vboot2: Add nvstorage and secdata functions
This is the second of several CLs adding a more memory- and
code-efficient firmware verification library.
BUG=chromium:370082
BRANCH=none
TEST=make clean && COV=1 make
Change-Id: I1dd571e7511bff18469707d5a2e90068e68e0d6f
Signed-off-by: Randall Spangler <rspangler@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/199841
Reviewed-by: Bill Richardson <wfrichar@chromium.org>
diff --git a/tests/vb2_secdata_tests.c b/tests/vb2_secdata_tests.c
new file mode 100644
index 0000000..3451b32
--- /dev/null
+++ b/tests/vb2_secdata_tests.c
@@ -0,0 +1,103 @@
+/* Copyright (c) 2014 The Chromium OS Authors. All rights reserved.
+ * Use of this source code is governed by a BSD-style license that can be
+ * found in the LICENSE file.
+ *
+ * Tests for firmware secure storage library.
+ */
+
+#include <stdint.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "test_common.h"
+#include "vboot_common.h"
+
+#include "2common.h"
+#include "2api.h"
+#include "2secdata.h"
+
+static void test_changed(struct vb2_context *ctx, int changed, const char *why)
+{
+ if (changed)
+ TEST_NEQ(ctx->flags & VB2_CONTEXT_SECDATA_CHANGED, 0, why);
+ else
+ TEST_EQ(ctx->flags & VB2_CONTEXT_SECDATA_CHANGED, 0, why);
+
+ ctx->flags &= ~VB2_CONTEXT_SECDATA_CHANGED;
+};
+
+static void secdata_test(void)
+{
+ uint8_t workbuf[VB2_WORKBUF_RECOMMENDED_SIZE];
+ struct vb2_context c = {
+ .flags = 0,
+ .workbuf = workbuf,
+ .workbuf_size = sizeof(workbuf),
+ };
+ struct vb2_secdata *s = (struct vb2_secdata *)c.secdata;
+ uint32_t v = 1;
+
+ /* Blank data is invalid */
+ memset(c.secdata, 0xa6, sizeof(c.secdata));
+ TEST_NEQ(vb2_secdata_check_crc(&c), 0, "Check blank CRC");
+ TEST_NEQ(vb2_secdata_init(&c), 0, "Init blank CRC");
+
+ /* Create good data */
+ TEST_EQ(vb2_secdata_create(&c), 0, "Create");
+ TEST_EQ(vb2_secdata_check_crc(&c), 0, "Check created CRC");
+ TEST_EQ(vb2_secdata_init(&c), 0, "Init created CRC");
+ test_changed(&c, 1, "Create changes data");
+
+ /* Now corrupt it */
+ c.secdata[2]++;
+ TEST_NEQ(vb2_secdata_check_crc(&c), 0, "Check invalid CRC");
+ TEST_NEQ(vb2_secdata_init(&c), 0, "Init invalid CRC");
+
+ /* Version 1 didn't have a CRC, so init should reject it */
+ vb2_secdata_create(&c);
+ s->struct_version = 1;
+ TEST_NEQ(vb2_secdata_init(&c), 0, "Init old version");
+
+ vb2_secdata_create(&c);
+ c.flags = 0;
+
+ /* Read/write flags */
+ TEST_EQ(vb2_secdata_get(&c, VB2_SECDATA_FLAGS, &v), 0, "Get flags");
+ TEST_EQ(v, 0, "Flags created 0");
+ test_changed(&c, 0, "Get doesn't change data");
+ TEST_EQ(vb2_secdata_set(&c, VB2_SECDATA_FLAGS, 0x12), 0, "Set flags");
+ test_changed(&c, 1, "Set changes data");
+ TEST_EQ(vb2_secdata_set(&c, VB2_SECDATA_FLAGS, 0x12), 0, "Set flags 2");
+ test_changed(&c, 0, "Set again doesn't change data");
+ TEST_EQ(vb2_secdata_get(&c, VB2_SECDATA_FLAGS, &v), 0, "Get flags 2");
+ TEST_EQ(v, 0x12, "Flags changed");
+ TEST_NEQ(vb2_secdata_set(&c, VB2_SECDATA_FLAGS, 0x100), 0, "Bad flags");
+
+ /* Read/write versions */
+ TEST_EQ(vb2_secdata_get(&c, VB2_SECDATA_VERSIONS, &v),
+ 0, "Get versions");
+ TEST_EQ(v, 0, "Versions created 0");
+ test_changed(&c, 0, "Get doesn't change data");
+ TEST_EQ(vb2_secdata_set(&c, VB2_SECDATA_VERSIONS, 0x123456ff),
+ 0, "Set versions");
+ test_changed(&c, 1, "Set changes data");
+ TEST_EQ(vb2_secdata_set(&c, VB2_SECDATA_VERSIONS, 0x123456ff),
+ 0, "Set versions 2");
+ test_changed(&c, 0, "Set again doesn't change data");
+ TEST_EQ(vb2_secdata_get(&c, VB2_SECDATA_VERSIONS, &v), 0,
+ "Get versions 2");
+ TEST_EQ(v, 0x123456ff, "Versions changed");
+
+ /* Invalid field fails */
+ TEST_NEQ(vb2_secdata_get(&c, -1, &v), 0, "Get invalid");
+ TEST_NEQ(vb2_secdata_set(&c, -1, 456), 0, "Set invalid");
+ test_changed(&c, 0, "Set invalid field doesn't change data");
+}
+
+int main(int argc, char* argv[])
+{
+ secdata_test();
+
+ return gTestSuccess ? 0 : 255;
+}