2 * Minimal TPM emulator for TPM test cases
4 * Copyright (c) 2018 Red Hat, Inc.
9 * This work is licensed under the terms of the GNU GPL, version 2 or later.
10 * See the COPYING file in the top-level directory.
13 #include "qemu/osdep.h"
14 #include <glib/gstdio.h>
16 #include "hw/tpm/tpm_ioctl.h"
17 #include "io/channel-socket.h"
18 #include "qapi/error.h"
21 void tpm_emu_test_wait_cond(TestState *s)
23 gint64 end_time = g_get_monotonic_time() + 5 * G_TIME_SPAN_SECOND;
25 g_mutex_lock(&s->data_mutex);
26 if (!g_cond_wait_until(&s->data_cond, &s->data_mutex, end_time)) {
27 g_assert_not_reached();
29 g_mutex_unlock(&s->data_mutex);
32 static void *tpm_emu_tpm_thread(void *data)
35 QIOChannel *ioc = s->tpm_ioc;
37 s->tpm_msg = g_new(struct tpm_hdr, 1);
39 int minhlen = sizeof(s->tpm_msg->tag) + sizeof(s->tpm_msg->len);
41 if (!qio_channel_read(ioc, (char *)s->tpm_msg, minhlen, &error_abort)) {
44 s->tpm_msg->tag = be16_to_cpu(s->tpm_msg->tag);
45 s->tpm_msg->len = be32_to_cpu(s->tpm_msg->len);
46 g_assert_cmpint(s->tpm_msg->len, >=, minhlen);
47 g_assert_cmpint(s->tpm_msg->tag, ==, TPM2_ST_NO_SESSIONS);
49 s->tpm_msg = g_realloc(s->tpm_msg, s->tpm_msg->len);
50 qio_channel_read(ioc, (char *)&s->tpm_msg->code,
51 s->tpm_msg->len - minhlen, &error_abort);
52 s->tpm_msg->code = be32_to_cpu(s->tpm_msg->code);
55 s->tpm_msg->tag = cpu_to_be16(TPM2_ST_NO_SESSIONS);
56 s->tpm_msg->len = cpu_to_be32(sizeof(struct tpm_hdr));
57 s->tpm_msg->code = cpu_to_be32(TPM_RC_FAILURE);
58 qio_channel_write(ioc, (char *)s->tpm_msg, be32_to_cpu(s->tpm_msg->len),
64 object_unref(OBJECT(s->tpm_ioc));
68 void *tpm_emu_ctrl_thread(void *data)
71 QIOChannelSocket *lioc = qio_channel_socket_new();
74 qio_channel_socket_listen_sync(lioc, s->addr, &error_abort);
75 g_cond_signal(&s->data_cond);
77 qio_channel_wait(QIO_CHANNEL(lioc), G_IO_IN);
78 ioc = QIO_CHANNEL(qio_channel_socket_accept(lioc, &error_abort));
83 struct iovec iov = { .iov_base = &cmd, .iov_len = sizeof(cmd) };
87 qio_channel_readv_full(ioc, &iov, 1, &pfd, &nfd, &error_abort);
88 cmd = be32_to_cpu(cmd);
89 g_assert_cmpint(cmd, ==, CMD_SET_DATAFD);
90 g_assert_cmpint(nfd, ==, 1);
91 s->tpm_ioc = QIO_CHANNEL(qio_channel_socket_new_fd(*pfd, &error_abort));
95 qio_channel_write(ioc, (char *)&cmd, sizeof(cmd), &error_abort);
97 s->emu_tpm_thread = g_thread_new(NULL, tpm_emu_tpm_thread, s);
104 ret = qio_channel_read(ioc, (char *)&cmd, sizeof(cmd), NULL);
109 cmd = be32_to_cpu(cmd);
111 case CMD_GET_CAPABILITY: {
112 ptm_cap cap = cpu_to_be64(0x3fff);
113 qio_channel_write(ioc, (char *)&cap, sizeof(cap), &error_abort);
118 qio_channel_read(ioc, (char *)&init.u.req, sizeof(init.u.req),
120 init.u.resp.tpm_result = 0;
121 qio_channel_write(ioc, (char *)&init.u.resp, sizeof(init.u.resp),
127 qio_channel_write(ioc, (char *)&res, sizeof(res), &error_abort);
128 /* the tpm data thread is expected to finish now */
129 g_thread_join(s->emu_tpm_thread);
134 qio_channel_write(ioc, (char *)&res, sizeof(res), &error_abort);
137 case CMD_SET_BUFFERSIZE: {
138 ptm_setbuffersize sbs;
139 qio_channel_read(ioc, (char *)&sbs.u.req, sizeof(sbs.u.req),
141 sbs.u.resp.buffersize = sbs.u.req.buffersize ?: cpu_to_be32(4096);
142 sbs.u.resp.tpm_result = 0;
143 sbs.u.resp.minsize = cpu_to_be32(128);
144 sbs.u.resp.maxsize = cpu_to_be32(4096);
145 qio_channel_write(ioc, (char *)&sbs.u.resp, sizeof(sbs.u.resp),
149 case CMD_SET_LOCALITY: {
151 /* Note: this time it's not u.req / u.resp... */
152 qio_channel_read(ioc, (char *)&loc, sizeof(loc), &error_abort);
153 g_assert_cmpint(loc.u.req.loc, ==, 0);
154 loc.u.resp.tpm_result = 0;
155 qio_channel_write(ioc, (char *)&loc, sizeof(loc), &error_abort);
158 case CMD_GET_TPMESTABLISHED: {
162 qio_channel_write(ioc, (char *)&est, sizeof(est), &error_abort);
166 g_debug("unimplemented %u", cmd);
167 g_assert_not_reached();
171 object_unref(OBJECT(ioc));
172 object_unref(OBJECT(lioc));