blob: 00197579e55ef4677ed819a6a84ac4460a51ff5f [file] [log] [blame]
Gilles Peskine3de7be82020-03-27 16:35:23 +01001#! /usr/bin/env bash
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01002
Simon Butcher3ea7f522016-03-07 23:22:10 +00003# all.sh
4#
Bence Szépkúti1e148272020-08-07 13:07:28 +02005# Copyright The Mbed TLS Contributors
Bence Szépkútic7da1fe2020-05-26 01:54:15 +02006# SPDX-License-Identifier: Apache-2.0
7#
8# Licensed under the Apache License, Version 2.0 (the "License"); you may
9# not use this file except in compliance with the License.
10# You may obtain a copy of the License at
11#
12# http://www.apache.org/licenses/LICENSE-2.0
13#
14# Unless required by applicable law or agreed to in writing, software
15# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17# See the License for the specific language governing permissions and
18# limitations under the License.
Gilles Peskine192c72f2017-12-21 15:59:21 +010019
20
21
22################################################################
23#### Documentation
24################################################################
25
Simon Butcher3ea7f522016-03-07 23:22:10 +000026# Purpose
Gilles Peskine192c72f2017-12-21 15:59:21 +010027# -------
Simon Butcher3ea7f522016-03-07 23:22:10 +000028#
SimonB2e23c822016-04-16 21:54:39 +010029# To run all tests possible or available on the platform.
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +010030#
Gilles Peskine192c72f2017-12-21 15:59:21 +010031# Notes for users
32# ---------------
33#
SimonB2e23c822016-04-16 21:54:39 +010034# Warning: the test is destructive. It includes various build modes and
35# configurations, and can and will arbitrarily change the current CMake
Gilles Peskine192c72f2017-12-21 15:59:21 +010036# configuration. The following files must be committed into git:
37# * include/mbedtls/config.h
Gilles Peskine636c26a2020-03-04 20:46:15 +010038# * Makefile, library/Makefile, programs/Makefile, tests/Makefile,
39# programs/fuzz/Makefile
Gilles Peskine192c72f2017-12-21 15:59:21 +010040# After running this script, the CMake cache will be lost and CMake
41# will no longer be initialised.
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +010042#
Gilles Peskine192c72f2017-12-21 15:59:21 +010043# The script assumes the presence of a number of tools:
44# * Basic Unix tools (Windows users note: a Unix-style find must be before
45# the Windows find in the PATH)
46# * Perl
47# * GNU Make
48# * CMake
49# * GCC and Clang (recent enough for using ASan with gcc and MemSan with clang, or valgrind)
Andrzej Kurek05be06c2018-06-28 04:41:50 -040050# * G++
Gilles Peskine192c72f2017-12-21 15:59:21 +010051# * arm-gcc and mingw-gcc
52# * ArmCC 5 and ArmCC 6, unless invoked with --no-armcc
Gilles Peskine192c72f2017-12-21 15:59:21 +010053# * OpenSSL and GnuTLS command line tools, recent enough for the
54# interoperability tests. If they don't support SSLv3 then a legacy
55# version of these tools must be present as well (search for LEGACY
56# below).
57# See the invocation of check_tools below for details.
58#
59# This script must be invoked from the toplevel directory of a git
60# working copy of Mbed TLS.
61#
Gilles Peskine7105a332020-03-28 18:50:43 +010062# The behavior on an error depends on whether --keep-going (alias -k)
63# is in effect.
64# * Without --keep-going: the script stops on the first error without
65# cleaning up. This lets you work in the configuration of the failing
66# component.
67# * With --keep-going: the script runs all requested components and
68# reports failures at the end. In particular the script always cleans
69# up on exit.
70#
Gilles Peskine192c72f2017-12-21 15:59:21 +010071# Note that the output is not saved. You may want to run
72# script -c tests/scripts/all.sh
73# or
74# tests/scripts/all.sh >all.log 2>&1
75#
76# Notes for maintainers
77# ---------------------
78#
Gilles Peskine8f073122018-11-27 15:58:47 +010079# The bulk of the code is organized into functions that follow one of the
80# following naming conventions:
81# * pre_XXX: things to do before running the tests, in order.
82# * component_XXX: independent components. They can be run in any order.
Gilles Peskinec70637a2019-01-09 22:29:17 +010083# * component_check_XXX: quick tests that aren't worth parallelizing.
84# * component_build_XXX: build things but don't run them.
85# * component_test_XXX: build and test.
