-TESTS = apitest
-
-EXTRA_DIST = fileDiffer.py compatimage.img.bz2
-
-apitest_SOURCES = apitest.c
-apitest_LDADD = ../lib/libcryptsetup.la
-apitest_LDFLAGS = -static
-apitest_CFLAGS = -g -O0 -I$(top_srcdir)/lib/
-
-check_PROGRAMS = apitest
+TESTS = 00modules-test \
+ api-test \
+ api-test-2 \
+ compat-test \
+ compat-test2 \
+ loopaes-test \
+ align-test \
+ align-test2 \
+ discards-test \
+ mode-test \
+ password-hash-test \
+ tcrypt-compat-test \
+ luks1-compat-test \
+ device-test \
+ keyring-test \
+ keyring-compat-test \
+ luks2-validation-test \
+ luks2-integrity-test \
+ vectors-test \
+ blockwise-compat \
+ bitlk-compat-test
+
+if VERITYSETUP
+TESTS += verity-compat-test
+endif
+
+if REENCRYPT
+TESTS += reencryption-compat-test reencryption-compat-test2 luks2-reencryption-test luks2-reencryption-mangle-test
+endif
+
+if INTEGRITYSETUP
+TESTS += integrity-compat-test
+endif
+
+EXTRA_DIST = compatimage.img.xz compatv10image.img.xz \
+ compatimage2.img.xz \
+ conversion_imgs.tar.xz \
+ luks2_keyslot_unassigned.img.xz \
+ img_fs_ext4.img.xz img_fs_vfat.img.xz img_fs_xfs.img.xz \
+ valid_header_file.xz \
+ luks2_valid_hdr.img.xz \
+ luks2_header_requirements.xz \
+ luks2_header_requirements_free.xz \
+ luks2_mda_images.tar.xz \
+ evil_hdr-payload_overwrite.xz \
+ evil_hdr-stripes_payload_dmg.xz \
+ evil_hdr-luks_hdr_damage.xz \
+ evil_hdr-small_luks_device.xz \
+ evil_hdr-keyslot_overlap.xz \
+ tcrypt-images.tar.xz \
+ luks1-images.tar.xz \
+ 00modules-test \
+ compat-test \
+ compat-test2 \
+ loopaes-test align-test discards-test mode-test password-hash-test \
+ align-test2 verity-compat-test \
+ reencryption-compat-test \
+ reencryption-compat-test2 \
+ luks2-reencryption-test \
+ luks2-reencryption-mangle-test \
+ tcrypt-compat-test \
+ luks1-compat-test \
+ luks2-validation-test generators \
+ luks2-integrity-test \
+ device-test \
+ keyring-test \
+ keyring-compat-test \
+ integrity-compat-test \
+ cryptsetup-valg-supps valg.sh valg-api.sh \
+ blockwise-compat \
+ blkid-luks2-pv.img.xz \
+ Makefile.localtest \
+ bitlk-compat-test \
+ bitlk-images.tar.xz
+
+CLEANFILES = cryptsetup-tst* valglog* *-fail-*.log
+clean-local:
+ -rm -rf tcrypt-images luks1-images luks2-images bitlk-images conversion_imgs luks2_valid_hdr.img blkid-luks2-pv-img blkid-luks2-pv-img.bcp
+
+LDADD = $(LTLIBINTL)
+
+differ_SOURCES = differ.c
+differ_CFLAGS = $(AM_CFLAGS) -Wall -O2
+
+api_test_SOURCES = api-test.c api_test.h test_utils.c
+api_test_LDADD = $(LDADD) ../libcryptsetup.la
+api_test_LDFLAGS = $(AM_LDFLAGS) -static
+api_test_CFLAGS = -g -Wall -O0 $(AM_CFLAGS) -I$(top_srcdir)/lib/ -I$(top_srcdir)/lib/luks1
+api_test_CPPFLAGS = $(AM_CPPFLAGS) -include config.h
+
+api_test_2_SOURCES = api-test-2.c api_test.h test_utils.c
+api_test_2_LDADD = $(LDADD) ../libcryptsetup.la
+api_test_2_LDFLAGS = $(AM_LDFLAGS) -static
+api_test_2_CFLAGS = -g -Wall -O0 $(AM_CFLAGS) -I$(top_srcdir)/lib/ -I$(top_srcdir)/lib/luks1
+api_test_2_CPPFLAGS = $(AM_CPPFLAGS) -include config.h
+
