other platforms.
TEST_F(ProcessUtilTest, GetProcId) {
ProcessId id1 = GetProcId(GetCurrentProcess());
EXPECT_NE(0ul, id1);
Process process = SpawnChild("SimpleChildProcess");
ASSERT_TRUE(process.IsValid());
ProcessId id2 = process.Pid();
EXPECT_NE(0ul, id2);
EXPECT_NE(id1, id2);
}
#endif // BUILDFLAG(IS_WIN)
#if !BUILDFLAG(IS_APPLE) && !BUILDFLAG(IS_ANDROID)
// This test is disabled on Mac, since it's flaky due to ReportCrash
// taking a variable amount of time to parse and load the debug and
// symbol data for this unit test's executable before firing the
// signal handler.
//
// TODO(gspencer): turn this test process into a very small program
// with no symbols (instead of using the multiprocess testing
// framework) to reduce the ReportCrash overhead.
//
// It is disabled on Android as MultiprocessTests are started as services that
// the framework restarts on crashes.
const char kSignalFileCrash[] = "CrashingChildProcess.die";
MULTIPROCESS_TEST_MAIN(CrashingChildProcess) {
WaitToDie(ProcessUtilTest::GetSignalFilePath(kSignalFileCrash).c_str());
#if BUILDFLAG(IS_POSIX)
// Have to disable to signal handler for segv so we can get a crash
// instead of an abnormal termination through the crash dump handler.
::signal(SIGSEGV, SIG_DFL);
#endif
// Make this process have a segmentation fault.
volatile int* oops = nullptr;
*oops = 0xDEAD;
return 1;
}
// This test intentionally crashes, so we don't need to run it under
// AddressSanitizer.
#if defined(ADDRESS_SANITIZER)
#define MAYBE_GetTerminationStatusCrash DISABLED_GetTerminationStatusCrash
#else
#define MAYBE_GetTerminationStatusCrash GetTerminationStatusCrash
#endif
TEST_F(ProcessUtilTest, MAYBE_GetTerminationStatusCrash) {
const std::string signal_file = GetSignalFilePath(kSignalFileCrash);
remove(signal_file.c_str());
Process process = SpawnChild("CrashingChildProcess");
ASSERT_TRUE(process.IsValid());
int exit_code = 42;
EXPECT_EQ(TERMINATION_STATUS_STILL_RUNNING,
GetTerminationStatus(process.Handle(), &exit_code));
EXPECT_EQ(kExpectedStillRunningExitCode, exit_code);
SignalChildren(signal_file.c_str());
exit_code = 42;
TerminationStatus status =
WaitForChildTermination(process.Handle(), &exit_code);
EXPECT_EQ(TERMINATION_STATUS_PROCESS_CRASHED, status);
#if BUILDFLAG(IS_WIN)
EXPECT_EQ(static_cast<int>(0xc0000005), exit_code);
#elif BUILDFLAG(IS_POSIX)
int signaled = WIFSIGNALED(exit_code);
EXPECT_NE(0, signaled);
int signal = WTERMSIG(exit_code);
EXPECT_EQ(SIGSEGV, signal);
#endif
// Reset signal handlers back to "normal".
debug::EnableInProcessStackDumping();
remove(signal_file.c_str());
}
#endif // !BUILDFLAG(IS_APPLE) && !BUILDFLAG(IS_ANDROID)
MULTIPROCESS_TEST_MAIN(KilledChildProcess) {
WaitToDie(ProcessUtilTest::GetSignalFilePath(kSignalFileKill).c_str());
#if BUILDFLAG(IS_WIN)
// Kill ourselves.
HANDLE handle = ::OpenProcess(PROCESS_ALL_ACCESS, 0, ::GetCurrentProcessId());
::TerminateProcess(handle, kExpectedKilledExitCode);
#elif BUILDFLAG(IS_POSIX)
// Send a SIGKILL to this process, just like the OOM killer would.
::kill(getpid(), SIGKILL);
#elif BUILDFLAG(IS_FUCHSIA)
zx_task_kill(zx_process_self());
#endif
return 1;
}
#if BUILDFLAG(IS_POSIX)
MULTIPROCESS_TEST_MAIN(TerminatedChildProcess) {
WaitToDie(ProcessUtilTest::GetSignalFilePath(kSignalFileTerm).c_str());
// Send a SIGTERM to this process.
