| // Copyright 2019 The Fuchsia Authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #include "proxy-iostate.h" |
| |
| #include <fbl/auto_lock.h> |
| #include <lib/async-loop/cpp/loop.h> |
| #include <zxtest/zxtest.h> |
| |
| #include "zx-device.h" |
| |
| namespace { |
| |
| TEST(ProxyIostateTestCase, Creation) { |
| async::Loop loop(&kAsyncLoopConfigNoAttachToThread); |
| |
| fbl::RefPtr<zx_device> dev; |
| ASSERT_OK(zx_device::Create(&dev)); |
| |
| zx::channel proxy_local, proxy_remote; |
| ASSERT_OK(zx::channel::create(0, &proxy_local, &proxy_remote)); |
| |
| { |
| fbl::AutoLock guard(&dev->proxy_ios_lock); |
| ASSERT_NULL(dev->proxy_ios); |
| } |
| ASSERT_OK(devmgr::ProxyIostate::Create(dev, std::move(proxy_remote), loop.dispatcher())); |
| { |
| fbl::AutoLock guard(&dev->proxy_ios_lock); |
| ASSERT_NOT_NULL(dev->proxy_ios); |
| } |
| |
| ASSERT_OK(loop.RunUntilIdle()); |
| } |
| |
| // This test reproduces the bug from ZX-4060, in which we would double-free the |
| // ProxyIostate due to a cancellation being queued after a channel close event |
| // gets queued, but before the channel close is processed. If the bug is |
| // present, and we're running with ASAN, this will crash 100% of the time. |
| TEST(ProxyIostateTestCase, ChannelCloseThenCancel) { |
| async::Loop loop(&kAsyncLoopConfigNoAttachToThread); |
| |
| fbl::RefPtr<zx_device> dev; |
| ASSERT_OK(zx_device::Create(&dev)); |
| |
| zx::channel proxy_local, proxy_remote; |
| ASSERT_OK(zx::channel::create(0, &proxy_local, &proxy_remote)); |
| |
| ASSERT_OK(devmgr::ProxyIostate::Create(dev, std::move(proxy_remote), loop.dispatcher())); |
| ASSERT_OK(loop.RunUntilIdle()); |
| |
| proxy_local.reset(); |
| |
| { |
| fbl::AutoLock guard(&dev->proxy_ios_lock); |
| dev->proxy_ios->CancelLocked(loop.dispatcher()); |
| ASSERT_NULL(dev->proxy_ios); |
| } |
| |
| ASSERT_OK(loop.RunUntilIdle()); |
| } |
| |
| } // namespace |