/*      $NetBSD: t_pr.c,v 1.14 2025/04/13 02:10:30 riastradh Exp $      */

#include <sys/types.h>
#include <sys/mount.h>

#include <atf-c.h>
#include <err.h>
#include <errno.h>
#include <fcntl.h>
#include <stdio.h>
#include <unistd.h>
#include <string.h>
#include <stdlib.h>

#include <rump/rump.h>
#include <rump/rump_syscalls.h>

#include <miscfs/union/union.h>

#include "h_macros.h"

ATF_TC(multilayer);
ATF_TC_HEAD(multilayer, tc)
{
       atf_tc_set_md_var(tc, "descr", "mount_union -b twice");
}

ATF_TC_BODY(multilayer, tc)
{
       struct union_args unionargs;

       rump_init();

       if (rump_sys_mkdir("/Tunion", 0777) == -1)
               atf_tc_fail_errno("mkdir mp1");
       if (rump_sys_mkdir("/Tunion2", 0777) == -1)
               atf_tc_fail_errno("mkdir mp2");
       if (rump_sys_mkdir("/Tunion2/A", 0777) == -1)
               atf_tc_fail_errno("mkdir A");
       if (rump_sys_mkdir("/Tunion2/B", 0777) == -1)
               atf_tc_fail_errno("mkdir B");

       unionargs.target = __UNCONST("/Tunion2/A");
       unionargs.mntflags = UNMNT_BELOW;

       if (rump_sys_mount(MOUNT_UNION, "/Tunion", 0,
           &unionargs, sizeof(unionargs)) == -1)
               atf_tc_fail_errno("union mount");

       unionargs.target = __UNCONST("/Tunion2/B");
       unionargs.mntflags = UNMNT_BELOW;

       rump_sys_mount(MOUNT_UNION, "/Tunion", 0,&unionargs,sizeof(unionargs));
}

ATF_TC(multilayer2);
ATF_TC_HEAD(multilayer2, tc)
{
       atf_tc_set_md_var(tc, "descr", "mount_union twice then unmount");
}

ATF_TC_BODY(multilayer2, tc)
{
       struct union_args unionargs;

       atf_tc_expect_signal(-1, "PR kern/2423");

       rump_init();

       if (rump_sys_mkdir("/Tunion", 0777) == -1)
               atf_tc_fail_errno("mkdir mp1");
       if (rump_sys_mkdir("/Tunion2", 0777) == -1)
               atf_tc_fail_errno("mkdir mp2");
       if (rump_sys_mkdir("/Tunion2/A", 0777) == -1)
               atf_tc_fail_errno("mkdir A");
       if (rump_sys_mkdir("/Tunion2/B", 0777) == -1)
               atf_tc_fail_errno("mkdir B");

       unionargs.target = __UNCONST("/Tunion2/A");
       unionargs.mntflags = UNMNT_ABOVE;

       if (rump_sys_mount(MOUNT_UNION, "/Tunion", 0,
           &unionargs, sizeof(unionargs)) == -1)
               atf_tc_fail_errno("union mount");
       if (rump_sys_mkdir("/Tunion2/A/A", 0777) == -1)
               atf_tc_fail_errno("mkdir A/A");

       unionargs.target = __UNCONST("/Tunion2/A/A");
       unionargs.mntflags = UNMNT_ABOVE;

       rump_sys_mount(MOUNT_UNION, "/Tunion", 0,&unionargs,sizeof(unionargs));

       rump_sys_unmount("/Tunion/A", 0);
}

ATF_TC(cyclic);
ATF_TC_HEAD(cyclic, tc)
{
       atf_tc_set_md_var(tc, "descr", "cyclic mount_union");
}

ATF_TC_BODY(cyclic, tc)
{
       struct union_args unionargs;

       atf_tc_expect_signal(-1, "PR kern/3645");

       rump_init();

       if (rump_sys_mkdir("/Tunion", 0777) == -1)
               atf_tc_fail_errno("mkdir mp1");
       if (rump_sys_mkdir("/Tunion/A", 0777) == -1)
               atf_tc_fail_errno("mkdir mp2");

       unionargs.target = __UNCONST("/Tunion/A");
       unionargs.mntflags = UNMNT_ABOVE;

       if (rump_sys_mount(MOUNT_UNION, "/Tunion/A", 0,
           &unionargs, sizeof(unionargs)) == -1)
               atf_tc_fail_errno("union mount");

       if (rump_sys_mkdir("/Tunion/A/A", 0777) == -1)
               atf_tc_fail_errno("mkdir failed");
}

ATF_TC(cyclic2);
ATF_TC_HEAD(cyclic2, tc)
{
       atf_tc_set_md_var(tc, "descr", "cyclic mount_union");
}