::kill(getpid(), SIGTERM);
return 1;
}
#endif // BUILDFLAG(IS_POSIX) || BUILDFLAG(IS_FUCHSIA)
TEST_F(ProcessUtilTest, GetTerminationStatusSigKill) {
const std::string signal_file = GetSignalFilePath(kSignalFileKill);
remove(signal_file.c_str());
Process process = SpawnChild("KilledChildProcess");
ASSERT_TRUE(process.IsValid());
int exit_code = 42;
EXPECT_EQ(TERMINATION_STATUS_STILL_RUNNING,
GetTerminationStatus(process.Handle(), &exit_code));
EXPECT_EQ(kExpectedStillRunningExitCode, exit_code);
SignalChildren(signal_file.c_str());
exit_code = 42;
TerminationStatus status =
WaitForChildTermination(process.Handle(), &exit_code);
#if BUILDFLAG(IS_CHROMEOS)
EXPECT_EQ(TERMINATION_STATUS_PROCESS_WAS_KILLED_BY_OOM, status);
#else
EXPECT_EQ(TERMINATION_STATUS_PROCESS_WAS_KILLED, status);
#endif
#if BUILDFLAG(IS_WIN)
EXPECT_EQ(kExpectedKilledExitCode, exit_code);
#elif BUILDFLAG(IS_POSIX)
int signaled = WIFSIGNALED(exit_code);
EXPECT_NE(0, signaled);
int signal = WTERMSIG(exit_code);
EXPECT_EQ(SIGKILL, signal);
#endif
remove(signal_file.c_str());
}
#if BUILDFLAG(IS_POSIX)
// TODO(crbug.com/753490): Access to the process termination reason is not
// implemented in Fuchsia. Unix signals are not implemented in Fuchsia so this
// test might not be relevant anyway.
TEST_F(ProcessUtilTest, GetTerminationStatusSigTerm) {
const std::string signal_file = GetSignalFilePath(kSignalFileTerm);
remove(signal_file.c_str());
Process process = SpawnChild("TerminatedChildProcess");
ASSERT_TRUE(process.IsValid());
int exit_code = 42;
EXPECT_EQ(TERMINATION_STATUS_STILL_RUNNING,
GetTerminationStatus(process.Handle(), &exit_code));
EXPECT_EQ(kExpectedStillRunningExitCode, exit_code);
SignalChildren(signal_file.c_str());
exit_code = 42;
TerminationStatus status =
WaitForChildTermination(process.Handle(), &exit_code);
EXPECT_EQ(TERMINATION_STATUS_PROCESS_WAS_KILLED, status);
int signaled = WIFSIGNALED(exit_code);
EXPECT_NE(0, signaled);
int signal = WTERMSIG(exit_code);
EXPECT_EQ(SIGTERM, signal);
remove(signal_file.c_str());
}
#endif // BUILDFLAG(IS_POSIX)
TEST_F(ProcessUtilTest, EnsureTerminationUndying) {
test::TaskEnvironment task_environment;
Process child_process = SpawnChild("process_util_test_never_die");
ASSERT_TRUE(child_process.IsValid());
EnsureProcessTerminated(child_process.Duplicate());
#if BUILDFLAG(IS_POSIX)
errno = 0;
#endif // BUILDFLAG(IS_POSIX)
// Allow a generous timeout, to cope with slow/loaded test bots.
bool did_exit = child_process.WaitForExitWithTimeout(
TestTimeouts::action_max_timeout(), nullptr);
#if BUILDFLAG(IS_POSIX)
// Both EnsureProcessTerminated() and WaitForExitWithTimeout() will call
// waitpid(). One will succeed, and the other will fail with ECHILD. If our
// wait failed then check for ECHILD, and assumed |did_exit| in that case.
did_exit = did_exit || (errno == ECHILD);
#endif // BUILDFLAG(IS_POSIX)
EXPECT_TRUE(did_exit);
}
MULTIPROCESS_TEST_MAIN(process_util_test_never_die) {
while (true) {
PlatformThread::Sleep(Seconds(500));
}
}
TEST_F(ProcessUtilTest, EnsureTerminationGracefulExit) {
test::TaskEnvironment task_environment;
Process child_process = SpawnChild("process_util_test_die_immediately");
ASSERT_TRUE(child_process.IsValid());
// Wait for the child process to actually exit.
child_process.Duplicate().WaitForExitWithTimeout(
TestTimeouts::action_max_timeout(), nullptr);
EnsureProcessTerminated(child_process.Duplicate());
// Verify that the process is really, truly gone.
