You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
188 lines
5.8 KiB
188 lines
5.8 KiB
4 months ago
|
#!/bin/bash
|
||
|
|
# SPDX-License-Identifier: MIT
|
||
|
|
# Copyright 2020 Google LLC
|
||
|
|
#
|
||
|
|
# Use of this source code is governed by an MIT-style
|
||
|
|
# license that can be found in the LICENSE file or at
|
||
|
|
# https://opensource.org/licenses/MIT.
|
||
|
|
#
|
||
|
|
#
|
||
|
|
# Test script for fsverity-utils. Runs 'make check' in lots of configurations,
|
||
|
|
# runs static analysis, and does a few other tests.
|
||
|
|
#
|
||
|
|
# Note: for more test coverage, in addition to running this script, also build
|
||
|
|
# fsverity-utils into a kvm-xfstests test appliance and run
|
||
|
|
# 'kvm-xfstests -c ext4,f2fs -g verity'
|
||
|
|
|
||
|
|
set -e -u -o pipefail
|
||
|
|
cd "$(dirname "$0")/.."
|
||
|
|
|
||
|
|
log() {
|
||
|
|
echo "[$(date)] $*" 1>&2
|
||
|
|
}
|
||
|
|
|
||
|
|
fail() {
|
||
|
|
echo "FAIL: $*" 1>&2
|
||
|
|
exit 1
|
||
|
|
}
|
||
|
|
|
||
|
|
TMPDIR=$(mktemp -d -t libfsverity_test.XXXXXXXXX)
|
||
|
|
trap 'rm -r "$TMPDIR"' EXIT
|
||
|
|
|
||
|
|
# Both stdout and stderr go to log file.
|
||
|
|
# Only stderr goes to terminal.
|
||
|
|
echo "Starting fsverity-utils tests. See run-tests.log for full output."
|
||
|
|
rm -f run-tests.log
|
||
|
|
exec >> run-tests.log
|
||
|
|
exec 2> >(tee -ia run-tests.log 1>&2)
|
||
|
|
|
||
|
|
MAKE="make -j$(getconf _NPROCESSORS_ONLN)"
|
||
|
|
|
||
|
|
log "Build and test with statically linking"
|
||
|
|
$MAKE CFLAGS="-Werror"
|
||
|
|
if ldd fsverity | grep libfsverity.so; then
|
||
|
|
fail "fsverity binary should be statically linked to libfsverity by default"
|
||
|
|
fi
|
||
|
|
./fsverity --version
|
||
|
|
|
||
|
|
log "Check that all global symbols are prefixed with \"libfsverity_\""
|
||
|
|
if nm libfsverity.a | grep ' T ' | grep -v " libfsverity_"; then
|
||
|
|
fail "Some global symbols are not prefixed with \"libfsverity_\""
|
||
|
|
fi
|
||
|
|
|
||
|
|
log "Build and test with dynamic linking"
|
||
|
|
$MAKE CFLAGS="-Werror" USE_SHARED_LIB=1 check
|
||
|
|
if ! ldd fsverity | grep libfsverity.so; then
|
||
|
|
fail "fsverity binary should be dynamically linked to libfsverity when USE_SHARED_LIB=1"
|
||
|
|
fi
|
||
|
|
|
||
|
|
log "Check that all exported symbols are prefixed with \"libfsverity_\""
|
||
|
|
if nm libfsverity.so | grep ' T ' | grep -v " libfsverity_"; then
|
||
|
|
fail "Some exported symbols are not prefixed with \"libfsverity_\""
|
||
|
|
fi
|
||
|
|
|
||
|
|
log "Test using libfsverity from C++ program"
|
||
|
|
cat > "$TMPDIR/test.cc" <<EOF
|
||
|
|
#include <libfsverity.h>
|
||
|
|
#include <iostream>
|
||
|
|
int main()
|
||
|
|
{
|
||
|
|
std::cout << libfsverity_get_digest_size(FS_VERITY_HASH_ALG_SHA256) << std::endl;
|
||
|
|
}
|
||
|
|
EOF
|
||
|
|
c++ -Wall -Werror "$TMPDIR/test.cc" -Iinclude -L. -lfsverity -o "$TMPDIR/test"
|
||
|
|
[ "$(LD_LIBRARY_PATH=. "$TMPDIR/test")" = "32" ]
|
||
|
|
rm "${TMPDIR:?}"/*
|
||
|
|
|
||
|
|
log "Check that build doesn't produce untracked files"
|
||
|
|
$MAKE CFLAGS="-Werror" all test_programs
|
||
|
|
if git status --short | grep -q '^??'; then
|
||
|
|
git status
|
||
|
|
fail "Build produced untracked files (check 'git status'). Missing gitignore entry?"
