summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Igor Kotrasinski [Fri, 24 Nov 2017 14:23:19 +0000 (15:23 +0100)]
Rework get_base_path for buffer overflows
Change-Id: I4c513d32eb22700d2c835d6e12f35234b3ffce0f
Signed-off-by: Igor Kotrasinski <i.kotrasinsk@partner.samsung.com>
Igor Kotrasinski [Fri, 24 Nov 2017 13:48:30 +0000 (14:48 +0100)]
Rework get_data_name for buffer overflows
Change-Id: I8142537acfeb81d1a00bbc4cdc3222f83b493ae8
Signed-off-by: Igor Kotrasinski <i.kotrasinsk@partner.samsung.com>
Igor Kotrasinski [Fri, 24 Nov 2017 12:41:50 +0000 (13:41 +0100)]
Fix SVACE warnings
Change-Id: I85a015621302baac06e48cc0cffd5e2390495bf5
Signed-off-by: Igor Kotrasinski <i.kotrasinsk@partner.samsung.com>
Uladzislau Harbuz [Fri, 10 Nov 2017 17:23:01 +0000 (18:23 +0100)]
Fix C++Test static analysis violations
Change-Id: Ia458bb472af6f3cd18cc9dd1ccaacb9bc7558805
Piotr Sawicki [Thu, 23 Nov 2017 14:42:26 +0000 (14:42 +0000)]
Merge "Remove dead code related to downloadable TA" into tizen
Krzysztof Dynowski [Tue, 14 Nov 2017 14:27:02 +0000 (15:27 +0100)]
Send (correct) response to client when cynara danied access
Change-Id: I53b11b0149725dc88679febb6706af42b8d37cb3
akoszewski [Fri, 10 Nov 2017 11:43:23 +0000 (12:43 +0100)]
Add stub PrintLog function
Add stub PrintLog function in release tef-simulator
to fix error with loading debug TA by release tef simulator
Change-Id: Ia673fbb615baaff9834c339ce965baad5317a444
akoszewski [Fri, 27 Oct 2017 13:25:02 +0000 (15:25 +0200)]
Fix TEEC operation preprocessing
TEEC Operation arguments are now parsed properly.
Change-Id: I91a811158b118066a2377a1d47eec36b9e8e03ac
akoszewski [Mon, 6 Nov 2017 14:25:13 +0000 (15:25 +0100)]
Fix smack labels on tef-simulator files
Change-Id: I7964f1b1545c9961e499755562c827eb6e9d3992
Uladzislau Harbuz [Tue, 24 Oct 2017 15:40:16 +0000 (17:40 +0200)]
Remove dead code related to downloadable TA
Change-Id: Ieff27f29b34432c0d572b85a652c05246541a9eb
Tomasz Swierczek [Tue, 24 Oct 2017 11:00:01 +0000 (13:00 +0200)]
Fix coding style in C files
Change-Id: I5855f086706db38236e09f6fca7d7314339bead6
Krzysztof Dynowski [Tue, 24 Oct 2017 10:38:51 +0000 (12:38 +0200)]
SVACE: fix NO_CATCH
Change-Id: I91ebb7616216d26f68599513c257fad26a272f5b
Igor Kotrasinski [Tue, 24 Oct 2017 09:41:51 +0000 (11:41 +0200)]
Rework char to hex conversion
Remove unnecessary 22-case switch.
