File size: 2,977 Bytes
854994d | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 | use super::Process;
use pretty_assertions::assert_eq;
use std::os::windows::io::AsRawHandle;
use windows_sys::Win32::Foundation::ERROR_ACCESS_DENIED;
use windows_sys::Win32::System::Threading::CREATE_NO_WINDOW;
use windows_sys::Win32::System::Threading::TerminateProcess;
#[test]
fn detached_launch_preflight_rejects_restrictive_job() {
const CHILD: &str = "CODEX_TEST_RESTRICTIVE_LAUNCH_JOB";
let executable = std::env::current_exe().expect("test executable");
if std::env::var_os(CHILD).is_some() {
let job = unsafe { super::CreateJobObjectW(std::ptr::null(), std::ptr::null()) };
assert_ne!(job, 0);
let job = unsafe {
<std::os::windows::io::OwnedHandle as std::os::windows::io::FromRawHandle>::from_raw_handle(job as _)
};
assert_ne!(
unsafe {
super::AssignProcessToJobObject(
job.as_raw_handle() as _,
super::GetCurrentProcess(),
)
},
0
);
// A new job does not permit breakaway. Reject before any lifecycle mutation.
assert!(super::ensure_detached_launch(&executable).is_err());
return;
}
let output = std::process::Command::new(executable)
.args([
"--exact",
"backend::windows::tests::detached_launch_preflight_rejects_restrictive_job",
"--nocapture",
])
.env(CHILD, "1")
.output()
.expect("isolated job test");
assert!(
output.status.success(),
"{}",
String::from_utf8_lossy(&output.stderr)
);
assert!(String::from_utf8_lossy(&output.stdout).contains("1 passed"));
}
#[tokio::test]
async fn identity_queries_do_not_require_termination_access() {
let mut child = tokio::process::Command::new("powershell.exe")
.args([
"-NoProfile",
"-NonInteractive",
"-Command",
"Start-Sleep 60",
])
.creation_flags(CREATE_NO_WINDOW)
.kill_on_drop(true)
.spawn()
.expect("child");
let process = Process::open(child.id().expect("pid"))
.expect("query handle")
.expect("live process");
assert!(!process.start_time().expect("creation time").is_empty());
assert!(process.is_running().expect("liveness"));
// Check the rights on the actual query handle, independent of privileges
// that could let the caller reopen the process with termination access.
assert_eq!(
unsafe {
TerminateProcess(process.0.as_raw_handle() as _, /*uexitcode*/ 1)
},
0
);
assert_eq!(
std::io::Error::last_os_error().raw_os_error(),
Some(ERROR_ACCESS_DENIED as i32)
);
assert!(
process
.is_running()
.expect("query must not terminate child")
);
child
.kill()
.await
.expect("cleanup through original spawn handle");
}
|