EXPECT_TRUE(child_process.WaitForExitWithTimeout(
TestTimeouts::action_max_timeout(), nullptr));
}
MULTIPROCESS_TEST_MAIN(process_util_test_die_immediately) {
return kSuccess;
}
#if BUILDFLAG(IS_WIN)
// TODO(estade): if possible, port this test.
TEST_F(ProcessUtilTest, LaunchAsUser) {
UserTokenHandle token;
ASSERT_TRUE(OpenProcessToken(GetCurrentProcess(), TOKEN_ALL_ACCESS, &token));
LaunchOptions options;
options.as_user = token;
EXPECT_TRUE(
LaunchProcess(MakeCmdLine("SimpleChildProcess"), options).IsValid());
}
MULTIPROCESS_TEST_MAIN(ChildVerifiesCetDisabled) {
// Policy not defined for Win < Win10 20H1 but that's ok.
PROCESS_MITIGATION_USER_SHADOW_STACK_POLICY policy = {};
if (GetProcessMitigationPolicy(GetCurrentProcess(),
ProcessUserShadowStackPolicy, &policy,
sizeof(policy))) {
if (policy.EnableUserShadowStack)
return 1;
}
return kSuccess;
}
TEST_F(ProcessUtilTest, LaunchDisablingCetCompat) {
LaunchOptions options;
// This only has an effect on Windows > 20H2 with CET hardware but
// is safe on every platform.
options.disable_cetcompat = true;
EXPECT_TRUE(LaunchProcess(MakeCmdLine("ChildVerifiesCetDisabled"), options)
.IsValid());
}
static const char kEventToTriggerHandleSwitch[] = "event-to-trigger-handle";
MULTIPROCESS_TEST_MAIN(TriggerEventChildProcess) {
std::string handle_value_string =
CommandLine::ForCurrentProcess()->GetSwitchValueASCII(
kEventToTriggerHandleSwitch);
CHECK(!handle_value_string.empty());
uint64_t handle_value_uint64;
CHECK(StringToUint64(handle_value_string, &handle_value_uint64));
// Give ownership of the handle to |event|.
WaitableEvent event(
win::ScopedHandle(reinterpret_cast<HANDLE>(handle_value_uint64)));
event.Signal();
return 0;
}
TEST_F(ProcessUtilTest, InheritSpecifiedHandles) {
// Manually create the event, so that it can be inheritable.
SECURITY_ATTRIBUTES security_attributes = {};
security_attributes.nLength = static_cast<DWORD>(sizeof(security_attributes));
security_attributes.lpSecurityDescriptor = NULL;
security_attributes.bInheritHandle = true;
// Takes ownership of the event handle.
WaitableEvent event(
win::ScopedHandle(CreateEvent(&security_attributes, true, false, NULL)));
LaunchOptions options;
options.handles_to_inherit.emplace_back(event.handle());
CommandLine cmd_line = MakeCmdLine("TriggerEventChildProcess");
cmd_line.AppendSwitchASCII(
kEventToTriggerHandleSwitch,
NumberToString(reinterpret_cast<uint64_t>(event.handle())));
// Launch the process and wait for it to trigger the event.
ASSERT_TRUE(LaunchProcess(cmd_line, options).IsValid());
EXPECT_TRUE(event.TimedWait(TestTimeouts::action_max_timeout()));
}
#endif // BUILDFLAG(IS_WIN)
TEST_F(ProcessUtilTest, GetAppOutput) {
CommandLine command(test_helper_path_);
command.AppendArg("hello");
command.AppendArg("there");
command.AppendArg("good");
command.AppendArg("people");
std::string output;
EXPECT_TRUE(GetAppOutput(command, &output));
EXPECT_EQ("hello there good people", output);
output.clear();
const char* kEchoMessage = "blah";
command = CommandLine(test_helper_path_);
command.AppendArg("-x");
command.AppendArg("28");
command.AppendArg(kEchoMessage);
EXPECT_FALSE(GetAppOutput(command, &output));
EXPECT_EQ(kEchoMessage, output);
}
TEST_F(ProcessUtilTest, GetAppOutputWithExitCode) {
const char* kEchoMessage1 = "doge";
int exit_code = -1;
CommandLine command(test_helper_path_);
command.AppendArg(kEchoMessage1);
std::string output;
EXPECT_TRUE(GetAppOutputWithExitCode(command, &output, &exit_code));
EXPECT_EQ(kEchoMessage1, output);
EXPECT_EQ(0, exit_code);
output.clear();
const char* kEchoMessage2 = "pupper";
const int kExpectedExitCode = 42;
command = CommandLine(test_helper_path_);
command.AppendArg("-x");
command.AppendArg(NumberToString(kExpectedExitCode));
command.AppendArg(kEchoMessage2);
#if BUILDFLAG(IS_WIN)
// On Windows, anything that quits with a nonzero status code is handled as a
// "crash", so just ignore GetAppOutputWithExitCode's return value.