Change-Id: Id9b07c7893b498642032bee24edd5a7d857718aa
Signed-off-by: Igor Kotrasinski <i.kotrasinsk@partner.samsung.com>
Igor Kotrasinski [Tue, 24 Oct 2017 09:06:53 +0000 (11:06 +0200)]
Fix InitContextData passed by value
Change-Id: I4ff306def7a002c111a23cbd1bf17ea3d9c863dd
Signed-off-by: Igor Kotrasinski <i.kotrasinsk@partner.samsung.com>
Jaroslaw Pelczar [Tue, 24 Oct 2017 09:34:05 +0000 (11:34 +0200)]
Fix error checking on msgctl()
Change-Id: I53fcdb05c3567e12b42a2ad7a11536e875f972cf
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
Jaroslaw Pelczar [Tue, 24 Oct 2017 09:12:33 +0000 (11:12 +0200)]
disconnectfromServer: fix socket fd validity condition
Change-Id: I71e566e7c791cc5dd10724210a477a20f88ba5ad
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
Mariusz Domanski [Tue, 24 Oct 2017 08:56:28 +0000 (10:56 +0200)]
WRONG_ARGUMENTS_ORDER - SVACE related fixes
Change-Id: I873b75218372ea4e3396797c99a3e887701f818d
Krzysztof Dynowski [Tue, 24 Oct 2017 09:39:58 +0000 (11:39 +0200)]
SVAVE: fix INVARIANT_RESULT.OP_ASSIGN, NULL_AFTER_DEREF
Change-Id: I9b5a4854f2ad9ff703e036425f7ccf09ea45c888
Krzysztof Dynowski [Tue, 24 Oct 2017 09:03:59 +0000 (11:03 +0200)]
SVACE: fix DEREF_OF_NULL* warning
Change-Id: I7a9b30bcafea43a61addb0f2e8fd899717bce7e1
Piotr Sawicki [Mon, 23 Oct 2017 07:04:14 +0000 (09:04 +0200)]
Make changing of shm file mode thread safe
Change-Id: Id7b07a203878fdf16414c3b3fae281918671d345
Leszek Zygo [Mon, 23 Oct 2017 15:55:49 +0000 (17:55 +0200)]
Fix C++ style warnings (CRC)
Change-Id: Ief75cb7fb549697ddab8cec0c5ebd41c9c1149d8
Signed-off-by: Leszek Zygo <l.zygo@samsung.com>
Krzysztof Dynowski [Mon, 23 Oct 2017 15:41:12 +0000 (17:41 +0200)]
SVACE: fix UNINIT.CTOR
Change-Id: I4029146e8b408e931b0555bd7e9ac8d61722741f
Igor Kotrasinski [Mon, 23 Oct 2017 07:55:27 +0000 (09:55 +0200)]
SVACE: HEAP_LEAK, correct size in strncpy
Change-Id: Ib53c48c7f6ab9aaa1e00ea407bbcad329aa38a3a
Jaroslaw Pelczar [Fri, 20 Oct 2017 15:59:20 +0000 (17:59 +0200)]
Fix for SVACE NO_CATCH warning
Change-Id: I6950fab634aa6c6f2c448aaa7cfc0c3a1978c464
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
Jaroslaw Pelczar [Fri, 20 Oct 2017 15:53:47 +0000 (17:53 +0200)]
Fix for SVACE DEREF_AFTER_NULL
DEREF_AFTER_NULL: After having been compared to NULL value at
ssf_crypto.cpp:1990, pointer 'key1' is dereferenced at
ssf_crypto.cpp:1999.
[dereference] Dereference at /home/abuild/rpmbuild/BUILD/tef-
simulator-0.0.1/ssflib/src/ssf_crypto.cpp:1999
[null check] null check at /home/abuild/rpmbuild/BUILD/tef-
simulator-0.0.1/ssflib/src/ssf_crypto.cpp:1990
Change-Id: Iaf1ed9dd32b30bc958a91ac1a30382c71b3d4b43
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
Jaroslaw Pelczar [Fri, 20 Oct 2017 15:44:20 +0000 (17:44 +0200)]
SVACE warnings fixed for HEAP_INCOMPATIBLE.FREE
Change-Id: Ib7f2d61d1aaedb48b4f8c0de045d761119f15355
Signed-off-by: Jaroslaw Pelczar <j.pelczar@samsung.com>
Tomasz Swierczek [Fri, 20 Oct 2017 07:16:01 +0000 (09:16 +0200)]
All TAs should be loaded from sytem TA store. Licence fixes. Client library fixes.
Change-Id: Ic106b3c21b22e72f3eaf622cb3d5da6aeb7d827f
r.tyminski [Tue, 17 Oct 2017 10:17:00 +0000 (12:17 +0200)]
Modify tef-simulator service and socket to start at boot.