|
||
|
|
fi
|
||
|
|
|
||
|
|
log "Test that 'make uninstall' uninstalls all files"
|
||
|
|
make DESTDIR="$TMPDIR" install
|
||
|
|
if [ "$(find "$TMPDIR" -type f -o -type l | wc -l)" = 0 ]; then
|
||
|
|
fail "'make install' didn't install any files"
|
||
|
|
fi
|
||
|
|
make DESTDIR="$TMPDIR" uninstall
|
||
|
|
if [ "$(find "$TMPDIR" -type f -o -type l | wc -l)" != 0 ]; then
|
||
|
|
fail "'make uninstall' didn't uninstall all files"
|
||
|
|
fi
|
||
|
|
rm -r "${TMPDIR:?}"/*
|
||
|
|
|
||
|
|
log "Build, install, and uninstall with dash"
|
||
|
|
make clean SHELL=/bin/dash
|
||
|
|
make DESTDIR="$TMPDIR" SHELL=/bin/dash install
|
||
|
|
make DESTDIR="$TMPDIR" SHELL=/bin/dash uninstall
|
||
|
|
|
||
|
|
log "Check that all files have license and copyright info"
|
||
|
|
list="$TMPDIR/filelist"
|
||
|
|
filter_license_info() {
|
||
|
|
# files to exclude from license and copyright info checks
|
||
|
|
grep -E -v '(\.gitignore|LICENSE|NEWS|README|testdata|fsverity_uapi\.h|libfsverity\.pc\.in)'
|
||
|
|
}
|
||
|
|
git grep -L 'SPDX-License-Identifier: MIT' \
|
||
|
|
| filter_license_info > "$list" || true
|
||
|
|
if [ -s "$list" ]; then
|
||
|
|
fail "The following files are missing an appropriate SPDX license identifier: $(<"$list")"
|
||
|
|
fi
|
||
|
|
# For now some people still prefer a free-form license statement, not just SPDX.
|
||
|
|
git grep -L 'Use of this source code is governed by an MIT-style' \
|
||
|
|
| filter_license_info > "$list" || true
|
||
|
|
if [ -s "$list" ]; then
|
||
|
|
fail "The following files are missing an appropriate license statement: $(<"$list")"
|
||
|
|
fi
|
||
|
|
git grep -L '\<Copyright\>' | filter_license_info > "$list" || true
|
||
|
|
if [ -s "$list" ]; then
|
||
|
|
fail "The following files are missing a copyright statement: $(<"$list")"
|
||
|
|
fi
|
||
|
|
rm "$list"
|
||
|
|
|
||
|
|
log "Build and test with gcc (-O2)"
|
||
|
|
$MAKE CC=gcc CFLAGS="-O2 -Werror" check
|
||
|
|
|
||
|
|
log "Build and test with gcc (-O3)"
|
||
|
|
$MAKE CC=gcc CFLAGS="-O3 -Werror" check
|
||
|
|
|
||
|
|
log "Build and test with gcc (32-bit)"
|
||
|
|
$MAKE CC=gcc CFLAGS="-O2 -Werror -m32" check
|
||
|
|
|
||
|
|
log "Build and test with clang (-O2)"
|
||
|
|
$MAKE CC=clang CFLAGS="-O2 -Werror" check
|
||
|
|
|
||
|
|
log "Build and test with clang (-O3)"
|
||
|
|
$MAKE CC=clang CFLAGS="-O3 -Werror" check
|
||
|
|
|
||
|
|
log "Build and test with clang + UBSAN"
|
||
|
|
$MAKE CC=clang \
|
||
|
|
CFLAGS="-O2 -Werror -fsanitize=undefined -fno-sanitize-recover=undefined" \
|
||
|
|
check
|
||
|
|
|
||
|
|
log "Build and test with clang + ASAN"
|
||
|
|
$MAKE CC=clang \
|
||
|
|
CFLAGS="-O2 -Werror -fsanitize=address -fno-sanitize-recover=address" \
|
||
|
|
check
|
||
|
|
|
||
|
|
log "Build and test with clang + unsigned integer overflow sanitizer"
|
||
|
|
$MAKE CC=clang \
|
||
|
|
CFLAGS="-O2 -Werror -fsanitize=unsigned-integer-overflow -fno-sanitize-recover=unsigned-integer-overflow" \
|
||
|
|
check
|
||
|
|
|
||
|
|
log "Build and test with clang + CFI"
|
||
|
|
$MAKE CC=clang CFLAGS="-O2 -Werror -fsanitize=cfi -flto -fvisibility=hidden" \
|
||
|
|
check
|
||
|
|
|
||
|
|
log "Build and test with valgrind"
|
||
|
|
$MAKE TEST_WRAPPER_PROG="valgrind --quiet --error-exitcode=100 --leak-check=full --errors-for-leak-kinds=all" \
|
||
|
|
CFLAGS="-O2 -Werror" check
|
||
|
|
|
||
|
|
log "Build and test using BoringSSL instead of OpenSSL"
|
||
|
|
BSSL=$HOME/src/boringssl
|
||
|
|
$MAKE CFLAGS="-O2 -Werror" LDFLAGS="-L$BSSL/build/crypto" \
|
||
|
|
CPPFLAGS="-I$BSSL/include" LDLIBS="-lcrypto -lpthread" check
|
||
|
|
|
||
|
|
log "Build and test using -funsigned-char"
|
||
|
|
$MAKE CFLAGS="-O2 -Werror -funsigned-char" check
|
||
|
|
|
||
|
|
log "Build and test using -fsigned-char"
|
||
|
|
$MAKE CFLAGS="-O2 -Werror -fsigned-char" check
|
||
|
|
|
||
|
|
log "Cross-compile for Windows (32-bit)"
|
||
|
|
$MAKE CC=i686-w64-mingw32-gcc CFLAGS="-O2 -Werror"
|
||
|
|
|
||
|
|
log "Cross-compile for Windows (64-bit)"
|
||
|
|
$MAKE CC=x86_64-w64-mingw32-gcc CFLAGS="-O2 -Werror"
|
||
|
|
|
||
|
|
log "Run sparse"
|
||
|
|
./scripts/run-sparse.sh
|
||
|
|
|
||
|
|
log "Run clang static analyzer"
|
||
|
|
scan-build --status-bugs make CFLAGS="-O2 -Werror" all test_programs
|
||
|
|
|
||
|
|
log "Run shellcheck"
|
||
|
|
shellcheck scripts/*.sh 1>&2
|
||
|
|
|
||
|
|
log "All tests passed!"
|