diff options
Diffstat (limited to 'tests/tpm_bootmode_tests.c')
| -rw-r--r-- | tests/tpm_bootmode_tests.c | 161 |
1 files changed, 116 insertions, 45 deletions
diff --git a/tests/tpm_bootmode_tests.c b/tests/tpm_bootmode_tests.c index c39094d0..64171b56 100644 --- a/tests/tpm_bootmode_tests.c +++ b/tests/tpm_bootmode_tests.c @@ -18,64 +18,135 @@ extern const char* kBootStateSHA1Digests[]; -/* Last in_digest passed to TlclExtend() */ -static const uint8_t* last_in = NULL; +/* Last in_digest passed to TlclExtend() for each PCR */ +static const uint8_t *last_in[20]; /* Return value to pass for TlclExtend() */ -static uint32_t extend_returns = 0; +static uint32_t extend_returns; -/* Mocked TlclExtend() function for testing */ -uint32_t TlclExtend(int pcr_num, const uint8_t* in_digest, - uint8_t* out_digest) { +/* How many calls to TlclExtend() should one SetTPMBootModeState() make? */ +static int expected_extend_count; +/* How many did we get? */ +static int actual_extend_count; + +static GoogleBinaryBlockHeader gbb_v1 = { + .major_version = GBB_MAJOR_VER, + .minor_version = 1, +}; - /* Should be using pcr 0 */ - TEST_EQ(pcr_num, 0, "TlclExtend pcr_num"); +static GoogleBinaryBlockHeader gbb_v2 = { + .major_version = GBB_MAJOR_VER, + .minor_version = 2, + .hwid_digest = {1, 2, 3, 4,}, +}; - last_in = in_digest; +/* Mocked TlclExtend() function for testing */ +uint32_t TlclExtend(int pcr_num, const uint8_t *in_digest, + uint8_t *out_digest) +{ + /* Should be using correct pcr */ + TEST_EQ(pcr_num, actual_extend_count, "TlclExtend pcr_num"); - return extend_returns; + last_in[actual_extend_count] = in_digest; + + actual_extend_count++; + return extend_returns; } /* Test setting TPM boot mode state */ -static void BootStateTest(void) { - int recdev; - int flags; - int index; - char what[128]; - - /* Test all permutations of developer and recovery mode */ - for (recdev = 0; recdev < 4; recdev++) { - /* Exhaustively test all permutations of key block flags currently - * defined in vboot_struct.h (KEY_BLOCK_FLAG_*) */ - for (flags = 0; flags < 16; flags++) { - index = recdev * 3; - if (6 == flags) - index += 2; - else if (7 == flags) - index += 1; - - last_in = NULL; - TEST_EQ(SetTPMBootModeState(recdev & 2, recdev & 1, flags), 0, - "SetTPMBootModeState return"); - snprintf(what, sizeof(what), "SetTPMBootModeState %d, 0x%x", - recdev, flags); - TEST_PTR_EQ(last_in, kBootStateSHA1Digests[index], what); - } - } - - extend_returns = 1; - TEST_EQ(SetTPMBootModeState(0, 0, 0), 1, "SetTPMBootModeState error"); +static void BootStateTest(void) +{ + int recdev; + int flags; + int index; + char what[128]; + + /* Test all permutations of developer and recovery mode */ + for (recdev = 0; recdev < 4; recdev++) { + /* Exhaustively test all permutations of key block flags + * currently defined in vboot_struct.h (KEY_BLOCK_FLAG_*) */ + for (flags = 0; flags < 16; flags++) { + index = recdev * 3; + if (6 == flags) + index += 2; + else if (7 == flags) + index += 1; + + /* Passing a null pointer for GBB */ + memset(last_in, 0, sizeof(last_in)); + actual_extend_count = 0; + expected_extend_count = 1; + TEST_EQ(SetTPMBootModeState(recdev & 2, recdev & 1, + flags, 0), 0, + "SetTPMBootModeState return (gbb0)"); + snprintf(what, sizeof(what), + "SetTPMBootModeState %d, 0x%x (gbb0)", + recdev, flags); + TEST_PTR_EQ(last_in[0], + kBootStateSHA1Digests[index], what); + TEST_EQ(expected_extend_count, actual_extend_count, + "Expected TlclExtend call count (gbb0)"); + snprintf(what, sizeof(what), + "SetTPMBootModeState %d, 0x%x (gbb0) PCR1", + recdev, flags); + TEST_PTR_EQ(last_in[1], NULL, what); + + /* GBB v1.1 - should be exactly the same */ + memset(last_in, 0, sizeof(last_in)); + actual_extend_count = 0; + expected_extend_count = 1; + TEST_EQ(SetTPMBootModeState(recdev & 2, recdev & 1, + flags, &gbb_v1), 0, + "SetTPMBootModeState return (gbb1)"); + snprintf(what, sizeof(what), + "SetTPMBootModeState %d, 0x%x (gbb1)", + recdev, flags); + TEST_PTR_EQ(last_in[0], + kBootStateSHA1Digests[index], what); + TEST_EQ(expected_extend_count, actual_extend_count, + "Expected TlclExtend call count (gbb1)"); + snprintf(what, sizeof(what), + "SetTPMBootModeState %d, 0x%x (gbb1) PCR1", + recdev, flags); + TEST_PTR_EQ(last_in[1], NULL, what); + + /* GBB v1.2 - should extend PCR1 with HWID digest */ + memset(last_in, 0, sizeof(last_in)); + actual_extend_count = 0; + expected_extend_count = 2; + TEST_EQ(SetTPMBootModeState(recdev & 2, recdev & 1, + flags, &gbb_v2), 0, + "SetTPMBootModeState return (gbb2)"); + snprintf(what, sizeof(what), + "SetTPMBootModeState %d, 0x%x (gbb2)", + recdev, flags); + TEST_PTR_EQ(last_in[0], + kBootStateSHA1Digests[index], what); + TEST_EQ(expected_extend_count, actual_extend_count, + "Expected TlclExtend call count (gbb2)"); + snprintf(what, sizeof(what), + "SetTPMBootModeState %d, 0x%x (gbb2) PCR1", + recdev, flags); + TEST_PTR_EQ(last_in[1], gbb_v2.hwid_digest, what); + } + } + + extend_returns = 1; + actual_extend_count = 0; + expected_extend_count = 1; + TEST_EQ(SetTPMBootModeState(0, 0, 0, 0), 1, + "SetTPMBootModeState error"); } +int main(int argc, char *argv[]) +{ + int error_code = 0; -int main(int argc, char* argv[]) { - int error_code = 0; - - BootStateTest(); + BootStateTest(); - if (!gTestSuccess) - error_code = 255; + if (!gTestSuccess) + error_code = 255; - return error_code; + return error_code; } |