int main(int argc, char* argv[]) {
uint32_t result;
uint8_t disable, deactivated;
int pri = LOG_USER | LOG_ERR;
TlclLibInit();
TlclStartup(); /* ignore result */
/* On the dogfood device, GetFlags causes an assertion failure because the
* device uses an older TPM which is not compatible with the current spec.
* We take advantage of this to cause the program to exit and not run the
* self test again (which takes 1 second).
*/
result = TlclGetFlags(NULL, NULL, NULL);
result = TlclSelfTestFull();
if (result != 0) {
syslog(pri, "TPM selftest failed with code 0x%x\n", result);
printf("fail\n");
return 0;
}
/* Optional one-time enabling of TPM. */
result = TlclAssertPhysicalPresence();
if (result != 0) {
syslog(pri, "TPM assertpp failed with code 0x%x\n", result);
printf("fail\n");
return 0;
}
result = TlclGetFlags(&disable, &deactivated, NULL);
if (result != 0) {
syslog(pri, "TPM getflags failed with code 0x%x\n", result);
printf("fail\n");
return 0;
}
if (disable) {
result = TlclSetEnable();
if (result != 0) {
syslog(pri, "TPM physical enable failed with code 0x%x\n", result);
printf("fail\n");
return 0;
}
}
if (deactivated) {
result = TlclSetDeactivated(0);
if (result != 0) {
syslog(pri, "TPM physical activate failed with code 0x%x\n", result);
printf("fail\n");
} else {
printf("reboot\n");
}
return 0; /* needs reboot */
}
printf("success\n");
return 0;
}
/* One-time call to create the WRITE_BUCKET space.
*/
static uint32_t RollbackTest_InitializeTPM(void) {
TlclLibInit();
RETURN_ON_FAILURE(TlclStartup());
RETURN_ON_FAILURE(TlclContinueSelfTest());
RETURN_ON_FAILURE(TlclAssertPhysicalPresence());
RETURN_ON_FAILURE(SafeDefineSpace(WRITE_BUCKET_NV_INDEX,
TPM_NV_PER_PPWRITE, 1));
RETURN_ON_FAILURE(RollbackTest_SetTPMState(0));
return TPM_SUCCESS;
}
int main(int argc, char** argv) {
uint32_t x;
TlclLibInit();
TPM_CHECK(TlclStartup());
TPM_CHECK(TlclContinueSelfTest());
TPM_CHECK(TlclAssertPhysicalPresence());
TPM_CHECK(TlclWrite(INDEX0, (uint8_t*) &x, sizeof(x)));
printf("TEST SUCCEEDED\n");
return 0;
}
uint32_t TlclStartupIfNeeded(void) {
static char* null_getenv = "some string"; /* just a unique address */
uint32_t result = TlclStartup();
if (resilient_startup == NULL) {
resilient_startup = getenv("TLCL_RESILIENT_STARTUP");
if (resilient_startup == NULL) {
resilient_startup = null_getenv;
}
}
if (resilient_startup == null_getenv) {
return result;
}
return result == TPM_E_INVALID_POSTINIT ? TPM_SUCCESS : result;
}
/* Sets the TPM to the right state for the next test run.
*
* Functionally correct ordering is tricky. Optimal ordering is even trickier
* (no claim to this). May succeed only partially and require a reboot to
* continue (if the TPM was deactivated at boot).
*/
static uint32_t RollbackTest_SetTPMState(int initialize) {
uint8_t disable, deactivated;
int wrong_value = 0;
/* Initializes if needed */
if (initialize) {
TlclLibInit();
/* Don't worry if we're already started. */
(void) TlclStartup();
RETURN_ON_FAILURE(TlclContinueSelfTest());
RETURN_ON_FAILURE(TlclAssertPhysicalPresence());
}
RETURN_ON_FAILURE(RollbackTest_PartiallyAdjustFlags(&disable, &deactivated));
RETURN_ON_FAILURE(RollbackTest_AdjustIsInitialized());
RETURN_ON_FAILURE(RollbackTest_AdjustMustUseBackup());
RETURN_ON_FAILURE(RollbackTest_AdjustKernelVersions(&wrong_value));
if (RBTS.KERNEL_VERSIONS_exists) {
/* Adjusting these states only makes sense when the kernel versions space
* exists. */
RETURN_ON_FAILURE(RollbackTest_AdjustKernelPermissions(&wrong_value));
RETURN_ON_FAILURE(RollbackTest_AdjustKernelValue(wrong_value));
RETURN_ON_FAILURE(RollbackTest_AdjustKernelBackup());
}
RETURN_ON_FAILURE(RollbackTest_AdjustDeveloperMode());
RETURN_ON_FAILURE(RollbackTest_SetOwnership(RBTS.owned));
/* Do not remove spaces between SetOwnership and AdjustWriteCount, as that
* might change the ownership state. Also do not issue any writes from now
* on, because AdjustWriteCount tries to avoid unneccessary clears, and after
* that, any writes will obviously change the write count.
