1 files changed, 82 insertions, 0 deletions
diff --git a/tests/i915/gem_mmap_wc.c b/tests/i915/gem_mmap_wc.c
index baa68aa8..b8cff46e 100644
--- a/tests/i915/gem_mmap_wc.c
+++ b/tests/i915/gem_mmap_wc.c
@@ -451,6 +451,17 @@ run_without_prefault(int fd,
 	igt_enable_prefault();
 }
 
+static int mmap_ioctl(int i915, struct drm_i915_gem_mmap *arg)
+{
+	int err = 0;
+
+	if (igt_ioctl(i915, DRM_IOCTL_I915_GEM_MMAP, arg))
+		err = -errno;
+
+	errno = 0;
+	return err;
+}
+
 int fd;
 
 igt_main
@@ -463,6 +474,77 @@ igt_main
 		gem_require_mmap_wc(fd);
 	}
 
+	igt_subtest("bad-object") {
+		uint32_t real_handle = gem_create(fd, 4096);
+		uint32_t handles[20];
+		int i = 0;
+
+		handles[i++] = 0xdeadbeef;
+		for(int bit = 0; bit < 16; bit++)
+			handles[i++] = real_handle | (1 << (bit + 16));
+		handles[i] = real_handle + 1;
+
+		for (; i < 0; i--) {
+			struct drm_i915_gem_mmap arg = {
+				.handle = handles[i],
+				.size = 4096,
+				.flags = I915_MMAP_WC,
+			};
+			igt_assert_eq(mmap_ioctl(fd, &arg), -EINVAL);
+		}
+
+		gem_close(fd, real_handle);
+	}
+
+	igt_subtest("bad-offset") {
+		struct bad_offset {
+			uint64_t size;
+			uint64_t offset;
+		} bad_offsets[] = {
+			{4096, 4096 + 1},
+			{4096, -4096},
+			{ 2 * 4096, -4096},
+			{ 4096, ~0},
+			{}
+		};
+
+		for (int i = 0; i < ARRAY_SIZE(bad_offsets); i++) {
+			struct drm_i915_gem_mmap arg = {
+				.handle = gem_create(fd, 4096),
+
+				.offset = bad_offsets[i].offset,
+				.size = bad_offsets[i].size,
+
+				.flags = I915_MMAP_WC,
+			};
+
+			igt_assert_eq(mmap_ioctl(fd, &arg), -EINVAL);
+			gem_close(fd, arg.handle);
+		}
+	}
+
+	igt_subtest("bad-size") {
+		uint64_t bad_size[] = {
+			0,
+			-4096,
+			4096 + 1,
+			2 * 4096,
+			~0,
+		};
+
+		for (int i = 0; i < ARRAY_SIZE(bad_size); i++) {
+			struct drm_i915_gem_mmap arg = {
+				.handle = gem_create(fd, 4096),
+				.offset = 4096,
+				.size = bad_size[i],
+				.flags = I915_MMAP_WC,
+			};
+
+			igt_assert_eq(mmap_ioctl(fd, &arg), -EINVAL);
+			gem_close(fd, arg.handle);
+		}
+	}
+
 	igt_subtest("invalid-flags")
 		test_invalid_flags(fd);
 	igt_subtest("close")