u-boot.git/test/py, branch v2021.04-rc2

image: Check for unit addresses in FITs

2021-02-16T03:31:54Z

Using unit addresses in a FIT is a security risk. Add a check for this and disallow it. CVE-2021-27138 Signed-off-by: Simon Glass Reported-by: Bruce Monroe Reported-by: Arie Haenel Reported-by: Julien Lenoir

libfdt: Check for multiple/invalid root nodes

2021-02-16T03:31:53Z

It is possible to construct a devicetree blob with multiple root nodes. Update fdt_check_full() to check for this, along with a root node with an invalid name. CVE-2021-27097 Signed-off-by: Simon Glass Reported-by: Bruce Monroe Reported-by: Arie Haenel Reported-by: Julien Lenoir

test: Add tests for the 'evil' vboot attacks

2021-02-16T00:17:33Z

Add tests to check that these two attacks are mitigated by recent patches. Signed-off-by: Simon Glass Reported-by: Bruce Monroe Reported-by: Arie Haenel Reported-by: Julien Lenoir

test: Add vboot_evil implementation

2021-02-16T00:17:29Z

Add a library which performs two different attacks on a FIT. Signed-off-by: Julien Lenoir Signed-off-by: Bruce Monroe Signed-off-by: Arie Haenel Signed-off-by: Simon Glass

fit: Don't allow verification of images with @ nodes

2021-02-16T00:17:25Z

When searching for a node called 'fred', any unit address appended to the name is ignored by libfdt, meaning that 'fred' can match 'fred@1'. This means that we cannot be sure that the node originally intended is the one that is used. Disallow use of nodes with unit addresses. Update the forge test also, since it uses @ addresses. CVE-2021-27138 Signed-off-by: Simon Glass Reported-by: Bruce Monroe Reported-by: Arie Haenel Reported-by: Julien Lenoir

test/py: fix runtest wrapper for pytest 6

2021-02-01T21:33:02Z

The implementation of pytest_runtest_protocol() must call pytest_runtest_logstart() and pytest_runtest_logfinish(). This appears to be necessary even in pytest 5.2.1 judging by the default version of pytest_runtest_protocol(), but evidently some form of code reorganization in pytest only made this have a practical effect in the newer version. I'd previously been under the impression that 100% of the required work of pytest_runtest_protocol() was handled by the fact it called runtestprotocol() as its implementation. However, it appears that custom implementations do need to do a little more than this. Reported-by: Heinrich Schuchardt Signed-off-by: Stephen Warren Reviewed-by: Simon Glass

test: Update test_fs to not use deprecated pytest.yield_fixture()

2021-01-29T15:36:49Z

As noted in comments, yield_fixture has been deprecated for longer than our minimum required version of pytest. Newer versions of pytest cause this to be a louder warning, and as the migration is trivial, perform it now. Signed-off-by: Tom Rini

test: correct entry point to pytest

2021-01-29T15:36:49Z

With Pytest 6.0.2 'make tests' fails: sandbox: Traceback (most recent call last): File "./test/py/test.py", line 20, in sys.exit(load_entry_point('pytest', 'console_scripts', 'pytest')(args)) TypeError: console_main() takes 0 positional arguments but 1 was given The definition of console_scripts has changed as follows: Pytest 4.6.1: [options.entry_points] console_scripts = pytest=pytest:main py.test=pytest:main Pytest 6.0.2: [options.entry_points] console_scripts = pytest=pytest:console_main py.test=pytest:console_main The new function console_main() has a comment: "This function is not meant for programmable use; use `main()`" Hence let's call pytest.main() directly. Move args processing into the __main__ paragraph. Signed-off-by: Heinrich Schuchardt Tested-by: Andy Shevchenko Tested-by: Tom Rini

test: test_ofplatdata: Mark as sandbox specific

2021-01-29T15:34:34Z

This test checks for output specific to the sandbox device tree, mark it as sandbox specific. Signed-off-by: Tom Rini

doc: move test/py/README.md to HTML documentation

2021-01-23T14:53:46Z

Convert test/py/README.md to restructured text and add it to the generated HTML documentation. Signed-off-by: Heinrich Schuchardt Reviewed-by: Simon Glass