/* SPDX-License-Identifier: BSD-2-Clause */ /******************************************************************************* * Copyright 2017-2018, Fraunhofer SIT sponsored by Infineon Technologies AG * All rights reserved. *******************************************************************************/ #ifdef HAVE_CONFIG_H #include #endif #include #include #include #include #include #include "tss2_fapi.h" #include "test-fapi.h" #define LOGMODULE test #include "util/log.h" #include "util/aux_util.h" #define NV_SIZE 1200 #define PASSWORD "abc" static char *password; static TSS2_RC auth_callback( FAPI_CONTEXT *context, char const *description, char **auth, void *userData) { (void)(context); (void)description; (void)userData; *auth = strdup(PASSWORD); return_if_null(*auth, "Out of memory.", TSS2_FAPI_RC_MEMORY); return TSS2_RC_SUCCESS; } static TSS2_RC action_callback( FAPI_CONTEXT *context, const char *action, void *userData) { (void)(context); (void)(userData); if (strcmp(action, "myaction")) { LOG_ERROR("Bad action: %s", action); return TSS2_FAPI_RC_GENERAL_FAILURE; } return TSS2_RC_SUCCESS; } /** Test the FAPI NV functions. * * Tested FAPI commands: * - Fapi_Provision() * - Fapi_Import() * - Fapi_SetPolicyActionCB() * - Fapi_CreateNv() * - Fapi_NvWrite() * - Fapi_NvRead() * - Fapi_Delete() * - Fapi_SetDescription() * - Fapi_GetDescription() * - Fapi_SetAuthCB() * * Tested Policies: * - PolicyAction * * @param[in,out] context The FAPI_CONTEXT. * @retval EXIT_FAILURE * @retval EXIT_SUCCESS */ int test_fapi_nv_ordinary(FAPI_CONTEXT *context) { TSS2_RC r; char *nvPathOrdinary = "/nv/Owner/myNV"; uint8_t data_src[NV_SIZE]; uint8_t *data_dest = NULL; size_t dest_size = NV_SIZE; char *description1 = "nvDescription"; char *description2 = NULL; char *policy_name = "/policy/pol_action"; char *policy_file = TOP_SOURCEDIR "/test/data/fapi/policy/pol_action.json"; FILE *stream = NULL; char *json_policy = NULL; long policy_size; for (int i = 0; i < NV_SIZE; i++) { data_src[i] = (i % 10) + 1; } r = Fapi_Provision(context, NULL, NULL, NULL); goto_if_error(r, "Error Fapi_Provision", error); r = pcr_reset(context, 16); goto_if_error(r, "Error pcr_reset", error); stream = fopen(policy_file, "r"); if (!stream) { LOG_ERROR("File %s does not exist", policy_file); goto error; } fseek(stream, 0L, SEEK_END); policy_size = ftell(stream); fclose(stream); json_policy = malloc(policy_size + 1); goto_if_null(json_policy, "Could not allocate memory for the JSON policy", TSS2_FAPI_RC_MEMORY, error); stream = fopen(policy_file, "r"); ssize_t ret = read(fileno(stream), json_policy, policy_size); if (ret != policy_size) { LOG_ERROR("IO error %s.", policy_file); goto error; } json_policy[policy_size] = '\0'; r = Fapi_Import(context, policy_name, json_policy); goto_if_error(r, "Error Fapi_Import", error); r = Fapi_SetPolicyActionCB(context, action_callback, ""); goto_if_error(r, "Error Fapi_SetPolicyActionCB", error); /* Test with policy */ r = Fapi_CreateNv(context, nvPathOrdinary, "noda", NV_SIZE, policy_name, ""); goto_if_error(r, "Error Fapi_CreateNv", error); r = Fapi_NvWrite(context, nvPathOrdinary, &data_src[0], NV_SIZE); goto_if_error(r, "Error Fapi_NvWrite", error); r = Fapi_NvRead(context, nvPathOrdinary, &data_dest, &dest_size, NULL); goto_if_error(r, "Error Fapi_NvRead", error); if (dest_size != NV_SIZE || memcmp(data_src, data_dest, dest_size) != 0) { LOG_ERROR("Error: result of nv read is wrong."); goto error; } r = Fapi_Delete(context, nvPathOrdinary); goto_if_error(r, "Error Fapi_NV_Undefine", error); SAFE_FREE(data_dest); /* Empty