1 /*
2  * Copyright (C) 2022 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 package android.security.cts;
18 
19 import android.platform.test.annotations.AsbSecurityTest;
20 
21 import com.android.sts.common.tradefed.testtype.NonRootSecurityTestCase;
22 import com.android.sts.common.util.TombstoneUtils;
23 import com.android.sts.common.util.TombstoneUtils.Config.BacktraceFilterPattern;
24 import com.android.tradefed.testtype.DeviceJUnit4ClassRunner;
25 
26 import org.junit.Test;
27 import org.junit.runner.RunWith;
28 
29 import java.util.regex.Pattern;
30 
31 @RunWith(DeviceJUnit4ClassRunner.class)
32 public class CVE_2019_2017 extends NonRootSecurityTestCase {
33 
34     /**
35      * b/121035711
36      * Vulnerability Behaviour: SIGABRT in self
37      * Vulnerable Library: libnfc-nci (As per AOSP code)
38      * Vulnerable Function: rw_t2t_handle_tlv_detect_rsp (As per AOSP code)
39      */
40     @AsbSecurityTest(cveBugId = 121035711)
41     @Test
testPocCVE_2019_2017()42     public void testPocCVE_2019_2017() throws Exception {
43         AdbUtils.assumeHasNfc(getDevice());
44         assumeIsSupportedNfcDevice(getDevice());
45         pocPusher.only64();
46         String signals[] = {TombstoneUtils.Signals.SIGABRT};
47         String binaryName = "CVE-2019-2017";
48         AdbUtils.pocConfig testConfig = new AdbUtils.pocConfig(binaryName, getDevice());
49         testConfig.config = new TombstoneUtils.Config().setProcessPatterns(Pattern.compile(binaryName))
50                 .setBacktraceIncludes(new BacktraceFilterPattern("libnfc-nci",
51                         "rw_t2t_handle_tlv_detect_rsp"));
52         testConfig.config
53                 .setBacktraceExcludes(new BacktraceFilterPattern("libdl", "__cfi_slowpath"));
54         testConfig.config.setSignals(signals);
55         AdbUtils.runPocAssertNoCrashesNotVulnerable(testConfig);
56     }
57 }
58