summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNick Kralevich <nnk@google.com>2011-05-05 13:48:10 -0700
committerBrian Muramatsu <btmura@android.com>2011-05-05 14:12:31 -0700
commit912d5e482a92028a5504fd09a50f4c9b8c4420e3 (patch)
treefd3324edae283e867aafca84532c5bcf7f90e404
parent3c4f8f0426e466780a7701a66ae9cc65bf894a22 (diff)
downloadplatform_cts-912d5e482a92028a5504fd09a50f4c9b8c4420e3.tar.gz
platform_cts-912d5e482a92028a5504fd09a50f4c9b8c4420e3.tar.bz2
platform_cts-912d5e482a92028a5504fd09a50f4c9b8c4420e3.zip
Don't fail on netlink socket closing.
If the process listening on the netlink socket closes the listener socket, don't consider that a security hole. Change-Id: If7e0800011e2bf477586a80266f837a722308af1
-rw-r--r--tests/tests/security/src/android/security/cts/VoldExploitTest.java13
1 files changed, 11 insertions, 2 deletions
diff --git a/tests/tests/security/src/android/security/cts/VoldExploitTest.java b/tests/tests/security/src/android/security/cts/VoldExploitTest.java
index 90308439caf..a72d6de162a 100644
--- a/tests/tests/security/src/android/security/cts/VoldExploitTest.java
+++ b/tests/tests/security/src/android/security/cts/VoldExploitTest.java
@@ -91,8 +91,17 @@ public class VoldExploitTest extends TestCase {
confirmNetlinkMsgReceived();
}
} catch (IOException e) {
- fail("Message send to PID=" + pid
- + " failed. It probably crashed due to CVE-2011-1823.");
+ // Ignore the exception. The process either:
+ //
+ // 1) Crashed
+ // 2) Closed the netlink socket and refused further messages
+ //
+ // If #1 occurs, our PID check in testTryToCrashVold() will
+ // detect the process crashed and trigger an error.
+ //
+ // #2 is not a security bug. It's perfectly acceptable to
+ // refuse messages from someone trying to send you
+ // malicious content.
}
}