*/
RETURN_ON_FAILURE(RollbackTest_AdjustWriteCount());
/* Finally, disables and/or deactivates. Must deactivate before disabling
*/
if (!deactivated && RBTS.deactivated) {
RETURN_ON_FAILURE(TlclSetDeactivated(1));
}
/* It's better to do this last, even though most commands we use work with
* the TPM disabled.
*/
if (!disable && RBTS.disable) {
RETURN_ON_FAILURE(TlclClearEnable());
}
return TPM_SUCCESS;
}
int main(int argc, char** argv) {
uint32_t result;
TlclLibInit();
result = TlclStartup();
if (result != 0) {
printf("tpm startup failed with 0x%x\n", result);
}
result = TlclGetFlags(NULL, NULL, NULL);
if (result != 0) {
printf("tpm getflags failed with 0x%x\n", result);
}
printf("executing SelfTestFull\n");
TlclSelfTestFull();
result = TlclGetFlags(NULL, NULL, NULL);
if (result != 0) {
printf("tpm getflags failed with 0x%x\n", result);
}
printf("TEST SUCCEEDED\n");
return 0;
}
/**
* Test send-command functions
*/
static void SendCommandTest(void)
{
ResetMocks();
TEST_EQ(TlclStartup(), 0, "SaveState");
TEST_EQ(calls[0].req_cmd, TPM_ORD_Startup, " cmd");
ResetMocks();
TEST_EQ(TlclSaveState(), 0, "SaveState");
TEST_EQ(calls[0].req_cmd, TPM_ORD_SaveState, " cmd");
ResetMocks();
TEST_EQ(TlclResume(), 0, "Resume");
TEST_EQ(calls[0].req_cmd, TPM_ORD_Startup, " cmd");
ResetMocks();
TEST_EQ(TlclSelfTestFull(), 0, "SelfTestFull");
TEST_EQ(calls[0].req_cmd, TPM_ORD_SelfTestFull, " cmd");
ResetMocks();
TEST_EQ(TlclContinueSelfTest(), 0, "ContinueSelfTest");
TEST_EQ(calls[0].req_cmd, TPM_ORD_ContinueSelfTest, " cmd");
ResetMocks();
TEST_EQ(TlclAssertPhysicalPresence(), 0,
"AssertPhysicalPresence");
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
ResetMocks();
TEST_EQ(TlclPhysicalPresenceCMDEnable(), 0,
"PhysicalPresenceCMDEnable");
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
ResetMocks();
TEST_EQ(TlclFinalizePhysicalPresence(), 0,
"FinalizePhysicalPresence");
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
ResetMocks();
TEST_EQ(TlclAssertPhysicalPresenceResult(), 0,
"AssertPhysicalPresenceResult");
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
ResetMocks();
TEST_EQ(TlclLockPhysicalPresence(), 0,
"LockPhysicalPresence");
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
ResetMocks();
TEST_EQ(TlclIsOwned(), 0, "IsOwned");
TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd");
ResetMocks();
calls[0].retval = VBERROR_SIMULATED;
TEST_NEQ(TlclIsOwned(), 0, "IsOwned");
ResetMocks();
TEST_EQ(TlclForceClear(), 0, "ForceClear");
TEST_EQ(calls[0].req_cmd, TPM_ORD_ForceClear, " cmd");
ResetMocks();
TEST_EQ(TlclSetEnable(), 0, "SetEnable");
TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalEnable, " cmd");
ResetMocks();
TEST_EQ(TlclClearEnable(), 0, "ClearEnable");
TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalDisable, " cmd");
ResetMocks();
TEST_EQ(TlclSetDeactivated(0), 0, "SetDeactivated");
TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalSetDeactivated, " cmd");
}