GetAppOutputWithExitCode(command, &output, &exit_code);
#elif BUILDFLAG(IS_POSIX) || BUILDFLAG(IS_FUCHSIA)
EXPECT_TRUE(GetAppOutputWithExitCode(command, &output, &exit_code));
#endif
EXPECT_EQ(kEchoMessage2, output);
EXPECT_EQ(kExpectedExitCode, exit_code);
}
#if BUILDFLAG(IS_POSIX) || BUILDFLAG(IS_FUCHSIA)
namespace {
// Returns the maximum number of files that a process can have open.
// Returns 0 on error.
int GetMaxFilesOpenInProcess() {
#if BUILDFLAG(IS_FUCHSIA)
return FDIO_MAX_FD;
#else
struct rlimit rlim;
if (getrlimit(RLIMIT_NOFILE, &rlim) != 0) {
return 0;
}
// rlim_t is a uint64_t - clip to maxint. We do this since FD #s are ints
// which are all 32 bits on the supported platforms.
rlim_t max_int = static_cast<rlim_t>(std::numeric_limits<int32_t>::max());
if (rlim.rlim_cur > max_int) {
return max_int;
}
return rlim.rlim_cur;
#endif // BUILDFLAG(IS_FUCHSIA)
}
const int kChildPipe = 20; // FD # for write end of pipe in child process.
#if BUILDFLAG(IS_APPLE)
// Declarations from 12.3 xnu-8020.101.4/bsd/sys/guarded.h (not in the SDK).
extern "C" {
using guardid_t = uint64_t;
#define GUARD_DUP (1u << 1)
int change_fdguard_np(int fd,
const guardid_t* guard,
unsigned int guardflags,
const guardid_t* nguard,
unsigned int nguardflags,
int* fdflagsp);
} // extern "C"
// Attempt to set a file-descriptor guard on |fd|. In case of success, remove
// it and return |true| to indicate that it can be guarded. Returning |false|
// means either that |fd| is guarded by some other code, or more likely EBADF.
//
// Starting with 10.9, libdispatch began setting GUARD_DUP on a file descriptor.
// Unfortunately, it is spun up as part of +[NSApplication initialize], which is
// not really something that Chromium can avoid using on OSX. See
// <http://crbug.com/338157>. This function allows querying whether the file
// descriptor is guarded before attempting to close it.
bool CanGuardFd(int fd) {
// Saves the original flags to reset later.
int original_fdflags = 0;
// This can be any value at all, it just has to match up between the two
// calls.
const guardid_t kGuard = 15;
// Attempt to change the guard. This can fail with EBADF if the file
// descriptor is bad, or EINVAL if the fd already has a guard set.
int ret =
change_fdguard_np(fd, NULL, 0, &kGuard, GUARD_DUP, &original_fdflags);
if (ret == -1)
return false;
// Remove the guard. It should not be possible to fail in removing the guard
// just added.
ret = change_fdguard_np(fd, &kGuard, GUARD_DUP, NULL, 0, &original_fdflags);
DPCHECK(ret == 0);
return true;
}
#endif // BUILDFLAG(IS_APPLE)
} // namespace
MULTIPROCESS_TEST_MAIN(ProcessUtilsLeakFDChildProcess) {
// This child process counts the number of open FDs, it then writes that
// number out to a pipe connected to the parent.
int num_open_files = 0;
int write_pipe = kChildPipe;
int max_files = GetMaxFilesOpenInProcess();
for (int i = STDERR_FILENO + 1; i < max_files; i++) {
#if BUILDFLAG(IS_APPLE)
// Ignore guarded or invalid file descriptors.
