| /* |
| * Copyright (C) 2018 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| #include <gtest/gtest.h> |
| |
| #include "../confirmationui_rate_limiting.h" |
| #include <keymaster/logger.h> |
| |
| using std::vector; |
| |
| namespace keystore { |
| |
| namespace test { |
| |
| namespace { |
| |
| class StdoutLogger : public ::keymaster::Logger { |
| public: |
| StdoutLogger() { set_instance(this); } |
| |
| int log_msg(LogLevel level, const char* fmt, va_list args) const { |
| int output_len = 0; |
| switch (level) { |
| case DEBUG_LVL: |
| output_len = printf("DEBUG: "); |
| break; |
| case INFO_LVL: |
| output_len = printf("INFO: "); |
| break; |
| case WARNING_LVL: |
| output_len = printf("WARNING: "); |
| break; |
| case ERROR_LVL: |
| output_len = printf("ERROR: "); |
| break; |
| case SEVERE_LVL: |
| output_len = printf("SEVERE: "); |
| break; |
| } |
| |
| output_len += vprintf(fmt, args); |
| output_len += printf("\n"); |
| return output_len; |
| } |
| }; |
| |
| StdoutLogger logger; |
| |
| class FakeClock : public std::chrono::steady_clock { |
| private: |
| static time_point sNow; |
| |
| public: |
| static void setNow(time_point newNow) { sNow = newNow; } |
| static time_point now() noexcept { return sNow; } |
| }; |
| |
| FakeClock::time_point FakeClock::sNow; |
| |
| } // namespace |
| |
| /* |
| * Test that there are no residual slots when various apps receive successful confirmations. |
| */ |
| TEST(ConfirmationUIRateLimitingTest, noPenaltyTest) { |
| auto now = std::chrono::steady_clock::now(); |
| RateLimiting<FakeClock> rateLimiting; |
| FakeClock::setNow(now); |
| |
| for (int i = 0; i < 10000; ++i) { |
| ASSERT_TRUE(rateLimiting.tryPrompt(rand())); |
| rateLimiting.processResult(ConfirmationResponseCode::OK); |
| } |
| |
| ASSERT_EQ(0U, rateLimiting.usedSlots()); |
| } |
| |
| TEST(ConfirmationUIRateLimitingTest, policyTest) { |
| using namespace std::chrono_literals; |
| auto now = std::chrono::steady_clock::now(); |
| RateLimiting<FakeClock> rateLimiting; |
| FakeClock::setNow(now); |
| |
| // first three tries are free |
| for (int i = 0; i < 3; ++i) { |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::Canceled); |
| } |
| |
| // throw in a couple of successful confirmations by other apps to make sure there |
| // is not cross talk |
| for (int i = 0; i < 10000; ++i) { |
| uid_t id = rand(); |
| if (id == 20) continue; |
| ASSERT_TRUE(rateLimiting.tryPrompt(id)); |
| rateLimiting.processResult(ConfirmationResponseCode::OK); |
| } |
| |
| // the next three tries get a 30s penalty |
| for (int i = 3; i < 6; ++i) { |
| FakeClock::setNow(FakeClock::now() + 29s); |
| ASSERT_FALSE(rateLimiting.tryPrompt(20)); |
| FakeClock::setNow(FakeClock::now() + 1s); |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::Canceled); |
| } |
| |
| // throw in a couple of successful confirmations by other apps to make sure there |
| // is not cross talk |
| for (int i = 0; i < 10000; ++i) { |
| uid_t id = rand(); |
| if (id == 20) continue; |
| ASSERT_TRUE(rateLimiting.tryPrompt(id)); |
| rateLimiting.processResult(ConfirmationResponseCode::OK); |
| } |
| |
| // there after the penalty doubles with each cancellation |
| for (int i = 6; i < 17; ++i) { |
| FakeClock::setNow((FakeClock::now() + 60s * (1ULL << (i - 6))) - 1s); |
| ASSERT_FALSE(rateLimiting.tryPrompt(20)); |
| FakeClock::setNow(FakeClock::now() + 1s); |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::Canceled); |
| } |
| |
| // throw in a couple of successful confirmations by other apps to make sure there |
| // is not cross talk |
| for (int i = 0; i < 10000; ++i) { |
| uid_t id = rand(); |
| if (id == 20) continue; |
| ASSERT_TRUE(rateLimiting.tryPrompt(id)); |
| rateLimiting.processResult(ConfirmationResponseCode::OK); |
| } |
| |
| ASSERT_EQ(1U, rateLimiting.usedSlots()); |
| |
| FakeClock::setNow(FakeClock::now() + 24h - 1s); |
| ASSERT_FALSE(rateLimiting.tryPrompt(20)); |
| |
| // after 24h the counter is forgotten |
