3 VERITYSETUP=../src/veritysetup
4 #VERITYSETUP=../veritysetup-org
7 DEV_OUT="$DEV_NAME.out"
11 function remove_mapping()
13 [ -b /dev/mapper/$DEV_NAME ] && dmsetup remove $DEV_NAME
14 [ ! -z "$LOOPDEV1" ] && losetup -d $LOOPDEV1 >/dev/null 2>&1
15 [ ! -z "$LOOPDEV2" ] && losetup -d $LOOPDEV2 >/dev/null 2>&1
16 rm -f $IMG $IMG_HASH $DEV_OUT >/dev/null 2>&1
23 [ -n "$1" ] && echo "$1"
25 [ -f $DEV_OUT ] && cat $DEV_OUT
32 [ -n "$1" ] && echo "$1"
36 function prepare() # $1 dev1_siz [$2 dev2_size]
40 dd if=/dev/zero of=$IMG bs=1k count=$1 >/dev/null 2>&1
41 LOOPDEV1=$(losetup -f 2>/dev/null)
42 [ -z "$LOOPDEV1" ] && fail "No free loop device"
43 losetup $LOOPDEV1 $IMG
46 dd if=/dev/zero of=$IMG_HASH bs=1k count=$2 >/dev/null 2>&1
47 LOOPDEV2=$(losetup -f 2>/dev/null)
48 [ -z "$LOOPDEV2" ] && fail "No free loop device"
49 losetup $LOOPDEV2 $IMG_HASH
54 dd if=/dev/zero of=$LOOPDEV1 bs=256k >/dev/null 2>&1
55 dd if=/dev/zero of=$LOOPDEV2 bs=256k >/dev/null 2>&1
56 rm -f $DEV_OUT >/dev/null 2>&1
59 function check_exists()
61 [ -b /dev/mapper/$DEV_NAME ] || fail
64 function compare_out() # $1 what, $2 expected
66 OPT=$(grep -v "^#" $DEV_OUT | grep -i "$1" | sed -e s/.*\:\ // )
68 [ $OPT != $2 ] && fail "$1 differs ($2)"
71 function check_root_hash() # $1 size, $2 hash, $3 salt, $4 version, $5 hash, [$6 offset]
73 if [ -z "$LOOPDEV2" ] ; then
74 BLOCKS=$(($6 * 512 / $1))
75 DEV_PARAMS="$LOOPDEV1 $LOOPDEV1 \
77 --data-blocks=$BLOCKS --debug"
79 DEV_PARAMS="$LOOPDEV1 $LOOPDEV2"
82 for fail in data hash; do
84 echo -n "V$4 $5 block size $1: "
85 $VERITYSETUP format $DEV_PARAMS --format=$4 \
86 --data-block-size=$1 --hash-block-size=$1 \
91 compare_out "root hash" $2
92 compare_out "alt" "$3"
94 $VERITYSETUP verify $DEV_PARAMS $2 >>$DEV_OUT 2>&1 || fail
97 $VERITYSETUP create $DEV_NAME $DEV_PARAMS $2 >>$DEV_OUT 2>&1 || fail
101 dd if=/dev/mapper/$DEV_NAME of=/dev/null bs=$1 2>/dev/null
102 dmsetup status $DEV_NAME | grep "verity V" >/dev/null || fail
103 echo -n "[in-kernel verify]"
105 $VERITYSETUP remove $DEV_NAME || fail
109 dd if=/dev/urandom of=$LOOPDEV1 bs=1 seek=3456 count=1 2>/dev/null
113 if [ -z "$LOOPDEV2" ] ; then
114 dd if=/dev/urandom of=$LOOPDEV1 bs=1 seek=$((8193 + $4)) count=1 2>/dev/null
116 dd if=/dev/urandom of=$LOOPDEV2 bs=1 seek=8193 count=1 2>/dev/null
122 $VERITYSETUP verify $DEV_PARAMS $2 >>$DEV_OUT 2>&1 && \
123 fail "userspace check for $TXT corruption"
124 $VERITYSETUP create $DEV_NAME $DEV_PARAMS $2 >>$DEV_OUT 2>&1 || \
126 dd if=/dev/mapper/$DEV_NAME of=/dev/null bs=$1 2>/dev/null
127 dmsetup status $DEV_NAME | grep "verity V" >/dev/null && \
128 fail "in-kernel check for $TXT corruption"
129 $VERITYSETUP remove $DEV_NAME || fail "deactivation"
130 echo "[$TXT corruption]"
134 function valgrind_setup()
136 which valgrind >/dev/null 2>&1 || fail "Cannot find valgrind."
137 [ ! -f $CRYPTSETUP_VALGRIND ] && fail "Unable to get location of cryptsetup executable."
138 #export LD_LIBRARY_PATH="$CRYPTSETUP_LIB_VALGRIND:$LD_LIBRARY_PATH"
141 function valgrind_run()
143 INFOSTRING="$(basename ${BASH_SOURCE[1]})-line-${BASH_LINENO[0]}" ./valg.sh ${VERITYSETUP} "$@"
146 [ $(id -u) != 0 ] && skip "WARNING: You must be root to run this test, test skipped."
147 [ ! -x "$VERITYSETUP" ] && skip "Cannot find $VERITYSETUP, test skipped."
149 [ -n "$VALG" ] && valgrind_setup && VERITYSETUP=valgrind_run
153 SALT=e48da609055204e89ae53b655ca2216dd983cf3cb829f34f63a297d106d53e2d
155 echo "Verity tests [separate devices]"
157 check_root_hash 512 9de18652fe74edfb9b805aaed72ae2aa48f94333f1ba5c452ac33b1c39325174 $SALT 1 sha256
158 check_root_hash 1024 54d92778750495d1f80832b486ebd007617d746271511bbf0e295e143da2b3df $SALT 1 sha256
159 check_root_hash 4096 e522df0f97da4febb882ac40f30b37dc0b444bf6df418929463fa25280f09d5c $SALT 1 sha256
161 check_root_hash 4096 cbbf4ebd004ef65e29b935bb635a39cf754d677f3fa10b0126da725bbdf10f7d $SALT 0 sha256
163 check_root_hash 1024 d0e9163ca8844aaa2e88fe5265a8c5d9ee494a99 $SALT 1 sha1
164 check_root_hash 1024 73509e8e868be6b8ac939817a98a3d35121413b2 dadada 1 sha1
166 echo "Verity tests [one device offset]"
167 prepare $((8192 + 1024))
168 check_root_hash 512 9de18652fe74edfb9b805aaed72ae2aa48f94333f1ba5c452ac33b1c39325174 $SALT 1 sha256 16384
169 check_root_hash 1024 54d92778750495d1f80832b486ebd007617d746271511bbf0e295e143da2b3df $SALT 1 sha256 16384
170 check_root_hash 4096 e522df0f97da4febb882ac40f30b37dc0b444bf6df418929463fa25280f09d5c $SALT 1 sha256 16384
172 check_root_hash 4096 cbbf4ebd004ef65e29b935bb635a39cf754d677f3fa10b0126da725bbdf10f7d $SALT 0 sha256 16384
174 check_root_hash 1024 d0e9163ca8844aaa2e88fe5265a8c5d9ee494a99 $SALT 1 sha1 16384
175 check_root_hash 1024 73509e8e868be6b8ac939817a98a3d35121413b2 dadada 1 sha1 16384