+vectors_test_SOURCES = crypto-vectors.c
+vectors_test_LDADD = ../libcrypto_backend.la @CRYPTO_LIBS@ @LIBARGON2_LIBS@
+vectors_test_LDFLAGS = $(AM_LDFLAGS) -static
+vectors_test_CFLAGS = $(AM_CFLAGS) -I$(top_srcdir)/lib/crypto_backend/ @CRYPTO_CFLAGS@
+vectors_test_CPPFLAGS = $(AM_CPPFLAGS) -include config.h
+
+unit_utils_io_SOURCES = unit-utils-io.c
+unit_utils_io_LDADD = ../libutils_io.la
+unit_utils_io_LDFLAGS = $(AM_LDFLAGS) -static
+unit_utils_io_CFLAGS = $(AM_CFLAGS) -I$(top_srcdir)/lib
+unit_utils_io_CPPFLAGS = $(AM_CPPFLAGS) -include config.h
+
+check_PROGRAMS = api-test api-test-2 differ vectors-test unit-utils-io
+
+conversion_imgs:
+ @tar xJf conversion_imgs.tar.xz
compatimage.img:
- @bzip2 -k -d compatimage.img.bz2
-
-# LUKS tests
-ORIG_IMG = /tmp/luks-test-orig
-IMG = /tmp/luks-test
-IMG1 = /tmp/luks-test1
-
-
-LUKS_HEADER = S0-5 S6-7 S8-39 S40-71 S72-103 S104-107 S108-111 R112-131 R132-163 S164-167 S168-207 A0-591
-
-KEY_SLOT0 = S208-211 S212-215 R216-247 S248-251 S251-255
-KEY_MATERIAL0 = R4096-68096
-KEY_MATERIAL0_EXT = R4096-68096
-
-KEY_SLOT1 = S256-259 S260-263 R264-295 S296-299 S300-303
-KEY_MATERIAL1 = R69632-133632
-KEY_MATERIAL1_EXT = S69632-133632
-
-LOOPDEV = /dev/loop5
-
-test:
-# (cd ..; make clean; make CFLAGS=-Werror)
- @if [ `id -u` != 0 ]; then \
- echo Not root; \
- fi
- @if [ ! -e /tmp/key1 ]; then \
- dd if=/dev/urandom of=/tmp/key1 count=1 bs=32; \
- fi
- @bzip2 -cd compatimage.img.bz2 > $(IMG)
- @-/sbin/losetup -d $(LOOPDEV)
- @/sbin/losetup $(LOOPDEV) $(IMG)
-
- @echo Case: open - compat image - acceptance check
-# Image must not change
- @cp $(IMG) $(ORIG_IMG)
- echo "compatkey" | ../src/cryptsetup -v luksOpen $(LOOPDEV) dummy
- @sync
- ./fileDiffer.py $(IMG) $(ORIG_IMG)
- @-ls -l /dev/mapper/dummy > /dev/null
- @../src/cryptsetup remove dummy
- @echo "success"
-
-
- @echo Case: open - compat image - denial check
-# Image must not change
- @cp $(IMG) $(ORIG_IMG)
- echo "wrongkey" | ../src/cryptsetup -v luksOpen $(LOOPDEV) dummy || true
- @sync
- ./fileDiffer.py $(IMG) $(ORIG_IMG)
- @echo "success"
-
- @echo Case: format
-# All headers items and first key material section must change
- @cp $(IMG) $(ORIG_IMG)
- echo "key0" | ../src/cryptsetup -v -i 1000 -c aes-cbc-essiv:sha256 -s 128 luksFormat $(LOOPDEV)
- @sync
- ./fileDiffer.py $(IMG) $(ORIG_IMG) $(LUKS_HEADER) $(KEY_SLOT0) $(KEY_MATERIAL0)
-
- @echo Case: format using hash sha512
- @cp $(IMG) $(ORIG_IMG)
- echo "key0" | ../src/cryptsetup -v -i 1000 -h sha512 -c aes-cbc-essiv:sha256 -s 128 luksFormat $(LOOPDEV)
- @sync
- ./fileDiffer.py $(IMG) $(ORIG_IMG) $(LUKS_HEADER) $(KEY_SLOT0) $(KEY_MATERIAL0)
-
- @echo Case: open
-# Image must not change
- @cp $(IMG) $(ORIG_IMG)
- echo "key0" | ../src/cryptsetup -v luksOpen $(LOOPDEV) dummy
- @sync
- ./fileDiffer.py $(IMG) $(ORIG_IMG)
- @-ls -l /dev/mapper/dummy > /dev/null
- @../src/cryptsetup remove dummy
- @echo "success"
-
- @echo Case: add key
-# Key Slot 1 and key material section 1 must change, the rest must not.
