/* Sets the TPM to the right state for the next test run. * * Functionally correct ordering is tricky. Optimal ordering is even trickier * (no claim to this). May succeed only partially and require a reboot to * continue (if the TPM was deactivated at boot). */ static uint32_t RollbackTest_SetTPMState(int initialize) { uint8_t disable, deactivated; int wrong_value = 0; /* Initializes if needed */ if (initialize) { TlclLibInit(); /* Don't worry if we're already started. */ (void) TlclStartup(); RETURN_ON_FAILURE(TlclContinueSelfTest()); RETURN_ON_FAILURE(TlclAssertPhysicalPresence()); } RETURN_ON_FAILURE(RollbackTest_PartiallyAdjustFlags(&disable, &deactivated)); RETURN_ON_FAILURE(RollbackTest_AdjustIsInitialized()); RETURN_ON_FAILURE(RollbackTest_AdjustMustUseBackup()); RETURN_ON_FAILURE(RollbackTest_AdjustKernelVersions(&wrong_value)); if (RBTS.KERNEL_VERSIONS_exists) { /* Adjusting these states only makes sense when the kernel versions space * exists. */ RETURN_ON_FAILURE(RollbackTest_AdjustKernelPermissions(&wrong_value)); RETURN_ON_FAILURE(RollbackTest_AdjustKernelValue(wrong_value)); RETURN_ON_FAILURE(RollbackTest_AdjustKernelBackup()); } RETURN_ON_FAILURE(RollbackTest_AdjustDeveloperMode()); RETURN_ON_FAILURE(RollbackTest_SetOwnership(RBTS.owned)); /* Do not remove spaces between SetOwnership and AdjustWriteCount, as that * might change the ownership state. Also do not issue any writes from now * on, because AdjustWriteCount tries to avoid unneccessary clears, and after * that, any writes will obviously change the write count. */ RETURN_ON_FAILURE(RollbackTest_AdjustWriteCount()); /* Finally, disables and/or deactivates. Must deactivate before disabling */ if (!deactivated && RBTS.deactivated) { RETURN_ON_FAILURE(TlclSetDeactivated(1)); } /* It's better to do this last, even though most commands we use work with * the TPM disabled. */ if (!disable && RBTS.disable) { RETURN_ON_FAILURE(TlclClearEnable()); } return TPM_SUCCESS; }
/** * Test send-command functions */ static void SendCommandTest(void) { ResetMocks(); TEST_EQ(TlclStartup(), 0, "SaveState"); TEST_EQ(calls[0].req_cmd, TPM_ORD_Startup, " cmd"); ResetMocks(); TEST_EQ(TlclSaveState(), 0, "SaveState"); TEST_EQ(calls[0].req_cmd, TPM_ORD_SaveState, " cmd"); ResetMocks(); TEST_EQ(TlclResume(), 0, "Resume"); TEST_EQ(calls[0].req_cmd, TPM_ORD_Startup, " cmd"); ResetMocks(); TEST_EQ(TlclSelfTestFull(), 0, "SelfTestFull"); TEST_EQ(calls[0].req_cmd, TPM_ORD_SelfTestFull, " cmd"); ResetMocks(); TEST_EQ(TlclContinueSelfTest(), 0, "ContinueSelfTest"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ContinueSelfTest, " cmd"); ResetMocks(); TEST_EQ(TlclAssertPhysicalPresence(), 0, "AssertPhysicalPresence"); TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd"); ResetMocks(); TEST_EQ(TlclPhysicalPresenceCMDEnable(), 0, "PhysicalPresenceCMDEnable"); TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd"); ResetMocks(); TEST_EQ(TlclFinalizePhysicalPresence(), 0, "FinalizePhysicalPresence"); TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd"); ResetMocks(); TEST_EQ(TlclAssertPhysicalPresenceResult(), 0, "AssertPhysicalPresenceResult"); TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd"); ResetMocks(); TEST_EQ(TlclLockPhysicalPresence(), 0, "LockPhysicalPresence"); TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd"); ResetMocks(); TEST_EQ(TlclIsOwned(), 0, "IsOwned"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd"); ResetMocks(); calls[0].retval = VBERROR_SIMULATED; TEST_NEQ(TlclIsOwned(), 0, "IsOwned"); ResetMocks(); TEST_EQ(TlclForceClear(), 0, "ForceClear"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ForceClear, " cmd"); ResetMocks(); TEST_EQ(TlclSetEnable(), 0, "SetEnable"); TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalEnable, " cmd"); ResetMocks(); TEST_EQ(TlclClearEnable(), 0, "ClearEnable"); TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalDisable, " cmd"); ResetMocks(); TEST_EQ(TlclSetDeactivated(0), 0, "SetDeactivated"); TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalSetDeactivated, " cmd"); }