Bind service and socket to each other to stop one when use stop other.
Change-Id: Ib94f4eb99508f6165df3cba40b333f2180a2bf9f
r.tyminski [Tue, 17 Oct 2017 10:13:01 +0000 (12:13 +0200)]
Link tastore directory to /opt.
Simulator unpack TA, by create directory in TA path. We need to move
tastore directory to the path with write permissions.
Change-Id: I06c73e2236ac01add896f4fc428a2d6b009d0156
Wojciech Chrobot [Thu, 5 Oct 2017 13:32:48 +0000 (15:32 +0200)]
Reduce Capabilities set of tef-simulator to none.
During installation set simulator as a tef backend using tef_update.sh.
Reduce root user. Currently user is the security_fw user and group.
Change ownership of /usr/lib/tastore directory and helloworld TA to security_fw.
Change permissions to user/group/others of helloworld TA and tastore directory.
Change-Id: I6fa65ba97d82784968134be58a60e7a435d90b38
Krzysztof Dynowski [Thu, 12 Oct 2017 13:25:46 +0000 (13:25 +0000)]
Merge "teec: Fix temp memory allocation" into tizen
Piotr Sawicki [Thu, 12 Oct 2017 09:04:58 +0000 (11:04 +0200)]
Add missing dlog dependency to TEECLib
Change-Id: I49a216ebe9b0b0201bca2492625de9ccef7bd5fc
Lukasz Kostyra [Wed, 11 Oct 2017 16:26:48 +0000 (18:26 +0200)]
teec: Fix temp memory allocation
When allocating shared memory for temp memory reference in operation,
TEECLib didn't set proper memory flag. This caused an error during
operation pre-processing.
Change-Id: I8b1fa13ac5d8feca1f596f514ab40e3f03d2198c
akoszewski [Mon, 18 Sep 2017 12:22:45 +0000 (14:22 +0200)]
Fix error checking for socket fd
This is needed for cases when socket fd is equal to 0
Change-Id: Idb5926594f47cfad21fb8c6cc36a3b815ef667a0
Lukasz Kostyra [Tue, 10 Oct 2017 10:56:59 +0000 (12:56 +0200)]
Enable ASLR
Change-Id: Idaa63fdf80a8252a931685040481e6763358feb1
Lukasz Kostyra [Wed, 27 Sep 2017 09:59:23 +0000 (11:59 +0200)]
log: Enable dlog logging on Tizen platform
Additionally minor changes were added to make 3.0 building possible
Change-Id: Ieae9cdd7e742ca909506a9748bf4cd208247f559
Tomasz Swierczek [Fri, 6 Oct 2017 16:35:29 +0000 (18:35 +0200)]
Fix for x64 build
Invalid typecast for socklen_t.
Change-Id: Iff4034251f1c3db9a425934949ca3506767eb5ae
Tomasz Swierczek [Fri, 6 Oct 2017 14:03:35 +0000 (16:03 +0200)]
Revert "log: Enable dlog logging on Tizen platform"
Tizen 5.0 build was broken due to duplicated DLOG-like macros.
This reverts commit
28c5b25f3aa2a692a5252ca52cd30e6625d6f769.
Change-Id: I5df8ebdb4c090b45af94fc813b567fe406fce2e4
Piotr Sawicki [Mon, 2 Oct 2017 06:01:52 +0000 (08:01 +0200)]
Fix shared memory implementation
* remove unused structure
* Adapt deleteAllSharedMemory() to POSIX API
Change-Id: Ia0e58cfbf35ef57b495d8bf64dacc83fc8fec61d
Lukasz Kostyra [Thu, 5 Oct 2017 16:26:08 +0000 (18:26 +0200)]
TEEStub: Use TA executable path to find manifest
When launching downloadable TAs, TEEStub still attempted to
search for TA's manifest on system TA store, which resulted
in crashing TA and failing OpenSession call.
TEEStub now uses argv[0] to extract both UUID and home directory
of TA, which are used to open manifest file.