if (!CanGuardFd(i))
continue;
#endif
if (i != kChildPipe) {
int fd;
if ((fd = HANDLE_EINTR(dup(i))) != -1) {
close(fd);
num_open_files += 1;
}
}
}
int written =
HANDLE_EINTR(write(write_pipe, &num_open_files, sizeof(num_open_files)));
DCHECK_EQ(static_cast<size_t>(written), sizeof(num_open_files));
int ret = IGNORE_EINTR(close(write_pipe));
DPCHECK(ret == 0);
return 0;
}
int ProcessUtilTest::CountOpenFDsInChild() {
int fds[2];
if (pipe(fds) < 0)
NOTREACHED();
LaunchOptions options;
options.fds_to_remap.emplace_back(fds[1], kChildPipe);
Process process =
SpawnChildWithOptions("ProcessUtilsLeakFDChildProcess", options);
CHECK(process.IsValid());
int ret = IGNORE_EINTR(close(fds[1]));
DPCHECK(ret == 0);
// Read number of open files in client process from pipe;
int num_open_files = -1;
ssize_t bytes_read =
HANDLE_EINTR(read(fds[0], &num_open_files, sizeof(num_open_files)));
CHECK_EQ(bytes_read, static_cast<ssize_t>(sizeof(num_open_files)));
#if defined(THREAD_SANITIZER)
// Compiler-based ThreadSanitizer makes this test slow.
TimeDelta timeout = Seconds(3);
#else
TimeDelta timeout = Seconds(1);
#endif
int exit_code;
CHECK(process.WaitForExitWithTimeout(timeout, &exit_code));
ret = IGNORE_EINTR(close(fds[0]));
DPCHECK(ret == 0);
return num_open_files;
}
TEST_F(ProcessUtilTest, FDRemapping) {
int fds_before = CountOpenFDsInChild();
// Open some dummy fds to make sure they don't propagate over to the
// child process.
#if BUILDFLAG(IS_FUCHSIA)
ScopedFD dev_null(fdio_fd_create_null());
#else
ScopedFD dev_null(open("/dev/null", O_RDONLY));
#endif // BUILDFLAG(IS_FUCHSIA)
DPCHECK(dev_null.get() > 0);
int sockets[2];
int ret = socketpair(AF_UNIX, SOCK_STREAM, 0, sockets);
DPCHECK(ret == 0);
int fds_after = CountOpenFDsInChild();
ASSERT_EQ(fds_after, fds_before);
ret = IGNORE_EINTR(close(sockets[0]));
DPCHECK(ret == 0);
ret = IGNORE_EINTR(close(sockets[1]));
DPCHECK(ret == 0);
}
const char kPipeValue = '\xcc';
MULTIPROCESS_TEST_MAIN(ProcessUtilsVerifyStdio) {
// Write to stdio so the parent process can observe output.
CHECK_EQ(1, HANDLE_EINTR(write(STDOUT_FILENO, &kPipeValue, 1)));
// Close all of the handles, to verify they are valid.
CHECK_EQ(0, IGNORE_EINTR(close(STDIN_FILENO)));
CHECK_EQ(0, IGNORE_EINTR(close(STDOUT_FILENO)));
CHECK_EQ(0, IGNORE_EINTR(close(STDERR_FILENO)));
return 0;
}
TEST_F(ProcessUtilTest, FDRemappingIncludesStdio) {
#if BUILDFLAG(IS_FUCHSIA)
// The fd obtained from fdio_fd_create_null cannot be cloned while spawning a
// child proc, so open a true file in a transient temp dir.
ScopedTempDir temp_dir;
ASSERT_TRUE(temp_dir.CreateUniqueTempDir());
FilePath temp_file_path;
ASSERT_TRUE(CreateTemporaryFileInDir(temp_dir.GetPath(), &temp_file_path));
File temp_file(temp_file_path,
File::FLAG_CREATE_ALWAYS | File::FLAG_READ | File::FLAG_WRITE);
ASSERT_TRUE(temp_file.IsValid());
ScopedFD some_fd(temp_file.TakePlatformFile());
#else // BUILDFLAG(IS_FUCHSIA)
ScopedFD some_fd(open("/dev/null", O_RDONLY));
#endif // BUILDFLAG(IS_FUCHSIA)
ASSERT_LT(2, some_fd.get());
// Backup stdio and replace it with the write end of a pipe, for our
// child process to inherit.
int pipe_fds[2];
int result = pipe(pipe_fds);
ASSERT_EQ(0, result);
int backup_stdio = HANDLE_EINTR(dup(STDOUT_FILENO));
ASSERT_LE(0, backup_stdio);
result = dup2(pipe_fds[1], STDOUT_FILENO);
ASSERT_EQ(STDOUT_FILENO, result);
// Launch the test process, which should inherit our pipe stdio.