| FakeClock::setNow(FakeClock::now() + 1s); |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::Canceled); |
| |
| // throw in a couple of successful confirmations by other apps to make sure there |
| // is not cross talk |
| for (int i = 0; i < 10000; ++i) { |
| uid_t id = rand(); |
| if (id == 20) continue; |
| ASSERT_TRUE(rateLimiting.tryPrompt(id)); |
| rateLimiting.processResult(ConfirmationResponseCode::OK); |
| } |
| |
| for (int i = 1; i < 3; ++i) { |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::Canceled); |
| } |
| |
| // throw in a couple of successful confirmations by other apps to make sure there |
| // is not cross talk |
| for (int i = 0; i < 10000; ++i) { |
| uid_t id = rand(); |
| if (id == 20) continue; |
| ASSERT_TRUE(rateLimiting.tryPrompt(id)); |
| rateLimiting.processResult(ConfirmationResponseCode::OK); |
| } |
| |
| for (int i = 3; i < 6; ++i) { |
| FakeClock::setNow(FakeClock::now() + 29s); |
| ASSERT_FALSE(rateLimiting.tryPrompt(20)); |
| FakeClock::setNow(FakeClock::now() + 1s); |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::Canceled); |
| } |
| |
| // throw in a couple of successful confirmations by other apps to make sure there |
| // is not cross talk |
| for (int i = 0; i < 10000; ++i) { |
| uid_t id = rand(); |
| if (id == 20) continue; |
| ASSERT_TRUE(rateLimiting.tryPrompt(id)); |
| rateLimiting.processResult(ConfirmationResponseCode::OK); |
| } |
| |
| for (int i = 6; i < 17; ++i) { |
| FakeClock::setNow((FakeClock::now() + 60s * (1ULL << (i - 6))) - 1s); |
| ASSERT_FALSE(rateLimiting.tryPrompt(20)); |
| FakeClock::setNow(FakeClock::now() + 1s); |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::Canceled); |
| } |
| |
| // throw in a couple of successful confirmations by other apps to make sure there |
| // is not cross talk |
| for (int i = 0; i < 10000; ++i) { |
| uid_t id = rand(); |
| if (id == 20) continue; |
| ASSERT_TRUE(rateLimiting.tryPrompt(id)); |
| rateLimiting.processResult(ConfirmationResponseCode::OK); |
| } |
| |
| ASSERT_EQ(1U, rateLimiting.usedSlots()); |
| } |
| |
| TEST(ConfirmationUIRateLimitingTest, rewindTest) { |
| using namespace std::chrono_literals; |
| auto now = std::chrono::steady_clock::now(); |
| RateLimiting<FakeClock> rateLimiting; |
| |
| // first three tries are free |
| for (int i = 0; i < 3; ++i) { |
| FakeClock::setNow(now); |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::Canceled); |
| } |
| |
| for (int i = 3; i < 6; ++i) { |
| FakeClock::setNow(FakeClock::now() + 29s); |
| ASSERT_FALSE(rateLimiting.tryPrompt(20)); |
| FakeClock::setNow(FakeClock::now() + 1s); |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::Canceled); |
| } |
| |
| FakeClock::setNow(FakeClock::now() + 59s); |
| ASSERT_FALSE(rateLimiting.tryPrompt(20)); |
| FakeClock::setNow(FakeClock::now() + 1s); |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::Aborted); |
| |
| FakeClock::setNow(FakeClock::now() - 1s); |
| ASSERT_FALSE(rateLimiting.tryPrompt(20)); |
| FakeClock::setNow(FakeClock::now() + 1s); |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::SystemError); |
| |
| // throw in a couple of successful confirmations by other apps to make sure there |
| // is not cross talk |
| for (int i = 0; i < 10000; ++i) { |
| uid_t id = rand(); |
| if (id == 20) continue; |
| ASSERT_TRUE(rateLimiting.tryPrompt(id)); |
| rateLimiting.processResult(ConfirmationResponseCode::OK); |
| } |
| |
| FakeClock::setNow(FakeClock::now() - 1s); |
| ASSERT_FALSE(rateLimiting.tryPrompt(20)); |
| FakeClock::setNow(FakeClock::now() + 1s); |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| rateLimiting.processResult(ConfirmationResponseCode::UIError); |
| |
| FakeClock::setNow(FakeClock::now() - 1s); |
| ASSERT_FALSE(rateLimiting.tryPrompt(20)); |
| FakeClock::setNow(FakeClock::now() + 1s); |
| ASSERT_TRUE(rateLimiting.tryPrompt(20)); |
| |
| ASSERT_EQ(1U, rateLimiting.usedSlots()); |
| } |
| |
| } // namespace test |
| } // namespace keystore |