ATF_TC_BODY(cyclic2, tc)
{
       struct union_args unionargs;

       atf_tc_expect_signal(-1, "PR kern/4597");

       rump_init();

       if (rump_sys_mkdir("/Tunion", 0777) == -1)
               atf_tc_fail_errno("mkdir mp1");
       if (rump_sys_mkdir("/Tunion/A", 0777) == -1)
               atf_tc_fail_errno("mkdir mp2");
       if (rump_sys_mkdir("/Tunion/B", 0777) == -1)
               atf_tc_fail_errno("mkdir mp3");

       unionargs.target = __UNCONST("/Tunion/A");
       unionargs.mntflags = UNMNT_ABOVE;

       if (rump_sys_mount(MOUNT_UNION, "/Tunion/B", 0,
           &unionargs, sizeof(unionargs)) == -1)
               atf_tc_fail_errno("union mount");

       unionargs.target = __UNCONST("/Tunion/B");
       unionargs.mntflags = UNMNT_ABOVE;

       if (rump_sys_mount(MOUNT_UNION, "/Tunion/A", 0,
           &unionargs, sizeof(unionargs)) == -1)
               atf_tc_fail_errno("union mount2");

       if (rump_sys_mkdir("/Tunion/A/A", 0777) == -1)
               atf_tc_fail_errno("mkdir failed");
}

ATF_TC(devnull1);
ATF_TC_HEAD(devnull1, tc)
{
       atf_tc_set_md_var(tc, "descr", "mount_union -b and "
           "'echo x > /un/null'");
}

ATF_TC_BODY(devnull1, tc)
{
       struct union_args unionargs;
       int fd, res;

       rump_init();

       if (rump_sys_mkdir("/mp", 0777) == -1)
               atf_tc_fail_errno("mkdir mp");

       unionargs.target = __UNCONST("/dev");
       unionargs.mntflags = UNMNT_BELOW;

       if (rump_sys_mount(MOUNT_UNION, "/mp", 0,
           &unionargs, sizeof(unionargs)) == -1)
               atf_tc_fail_errno("union mount");

       fd = rump_sys_open("/mp/null", O_WRONLY | O_CREAT | O_TRUNC, 0600);

       if (fd == -1)
               atf_tc_fail_errno("open");

       res = rump_sys_write(fd, &fd, sizeof(fd));
       if (res != sizeof(fd))
               atf_tc_fail("write");
}

ATF_TC(devnull2);
ATF_TC_HEAD(devnull2, tc)
{
       atf_tc_set_md_var(tc, "descr", "mount_union -b and "
           "'echo x >> /un/null'");
}

ATF_TC_BODY(devnull2, tc)
{
       struct union_args unionargs;
       int fd, res;

       rump_init();

       if (rump_sys_mkdir("/mp", 0777) == -1)
               atf_tc_fail_errno("mkdir mp");

       unionargs.target = __UNCONST("/dev");
       unionargs.mntflags = UNMNT_BELOW;

       if (rump_sys_mount(MOUNT_UNION, "/mp", 0,
           &unionargs, sizeof(unionargs)) == -1)
               atf_tc_fail_errno("union mount");

       fd = rump_sys_open("/mp/null", O_WRONLY | O_CREAT | O_APPEND, 0600);
       if (fd == -1)
               atf_tc_fail_errno("open");

       res = rump_sys_write(fd, &fd, sizeof(fd));
       if (res != sizeof(fd))
               atf_tc_fail("write");
}

ATF_TC(pr1677_lowerunsearchabledot);
ATF_TC_HEAD(pr1677_lowerunsearchabledot, tc)
{
       atf_tc_set_md_var(tc, "descr",
           "Lookup of `.' when searchable in upper, unsearchable in lower");
}

ATF_TC_BODY(pr1677_lowerunsearchabledot, tc)
{
       struct union_args unionargs;
       struct stat sb;

       rump_init();

       RL(rump_sys_mkdir("/lower", 0777));
       RL(rump_sys_mkdir("/lower/foo", 0700)); /* restricted */

       RL(rump_sys_mkdir("/upper", 0777));
       RL(rump_sys_mkdir("/upper/foo", 0777));

       memset(&unionargs, 0, sizeof(unionargs));
       unionargs.target = __UNCONST("/upper");
       unionargs.mntflags = UNMNT_ABOVE;
       RL(rump_sys_mount(MOUNT_UNION, "/lower", 0,
               &unionargs, sizeof(unionargs)));

       /* pretend we're an unprivileged process */
       rump_pub_lwproc_rfork(RUMP_RFCFDG);
       RL(rump_sys_setgid(1));
       RL(rump_sys_setegid(1));
       RL(rump_sys_setuid(32767));
       RL(rump_sys_seteuid(32767));
       atf_tc_expect_signal(SIGABRT, "PR kern/1677:"
           " union FS can return bogus value for lookup of `.',"
           " causing later panic");
       RL(rump_sys_lstat("/lower/foo/.", &sb));
       rump_pub_lwproc_releaselwp();
}

ATF_TP_ADD_TCS(tp)
{
       ATF_TP_ADD_TC(tp, multilayer);
       ATF_TP_ADD_TC(tp, multilayer2);
       ATF_TP_ADD_TC(tp, cyclic);
       ATF_TP_ADD_TC(tp, cyclic2);
       ATF_TP_ADD_TC(tp, devnull1);
       ATF_TP_ADD_TC(tp, devnull2);
       ATF_TP_ADD_TC(tp, pr1677_lowerunsearchabledot);

       return atf_no_error();
}