|
| 1 | +/* SPDX-License-Identifier: MIT */ |
| 2 | +/* |
| 3 | + * cap_neg — CAP/privilege EPERM matrix (sdk_suite promotion of silicon_cap_neg). |
| 4 | + */ |
| 5 | +#include "sdk_test_util.h" |
| 6 | +#include "board_config.h" |
| 7 | + |
| 8 | +#ifndef ULMK_BOARD_PERIPH_BASE |
| 9 | +#define ULMK_BOARD_PERIPH_BASE 0xF0000000u |
| 10 | +#endif |
| 11 | + |
| 12 | +static int g_pass; |
| 13 | +static int g_fail; |
| 14 | +static ulmk_notif_t g_done; |
| 15 | +static volatile int g_user_spawn_eperm; |
| 16 | +static volatile int g_user_kill_eperm; |
| 17 | +static volatile int g_user_sus_eperm; |
| 18 | +static volatile int g_user_irq_eperm; |
| 19 | +static volatile int g_user_heap_eperm; |
| 20 | +static volatile int g_user_mmap_eperm; |
| 21 | +static volatile int g_user_cap_eperm; |
| 22 | +static volatile int g_drv_spawn_eperm; |
| 23 | +static volatile int g_drv_kill_eperm; |
| 24 | +static volatile int g_drv_cap_eperm; |
| 25 | +static volatile int g_drv_irq_ok; |
| 26 | +static volatile int g_drv_mmap_ok; |
| 27 | +static ulmk_tid_t g_victim; |
| 28 | + |
| 29 | +static void check(const char *name, int ok) |
| 30 | +{ |
| 31 | + sdk_puts(ok ? ".ok " : ".FAIL "); |
| 32 | + sdk_puts(name); |
| 33 | + sdk_puts("\n"); |
| 34 | + if (ok) |
| 35 | + g_pass++; |
| 36 | + else |
| 37 | + g_fail++; |
| 38 | +} |
| 39 | + |
| 40 | +#define CHECK(name, cond) check((name), (cond) ? 1 : 0) |
| 41 | + |
| 42 | +static int is_eperm(int rc) |
| 43 | +{ |
| 44 | + return rc == ULMK_EPERM; |
| 45 | +} |
| 46 | + |
| 47 | +static int tid_is_eperm(ulmk_tid_t tid) |
| 48 | +{ |
| 49 | + return (int32_t)(uintptr_t)tid == ULMK_EPERM; |
| 50 | +} |
| 51 | + |
| 52 | +static void idle_victim(void *arg) |
| 53 | +{ |
| 54 | + (void)arg; |
| 55 | + for (;;) |
| 56 | + ulmk_thread_yield(); |
| 57 | +} |
| 58 | + |
| 59 | +static void user_probe(void *arg) |
| 60 | +{ |
| 61 | + ulmk_thread_attr_t a; |
| 62 | + ulmk_notif_t n; |
| 63 | + void *p; |
| 64 | + ulmk_tid_t tid; |
| 65 | + |
| 66 | + (void)arg; |
| 67 | + a.name = "x"; |
| 68 | + a.entry = idle_victim; |
| 69 | + a.arg = NULL; |
| 70 | + a.priority = 200u; |
| 71 | + a.stack_size = 512u; |
| 72 | + a.privilege = ULMK_PRIV_USER; |
| 73 | + a.heap_size = 0u; |
| 74 | + tid = ulmk_thread_create(&a); |
| 75 | + g_user_spawn_eperm = tid_is_eperm(tid); |
| 76 | + g_user_kill_eperm = is_eperm(ulmk_thread_kill(g_victim)); |
| 77 | + g_user_sus_eperm = is_eperm(ulmk_thread_suspend(g_victim)); |
| 78 | + n = ulmk_notif_create(); |
| 79 | + g_user_irq_eperm = is_eperm(ulmk_irq_bind(5u, n, 0u)); |
| 80 | + if (n != ULMK_NOTIF_INVALID) |
| 81 | + ulmk_notif_destroy(n); |
| 82 | + g_user_heap_eperm = is_eperm(ulmk_heap_extend(64u)); |
| 83 | + p = ulmk_mem_map((void *)(uintptr_t)ULMK_BOARD_PERIPH_BASE, 64u, |
| 84 | + ULMK_PERM_READ | ULMK_PERM_WRITE, ULMK_MMAP_PERIPH); |
| 85 | + g_user_mmap_eperm = (p == NULL); |
| 86 | + g_user_cap_eperm = is_eperm(ulmk_cap_grant(g_victim, ULMK_CAP_SPAWN)); |
| 87 | + ulmk_notif_signal(g_done, 0x1u); |
| 88 | + ulmk_thread_exit(); |
| 89 | +} |
| 90 | + |
| 91 | +static void driver_probe(void *arg) |
| 92 | +{ |
