- Fix epic naming fail (DhcpEnabled -> EnableDHCP

[reactos.git] / rostests / drivers / kmtest / ntos_pools.c

diff --git a/rostests/drivers/kmtest/ntos_pools.c b/rostests/drivers/kmtest/ntos_pools.c
index e12fdba..37c9987 100644 (file)
--- a/rostests/drivers/kmtest/ntos_pools.c
+++ b/rostests/drivers/kmtest/ntos_pools.c
@@ -25,17 +25,19 @@
 #include <ddk/ntddk.h>
 #include <ntifs.h>
 #include <ndk/ntndk.h>
+/* SEH support with PSEH */
+#include <pseh/pseh2.h>
 #include "kmtest.h"
 
-//#define NDEBUG
+#define NDEBUG
 #include "debug.h"
 
-#define TAG_POOLTEST TAG('P','t','s','t')
+#define TAG_POOLTEST 'tstP'
 
-/* PRIVATE FUNCTIONS ***********************************************************/
+/* PUBLIC FUNCTIONS ***********************************************************/
 
 VOID
-PoolsTest()
+PoolsTest(HANDLE KeyHandle)
 {
     PVOID Ptr;
     ULONG AllocSize, i, AllocNumber;
@@ -122,13 +124,55 @@ PoolsTest()
     ExFreePoolWithTag(Allocs, TAG_POOLTEST);
 
 
-    FinishTest("NTOSKRNL Pools Tests");
+    FinishTest(KeyHandle, L"MmPoolAllocTest");
 }
 
-/* PUBLIC FUNCTIONS ***********************************************************/
-
 VOID
-NtoskrnlPoolsTest()
+PoolsCorruption(HANDLE KeyHandle)
 {
-    PoolsTest();
+    PULONG Ptr, TestPtr;
+    ULONG AllocSize;
+    NTSTATUS Status = STATUS_SUCCESS;
+
+    StartTest();
+
+    // start with non-paged pool
+    AllocSize = 4096 + 0x10;
+    Ptr = ExAllocatePoolWithTag(NonPagedPool, AllocSize, TAG_POOLTEST);
+
+    // touch all bytes, it shouldn't cause an exception
+    RtlZeroMemory(Ptr, AllocSize);
+
+    // test buffer overrun, right after our allocation ends
+    _SEH2_TRY
+    {
+        TestPtr = (PULONG)((PUCHAR)Ptr + AllocSize);
+        //Ptr[4] = 0xd33dbeef;
+        *TestPtr = 0xd33dbeef;
+    }
+    _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
+    {
+        /* Get the status */
+        Status = _SEH2_GetExceptionCode();
+    } _SEH2_END;
+
+    ok(Status == STATUS_ACCESS_VIOLATION, "Exception should occur, but got Status 0x%08lX\n", Status);
+
+    // test overrun in a distant byte range, but within 4096KB
+    _SEH2_TRY
+    {
+        Ptr[2020] = 0xdeadb33f;
+    }
+    _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
+    {
+        /* Get the status */
+        Status = _SEH2_GetExceptionCode();
+    } _SEH2_END;
+
+    ok(Status == STATUS_ACCESS_VIOLATION, "Exception should occur, but got Status 0x%08lX\n", Status);
+
+    // free the pool
+    ExFreePoolWithTag(Ptr, TAG_POOLTEST);
+
+    FinishTest(KeyHandle, L"MmPoolCorruptionTest");
 }