Change-Id: I7c1037ccc34574517a882c4f3e6532199a6d64f1
Lukasz Kostyra [Thu, 5 Oct 2017 15:43:57 +0000 (17:43 +0200)]
TEEStub: Unify logging
TEEStub used its own copy of libtef-simulator-log library. The copy
was removed and proper headers were used to have one common logging
platform for the entire project.
Change-Id: I34ad339ccf21b61ae2fc6754dc2332a0c320194b
Lukasz Kostyra [Wed, 27 Sep 2017 09:59:23 +0000 (11:59 +0200)]
log: Enable dlog logging on Tizen platform
Additionally minor changes were added to make 3.0 building possible
Change-Id: I06f4aa997af3a5f8c0c1849d062545ff550ac1ee
Lukasz Kostyra [Wed, 4 Oct 2017 08:48:19 +0000 (10:48 +0200)]
PackageMaker: Provide 32 bit binary on 32 bit build
Change-Id: Ia3d98056e3f4a857592d95eee546aa11e04334ed
akoszewski [Thu, 21 Sep 2017 13:41:07 +0000 (15:41 +0200)]
Fix looking for TA in res/tee/
Search for TA is now non recursive
Change-Id: Ibc1b1e724a6a2762840e72ff9ec43ff1cba4eb35
akoszewski [Wed, 20 Sep 2017 13:52:43 +0000 (15:52 +0200)]
Fix error codes for TEEContext
Change-Id: I58c5af3934f55cf06eb0d26211a343a5c079d915
akoszewski [Tue, 19 Sep 2017 16:30:51 +0000 (18:30 +0200)]
Fix path to TA checking
Change-Id: Id8aa25911dfc412e5b7b257707327db113829d5f
Uladzislau Harbuz [Tue, 19 Sep 2017 12:13:56 +0000 (14:13 +0200)]
Destroy tizen context, get right uid of client
Change-Id: I85cbd1773a304d376c61477e9b1202e366e3f32c
Uladzislau Harbuz [Thu, 21 Sep 2017 11:25:11 +0000 (13:25 +0200)]
Remove UUID list.
Change-Id: Ic4b19d896c962261d4bb3366077459c147babb65
Piotr Sawicki [Mon, 25 Sep 2017 12:09:37 +0000 (14:09 +0200)]
Replace sys V shared memory with POSIX shared memory
Change-Id: I1ae2e4a3e6cb9dbee45e5d65b22c1eefe3d4cc65
Tomasz Swierczek [Wed, 20 Sep 2017 10:58:22 +0000 (12:58 +0200)]
Temporarily disable setting the simulator backend
Backend will have to be enabled once the TCT will be updated to use actual TA
and when emulator images will have the tee feature enabled.
Change-Id: I4405473008fdc0940445b69c35a0e6a66bb0d81e
Lukasz Kostyra [Thu, 14 Sep 2017 11:28:08 +0000 (13:28 +0200)]
Use tef-update.sh to update tef-libteec configuration
Change-Id: I2e8428c673f2e856fca3f8e00f567ad3ef7398af
Lukasz Kostyra [Thu, 14 Sep 2017 09:27:12 +0000 (11:27 +0200)]
Add ExcludeArch directives to spec
Change-Id: I91b766bf657b08039ef77b86485d700e475382d9
Lukasz Kostyra [Thu, 14 Sep 2017 08:40:25 +0000 (10:40 +0200)]
Fix build break due to warnings on Release configuration
Change-Id: Ie27c9585ea7ac2f775a89a88a447e7ef01055d51
Lukasz Kostyra [Wed, 13 Sep 2017 11:59:11 +0000 (13:59 +0200)]
Add LICENSE and apply boilerplates to sources
Change-Id: I1d96551efc5a4d3cb5f3a223719851ca166789da
Lukasz Kostyra [Tue, 12 Sep 2017 13:34:08 +0000 (15:34 +0200)]
Adjust to use tef-libteec
Change-Id: I97a8fa41dc33dd7cbf932ba684b57313519572bf
u.harbuz [Thu, 24 Aug 2017 07:49:18 +0000 (09:49 +0200)]
Implement checking of Tizen policies
Change-Id: I18d2ef26f63d17b3d97d5af9fbeab0f0db4bc3e1
Lukasz Kostyra [Tue, 12 Sep 2017 09:18:38 +0000 (11:18 +0200)]
Enable -Werror flag, fix warnings and 64-bit build
Change-Id: I97c215c91efb2627d93cb98e321c9e6a8875f722
Lukasz Kostyra [Mon, 11 Sep 2017 16:59:54 +0000 (18:59 +0200)]
simulatordaemon: Integrate with systemd
Change-Id: Ie613205772ad7dd1fa66d7b75925a2fdd8ea0fef
Lukasz Kostyra [Thu, 7 Sep 2017 06:18:40 +0000 (08:18 +0200)]
ssflib: Fix to incorrect nonce len check in auth encryption
Change-Id: Idc4c7a17f219bfc1325b24b14522526d5facbdf1
Lukasz Kostyra [Tue, 5 Sep 2017 12:40:03 +0000 (14:40 +0200)]
ssflib: Add support for 4096 bit RSA
GP API assumes that max length for RSA is 2048 bits, however it also
doesn't fully enforce this limit (the implementation can support
bigger RSA keys if needed).
