/*      $NetBSD: t_pr.c,v 1.14 2025/04/13 02:10:30 riastradh Exp $      */

#include <sys/types.h>
#include <sys/mount.h>

#include <atf-c.h>
#include <err.h>
#include <errno.h>
#include <fcntl.h>
#include <stdio.h>
#include <unistd.h>
#include <string.h>
#include <stdlib.h>

#include <rump/rump.h>
#include <rump/rump_syscalls.h>

#include <miscfs/union/union.h>

#include "h_macros.h"

ATF_TC(multilayer);
ATF_TC_HEAD(multilayer, tc)
{
        atf_tc_set_md_var(tc, "descr", "mount_union -b twice");
}

ATF_TC_BODY(multilayer, tc)
{
        struct union_args unionargs;

        rump_init();

        if (rump_sys_mkdir("/Tunion", 0777) == -1)
                atf_tc_fail_errno("mkdir mp1");
        if (rump_sys_mkdir("/Tunion2", 0777) == -1)
                atf_tc_fail_errno("mkdir mp2");
        if (rump_sys_mkdir("/Tunion2/A", 0777) == -1)
                atf_tc_fail_errno("mkdir A");
        if (rump_sys_mkdir("/Tunion2/B", 0777) == -1)
                atf_tc_fail_errno("mkdir B");

        unionargs.target = __UNCONST("/Tunion2/A");
        unionargs.mntflags = UNMNT_BELOW;

        if (rump_sys_mount(MOUNT_UNION, "/Tunion", 0,
            &unionargs, sizeof(unionargs)) == -1)
                atf_tc_fail_errno("union mount");

        unionargs.target = __UNCONST("/Tunion2/B");
        unionargs.mntflags = UNMNT_BELOW;

        rump_sys_mount(MOUNT_UNION, "/Tunion", 0,&unionargs,sizeof(unionargs));
}

ATF_TC(multilayer2);
ATF_TC_HEAD(multilayer2, tc)
{
        atf_tc_set_md_var(tc, "descr", "mount_union twice then unmount");
}

ATF_TC_BODY(multilayer2, tc)
{
        struct union_args unionargs;

        atf_tc_expect_signal(-1, "PR kern/2423");

        rump_init();

        if (rump_sys_mkdir("/Tunion", 0777) == -1)
                atf_tc_fail_errno("mkdir mp1");
        if (rump_sys_mkdir("/Tunion2", 0777) == -1)
                atf_tc_fail_errno("mkdir mp2");
        if (rump_sys_mkdir("/Tunion2/A", 0777) == -1)
                atf_tc_fail_errno("mkdir A");
        if (rump_sys_mkdir("/Tunion2/B", 0777) == -1)
                atf_tc_fail_errno("mkdir B");

        unionargs.target = __UNCONST("/Tunion2/A");
        unionargs.mntflags = UNMNT_ABOVE;

        if (rump_sys_mount(MOUNT_UNION, "/Tunion", 0,
            &unionargs, sizeof(unionargs)) == -1)
                atf_tc_fail_errno("union mount");
        if (rump_sys_mkdir("/Tunion2/A/A", 0777) == -1)
                atf_tc_fail_errno("mkdir A/A");

        unionargs.target = __UNCONST("/Tunion2/A/A");
        unionargs.mntflags = UNMNT_ABOVE;

        rump_sys_mount(MOUNT_UNION, "/Tunion", 0,&unionargs,sizeof(unionargs));

        rump_sys_unmount("/Tunion/A", 0);
}

ATF_TC(cyclic);
ATF_TC_HEAD(cyclic, tc)
{
        atf_tc_set_md_var(tc, "descr", "cyclic mount_union");
}

ATF_TC_BODY(cyclic, tc)
{
        struct union_args unionargs;

        atf_tc_expect_signal(-1, "PR kern/3645");

        rump_init();

        if (rump_sys_mkdir("/Tunion", 0777) == -1)
                atf_tc_fail_errno("mkdir mp1");
        if (rump_sys_mkdir("/Tunion/A", 0777) == -1)
                atf_tc_fail_errno("mkdir mp2");

        unionargs.target = __UNCONST("/Tunion/A");
        unionargs.mntflags = UNMNT_ABOVE;

        if (rump_sys_mount(MOUNT_UNION, "/Tunion/A", 0,
            &unionargs, sizeof(unionargs)) == -1)
                atf_tc_fail_errno("union mount");

        if (rump_sys_mkdir("/Tunion/A/A", 0777) == -1)
                atf_tc_fail_errno("mkdir failed");
}

ATF_TC(cyclic2);
ATF_TC_HEAD(cyclic2, tc)
{
        atf_tc_set_md_var(tc, "descr", "cyclic mount_union");
}