Gilles Peskine878cf602019-01-06 20:50:38 +000086# * support_XXX: if support_XXX exists and returns false then
87# component_XXX is not run by default.
Gilles Peskine8f073122018-11-27 15:58:47 +010088# * post_XXX: things to do after running the tests.
89# * other: miscellaneous support functions.
90#
Gilles Peskinec70637a2019-01-09 22:29:17 +010091# Each component must start by invoking `msg` with a short informative message.
92#
Gilles Peskine39a3b112020-03-28 21:27:40 +010093# Warning: due to the way bash detects errors, the failure of a command
94# inside 'if' or '!' is not detected. Use the 'not' function instead of '!'.
95#
Gilles Peskine7105a332020-03-28 18:50:43 +010096# Each component is executed in a separate shell process. The component
97# fails if any command in it returns a non-zero status.
98#
Gilles Peskinec70637a2019-01-09 22:29:17 +010099# The framework performs some cleanup tasks after each component. This
100# means that components can assume that the working directory is in a
101# cleaned-up state, and don't need to perform the cleanup themselves.
102# * Run `make clean`.
103# * Restore `include/mbedtks/config.h` from a backup made before running
104# the component.
Gilles Peskine636c26a2020-03-04 20:46:15 +0100105# * Check out `Makefile`, `library/Makefile`, `programs/Makefile`,
106# `tests/Makefile` and `programs/fuzz/Makefile` from git.
107# This cleans up after an in-tree use of CMake.
Gilles Peskinec70637a2019-01-09 22:29:17 +0100108#
Gilles Peskine192c72f2017-12-21 15:59:21 +0100109# The tests are roughly in order from fastest to slowest. This doesn't
110# have to be exact, but in general you should add slower tests towards
111# the end and fast checks near the beginning.
Gilles Peskine192c72f2017-12-21 15:59:21 +0100112
113
114
115################################################################
116#### Initialization and command line parsing
117################################################################
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100118
Gilles Peskine8ab29942020-03-28 18:50:49 +0100119# Abort on errors (even on the left-hand side of a pipe).
120# Treat uninitialised variables as errors.
121set -e -o pipefail -u
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100122
Gilles Peskine8f073122018-11-27 15:58:47 +0100123pre_check_environment () {
Gilles Peskinea16c2b12019-01-06 19:58:02 +0000124 if [ -d library -a -d include -a -d tests ]; then :; else
Gilles Peskine8f073122018-11-27 15:58:47 +0100125 echo "Must be run from mbed TLS root" >&2
126 exit 1
127 fi
128}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100129
Gilles Peskine8f073122018-11-27 15:58:47 +0100130pre_initialize_variables () {
131 CONFIG_H='include/mbedtls/config.h'
John Durkopbd069d32020-10-31 22:14:03 -0700132 CRYPTO_CONFIG_H='include/psa/crypto_config.h'
Gilles Peskine24bdf022020-03-30 20:11:39 +0200133
134 # Files that are clobbered by some jobs will be backed up. Use a different
135 # suffix from auxiliary scripts so that all.sh and auxiliary scripts can
136 # independently decide when to remove the backup file.
137 backup_suffix='.all.bak'
138 # Files clobbered by config.py
139 files_to_back_up="$CONFIG_H $CRYPTO_CONFIG_H"
Gilles Peskineef64e7f2021-07-12 18:16:01 +0200140 # Files clobbered by in-tree cmake
141 files_to_back_up="$files_to_back_up Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile"
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200142
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200143 append_outcome=0
Gilles Peskine8f073122018-11-27 15:58:47 +0100144 MEMORY=0
145 FORCE=0
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200146 QUIET=0
Gilles Peskine8f073122018-11-27 15:58:47 +0100147 KEEP_GOING=0
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100148
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200149 # Seed value used with the --release-test option.
Manuel Pégourié-Gonnard54304472020-06-22 10:11:47 +0200150 #
151 # See also RELEASE_SEED in basic-build-test.sh. Debugging is easier if
152 # both values are kept in sync. If you change the value here because it
153 # breaks some tests, you'll definitely want to change it in
154 # basic-build-test.sh as well.
