u-boot.git/test/py/tests/test_vboot.py, branch v2023.01

test: Mark all but the first vboot test as slow

2022-09-12T22:06:36+00:00

When doing a quick check we don't need to run all the vboot tests. Just
run the first one, which is enough to catch most problems.

Signed-off-by: Simon Glass

test: py: vboot: add test for global image signature

2022-03-31T18:12:23+00:00

Adds test units for the pre-load header signature.

Signed-off-by: Philippe Reynes

test/py: Add test case for mkimage -o argument

2022-02-11T15:52:24+00:00

Stress the '-o algo_name' argument of mkimage by expanding the vboot
test.

Signed-off-by: Jan Kiszka 
Reviewed-by: Simon Glass 
[trini: Update scripts/pylint.base]

rsa: adds rsa3072 algorithm

2022-01-28T22:58:41+00:00

Add to support rsa 3072 bits algorithm in tools
for image sign at host side and adds rsa 3072 bits
verification in the image binary.

Add test case in vboot for sha384 with rsa3072 algorithm testing.

Signed-off-by: Jamin Lin 
Reviewed-by: Simon Glass

test: Allow vboot tests to run in parallel

2021-10-05T12:50:15+00:00

Update the tests to use separate working directories, so we can run them
in parallel. It also makes it possible to see the individual output files
after the tests have completed.

Signed-off-by: Simon Glass

image: Check for unit addresses in FITs

2021-02-16T03:31:54+00:00

Using unit addresses in a FIT is a security risk. Add a check for this
and disallow it.

CVE-2021-27138

Signed-off-by: Simon Glass 
Reported-by: Bruce Monroe 
Reported-by: Arie Haenel 
Reported-by: Julien Lenoir

libfdt: Check for multiple/invalid root nodes

2021-02-16T03:31:53+00:00

It is possible to construct a devicetree blob with multiple root nodes.
Update fdt_check_full() to check for this, along with a root node with an
invalid name.

CVE-2021-27097

Signed-off-by: Simon Glass 
Reported-by: Bruce Monroe 
Reported-by: Arie Haenel 
Reported-by: Julien Lenoir

test: Add tests for the 'evil' vboot attacks

2021-02-16T00:17:33+00:00

Add tests to check that these two attacks are mitigated by recent patches.

Signed-off-by: Simon Glass 
Reported-by: Bruce Monroe 
Reported-by: Arie Haenel 
Reported-by: Julien Lenoir

test: vboot: add tests for multiple required keys

2020-10-13T01:30:37+00:00

This patch adds vboot tests to verify the support for multiple
required keys using new required-mode DTB policy.

This patch also fixes existing test where dev
key is assumed to be marked as not required, although
it is marked as required.

Note that this patch re-added sign_fit_norequire().
sign_fit_norequire() was removed as part of the following:
commit b008677daf2a ("test: vboot: Fix pylint errors").
This patch leverages sign_fit_norequire() to fix the
existing bug.

Signed-off-by: Thirupathaiah Annapureddy 
Reviewed-by: Simon Glass

test/py: vboot: add a test to check fit signature on fit with padding

2020-05-01T15:34:01+00:00

The pytest vboot does all his tests on fit without padding.
We add the same tests on fit with padding.

Reviewed-by: Simon Glass 
Signed-off-by: Philippe Reynes