Change-Id: I7dbcd3d933ef4eb8efc5d1432111e1fdf96419fa
Lukasz Kostyra [Tue, 5 Sep 2017 11:06:28 +0000 (13:06 +0200)]
ssflib: Enable debug logging in crypto operations
Change-Id: I8539a0aa852c658e5bfb4db8a53fb57b690ac3b5
Lukasz Kostyra [Thu, 31 Aug 2017 11:51:14 +0000 (13:51 +0200)]
Actually undefine source fortification on debug build
Appearently -U flag was not passed to preprocessor and had
to be provided in another way. Now _FORTIFY_SOURCE warnings
on debug build will disappear.
Change-Id: I99abde5c72972e7b689b037a4bfcdf15377a8da6
Lukasz Kostyra [Thu, 17 Aug 2017 12:34:45 +0000 (14:34 +0200)]
ssflib: Use OpenSSL for missing AES GCM mode
CryptoCore library used in Simulator does not support auth cipher
modes like AES GCM. The support was added through OpenSSL library.
Change-Id: I97cb17a954e904dc0a6e7aba1d74c7b8077438d5
Lukasz Kostyra [Thu, 17 Aug 2017 09:47:09 +0000 (11:47 +0200)]
ssflib: Remove HW crypto routines
ssflib had various leftovers from old implementation using hardware
to perform crypto operations. The hardware is not supported on simulator,
these code blocks were commented out, or put in "#if 0...#endif" blocks,
so for easier maintenance they were removed.
Change-Id: If1ccb76dce0cb63f567de314acc30e8b83cdd9f5
Lukasz Kostyra [Tue, 25 Jul 2017 13:35:03 +0000 (15:35 +0200)]
teec: Increase permission level for shared memory
A temporary workaround to allow non-roots to create and access shared
memory objects. Definitely should be removed in the future.
Change-Id: I175b9ad5e265a9acb11542caa735512cd07b0c1b
Lukasz Kostyra [Tue, 25 Jul 2017 08:16:21 +0000 (10:16 +0200)]
ssflib: Fixes to Transient Object (de)allocation
TO allocation and deallocation was done incorrectly. Functions
TEE_AllocateTransientObject and TEE_FreeTransientObject were
rewritten to work correctly.
Change-Id: I717dd8e2922a5d209df61953a3c1f7c6201be870
Lukasz Kostyra [Thu, 20 Jul 2017 12:49:50 +0000 (14:49 +0200)]
Create TEF Simulator devkit package, make helloworld use it
tee_internal_api.h was additionally modified to fit GP API
specification.
Change-Id: Ibbf7a23b0be5548064df6b6d404fc343070b4f6e
Lukasz Kostyra [Wed, 19 Jul 2017 12:45:14 +0000 (14:45 +0200)]
Change TA store to /usr/lib, add helloworld
TA store directory was changed from /tmp/tastore, which was
not the best place to keep TA images - rebooting the device
would remove our TAs.