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200155 RELEASE_SEED=1
156
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200157 : ${MBEDTLS_TEST_OUTCOME_FILE=}
Gilles Peskine9004a172019-09-16 15:20:36 +0200158 : ${MBEDTLS_TEST_PLATFORM="$(uname -s | tr -c \\n0-9A-Za-z _)-$(uname -m | tr -c \\n0-9A-Za-z _)"}
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200159 export MBEDTLS_TEST_OUTCOME_FILE
Gilles Peskine9004a172019-09-16 15:20:36 +0200160 export MBEDTLS_TEST_PLATFORM
161
Jaeden Ameroc4cc2512019-01-30 15:35:44 +0000162 # Default commands, can be overridden by the environment
Gilles Peskine8f073122018-11-27 15:58:47 +0100163 : ${OPENSSL:="openssl"}
164 : ${OPENSSL_LEGACY:="$OPENSSL"}
165 : ${OPENSSL_NEXT:="$OPENSSL"}
166 : ${GNUTLS_CLI:="gnutls-cli"}
167 : ${GNUTLS_SERV:="gnutls-serv"}
168 : ${GNUTLS_LEGACY_CLI:="$GNUTLS_CLI"}
169 : ${GNUTLS_LEGACY_SERV:="$GNUTLS_SERV"}
170 : ${OUT_OF_SOURCE_DIR:=./mbedtls_out_of_source_build}
171 : ${ARMC5_BIN_DIR:=/usr/bin}
172 : ${ARMC6_BIN_DIR:=/usr/bin}
Gilles Peskine6d061342020-04-30 18:19:32 +0200173 : ${ARM_NONE_EABI_GCC_PREFIX:=arm-none-eabi-}
Manuel Pégourié-Gonnard71930162020-08-18 10:28:51 +0200174 : ${ARM_LINUX_GNUEABI_GCC_PREFIX:=arm-linux-gnueabi-}
Andres AGdc192212016-08-31 17:33:13 +0100175
Gilles Peskine8f073122018-11-27 15:58:47 +0100176 # if MAKEFLAGS is not set add the -j option to speed up invocations of make
Gilles Peskinea1fc4b52019-01-06 20:15:26 +0000177 if [ -z "${MAKEFLAGS+set}" ]; then
Gilles Peskine85229ac2021-09-30 18:24:21 +0200178 export MAKEFLAGS="-j$(all_sh_nproc)"
Gilles Peskine8f073122018-11-27 15:58:47 +0100179 fi
Gilles Peskine878cf602019-01-06 20:50:38 +0000180
Gilles Peskinec761d8f2021-09-20 18:57:55 +0200181 # Include more verbose output for failing tests run by CMake or make
Jaeden Amerod48e9c72019-02-07 17:43:39 +0000182 export CTEST_OUTPUT_ON_FAILURE=1
183
Gilles Peskine8fd59422019-10-21 17:11:33 +0200184 # CFLAGS and LDFLAGS for Asan builds that don't use CMake
Gilles Peskine5ca393f2019-10-21 19:06:33 +0200185 ASAN_CFLAGS='-Werror -Wall -Wextra -fsanitize=address,undefined -fno-sanitize-recover=all'
Gilles Peskine8fd59422019-10-21 17:11:33 +0200186
Gilles Peskine878cf602019-01-06 20:50:38 +0000187 # Gather the list of available components. These are the functions
188 # defined in this script whose name starts with "component_".
Gilles Peskine3de7be82020-03-27 16:35:23 +0100189 # Parse the script with sed. This way we get the functions in the order
190 # they are defined.
Gilles Peskine878cf602019-01-06 20:50:38 +0000191 ALL_COMPONENTS=$(sed -n 's/^ *component_\([0-9A-Z_a-z]*\) *().*/\1/p' <"$0")
192
193 # Exclude components that are not supported on this platform.
194 SUPPORTED_COMPONENTS=
195 for component in $ALL_COMPONENTS; do
196 case $(type "support_$component" 2>&1) in
197 *' function'*)
198 if ! support_$component; then continue; fi;;
199 esac
200 SUPPORTED_COMPONENTS="$SUPPORTED_COMPONENTS $component"
201 done
Gilles Peskine8f073122018-11-27 15:58:47 +0100202}
Andres AG38495a32016-07-12 16:54:33 +0100203
Gilles Peskinea28db922019-01-10 00:05:18 +0100204# Test whether the component $1 is included in the command line patterns.
205is_component_included()
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100206{
Gilles Peskine6702ce92021-08-06 11:35:17 +0200207 # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS
208 # only does word splitting.
