1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
|
/* Copyright 2014 The ChromiumOS Authors
* Use of this source code is governed by a BSD-style license that can be
* found in the LICENSE file.
*
* Tests for firmware secure storage library.
*/
#include "2api.h"
#include "2common.h"
#include "2crc8.h"
#include "2misc.h"
#include "2secdata.h"
#include "2secdata_struct.h"
#include "2sysincludes.h"
#include "common/tests.h"
static uint8_t workbuf[VB2_FIRMWARE_WORKBUF_RECOMMENDED_SIZE]
__attribute__((aligned(VB2_WORKBUF_ALIGN)));
static struct vb2_context *ctx;
static struct vb2_shared_data *sd;
static struct vb2_secdata_firmware *sec;
static void reset_common_data(void)
{
memset(workbuf, 0xaa, sizeof(workbuf));
TEST_SUCC(vb2api_init(workbuf, sizeof(workbuf), &ctx),
"vb2api_init failed");
sd = vb2_get_sd(ctx);
/* Most tests assume we have passed fw_phase1() */
sd->status |= VB2_SD_STATUS_RECOVERY_DECIDED;
sec = (struct vb2_secdata_firmware *)ctx->secdata_firmware;
}
static void test_changed(struct vb2_context *c, int changed, const char *why)
{
if (changed)
TEST_NEQ(c->flags & VB2_CONTEXT_SECDATA_FIRMWARE_CHANGED,
0, why);
else
TEST_EQ(c->flags & VB2_CONTEXT_SECDATA_FIRMWARE_CHANGED,
0, why);
c->flags &= ~VB2_CONTEXT_SECDATA_FIRMWARE_CHANGED;
};
static void secdata_firmware_test(void)
{
uint32_t v = 1;
reset_common_data();
/* Check size constant */
TEST_EQ(VB2_SECDATA_FIRMWARE_SIZE, sizeof(struct vb2_secdata_firmware),
"Struct size constant");
/* Blank data is invalid */
memset(&ctx->secdata_firmware, 0xa6, sizeof(ctx->secdata_firmware));
TEST_EQ(vb2api_secdata_firmware_check(ctx),
VB2_ERROR_SECDATA_FIRMWARE_CRC, "Check blank CRC");
TEST_EQ(vb2_secdata_firmware_init(ctx),
VB2_ERROR_SECDATA_FIRMWARE_CRC, "Init blank CRC");
/* Ensure zeroed buffers are invalid (coreboot relies on this) */
memset(&ctx->secdata_firmware, 0, sizeof(ctx->secdata_firmware));
TEST_EQ(vb2_secdata_firmware_init(ctx),
VB2_ERROR_SECDATA_FIRMWARE_VERSION,
"Zeroed buffer (invalid version)");
/* Try with bad version */
TEST_EQ(vb2api_secdata_firmware_create(ctx), VB2_SECDATA_FIRMWARE_SIZE,
"Create");
sec->struct_version -= 1;
sec->crc8 = vb2_crc8(sec, offsetof(struct vb2_secdata_firmware, crc8));
TEST_EQ(vb2api_secdata_firmware_check(ctx),
VB2_ERROR_SECDATA_FIRMWARE_VERSION, "Check invalid version");
TEST_EQ(vb2_secdata_firmware_init(ctx),
VB2_ERROR_SECDATA_FIRMWARE_VERSION, "Init invalid version");
/* Create good data */
vb2api_secdata_firmware_create(ctx);
TEST_SUCC(vb2api_secdata_firmware_check(ctx), "Check created CRC");
TEST_SUCC(vb2_secdata_firmware_init(ctx), "Init created CRC");
TEST_NEQ(sd->status & VB2_SD_STATUS_SECDATA_FIRMWARE_INIT, 0,
"Init set SD status");
sd->status &= ~VB2_SD_STATUS_SECDATA_FIRMWARE_INIT;
test_changed(ctx, 1, "Create changes data");
/* Now corrupt it */
ctx->secdata_firmware[2]++;
TEST_EQ(vb2api_secdata_firmware_check(ctx),
VB2_ERROR_SECDATA_FIRMWARE_CRC, "Check invalid CRC");