Change-Id: I684b2b2f166755a0243663ebe2c9e6d21defdbca
Lukasz Kostyra [Thu, 6 Jul 2017 08:15:56 +0000 (10:15 +0200)]
Build project with CMake, add rpmbuild spec
Change-Id: I79609fde1ed6869d30294f5264988630874e3dcf
Lukasz Kostyra [Wed, 26 Jul 2017 08:20:05 +0000 (10:20 +0200)]
Import new version of Simulator sources
Change-Id: I64f7524b93963128b845b35a8c216ee54c389635
Lukasz Kostyra [Tue, 4 Jul 2017 08:05:10 +0000 (10:05 +0200)]
Fix source file permissions in the project
Most files had unnecessary execute permission, which is now removed
Change-Id: Ic7a97b95c2a0167ecffc8be7077729b41ac43c4e
u.harbuz [Tue, 4 Jul 2017 07:48:50 +0000 (09:48 +0200)]
Refactor code style to current project-like.
Change-Id: I42434a9d754604413c41bdc88dd8480b7dbe08a7
Lukasz Kostyra [Mon, 3 Jul 2017 09:17:41 +0000 (11:17 +0200)]
Remove unneeded Eclipse project files
Change-Id: Id3837bd0fe99a2caddf0f1366147608040a4c118
u.harbuz [Fri, 23 Jun 2017 10:12:05 +0000 (12:12 +0200)]
Fix compilation errors of security.c
Change-Id: I22da6c5a9cd564dd81ee70cba1da2ee56e663cb2
u.harbuz [Fri, 23 Jun 2017 09:40:50 +0000 (11:40 +0200)]
Fix TA name passed to check.
Change-Id: I02b928d40a64bbb7a77c36b4195055c324597453
u.harbuz [Fri, 23 Jun 2017 09:13:39 +0000 (11:13 +0200)]
Add security checking.
Change-Id: I09aacf1d31af84da2c6fb37e0aad3ed908504e8d
u.harbuz [Thu, 18 May 2017 14:06:56 +0000 (16:06 +0200)]
Fetch cryptocore_ae_decrypt body to header.
Change-Id: If5bbc0b8937074acf3d7057e96c832e3139d829a
u.harbuz [Fri, 5 May 2017 09:03:07 +0000 (11:03 +0200)]
Remove redefinitions of stdint types
Change-Id: I36b61f17082e0dc14d4e4f17149b419002ef4365
u.harbuz [Thu, 4 May 2017 15:21:47 +0000 (17:21 +0200)]
Fix type casting.
Change-Id: I7e2cf5cabaf0c9793fcf12bd4b74c72ffb17eba0
u.harbuz [Thu, 4 May 2017 13:22:00 +0000 (15:22 +0200)]
Add fPIC option to so compilation.
Change-Id: Ibe88c4bc2625b76c3449c574d35dc93cf2c4aa2c
u.harbuz [Thu, 4 May 2017 13:07:52 +0000 (15:07 +0200)]
Fix platform dependent types casts.
Change-Id: I50ac18635a3cb0adfc9852a1d69f22f40be381e3
u.harbuz [Thu, 4 May 2017 11:39:15 +0000 (13:39 +0200)]
Delete useless toolchain variable from makefile
Change-Id: I573a2720eaddc811befc0535e7b4b1966e7239b8
u.harbuz [Thu, 4 May 2017 11:24:29 +0000 (13:24 +0200)]
Add gitignore
Change-Id: I110cb0b5ac72f053435a773292a5636b4c916a2d
u.harbuz [Thu, 4 May 2017 11:22:16 +0000 (13:22 +0200)]
Add TOOLCHAIN parameter to build script
Change-Id: Ideab343585ea3f7f6725212e37f6c8a9958658bf
u.harbuz [Thu, 4 May 2017 11:13:54 +0000 (13:13 +0200)]
Initial commit
Change-Id: Ibd50eeba46cf910eb59bb45bc631b06c1e9bb742
Tizen Infrastructure [Mon, 3 Apr 2017 06:45:13 +0000 (23:45 -0700)]
Initial empty repository
projects / platform / core / security / tef-simulator.git / log