LaunchOptions options;
options.fds_to_remap.emplace_back(some_fd.get(), some_fd.get());
Process process = SpawnChildWithOptions("ProcessUtilsVerifyStdio", options);
ASSERT_TRUE(process.IsValid());
// Restore stdio, so we can output stuff.
result = dup2(backup_stdio, STDOUT_FILENO);
ASSERT_EQ(STDOUT_FILENO, result);
// Close our copy of the write end of the pipe, so that the read()
// from the other end will see EOF if it wasn't copied to the child.
result = IGNORE_EINTR(close(pipe_fds[1]));
ASSERT_EQ(0, result);
result = IGNORE_EINTR(close(backup_stdio));
ASSERT_EQ(0, result);
// Also close the remapped descriptor.
some_fd.reset();
// Read from the pipe to verify that it is connected to the child
// process' stdio.
char buf[16] = {};
EXPECT_EQ(1, HANDLE_EINTR(read(pipe_fds[0], buf, sizeof(buf))));
EXPECT_EQ(kPipeValue, buf[0]);
result = IGNORE_EINTR(close(pipe_fds[0]));
ASSERT_EQ(0, result);
int exit_code;
ASSERT_TRUE(process.WaitForExitWithTimeout(Seconds(5), &exit_code));
EXPECT_EQ(0, exit_code);
}
#if BUILDFLAG(IS_FUCHSIA)
const uint16_t kStartupHandleId = 43;
MULTIPROCESS_TEST_MAIN(ProcessUtilsVerifyHandle) {
zx_handle_t handle =
zx_take_startup_handle(PA_HND(PA_USER0, kStartupHandleId));
CHECK_NE(ZX_HANDLE_INVALID, handle);
// Write to the pipe so the parent process can observe output.
size_t bytes_written = 0;
zx_status_t result = zx_socket_write(handle, 0, &kPipeValue,
sizeof(kPipeValue), &bytes_written);
CHECK_EQ(ZX_OK, result);
CHECK_EQ(1u, bytes_written);
CHECK_EQ(ZX_OK, zx_handle_close(handle));
return 0;
}
TEST_F(ProcessUtilTest, LaunchWithHandleTransfer) {
// Create a pipe to pass to the child process.
zx_handle_t handles[2];
zx_status_t result =
zx_socket_create(ZX_SOCKET_STREAM, &handles[0], &handles[1]);
ASSERT_EQ(ZX_OK, result);
// Launch the test process, and pass it one end of the pipe.
LaunchOptions options;
options.handles_to_transfer.push_back(
{PA_HND(PA_USER0, kStartupHandleId), handles[0]});
Process process = SpawnChildWithOptions("ProcessUtilsVerifyHandle", options);
ASSERT_TRUE(process.IsValid());
// Read from the pipe to verify that the child received it.
zx_signals_t signals = 0;
result = zx_object_wait_one(
handles[1], ZX_SOCKET_READABLE | ZX_SOCKET_PEER_CLOSED,
(TimeTicks::Now() + TestTimeouts::action_timeout()).ToZxTime(), &signals);
ASSERT_EQ(ZX_OK, result);
ASSERT_TRUE(signals & ZX_SOCKET_READABLE);
size_t bytes_read = 0;
char buf[16] = {0};
result = zx_socket_read(handles[1], 0, buf, sizeof(buf), &bytes_read);
EXPECT_EQ(ZX_OK, result);
EXPECT_EQ(1u, bytes_read);
EXPECT_EQ(kPipeValue, buf[0]);
CHECK_EQ(ZX_OK, zx_handle_close(handles[1]));
int exit_code;
ASSERT_TRUE(process.WaitForExitWithTimeout(TestTimeouts::action_timeout(),
&exit_code));
EXPECT_EQ(0, exit_code);
}
#endif // BUILDFLAG(IS_FUCHSIA)
// There's no such thing as a parent process id on Fuchsia.
