mirror of
https://github.com/boykopovar/AnyPS5.git
synced 2026-11-04 13:07:32 +00:00
xXPBSXxandClaude Sonnet 5.5
6a16714ec1
FreeBSD 11.4 sys_pipe2 copies the descriptors out after kern_pipe and, if that fails, closes both and returns EFAULT (sys/kern/sys_pipe.c:479-483). pipe checked the array with HostWrite::Open, which accepts any non-arena host pointer, and wrote it with memcpy, so a pointer into unmapped memory crashed the host. Copy out with the checked write and close both descriptors on failure. Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
31 lines
1.0 KiB
C++
31 lines
1.0 KiB
C++
#include "prx/libc/include/Api.hpp"
|
|
#include "prx/libkernel/include/Api.hpp"
|
|
|
|
#include <cstdint>
|
|
#include <cstdio>
|
|
#include <cstdlib>
|
|
#include <initializer_list>
|
|
|
|
static void Check(bool value, int line) {
|
|
if (!value) {
|
|
std::fprintf(stderr, "pipe fault check failed at line %d\n", line);
|
|
std::abort();
|
|
}
|
|
}
|
|
#define Require(value) Check((value), __LINE__)
|
|
|
|
static constexpr int GuestEfault = 14;
|
|
|
|
int main() {
|
|
int first[2]{-1, -1};
|
|
Require(pipe_nid_postfix(first) == 0);
|
|
Require(close_nid_postfix(first[0]) == 0 && close_nid_postfix(first[1]) == 0);
|
|
for (const std::uintptr_t address : {std::uintptr_t{1}, ~std::uintptr_t{0xfff}}) {
|
|
*__error_nid_postfix() = 0;
|
|
Require(pipe_nid_postfix(reinterpret_cast<int*>(address)) == -1 && *__error_nid_postfix() == GuestEfault);
|
|
}
|
|
int second[2]{-1, -1};
|
|
Require(pipe_nid_postfix(second) == 0 && second[0] == first[0] && second[1] == first[1]);
|
|
Require(close_nid_postfix(second[0]) == 0 && close_nid_postfix(second[1]) == 0);
|
|
}
|