ATF_TC_BODY(cyclic2, tc)
{
        struct union_args unionargs;

        atf_tc_expect_signal(-1, "PR kern/4597");

        rump_init();

        if (rump_sys_mkdir("/Tunion", 0777) == -1)
                atf_tc_fail_errno("mkdir mp1");
        if (rump_sys_mkdir("/Tunion/A", 0777) == -1)
                atf_tc_fail_errno("mkdir mp2");
        if (rump_sys_mkdir("/Tunion/B", 0777) == -1)
                atf_tc_fail_errno("mkdir mp3");

        unionargs.target = __UNCONST("/Tunion/A");
        unionargs.mntflags = UNMNT_ABOVE;

        if (rump_sys_mount(MOUNT_UNION, "/Tunion/B", 0,
            &unionargs, sizeof(unionargs)) == -1)
                atf_tc_fail_errno("union mount");

        unionargs.target = __UNCONST("/Tunion/B");
        unionargs.mntflags = UNMNT_ABOVE;

        if (rump_sys_mount(MOUNT_UNION, "/Tunion/A", 0,
            &unionargs, sizeof(unionargs)) == -1)
                atf_tc_fail_errno("union mount2");

        if (rump_sys_mkdir("/Tunion/A/A", 0777) == -1)
                atf_tc_fail_errno("mkdir failed");
}

ATF_TC(devnull1);
ATF_TC_HEAD(devnull1, tc)
{
        atf_tc_set_md_var(tc, "descr", "mount_union -b and "
            "'echo x > /un/null'");
}

ATF_TC_BODY(devnull1, tc)
{
        struct union_args unionargs;
        int fd, res;

        rump_init();

        if (rump_sys_mkdir("/mp", 0777) == -1)
                atf_tc_fail_errno("mkdir mp");

        unionargs.target = __UNCONST("/dev");
        unionargs.mntflags = UNMNT_BELOW;

        if (rump_sys_mount(MOUNT_UNION, "/mp", 0,
            &unionargs, sizeof(unionargs)) == -1)
                atf_tc_fail_errno("union mount");

        fd = rump_sys_open("/mp/null", O_WRONLY | O_CREAT | O_TRUNC, 0600);

        if (fd == -1)
                atf_tc_fail_errno("open");

        res = rump_sys_write(fd, &fd, sizeof(fd));
        if (res != sizeof(fd))
                atf_tc_fail("write");
}

ATF_TC(devnull2);
ATF_TC_HEAD(devnull2, tc)
{
        atf_tc_set_md_var(tc, "descr", "mount_union -b and "
            "'echo x >> /un/null'");
}

ATF_TC_BODY(devnull2, tc)
{
        struct union_args unionargs;
        int fd, res;

        rump_init();

        if (rump_sys_mkdir("/mp", 0777) == -1)
                atf_tc_fail_errno("mkdir mp");

        unionargs.target = __UNCONST("/dev");
        unionargs.mntflags = UNMNT_BELOW;

        if (rump_sys_mount(MOUNT_UNION, "/mp", 0,
            &unionargs, sizeof(unionargs)) == -1)
                atf_tc_fail_errno("union mount");

        fd = rump_sys_open("/mp/null", O_WRONLY | O_CREAT | O_APPEND, 0600);
        if (fd == -1)
                atf_tc_fail_errno("open");

        res = rump_sys_write(fd, &fd, sizeof(fd));
        if (res != sizeof(fd))
                atf_tc_fail("write");
}

ATF_TC(pr1677_lowerunsearchabledot);
ATF_TC_HEAD(pr1677_lowerunsearchabledot, tc)
{
        atf_tc_set_md_var(tc, "descr",
            "Lookup of `.' when searchable in upper, unsearchable in lower");
}

ATF_TC_BODY(pr1677_lowerunsearchabledot, tc)
{
        struct union_args unionargs;
        struct stat sb;

        rump_init();

        RL(rump_sys_mkdir("/lower", 0777));
        RL(rump_sys_mkdir("/lower/foo", 0700)); /* restricted */

        RL(rump_sys_mkdir("/upper", 0777));
        RL(rump_sys_mkdir("/upper/foo", 0777));

        memset(&unionargs, 0, sizeof(unionargs));
        unionargs.target = __UNCONST("/upper");
        unionargs.mntflags = UNMNT_ABOVE;
        RL(rump_sys_mount(MOUNT_UNION, "/lower", 0,
                &unionargs, sizeof(unionargs)));

        /* pretend we're an unprivileged process */
        rump_pub_lwproc_rfork(RUMP_RFCFDG);
        RL(rump_sys_setgid(1));
        RL(rump_sys_setegid(1));
        RL(rump_sys_setuid(32767));
        RL(rump_sys_seteuid(32767));
        atf_tc_expect_signal(SIGABRT, "PR kern/1677:"
            " union FS can return bogus value for lookup of `.',"
            " causing later panic");
        RL(rump_sys_lstat("/lower/foo/.", &sb));
        rump_pub_lwproc_releaselwp();
}

ATF_TP_ADD_TCS(tp)
{
        ATF_TP_ADD_TC(tp, multilayer);
        ATF_TP_ADD_TC(tp, multilayer2);
        ATF_TP_ADD_TC(tp, cyclic);
        ATF_TP_ADD_TC(tp, cyclic2);
        ATF_TP_ADD_TC(tp, devnull1);
        ATF_TP_ADD_TC(tp, devnull2);
        ATF_TP_ADD_TC(tp, pr1677_lowerunsearchabledot);

        return atf_no_error();
}