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100209 set -f
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000210 for pattern in $COMMAND_LINE_COMPONENTS; do
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100211 set +f
212 case ${1#component_} in $pattern) return 0;; esac
213 done
214 set +f
215 return 1
216}
Andres AG7770ea82016-10-10 15:46:20 +0100217
Simon Butcher41eeccf2016-09-07 00:07:09 +0100218usage()
Andres AGd9eba4b2016-08-26 14:42:14 +0100219{
Gilles Peskine709346a2017-12-10 23:43:39 +0100220 cat <<EOF
Gilles Peskine92525112018-11-27 18:15:35 +0100221Usage: $0 [OPTION]... [COMPONENT]...
Gilles Peskine348fb9a2018-11-27 17:04:29 +0100222Run mbedtls release validation tests.
Gilles Peskine92525112018-11-27 18:15:35 +0100223By default, run all tests. With one or more COMPONENT, run only those.
Gilles Peskinea28db922019-01-10 00:05:18 +0100224COMPONENT can be the name of a component or a shell wildcard pattern.
225
226Examples:
227 $0 "check_*"
228 Run all sanity checks.
229 $0 --no-armcc --except test_memsan
230 Run everything except builds that require armcc and MemSan.
Gilles Peskine348fb9a2018-11-27 17:04:29 +0100231
232Special options:
233 -h|--help Print this help and exit.
Gilles Peskine878cf602019-01-06 20:50:38 +0000234 --list-all-components List all available test components and exit.
235 --list-components List components supported on this platform and exit.
Gilles Peskine709346a2017-12-10 23:43:39 +0100236
237General options:
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200238 -q|--quiet Only output component names, and errors if any.
Gilles Peskine709346a2017-12-10 23:43:39 +0100239 -f|--force Force the tests to overwrite any modified files.
Gilles Peskine7c652162017-12-11 00:01:40 +0100240 -k|--keep-going Run all tests and report errors at the end.
Gilles Peskine709346a2017-12-10 23:43:39 +0100241 -m|--memory Additional optional memory tests.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200242 --append-outcome Append to the outcome file (if used).
Gilles Peskine6d061342020-04-30 18:19:32 +0200243 --arm-none-eabi-gcc-prefix=<string>
244 Prefix for a cross-compiler for arm-none-eabi
245 (default: "${ARM_NONE_EABI_GCC_PREFIX}")
Manuel Pégourié-Gonnard71930162020-08-18 10:28:51 +0200246 --arm-linux-gnueabi-gcc-prefix=<string>
247 Prefix for a cross-compiler for arm-linux-gnueabi
248 (default: "${ARM_LINUX_GNUEABI_GCC_PREFIX}")
Gilles Peskinebca6ab92017-12-19 18:24:31 +0100249 --armcc Run ARM Compiler builds (on by default).
Gilles Peskine8eb3c952021-08-06 11:51:59 +0200250 --restore First clean up the build tree, restoring backed up
251 files. Do not run any components unless they are
252 explicitly specified.
Gilles Peskinea5eb22d2020-03-28 21:09:21 +0100253 --error-test Error test mode: run a failing function in addition
Gilles Peskinea25c5672021-08-05 15:11:33 +0200254 to any specified component. May be repeated.
Gilles Peskinea28db922019-01-10 00:05:18 +0100255 --except Exclude the COMPONENTs listed on the command line,
256 instead of running only those.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200257 --no-append-outcome Write a new outcome file and analyze it (default).
Gilles Peskinebca6ab92017-12-19 18:24:31 +0100258 --no-armcc Skip ARM Compiler builds.
Gilles Peskine38d81652018-03-21 08:40:26 +0100259 --no-force Refuse to overwrite modified files (default).
260 --no-keep-going Stop at the first error (default).
261 --no-memory No additional memory tests (default).
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200262 --no-quiet Print full ouput from components.
Gilles Peskine709346a2017-12-10 23:43:39 +0100263 --out-of-source-dir=<path> Directory used for CMake out-of-source build tests.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200264 --outcome-file=<path> File where test outcomes are written (not done if
265 empty; default: \$MBEDTLS_TEST_OUTCOME_FILE).
Gilles Peskine38d81652018-03-21 08:40:26 +0100266 --random-seed Use a random seed value for randomized tests (default).
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200267 -r|--release-test Run this script in release mode. This fixes the seed value to ${RELEASE_SEED}.
Gilles Peskine709346a2017-12-10 23:43:39 +0100268 -s|--seed Integer seed value to use for this test run.
269
270Tool path options:
271 --armc5-bin-dir=<ARMC5_bin_dir_path> ARM Compiler 5 bin directory.