| 93 | + ulmk_thread_attr_t a; |
| 94 | + ulmk_notif_t n; |
| 95 | + void *p; |
| 96 | + ulmk_tid_t tid; |
| 97 | + |
| 98 | + (void)arg; |
| 99 | + a.name = "y"; |
| 100 | + a.entry = idle_victim; |
| 101 | + a.arg = NULL; |
| 102 | + a.priority = 200u; |
| 103 | + a.stack_size = 512u; |
| 104 | + a.privilege = ULMK_PRIV_USER; |
| 105 | + a.heap_size = 0u; |
| 106 | + tid = ulmk_thread_create(&a); |
| 107 | + g_drv_spawn_eperm = tid_is_eperm(tid); |
| 108 | + g_drv_kill_eperm = is_eperm(ulmk_thread_kill(g_victim)); |
| 109 | + g_drv_cap_eperm = is_eperm(ulmk_cap_grant(g_victim, ULMK_CAP_SPAWN)); |
| 110 | + n = ulmk_notif_create(); |
| 111 | + g_drv_irq_ok = (n != ULMK_NOTIF_INVALID) && |
| 112 | + (ulmk_irq_bind(6u, n, 0u) == ULMK_OK); |
| 113 | + if (n != ULMK_NOTIF_INVALID) |
| 114 | + ulmk_notif_destroy(n); |
| 115 | + p = ulmk_mem_map((void *)(uintptr_t)ULMK_BOARD_PERIPH_BASE, 64u, |
| 116 | + ULMK_PERM_READ | ULMK_PERM_WRITE, ULMK_MMAP_PERIPH); |
| 117 | + g_drv_mmap_ok = sdk_map_ok(p); |
| 118 | + if (g_drv_mmap_ok) |
| 119 | + (void)ulmk_mem_unmap(p, 64u); |
| 120 | + ulmk_notif_signal(g_done, 0x2u); |
| 121 | + ulmk_thread_exit(); |
| 122 | +} |
| 123 | + |
| 124 | +void ulmk_root_thread(const ulmk_boot_info_t *info) |
| 125 | +{ |
| 126 | + uint32_t bits = 0u; |
| 127 | + |
| 128 | + board_services_init(info); |
| 129 | + sdk_puts("cap_neg: begin\n"); |
| 130 | + g_pass = 0; |
| 131 | + g_fail = 0; |
| 132 | + g_done = ulmk_notif_create(); |
| 133 | + g_victim = sdk_spawn_priv("victim", idle_victim, NULL, 200u, 1024u, 0u, |
| 134 | + ULMK_PRIV_USER); |
| 135 | + CHECK("victim", g_victim != ULMK_TID_INVALID); |
| 136 | + |
| 137 | + sdk_spawn_priv("uprobe", user_probe, NULL, 10u, 1024u, 512u, |
| 138 | + ULMK_PRIV_USER); |
| 139 | + bits = 0u; |
| 140 | + ulmk_notif_wait(g_done, 0x1u, &bits); |
| 141 | + CHECK("u_spawn", g_user_spawn_eperm); |
| 142 | + CHECK("u_kill", g_user_kill_eperm); |
| 143 | + CHECK("u_sus", g_user_sus_eperm); |
| 144 | + CHECK("u_irq", g_user_irq_eperm); |
| 145 | + CHECK("u_heap", g_user_heap_eperm); |
| 146 | + CHECK("u_mmap", g_user_mmap_eperm); |
| 147 | + CHECK("u_cap", g_user_cap_eperm); |
| 148 | + |
| 149 | + sdk_spawn_priv("dprobe", driver_probe, NULL, 10u, 1024u, 0u, |
| 150 | + ULMK_PRIV_DRIVER); |
| 151 | + bits = 0u; |
| 152 | + ulmk_notif_wait(g_done, 0x2u, &bits); |
| 153 | + CHECK("d_spawn", g_drv_spawn_eperm); |
| 154 | + CHECK("d_kill", g_drv_kill_eperm); |
| 155 | + CHECK("d_cap", g_drv_cap_eperm); |
| 156 | + CHECK("d_irq_ok", g_drv_irq_ok); |
| 157 | + CHECK("d_mmap_ok", g_drv_mmap_ok); |
| 158 | + |
| 159 | + CHECK("r_spawn", |
| 160 | + sdk_spawn_priv("ok", idle_victim, NULL, 200u, 1024u, 0u, |
| 161 | + ULMK_PRIV_USER) != ULMK_TID_INVALID); |
| 162 | + CHECK("r_cap", ulmk_cap_grant(g_victim, ULMK_CAP_SPAWN) == ULMK_OK); |
| 163 | + |
| 164 | + sdk_puts("cap_neg: pass="); |
| 165 | + sdk_put_u32((uint32_t)g_pass); |
| 166 | + sdk_puts(" fail="); |
| 167 | + sdk_put_u32((uint32_t)g_fail); |
| 168 | + sdk_puts("\n"); |
| 169 | + sdk_puts(g_fail == 0 ? "cap_neg: PASS\n" : "cap_neg: FAIL\n"); |
| 170 | + ulmk_thread_exit(); |
| 171 | +} |
0 commit comments