#if !BUILDFLAG(IS_FUCHSIA)
TEST_F(ProcessUtilTest, GetParentProcessId) {
ProcessId ppid = GetParentProcessId(GetCurrentProcessHandle());
EXPECT_EQ(ppid, static_cast<ProcessId>(getppid()));
}
#endif // !BUILDFLAG(IS_FUCHSIA)
#if !BUILDFLAG(IS_ANDROID) && !BUILDFLAG(IS_FUCHSIA) && !BUILDFLAG(IS_APPLE)
class WriteToPipeDelegate : public LaunchOptions::PreExecDelegate {
public:
explicit WriteToPipeDelegate(int fd) : fd_(fd) {}
WriteToPipeDelegate(const WriteToPipeDelegate&) = delete;
WriteToPipeDelegate& operator=(const WriteToPipeDelegate&) = delete;
~WriteToPipeDelegate() override = default;
void RunAsyncSafe() override {
RAW_CHECK(HANDLE_EINTR(write(fd_, &kPipeValue, 1)) == 1);
RAW_CHECK(IGNORE_EINTR(close(fd_)) == 0);
}
private:
int fd_;
};
TEST_F(ProcessUtilTest, PreExecHook) {
int pipe_fds[2];
ASSERT_EQ(0, pipe(pipe_fds));
ScopedFD read_fd(pipe_fds[0]);
ScopedFD write_fd(pipe_fds[1]);
WriteToPipeDelegate write_to_pipe_delegate(write_fd.get());
LaunchOptions options;
options.fds_to_remap.emplace_back(write_fd.get(), write_fd.get());
options.pre_exec_delegate = &write_to_pipe_delegate;
Process process(SpawnChildWithOptions("SimpleChildProcess", options));
ASSERT_TRUE(process.IsValid());
write_fd.reset();
char c;
ASSERT_EQ(1, HANDLE_EINTR(read(read_fd.get(), &c, 1)));
EXPECT_EQ(c, kPipeValue);
int exit_code = 42;
EXPECT_TRUE(process.WaitForExit(&exit_code));
EXPECT_EQ(0, exit_code);
}
#endif // !BUILDFLAG(IS_ANDROID) && !BUILDFLAG(IS_FUCHSIA)
#endif // BUILDFLAG(IS_POSIX) || BUILDFLAG(IS_FUCHSIA)
// There's no such thing as a parent process id on Fuchsia.
#if !BUILDFLAG(IS_FUCHSIA)
TEST_F(ProcessUtilTest, GetParentProcessId2) {
ProcessId id1 = GetCurrentProcId();
Process process = SpawnChild("SimpleChildProcess");
ASSERT_TRUE(process.IsValid());
ProcessId ppid = GetParentProcessId(process.Handle());
EXPECT_EQ(ppid, id1);
}
#endif // !BUILDFLAG(IS_FUCHSIA)
namespace {
std::string TestLaunchProcess(const CommandLine& cmdline,
const EnvironmentMap& env_changes,
const bool clear_environment,
const int clone_flags) {
LaunchOptions options;
options.wait = true;
options.environment = env_changes;
options.clear_environment = clear_environment;
#if BUILDFLAG(IS_WIN)
HANDLE read_handle, write_handle;
PCHECK(CreatePipe(&read_handle, &write_handle, nullptr, 0));
File read_pipe(read_handle);
File write_pipe(write_handle);
options.stdin_handle = INVALID_HANDLE_VALUE;
options.stdout_handle = write_handle;
options.stderr_handle = GetStdHandle(STD_ERROR_HANDLE);
options.handles_to_inherit.push_back(write_handle);
#else
int fds[2];
PCHECK(pipe(fds) == 0);
File read_pipe(fds[0]);
File write_pipe(fds[1]);
options.fds_to_remap.emplace_back(fds[1], STDOUT_FILENO);
#endif // BUILDFLAG(IS_WIN)
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
options.clone_flags = clone_flags;
#else
CHECK_EQ(0, clone_flags);
#endif // BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
EXPECT_TRUE(LaunchProcess(cmdline, options).IsValid());
write_pipe.Close();
char buf[512];
int n = read_pipe.ReadAtCurrentPos(buf, sizeof(buf));
#if BUILDFLAG(IS_WIN)
// Closed pipes fail with ERROR_BROKEN_PIPE on Windows, rather than
// successfully reporting EOF.