auth noda set */ r = Fapi_CreateNv(context, nvPathOrdinary, "noda", NV_SIZE, "", ""); goto_if_error(r, "Error Fapi_CreateNv", error); r = Fapi_NvWrite(context, nvPathOrdinary, &data_src[0], NV_SIZE); goto_if_error(r, "Error Fapi_NvWrite", error); r = Fapi_NvRead(context, nvPathOrdinary, &data_dest, &dest_size, NULL); goto_if_error(r, "Error Fapi_NvRead", error); if (dest_size != NV_SIZE || memcmp(data_src, data_dest, dest_size) != 0) { LOG_ERROR("Error: result of nv read is wrong."); goto error; } r = Fapi_Delete(context, nvPathOrdinary); goto_if_error(r, "Error Fapi_NV_Undefine", error); SAFE_FREE(data_dest); r = Fapi_SetAuthCB(context, auth_callback, ""); goto_if_error(r, "Error Fapi_SetAuthCB", error); /* Password set and noda set */ password = PASSWORD; r = Fapi_CreateNv(context, nvPathOrdinary, "", NV_SIZE, "", password); goto_if_error(r, "Error Fapi_CreateNv", error); r = Fapi_SetAuthCB(context, auth_callback, ""); goto_if_error(r, "Error SetPolicyAuthCallback", error); r = Fapi_NvWrite(context, nvPathOrdinary, &data_src[0], NV_SIZE); goto_if_error(r, "Error Fapi_NvWrite", error); r = Fapi_NvRead(context, nvPathOrdinary, &data_dest, &dest_size, NULL); goto_if_error(r, "Error Fapi_NvRead", error); if (dest_size != NV_SIZE || memcmp(data_src, data_dest, dest_size) != 0) { LOG_ERROR("Error: result of nv read is wrong."); goto error; } r = Fapi_Delete(context, nvPathOrdinary); goto_if_error(r, "Error Fapi_NV_Undefine", error); SAFE_FREE(data_dest); /* Empty auth noda clear */ password = ""; r = Fapi_CreateNv(context, nvPathOrdinary, "", NV_SIZE, "", ""); goto_if_error(r, "Error Fapi_CreateNv", error); r = Fapi_SetDescription(context, nvPathOrdinary, description1); goto_if_error(r, "Error Fapi_SetDescription", error); r = Fapi_GetDescription(context, nvPathOrdinary, &description2); goto_if_error(r, "Error Fapi_GetDescription", error); if (strcmp(description1, description2) != 0) { goto_if_error(r, "Different descriptions", error); } r = Fapi_NvWrite(context, nvPathOrdinary, &data_src[0], NV_SIZE); goto_if_error(r, "Error Fapi_NvWrite", error); r = Fapi_NvRead(context, nvPathOrdinary, &data_dest, &dest_size, NULL); goto_if_error(r, "Error Fapi_NvRead", error); if (dest_size != NV_SIZE || memcmp(data_src, data_dest, dest_size) != 0) { LOG_ERROR("Error: result of nv read is wrong."); goto error; } r = Fapi_Delete(context, nvPathOrdinary); goto_if_error(r, "Error Fapi_NV_Undefine", error); SAFE_FREE(data_dest); /* Password set and noda clear */ password = PASSWORD; r = Fapi_CreateNv(context, nvPathOrdinary, "", NV_SIZE, "", password); goto_if_error(r, "Error Fapi_CreateNv", error); r = Fapi_SetAuthCB(context, auth_callback, ""); goto_if_error(r, "Error SetPolicyAuthCallback", error); r = Fapi_NvWrite(context, nvPathOrdinary, &data_src[0], NV_SIZE); goto_if_error(r, "Error Fapi_NvWrite", error); r = Fapi_NvRead(context, nvPathOrdinary, &data_dest, &dest_size, NULL); goto_if_error(r, "Error Fapi_NvRead", error); if (dest_size != NV_SIZE || memcmp(data_src, data_dest, dest_size) != 0) { LOG_ERROR("Error: result of nv read is wrong."); goto error; } r = Fapi_Delete(context, nvPathOrdinary); goto_if_error(r, "Error Fapi_NV_Undefine", error); r = Fapi_Delete(context, "/"); goto_if_error(r, "Error Fapi_Delete", error); SAFE_FREE(data_dest); SAFE_FREE(description2); SAFE_FREE(json_policy); return EXIT_SUCCESS; error: SAFE_FREE(data_dest); SAFE_FREE(description2); SAFE_FREE(json_policy); return EXIT_FAILURE; } int test_invoke_fapi(FAPI_CONTEXT *context) { return test_fapi_nv_ordinary(context); }