272 --armc6-bin-dir=<ARMC6_bin_dir_path> ARM Compiler 6 bin directory.
273 --gnutls-cli=<GnuTLS_cli_path> GnuTLS client executable to use for most tests.
274 --gnutls-serv=<GnuTLS_serv_path> GnuTLS server executable to use for most tests.
275 --gnutls-legacy-cli=<GnuTLS_cli_path> GnuTLS client executable to use for legacy tests.
276 --gnutls-legacy-serv=<GnuTLS_serv_path> GnuTLS server executable to use for legacy tests.
277 --openssl=<OpenSSL_path> OpenSSL executable to use for most tests.
278 --openssl-legacy=<OpenSSL_path> OpenSSL executable to use for legacy tests e.g. SSLv3.
Manuel Pégourié-Gonnard6b368922018-02-20 12:02:07 +0100279 --openssl-next=<OpenSSL_path> OpenSSL executable to use for recent things like ARIA
Gilles Peskine709346a2017-12-10 23:43:39 +0100280EOF
SimonB2e23c822016-04-16 21:54:39 +0100281}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100282
Gilles Peskine4fa948f2021-08-03 13:44:28 +0200283# Cleanup before/after running a component.
284# Remove built files as well as the cmake cache/config.
285# Does not remove generated source files.
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100286cleanup()
287{
Gilles Peskine7c652162017-12-11 00:01:40 +0100288 command make clean
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200289
Gilles Peskine31b07e22018-03-21 12:15:06 +0100290 # Remove CMake artefacts
Jaeden Amero2d0e00f2018-11-07 18:46:41 +0000291 find . -name .git -prune -o \
Gilles Peskine31b07e22018-03-21 12:15:06 +0100292 -iname CMakeFiles -exec rm -rf {} \+ -o \
293 \( -iname cmake_install.cmake -o \
294 -iname CTestTestfile.cmake -o \
295 -iname CMakeCache.txt \) -exec rm {} \+
296 # Recover files overwritten by in-tree CMake builds
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +0000297 rm -f include/Makefile include/mbedtls/Makefile programs/*/Makefile
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200298
Jaeden Ameroab83fdf2019-06-20 17:38:22 +0100299 # Remove any artifacts from the component_test_cmake_as_subdirectory test.
300 rm -rf programs/test/cmake_subproject/build
301 rm -f programs/test/cmake_subproject/Makefile
302 rm -f programs/test/cmake_subproject/cmake_subproject
303
Gilles Peskine24bdf022020-03-30 20:11:39 +0200304 # Restore files that may have been clobbered by the job
305 for x in $files_to_back_up; do
306 cp -p "$x$backup_suffix" "$x"
307 done
308}
John Durkopbd069d32020-10-31 22:14:03 -0700309
Gilles Peskine4fa948f2021-08-03 13:44:28 +0200310# Final cleanup when this script exits (except when exiting on a failure
311# in non-keep-going mode).
Gilles Peskine24bdf022020-03-30 20:11:39 +0200312final_cleanup () {
313 cleanup
314
315 for x in $files_to_back_up; do
316 rm -f "$x$backup_suffix"
317 done
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100318}
319
Gilles Peskine7c652162017-12-11 00:01:40 +0100320# Executed on exit. May be redefined depending on command line options.
321final_report () {
322 :
323}
324
325fatal_signal () {
Gilles Peskine24bdf022020-03-30 20:11:39 +0200326 final_cleanup
Gilles Peskine7c652162017-12-11 00:01:40 +0100327 final_report $1
328 trap - $1
329 kill -$1 $$
330}
331
332trap 'fatal_signal HUP' HUP
333trap 'fatal_signal INT' INT
334trap 'fatal_signal TERM' TERM
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200335
Gilles Peskine85229ac2021-09-30 18:24:21 +0200336# Number of processors on this machine. Used as the default setting
337# for parallel make.