if (n < 0 && GetLastError() == ERROR_BROKEN_PIPE) {
n = 0;
}
#endif // BUILDFLAG(IS_WIN)
PCHECK(n >= 0);
return std::string(buf, n);
}
const char kLargeString[] =
"0123456789012345678901234567890123456789012345678901234567890123456789"
"0123456789012345678901234567890123456789012345678901234567890123456789"
"0123456789012345678901234567890123456789012345678901234567890123456789"
"0123456789012345678901234567890123456789012345678901234567890123456789"
"0123456789012345678901234567890123456789012345678901234567890123456789"
"0123456789012345678901234567890123456789012345678901234567890123456789"
"0123456789012345678901234567890123456789012345678901234567890123456789";
} // namespace
TEST_F(ProcessUtilTest, LaunchProcess) {
const int no_clone_flags = 0;
const bool no_clear_environ = false;
const FilePath::CharType kBaseTest[] = FILE_PATH_LITERAL("BASE_TEST");
const CommandLine kPrintEnvCommand(CommandLine::StringVector(
{test_helper_path_.value(), FILE_PATH_LITERAL("-e"), kBaseTest}));
std::unique_ptr<Environment> env = Environment::Create();
EnvironmentMap env_changes;
env_changes[kBaseTest] = FILE_PATH_LITERAL("bar");
EXPECT_EQ("bar", TestLaunchProcess(kPrintEnvCommand, env_changes,
no_clear_environ, no_clone_flags));
env_changes.clear();
EXPECT_TRUE(env->SetVar("BASE_TEST", "testing"));
EXPECT_EQ("testing", TestLaunchProcess(kPrintEnvCommand, env_changes,
no_clear_environ, no_clone_flags));
env_changes[kBaseTest] = FilePath::StringType();
EXPECT_EQ("", TestLaunchProcess(kPrintEnvCommand, env_changes,
no_clear_environ, no_clone_flags));
env_changes[kBaseTest] = FILE_PATH_LITERAL("foo");
EXPECT_EQ("foo", TestLaunchProcess(kPrintEnvCommand, env_changes,
no_clear_environ, no_clone_flags));
env_changes.clear();
EXPECT_TRUE(env->SetVar("BASE_TEST", kLargeString));
EXPECT_EQ(std::string(kLargeString),
TestLaunchProcess(kPrintEnvCommand, env_changes, no_clear_environ,
no_clone_flags));
env_changes[kBaseTest] = FILE_PATH_LITERAL("wibble");
EXPECT_EQ("wibble", TestLaunchProcess(kPrintEnvCommand, env_changes,
no_clear_environ, no_clone_flags));
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
// Test a non-trival value for clone_flags.
EXPECT_EQ("wibble", TestLaunchProcess(kPrintEnvCommand, env_changes,
no_clear_environ, CLONE_FS));
#endif // BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
EXPECT_EQ("wibble",
TestLaunchProcess(kPrintEnvCommand, env_changes,
true /* clear_environ */, no_clone_flags));
env_changes.clear();
EXPECT_EQ("", TestLaunchProcess(kPrintEnvCommand, env_changes,
true /* clear_environ */, no_clone_flags));
}
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
MULTIPROCESS_TEST_MAIN(CheckPidProcess) {
const pid_t kInitPid = 1;
const pid_t pid = syscall(__NR_getpid);
CHECK(pid == kInitPid);
CHECK(getpid() == pid);
return kSuccess;
}
#if defined(CLONE_NEWUSER) && defined(CLONE_NEWPID)
TEST_F(ProcessUtilTest, CloneFlags) {
if (!PathExists(FilePath("/proc/self/ns/user")) ||
!PathExists(FilePath("/proc/self/ns/pid"))) {
// User or PID namespaces are not supported.
return;
}
LaunchOptions options;
options.clone_flags = CLONE_NEWUSER | CLONE_NEWPID;
Process process(SpawnChildWithOptions("CheckPidProcess", options));
ASSERT_TRUE(process.IsValid());
int exit_code = 42;
EXPECT_TRUE(process.WaitForExit(&exit_code));
EXPECT_EQ(kSuccess, exit_code);
}
#endif // defined(CLONE_NEWUSER) && defined(CLONE_NEWPID)
TEST(ForkWithFlagsTest, UpdatesPidCache) {
// Warm up the libc pid cache, if there is one.
ASSERT_EQ(syscall(__NR_getpid), getpid());
pid_t ctid = 0;
const pid_t pid = ForkWithFlags(SIGCHLD | CLONE_CHILD_SETTID, nullptr, &ctid);
if (pid == 0) {
// In child. Check both the raw getpid syscall and the libc getpid wrapper
// (which may rely on a pid cache).
RAW_CHECK(syscall(__NR_getpid) == ctid);
RAW_CHECK(getpid() == ctid);
_exit(kSuccess);
}
ASSERT_NE(-1, pid);
int status = 42;
ASSERT_EQ(pid, HANDLE_EINTR(waitpid(pid, &status, 0)));
ASSERT_TRUE(WIFEXITED(status));
EXPECT_EQ(kSuccess, WEXITSTATUS(status));
}
TEST_F(ProcessUtilTest, InvalidCurrentDirectory) {
LaunchOptions options;
options.current_directory = FilePath("/dev/null");
Process process(SpawnChildWithOptions("SimpleChildProcess", options));
ASSERT_TRUE(process.IsValid());
int exit_code = kSuccess;
EXPECT_TRUE(process.WaitForExit(&exit_code));
EXPECT_NE(kSuccess, exit_code);
}
#endif // BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
} // namespace base