1 /* 2 * Minimal TPM emulator for TPM test cases 3 * 4 * Copyright (c) 2018 Red Hat, Inc. 5 * 6 * Authors: 7 * Marc-André Lureau <marcandre.lureau@redhat.com> 8 * 9 * This work is licensed under the terms of the GNU GPL, version 2 or later. 10 * See the COPYING file in the top-level directory. 11 */ 12 13 #include "qemu/osdep.h" 14 #include <glib/gstdio.h> 15 16 #include "hw/tpm/tpm_ioctl.h" 17 #include "io/channel-socket.h" 18 #include "qapi/error.h" 19 #include "tpm-emu.h" 20 21 void tpm_emu_test_wait_cond(TestState *s) 22 { 23 gint64 end_time = g_get_monotonic_time() + 5 * G_TIME_SPAN_SECOND; 24 25 g_mutex_lock(&s->data_mutex); 26 if (!g_cond_wait_until(&s->data_cond, &s->data_mutex, end_time)) { 27 g_assert_not_reached(); 28 } 29 g_mutex_unlock(&s->data_mutex); 30 } 31 32 static void *tpm_emu_tpm_thread(void *data) 33 { 34 TestState *s = data; 35 QIOChannel *ioc = s->tpm_ioc; 36 37 s->tpm_msg = g_new(struct tpm_hdr, 1); 38 while (true) { 39 int minhlen = sizeof(s->tpm_msg->tag) + sizeof(s->tpm_msg->len); 40 41 if (!qio_channel_read(ioc, (char *)s->tpm_msg, minhlen, &error_abort)) { 42 break; 43 } 44 s->tpm_msg->tag = be16_to_cpu(s->tpm_msg->tag); 45 s->tpm_msg->len = be32_to_cpu(s->tpm_msg->len); 46 g_assert_cmpint(s->tpm_msg->len, >=, minhlen); 47 g_assert_cmpint(s->tpm_msg->tag, ==, TPM2_ST_NO_SESSIONS); 48 49 s->tpm_msg = g_realloc(s->tpm_msg, s->tpm_msg->len); 50 qio_channel_read(ioc, (char *)&s->tpm_msg->code, 51 s->tpm_msg->len - minhlen, &error_abort); 52 s->tpm_msg->code = be32_to_cpu(s->tpm_msg->code); 53 54 /* reply error */ 55 s->tpm_msg->tag = cpu_to_be16(TPM2_ST_NO_SESSIONS); 56 s->tpm_msg->len = cpu_to_be32(sizeof(struct tpm_hdr)); 57 s->tpm_msg->code = cpu_to_be32(TPM_RC_FAILURE); 58 qio_channel_write(ioc, (char *)s->tpm_msg, be32_to_cpu(s->tpm_msg->len), 59 &error_abort); 60 } 61 62 g_free(s->tpm_msg); 63 s->tpm_msg = NULL; 64 object_unref(OBJECT(s->tpm_ioc)); 65 return NULL; 66 } 67 68 void *tpm_emu_ctrl_thread(void *data) 69 { 70 TestState *s = data; 71 QIOChannelSocket *lioc = qio_channel_socket_new(); 72 QIOChannel *ioc; 73 74 qio_channel_socket_listen_sync(lioc, s->addr, &error_abort); 75 g_cond_signal(&s->data_cond); 76 77 qio_channel_wait(QIO_CHANNEL(lioc), G_IO_IN); 78 ioc = QIO_CHANNEL(qio_channel_socket_accept(lioc, &error_abort)); 79 g_assert(ioc); 80 81 { 82 uint32_t cmd = 0; 83 struct iovec iov = { .iov_base = &cmd, .iov_len = sizeof(cmd) }; 84 int *pfd = NULL; 85 size_t nfd = 0; 86 87 qio_channel_readv_full(ioc, &iov, 1, &pfd, &nfd, &error_abort); 88 cmd = be32_to_cpu(cmd); 89 g_assert_cmpint(cmd, ==, CMD_SET_DATAFD); 90 g_assert_cmpint(nfd, ==, 1); 91 s->tpm_ioc = QIO_CHANNEL(qio_channel_socket_new_fd(*pfd, &error_abort)); 92 g_free(pfd); 93 94 cmd = 0; 95 qio_channel_write(ioc, (char *)&cmd, sizeof(cmd), &error_abort); 96 97 s->emu_tpm_thread = g_thread_new(NULL, tpm_emu_tpm_thread, s); 98 } 99 100 while (true) { 101 uint32_t cmd; 102 ssize_t ret; 103 104 ret = qio_channel_read(ioc, (char *)&cmd, sizeof(cmd), NULL); 105 if (ret <= 0) { 106 break; 107 } 108 109 cmd = be32_to_cpu(cmd); 110 switch (cmd) { 111 case CMD_GET_CAPABILITY: { 112 ptm_cap cap = cpu_to_be64(0x3fff); 113 qio_channel_write(ioc, (char *)&cap, sizeof(cap), &error_abort); 114 break; 115 } 116 case CMD_INIT: { 117 ptm_init init; 118 qio_channel_read(ioc, (char *)&init.u.req, sizeof(init.u.req), 119 &error_abort); 120 init.u.resp.tpm_result = 0; 121 qio_channel_write(ioc, (char *)&init.u.resp, sizeof(init.u.resp), 122 &error_abort); 123 break; 124 } 125 case CMD_SHUTDOWN: { 126 ptm_res res = 0; 127 qio_channel_write(ioc, (char *)&res, sizeof(res), &error_abort); 128 qio_channel_close(s->tpm_ioc, &error_abort); 129 g_thread_join(s->emu_tpm_thread); 130 break; 131 } 132 case CMD_STOP: { 133 ptm_res res = 0; 134 qio_channel_write(ioc, (char *)&res, sizeof(res), &error_abort); 135 break; 136 } 137 case CMD_SET_BUFFERSIZE: { 138 ptm_setbuffersize sbs; 139 qio_channel_read(ioc, (char *)&sbs.u.req, sizeof(sbs.u.req), 140 &error_abort); 141 sbs.u.resp.buffersize = sbs.u.req.buffersize ?: cpu_to_be32(4096); 142 sbs.u.resp.tpm_result = 0; 143 sbs.u.resp.minsize = cpu_to_be32(128); 144 sbs.u.resp.maxsize = cpu_to_be32(4096); 145 qio_channel_write(ioc, (char *)&sbs.u.resp, sizeof(sbs.u.resp), 146 &error_abort); 147 break; 148 } 149 case CMD_SET_LOCALITY: { 150 ptm_loc loc; 151 /* Note: this time it's not u.req / u.resp... */ 152 qio_channel_read(ioc, (char *)&loc, sizeof(loc), &error_abort); 153 g_assert_cmpint(loc.u.req.loc, ==, 0); 154 loc.u.resp.tpm_result = 0; 155 qio_channel_write(ioc, (char *)&loc, sizeof(loc), &error_abort); 156 break; 157 } 158 default: 159 g_debug("unimplemented %u", cmd); 160 g_assert_not_reached(); 161 } 162 } 163 164 object_unref(OBJECT(ioc)); 165 object_unref(OBJECT(lioc)); 166 return NULL; 167 } 168