Test: add negative case for requester

- unittests for handling certificate response - unittests for handling measurement response - cases to test issuing other requests before VCAed Signed-off-by: xiaotia3 <[email protected]>
intel · Sep 11, 2023 · 107f468 · 107f468
1 parent 22b0e1f
commit 107f468
Show file tree

Hide file tree

Showing 3 changed files with 579 additions and 0 deletions.
diff --git a/test/spdmlib-test/src/requester_tests/get_certificate_req.rs b/test/spdmlib-test/src/requester_tests/get_certificate_req.rs
@@ -7,6 +7,8 @@ use crate::common::secret_callback::*;
 use crate::common::transport::PciDoeTransportEncap;
 use crate::common::util::{create_info, get_rsp_cert_chain_buff};
 use spdmlib::common::SpdmConnectionState;
+use spdmlib::config::{MAX_SPDM_CERT_CHAIN_DATA_SIZE, MAX_SPDM_MSG_SIZE};
+use spdmlib::error::{SpdmResult, SPDM_STATUS_ERROR_PEER, SPDM_STATUS_INVALID_MSG_FIELD};
 use spdmlib::protocol::*;
 use spdmlib::requester::RequesterContext;
 use spdmlib::{responder, secret};
@@ -83,3 +85,162 @@ fn test_case0_send_receive_spdm_certificate() {
     };
     executor::block_on(future);
 }
+
+#[test]
+#[cfg(feature = "hashed-transcript-data")]
+fn test_handle_spdm_certificate_partial_response() {
+    struct Tc<'a> {
+        name: &'a str,
+        slot_id: u8,
+        total_size: u16,
+        offset: u16,
+        length: u16,
+        receive_buffer: &'a [u8],
+        expected_result: SpdmResult<(u16, u16)>,
+    }
+    let tt: [Tc; 8] = [
+        Tc {
+            name: "invalid certificate partial resp",
+            slot_id: 0u8,
+            total_size: 0u16,
+            offset: 0u16,
+            length: 0u16,
+            receive_buffer: &[0x12, 0x82, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00],
+            expected_result: Err(SPDM_STATUS_ERROR_PEER),
+        },
+        Tc {
+            name: "zero length portion",
+            slot_id: 0u8,
+            total_size: 2048u16,
+            offset: 0u16,
+            length: 2048u16,
+            receive_buffer: &[
+                0x12, 0x02, 0x00, 0x00, //
+                0x00, 0x00, // portion
+                0x00, 0x08, // remainder
+            ],
+            expected_result: Err(SPDM_STATUS_INVALID_MSG_FIELD),
+        },
+        Tc {
+            name: "portion larger than remainder",
+            slot_id: 0u8,
+            total_size: 10u16,
+            offset: 7u16,
+            length: 3u16,
+            receive_buffer: &[
+                0x12, 0x02, 0x00, 0x00, //
+                0x05, 0x00, // portion
+                0x00, 0x00, // remainder
+                0x05, 0x00, 0x00, 0x00, 0x00,
+            ],
+            expected_result: Err(SPDM_STATUS_INVALID_MSG_FIELD),
+        },
+        Tc {
+            name: "portion larger than max cert chain size",
+            slot_id: 0u8,
+            total_size: MAX_SPDM_CERT_CHAIN_DATA_SIZE as u16,
+            offset: (MAX_SPDM_CERT_CHAIN_DATA_SIZE - 3) as u16,
+            length: 3u16,
+            receive_buffer: &[
+                0x12, 0x02, 0x00, 0x00, //
+                0x05, 0x00, // portion
+                0x00, 0x00, // remainder
+                0x05, 0x00, 0x00, 0x00, 0x00,
+            ],
+            expected_result: Err(SPDM_STATUS_INVALID_MSG_FIELD),
+        },
+        Tc {
+            name: "zero remainder but certificate is incomplete",
+            slot_id: 0u8,
+            total_size: 100u16,
+            offset: 90u16,
+            length: 10u16,
+            receive_buffer: &[
+                0x12, 0x02, 0x00, 0x00, //
+                0x05, 0x00, // portion
+                0x00, 0x00, // remainder
+                0x05, 0x00, 0x00, 0x00, 0x00,
+            ],
+            expected_result: Err(SPDM_STATUS_INVALID_MSG_FIELD),
+        },
+        Tc {
+            name: "remainder larger than max cert chain size",
+            slot_id: 0u8,
+            total_size: MAX_SPDM_CERT_CHAIN_DATA_SIZE as u16,
+            offset: (MAX_SPDM_CERT_CHAIN_DATA_SIZE - 10) as u16,
+            length: 10u16,
+            receive_buffer: &[
+                0x12, 0x02, 0x00, 0x00, //
+                0x05, 0x00, // portion
+                0x06, 0x00, // remainder
+                0x05, 0x00, 0x00, 0x00, 0x00,
+            ],
+            expected_result: Err(SPDM_STATUS_INVALID_MSG_FIELD),
+        },
+        Tc {
+            name: "wrong certificate slot id",
+            slot_id: 7u8,
+            total_size: 100u16,
+            offset: 90u16,
+            length: 10u16,
+            receive_buffer: &[
+                0x12, 0x02, 0x00, 0x00, //
+                0x05, 0x00, // portion
+                0x05, 0x00, // remainder
+                0x05, 0x00, 0x00, 0x00, 0x00,
+            ],
+            expected_result: Err(SPDM_STATUS_INVALID_MSG_FIELD),
+        },
+        Tc {
+            name: "positive",
+            slot_id: 0u8,
+            total_size: 100u16,
+            offset: 90u16,
+            length: 10u16,
+            receive_buffer: &[
+                0x12, 0x02, 0x00, 0x00, //
+                0x05, 0x00, // portion
+                0x05, 0x00, // remainder
+                0x05, 0x00, 0x00, 0x00, 0x00,
+            ],
+            expected_result: Ok((5, 5)),
+        },
+    ];
+    for tc in tt {
+        executor::add_task(async move {
+            let (req_config_info, req_provision_info) = create_info();
+            let pcidoe_transport_encap = Arc::new(Mutex::new(PciDoeTransportEncap {}));
+            let device_io = Arc::new(Mutex::new(FakeSpdmDeviceIoReceve::new(Arc::new(
+                SharedBuffer::new(),
+            ))));
+            let mut requester = RequesterContext::new(
+                device_io,
+                pcidoe_transport_encap,
+                req_config_info,
+                req_provision_info,
+            );
+            requester.common.negotiate_info.spdm_version_sel = SpdmVersion::SpdmVersion12;
+            requester.common.negotiate_info.base_hash_sel = SpdmBaseHashAlgo::TPM_ALG_SHA_384;
+            requester.common.peer_info.peer_cert_chain_temp = Some(SpdmCertChainBuffer::default());
+            let session_id = None;
+            let send_buffer = [0u8; MAX_SPDM_MSG_SIZE];
+            let result = requester.handle_spdm_certificate_partial_response(
+                session_id,
+                tc.slot_id,
+                tc.total_size,
+                tc.offset,
+                tc.length,
+                &send_buffer,
+                tc.receive_buffer,
+            );
+            assert!(
+                result == tc.expected_result,
+                "tc '{}' expect {:?} got {:?}",
+                tc.name,
+                tc.expected_result,
+                result
+            );
+        })
+    }
+    executor::poll_tasks();
+}