pkg/prog: explain why syscalls are transitively disabled

1 files changed, 26 insertions, 10 deletions

diff --git a/prog/decl_test.go b/prog/decl_test.go
index 72a6435e8..4539be2fb 100644
--- a/prog/decl_test.go
+++ b/prog/decl_test.go
@@ -5,6 +5,7 @@ package prog
 
 import (
 	"runtime"
+	"strings"
 	"testing"
 )
 
@@ -32,20 +33,26 @@ func TestTransitivelyEnabledCalls(t *testing.T) {
 	for _, c := range target.Syscalls {
 		calls[c] = true
 	}
-	if trans := target.TransitivelyEnabledCalls(calls); len(calls) != len(trans) {
-		for c := range calls {
-			if !trans[c] {
-				t.Logf("disabled %v", c.Name)
-			}
+	if trans, disabled := target.TransitivelyEnabledCalls(calls); len(disabled) != 0 {
+		for c, reason := range disabled {
+			t.Logf("disabled %v: %v", c.Name, reason)
 		}
 		t.Fatalf("can't create some resource")
+	} else if len(trans) != len(calls) {
+		t.Fatalf("transitive syscalls are not full")
+	} else {
+		for c, ok := range trans {
+			if !ok {
+				t.Fatalf("syscalls %v is false in transitive map", c.Name)
+			}
+		}
 	}
 	delete(calls, target.SyscallMap["epoll_create"])
-	if trans := target.TransitivelyEnabledCalls(calls); len(calls) != len(trans) {
+	if trans, disabled := target.TransitivelyEnabledCalls(calls); len(disabled) != 0 || len(trans) != len(calls) {
 		t.Fatalf("still must be able to create epoll fd with epoll_create1")
 	}
 	delete(calls, target.SyscallMap["epoll_create1"])
-	trans := target.TransitivelyEnabledCalls(calls)
+	trans, disabled := target.TransitivelyEnabledCalls(calls)
 	if len(calls)-6 != len(trans) ||
 		trans[target.SyscallMap["epoll_ctl$EPOLL_CTL_ADD"]] ||
 		trans[target.SyscallMap["epoll_ctl$EPOLL_CTL_MOD"]] ||
@@ -55,6 +62,14 @@ func TestTransitivelyEnabledCalls(t *testing.T) {
 		trans[target.SyscallMap["kcmp$KCMP_EPOLL_TFD"]] {
 		t.Fatalf("epoll fd is not disabled")
 	}
+	if len(disabled) != 6 {
+		t.Fatalf("disabled %v syscalls, want 6", len(disabled))
+	}
+	for c, reason := range disabled {
+		if !strings.Contains(reason, "no syscalls can create resource fd_epoll, enable some syscalls that can create it [epoll_create epoll_create1]") {
+			t.Fatalf("%v: wrong disable reason: %v", c.Name, reason)
+		}
+	}
 }
 
 func TestClockGettime(t *testing.T) {
@@ -69,8 +84,9 @@ func TestClockGettime(t *testing.T) {
 	}
 	// Removal of clock_gettime should disable all calls that accept timespec/timeval.
 	delete(calls, target.SyscallMap["clock_gettime"])
-	trans := target.TransitivelyEnabledCalls(calls)
-	if len(trans)+10 > len(calls) {
-		t.Fatalf("clock_gettime did not disable enough calls: before %v, after %v", len(calls), len(trans))
+	trans, disabled := target.TransitivelyEnabledCalls(calls)
+	if len(trans)+10 > len(calls) || len(trans)+len(disabled) != len(calls) || len(trans) == 0 {
+		t.Fatalf("clock_gettime did not disable enough calls: before %v, after %v, disabled %v",
+			len(calls), len(trans), len(disabled))
 	}
 }