1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
/* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
* Use of this source code is governed by a BSD-style license that can be
* found in the LICENSE file.
*/
/* This program mimicks the TPM usage from read-only firmware. It exercises
* the TPM functionality needed in the read-only firmware. It is meant to be
* integrated with the rest of the read-only firmware. It is also provided as
* a test.
*/
#include <stdio.h>
#include <stdint.h>
#include <stdlib.h>
#include "tlcl.h"
#include "utility.h"
/* These index values are used to create NVRAM spaces. They only need to be
* unique.
*/
#define INDEX0 0xda70
#define INDEX1 0xda71
#define INDEX2 0xda72
#define INDEX3 0xda73
#define INDEX_INITIALIZED 0xda80
/* This is called once at initialization time. It may be called again from
* recovery mode to rebuild the spaces if something incomprehensible happened
* and the spaces are gone or messed up. This is called after TPM_Startup and
* before the spaces are write-locked, so there is a chance that they can be
* recreated (but who knows---if anything can happen, there are plenty of ways
* of making this FUBAR).
*/
void InitializeSpaces(void) {
uint32_t zero = 0;
uint32_t perm = TPM_NV_PER_WRITE_STCLEAR | TPM_NV_PER_PPWRITE;
printf("Initializing spaces\n");
TlclSetNvLocked(); /* useful only the first time */
TlclDefineSpace(INDEX0, perm, 4);
TlclWrite(INDEX0, (uint8_t *) &zero, 4);
TlclDefineSpace(INDEX1, perm, 4);
TlclWrite(INDEX1, (uint8_t *) &zero, 4);
TlclDefineSpace(INDEX2, perm, 4);
TlclWrite(INDEX2, (uint8_t *) &zero, 4);
TlclDefineSpace(INDEX3, perm, 4);
TlclWrite(INDEX3, (uint8_t *) &zero, 4);
perm = TPM_NV_PER_READ_STCLEAR | TPM_NV_PER_WRITE_STCLEAR |
TPM_NV_PER_PPWRITE;
TlclDefineSpace(INDEX_INITIALIZED, perm, 1);
}
void EnterRecoveryMode(void) {
printf("entering recovery mode");
exit(0);
}
int main(int argc, char** argv) {
uint8_t c;
uint32_t index_0, index_1, index_2, index_3;
TlclLibInit();
TlclStartup();
TlclSelfTestFull();
TlclAssertPhysicalPresence();
/* Checks if initialization has completed by trying to read-lock a space
* that's created at the end of initialization.
*/
if (TlclRead(INDEX_INITIALIZED, &c, 0) == TPM_E_BADINDEX) {
/* The initialization did not complete.
*/
InitializeSpaces();
}
/* Checks if spaces are OK or messed up.
*/
if (TlclRead(INDEX0, (uint8_t*) &index_0, sizeof(index_0)) != TPM_SUCCESS ||
TlclRead(INDEX1, (uint8_t*) &index_1, sizeof(index_1)) != TPM_SUCCESS ||
TlclRead(INDEX2, (uint8_t*) &index_2, sizeof(index_2)) != TPM_SUCCESS ||
TlclRead(INDEX3, (uint8_t*) &index_3, sizeof(index_3)) != TPM_SUCCESS) {
EnterRecoveryMode();
}
/* Writes space, and locks it. Then attempts to write again. I really wish
* I could use the imperative.
*/
index_0 += 1;
if (TlclWrite(INDEX0, (uint8_t*) &index_0, sizeof(index_0) != TPM_SUCCESS)) {
error("could not write index 0\n");
}
TlclWriteLock(INDEX0);
if (TlclWrite(INDEX0, (uint8_t*) &index_0, sizeof(index_0)) == TPM_SUCCESS) {
error("index 0 is not locked\n");
}
/* Done for now.
*/
printf("TEST SUCCEEDED\n");
exit(0);
}
|
