u-boot.git/test/py/tests, branch v2021.04-rc2

image: Check for unit addresses in FITs

2021-02-16T03:31:54Z

Using unit addresses in a FIT is a security risk. Add a check for this and disallow it. CVE-2021-27138 Signed-off-by: Simon Glass Reported-by: Bruce Monroe Reported-by: Arie Haenel Reported-by: Julien Lenoir

libfdt: Check for multiple/invalid root nodes

2021-02-16T03:31:53Z

It is possible to construct a devicetree blob with multiple root nodes. Update fdt_check_full() to check for this, along with a root node with an invalid name. CVE-2021-27097 Signed-off-by: Simon Glass Reported-by: Bruce Monroe Reported-by: Arie Haenel Reported-by: Julien Lenoir

test: Add tests for the 'evil' vboot attacks

2021-02-16T00:17:33Z

Add tests to check that these two attacks are mitigated by recent patches. Signed-off-by: Simon Glass Reported-by: Bruce Monroe Reported-by: Arie Haenel Reported-by: Julien Lenoir

test: Add vboot_evil implementation

2021-02-16T00:17:29Z

Add a library which performs two different attacks on a FIT. Signed-off-by: Julien Lenoir Signed-off-by: Bruce Monroe Signed-off-by: Arie Haenel Signed-off-by: Simon Glass

fit: Don't allow verification of images with @ nodes

2021-02-16T00:17:25Z

When searching for a node called 'fred', any unit address appended to the name is ignored by libfdt, meaning that 'fred' can match 'fred@1'. This means that we cannot be sure that the node originally intended is the one that is used. Disallow use of nodes with unit addresses. Update the forge test also, since it uses @ addresses. CVE-2021-27138 Signed-off-by: Simon Glass Reported-by: Bruce Monroe Reported-by: Arie Haenel Reported-by: Julien Lenoir

test: Update test_fs to not use deprecated pytest.yield_fixture()

2021-01-29T15:36:49Z

As noted in comments, yield_fixture has been deprecated for longer than our minimum required version of pytest. Newer versions of pytest cause this to be a louder warning, and as the migration is trivial, perform it now. Signed-off-by: Tom Rini

test: test_ofplatdata: Mark as sandbox specific

2021-01-29T15:34:34Z

This test checks for output specific to the sandbox device tree, mark it as sandbox specific. Signed-off-by: Tom Rini

test: add test for dropped trace before log_init

2021-01-15T19:36:11Z

Add test for dropped trace before log_init, displayed by debug uart. Signed-off-by: Patrick Delaunay Reviewed-by: Simon Glass

sandbox: Drop unnecessary test node

2021-01-05T19:24:40Z

The spl-test4 node deliberately has an invalid compatible string. This causes a warning from dtoc and the check it does is not really necessary. Drop it, to avoid the warning and associated confusion. Signed-off-by: Simon Glass

test: unit test for exception command

2020-12-13T14:58:17Z

Test that an exception SIGILL is answered by a reset on the sandbox if CONFIG_SANDBOX_CRASH_RESET=y or by exiting to the OS otherwise. Signed-off-by: Heinrich Schuchardt Reviewed-by: Simon Glass