/* Sets the TPM to the right state for the next test run.
*
* Functionally correct ordering is tricky. Optimal ordering is even trickier
* (no claim to this). May succeed only partially and require a reboot to
* continue (if the TPM was deactivated at boot).
*/
static uint32_t RollbackTest_SetTPMState(int initialize) {
uint8_t disable, deactivated;
int wrong_value = 0;
/* Initializes if needed */
if (initialize) {
TlclLibInit();
/* Don't worry if we're already started. */
(void) TlclStartup();
RETURN_ON_FAILURE(TlclContinueSelfTest());
RETURN_ON_FAILURE(TlclAssertPhysicalPresence());
}
RETURN_ON_FAILURE(RollbackTest_PartiallyAdjustFlags(&disable, &deactivated));
RETURN_ON_FAILURE(RollbackTest_AdjustIsInitialized());
RETURN_ON_FAILURE(RollbackTest_AdjustMustUseBackup());
RETURN_ON_FAILURE(RollbackTest_AdjustKernelVersions(&wrong_value));
if (RBTS.KERNEL_VERSIONS_exists) {
/* Adjusting these states only makes sense when the kernel versions space
* exists. */
RETURN_ON_FAILURE(RollbackTest_AdjustKernelPermissions(&wrong_value));
RETURN_ON_FAILURE(RollbackTest_AdjustKernelValue(wrong_value));
RETURN_ON_FAILURE(RollbackTest_AdjustKernelBackup());
}
RETURN_ON_FAILURE(RollbackTest_AdjustDeveloperMode());
RETURN_ON_FAILURE(RollbackTest_SetOwnership(RBTS.owned));
/* Do not remove spaces between SetOwnership and AdjustWriteCount, as that
* might change the ownership state. Also do not issue any writes from now
* on, because AdjustWriteCount tries to avoid unneccessary clears, and after
* that, any writes will obviously change the write count.
*/
RETURN_ON_FAILURE(RollbackTest_AdjustWriteCount());
/* Finally, disables and/or deactivates. Must deactivate before disabling
*/
if (!deactivated && RBTS.deactivated) {
RETURN_ON_FAILURE(TlclSetDeactivated(1));
}
/* It's better to do this last, even though most commands we use work with
* the TPM disabled.
*/
if (!disable && RBTS.disable) {
RETURN_ON_FAILURE(TlclClearEnable());
}
return TPM_SUCCESS;
}
/**
* Test send-command functions
*/
static void SendCommandTest(void)
{
ResetMocks();
TEST_EQ(TlclStartup(), 0, "SaveState");
TEST_EQ(calls[0].req_cmd, TPM_ORD_Startup, " cmd");
ResetMocks();
TEST_EQ(TlclSaveState(), 0, "SaveState");
TEST_EQ(calls[0].req_cmd, TPM_ORD_SaveState, " cmd");
ResetMocks();
TEST_EQ(TlclResume(), 0, "Resume");
TEST_EQ(calls[0].req_cmd, TPM_ORD_Startup, " cmd");
ResetMocks();
TEST_EQ(TlclSelfTestFull(), 0, "SelfTestFull");
TEST_EQ(calls[0].req_cmd, TPM_ORD_SelfTestFull, " cmd");
ResetMocks();
TEST_EQ(TlclContinueSelfTest(), 0, "ContinueSelfTest");
TEST_EQ(calls[0].req_cmd, TPM_ORD_ContinueSelfTest, " cmd");
ResetMocks();
TEST_EQ(TlclAssertPhysicalPresence(), 0,
"AssertPhysicalPresence");
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
ResetMocks();
TEST_EQ(TlclPhysicalPresenceCMDEnable(), 0,
"PhysicalPresenceCMDEnable");
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
ResetMocks();
TEST_EQ(TlclFinalizePhysicalPresence(), 0,
"FinalizePhysicalPresence");
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
ResetMocks();
TEST_EQ(TlclAssertPhysicalPresenceResult(), 0,
"AssertPhysicalPresenceResult");
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
ResetMocks();
TEST_EQ(TlclLockPhysicalPresence(), 0,
"LockPhysicalPresence");
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
ResetMocks();
TEST_EQ(TlclIsOwned(), 0, "IsOwned");
TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd");
ResetMocks();
calls[0].retval = VBERROR_SIMULATED;
TEST_NEQ(TlclIsOwned(), 0, "IsOwned");
ResetMocks();
TEST_EQ(TlclForceClear(), 0, "ForceClear");
TEST_EQ(calls[0].req_cmd, TPM_ORD_ForceClear, " cmd");
ResetMocks();
TEST_EQ(TlclSetEnable(), 0, "SetEnable");
TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalEnable, " cmd");
ResetMocks();
TEST_EQ(TlclClearEnable(), 0, "ClearEnable");
TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalDisable, " cmd");
ResetMocks();
TEST_EQ(TlclSetDeactivated(0), 0, "SetDeactivated");
TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalSetDeactivated, " cmd");
}