- @cp $(IMG) $(ORIG_IMG)
- echo -e "key0\nkey1" | ../src/cryptsetup -v luksAddKey $(LOOPDEV)
- @sync
- ./fileDiffer.py $(IMG) $(ORIG_IMG) $(KEY_SLOT1) $(KEY_MATERIAL1)
- echo "key1" | ../src/cryptsetup -v luksOpen $(LOOPDEV) dummy
- @-ls -l /dev/mapper/dummy > /dev/null
- @../src/cryptsetup -v remove dummy
- @echo "success"
-
-# Unsuccessful Key Delete - nothing may change
- @echo Case: unsuccessful delete
- @cp $(IMG) $(ORIG_IMG)
- echo "invalid" | ../src/cryptsetup -v luksDelKey $(LOOPDEV) 1 || true
- @sync
- ./fileDiffer.py $(IMG) $(ORIG_IMG)
- @echo "success"
-
-# Delete Key Test
-# Key Slot 1 and key material section 1 must change, the rest must not
- @echo Case: successful delete
- @cp $(IMG) $(ORIG_IMG)
- ../src/cryptsetup -v -q luksDelKey $(LOOPDEV) 1
- @sync
- ./fileDiffer.py $(IMG) $(ORIG_IMG) $(KEY_SLOT1) $(KEY_MATERIAL1_EXT)
- echo "key1" | ../src/cryptsetup -v luksOpen $(LOOPDEV) dummy 2>/dev/null || true
- echo "key0" | ../src/cryptsetup -v luksOpen $(LOOPDEV) dummy 2>/dev/null
- @../src/cryptsetup -v remove dummy
- @echo "success"
-
-# Non-Exclusive Open test
-# @echo Case: Non-Exclusive Open
-# echo "key0" | ../src/cryptsetup -v --readonly luksOpen $(LOOPDEV) dummy1 2>/dev/null
-# must fail
-# echo "key0" | ../src/cryptsetup -v --readonly luksOpen $(LOOPDEV) dummy2 2>/dev/null || true
-# echo "key0" | ../src/cryptsetup -v --non-exclusive --readonly luksOpen $(LOOPDEV) dummy2 2>/dev/null
-# @../src/cryptsetup -v remove dummy1
-# @../src/cryptsetup -v remove dummy2
-
-
-# Key Slot 1 and key material section 1 must change, the rest must not
- @echo Case: add key test for key files
- @cp $(IMG) $(ORIG_IMG)
- echo "key0" | ../src/cryptsetup -v luksAddKey $(LOOPDEV) /tmp/key1
- @sync
- ./fileDiffer.py $(IMG) $(ORIG_IMG) $(KEY_SLOT1) $(KEY_MATERIAL1)
- ../src/cryptsetup -d /tmp/key1 -v luksOpen $(LOOPDEV) dummy
- @-ls -l /dev/mapper/dummy > /dev/null
- @../src/cryptsetup -v remove dummy
- @echo "success"
-
- @echo Case: delete key test with /tmp/key1 as remaining key
-# Key Slot 1 and key material section 1 must change, the rest must not
- @cp $(IMG) $(ORIG_IMG)
- ../src/cryptsetup -v -d /tmp/key1 luksDelKey $(LOOPDEV) 0
- @sync
- ./fileDiffer.py $(IMG) $(ORIG_IMG) $(KEY_SLOT0) $(KEY_MATERIAL0_EXT)
- echo "key0" | ../src/cryptsetup -v luksOpen $(LOOPDEV) dummy 2>/dev/null || true
- ../src/cryptsetup -v luksOpen -d /tmp/key1 $(LOOPDEV) dummy 2>/dev/null
- @../src/cryptsetup -v remove dummy
- @echo "success"
-
-# Delete last slot
- @echo Case: delete last key
- @cp $(IMG) $(ORIG_IMG)
- @echo "key0" | ../src/cryptsetup -v luksFormat $(LOOPDEV)
- echo "key0" | ../src/cryptsetup -v luksKillSlot $(LOOPDEV) 0
- @sync
- echo "key0" | ../src/cryptsetup -v luksOpen $(LOOPDEV) dummy 2>/dev/null || true
- @echo "success"
-
-# Format test for ESSIV, and some other parameters.
- @echo Case: parameter variation test
- @dd if=/dev/zero of=$(IMG) count=20000
- @cp $(IMG) $(ORIG_IMG)
- @../src/cryptsetup -q -v -i 1000 -c aes-cbc-essiv:sha256 -s 128 luksFormat $(LOOPDEV) /tmp/key1
- @sync
- ./fileDiffer.py $(IMG) $(ORIG_IMG) $(LUKS_HEADER) $(KEY_SLOT0) $(KEY_MATERIAL0)
- @../src/cryptsetup -d /tmp/key1 -v luksOpen $(LOOPDEV) dummy
- @-ls -l /dev/mapper/dummy > /dev/null && echo "success"
- @../src/cryptsetup -v remove dummy
-
- @-/sbin/losetup -d $(LOOPDEV)
+ @xz -k -d compatimage.img.xz
+
+valgrind-check: api-test api-test-2 differ
+ @VALG=1 ./compat-test
+ @VALG=1 ./compat-test2
+ @VALG=1 ./luks2-validation-test
+ @VALG=1 ./verity-compat-test
+ @VALG=1 ./integrity-compat-test
+ @INFOSTRING="api-test-000" ./valg-api.sh ./api-test
+ @INFOSTRING="api-test-002" ./valg-api.sh ./api-test-2
+ @VALG=1 ./luks2-reencryption-test
+ @VALG=1 ./luks2-reencryption-mangle-test
+ @VALG=1 ./bitlk-compat-test
+ @grep -l "ERROR SUMMARY: [^0] errors" valglog* || echo "No leaks detected."
+
+.PHONY: valgrind-check