TEST_EQ(vb2_secdata_firmware_init(ctx),
VB2_ERROR_SECDATA_FIRMWARE_CRC, "Init invalid CRC");
/* Read/write flags */
vb2api_secdata_firmware_create(ctx);
vb2_secdata_firmware_init(ctx);
ctx->flags = 0;
v = vb2_secdata_firmware_get(ctx, VB2_SECDATA_FIRMWARE_FLAGS);
TEST_EQ(v, 0, "Flags created 0");
test_changed(ctx, 0, "Get doesn't change data");
vb2_secdata_firmware_set(ctx, VB2_SECDATA_FIRMWARE_FLAGS, 0x12);
test_changed(ctx, 1, "Set changes data");
vb2_secdata_firmware_set(ctx, VB2_SECDATA_FIRMWARE_FLAGS, 0x12);
test_changed(ctx, 0, "Set again doesn't change data");
v = vb2_secdata_firmware_get(ctx, VB2_SECDATA_FIRMWARE_FLAGS);
TEST_EQ(v, 0x12, "Flags changed");
TEST_ABORT(vb2_secdata_firmware_set(ctx, VB2_SECDATA_FIRMWARE_FLAGS,
0x100),
"Bad flags");
/* Read/write versions */
v = vb2_secdata_firmware_get(ctx, VB2_SECDATA_FIRMWARE_VERSIONS);
TEST_EQ(v, 0, "Versions created 0");
test_changed(ctx, 0, "Get doesn't change data");
vb2_secdata_firmware_set(ctx, VB2_SECDATA_FIRMWARE_VERSIONS,
0x123456ff);
test_changed(ctx, 1, "Set changes data");
vb2_secdata_firmware_set(ctx, VB2_SECDATA_FIRMWARE_VERSIONS,
0x123456ff);
test_changed(ctx, 0, "Set again doesn't change data");
v = vb2_secdata_firmware_get(ctx, VB2_SECDATA_FIRMWARE_VERSIONS);
TEST_EQ(v, 0x123456ff, "Versions changed");
/* Invalid field fails */
TEST_ABORT(vb2_secdata_firmware_get(ctx, -1), "Get invalid");
TEST_ABORT(vb2_secdata_firmware_set(ctx, -1, 456), "Set invalid");
test_changed(ctx, 0, "Set invalid field doesn't change data");
/* Read/write uninitialized data fails */
sd->status &= ~VB2_SD_STATUS_SECDATA_FIRMWARE_INIT;
TEST_ABORT(vb2_secdata_firmware_get(ctx,
VB2_SECDATA_FIRMWARE_VERSIONS),
"Get uninitialized");
test_changed(ctx, 0, "Get uninitialized doesn't change data");
TEST_ABORT(vb2_secdata_firmware_set(ctx, VB2_SECDATA_FIRMWARE_VERSIONS,
0x123456ff),
"Set uninitialized");
test_changed(ctx, 0, "Set uninitialized doesn't change data");
/* Read/write uninitialized in recovery mode */
ctx->flags |= VB2_CONTEXT_RECOVERY_MODE;
TEST_EQ(vb2_secdata_firmware_get(ctx, VB2_SECDATA_FIRMWARE_VERSIONS), 0,
"Get uninitialized (recmode)");
test_changed(ctx, 0, "Get uninitialized (recmode) doesn't change data");
vb2_secdata_firmware_set(ctx, VB2_SECDATA_FIRMWARE_VERSIONS,
0x123456ff);
test_changed(ctx, 0, "Set uninitialized (recmode) doesn't change data");
/* Read/write early in fw_phase1 */
ctx->flags &= ~VB2_CONTEXT_RECOVERY_MODE;
sd->status &= ~VB2_SD_STATUS_RECOVERY_DECIDED;
TEST_EQ(vb2_secdata_firmware_get(ctx, VB2_SECDATA_FIRMWARE_VERSIONS), 0,
"Get uninitialized (phase1)");
test_changed(ctx, 0, "Get uninitialized (phase1) doesn't change data");
vb2_secdata_firmware_set(ctx, VB2_SECDATA_FIRMWARE_VERSIONS,
0x123456ff);
test_changed(ctx, 0, "Set uninitialized (phase1) doesn't change data");
}
int main(int argc, char* argv[])
{
secdata_firmware_test();
return gTestSuccess ? 0 : 255;
}
|