338all_sh_nproc ()
339{
340 {
341 nproc || # Linux
342 sysctl -n hw.ncpuonline || # NetBSD, OpenBSD
343 sysctl -n hw.ncpu || # FreeBSD
344 echo 1
345 } 2>/dev/null
346}
347
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100348msg()
349{
Gilles Peskineffcdeff2018-12-04 12:49:28 +0100350 if [ -n "${current_component:-}" ]; then
351 current_section="${current_component#component_}: $1"
352 else
353 current_section="$1"
354 fi
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200355
356 if [ $QUIET -eq 1 ]; then
357 return
358 fi
359
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100360 echo ""
361 echo "******************************************************************"
Gilles Peskineffcdeff2018-12-04 12:49:28 +0100362 echo "* $current_section "
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +0000363 printf "* "; date
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100364 echo "******************************************************************"
365}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100366
Gilles Peskine8f073122018-11-27 15:58:47 +0100367armc6_build_test()
368{
369 FLAGS="$1"
Andres AGa5cd9732016-10-17 15:23:10 +0100370
Gilles Peskine18487f62020-04-30 23:11:54 +0200371 msg "build: ARM Compiler 6 ($FLAGS)"
Gilles Peskine8f073122018-11-27 15:58:47 +0100372 ARM_TOOL_VARIANT="ult" CC="$ARMC6_CC" AR="$ARMC6_AR" CFLAGS="$FLAGS" \
373 WARNING_CFLAGS='-xc -std=c99' make lib
Gilles Peskine18487f62020-04-30 23:11:54 +0200374
375 msg "size: ARM Compiler 6 ($FLAGS)"
376 "$ARMC6_FROMELF" -z library/*.o
377
Gilles Peskine8f073122018-11-27 15:58:47 +0100378 make clean
379}
Andres AGa5cd9732016-10-17 15:23:10 +0100380
Andres AGd9eba4b2016-08-26 14:42:14 +0100381err_msg()
382{
383 echo "$1" >&2
384}
385
386check_tools()
387{
388 for TOOL in "$@"; do
Andres AG98393602017-01-31 17:04:45 +0000389 if ! `type "$TOOL" >/dev/null 2>&1`; then
Andres AGd9eba4b2016-08-26 14:42:14 +0100390 err_msg "$TOOL not found!"
391 exit 1
392 fi
393 done
394}
395
Gilles Peskine8f073122018-11-27 15:58:47 +0100396pre_parse_command_line () {
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000397 COMMAND_LINE_COMPONENTS=
Gilles Peskinea28db922019-01-10 00:05:18 +0100398 all_except=0
Gilles Peskinea5eb22d2020-03-28 21:09:21 +0100399 error_test=0
Gilles Peskine8eb3c952021-08-06 11:51:59 +0200400 restore_first=0
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000401 no_armcc=
SimonB2e23c822016-04-16 21:54:39 +0100402
Jaeden Amero9b90f2e2018-11-02 18:34:17 +0000403 # Note that legacy options are ignored instead of being omitted from this
404 # list of options, so invocations that worked with previous version of
405 # all.sh will still run and work properly.
Gilles Peskine8f073122018-11-27 15:58:47 +0100406 while [ $# -gt 0 ]; do
Gilles Peskine55f7c942019-01-09 22:28:21 +0100407 case "$1" in
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200408 --append-outcome) append_outcome=1;;
Gilles Peskine6d061342020-04-30 18:19:32 +0200409 --arm-none-eabi-gcc-prefix) shift; ARM_NONE_EABI_GCC_PREFIX="$1";;
Manuel Pégourié-Gonnard71930162020-08-18 10:28:51 +0200410 --arm-linux-gnueabi-gcc-prefix) shift; ARM_LINUX_GNUEABI_GCC_PREFIX="$1";;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000411 --armcc) no_armcc=;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100412 --armc5-bin-dir) shift; ARMC5_BIN_DIR="$1";;
413 --armc6-bin-dir) shift; ARMC6_BIN_DIR="$1";;
Gilles Peskinea5eb22d2020-03-28 21:09:21 +0100414 --error-test) error_test=$((error_test + 1));;
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000415 --except) all_except=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100416 --force|-f) FORCE=1;;
417 --gnutls-cli) shift; GNUTLS_CLI="$1";;
418 --gnutls-legacy-cli) shift; GNUTLS_LEGACY_CLI="$1";;
419 --gnutls-legacy-serv) shift; GNUTLS_LEGACY_SERV="$1";;
420 --gnutls-serv) shift; GNUTLS_SERV="$1";;
421 --help|-h) usage; exit;;
422 --keep-going|-k) KEEP_GOING=1;;
Gilles Peskine878cf602019-01-06 20:50:38 +0000423 --list-all-components) printf '%s\n' $ALL_COMPONENTS; exit;;
424 --list-components) printf '%s\n' $SUPPORTED_COMPONENTS; exit;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100425 --memory|-m) MEMORY=1;;
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200426 --no-append-outcome) append_outcome=0;;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000427 --no-armcc) no_armcc=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100428 --no-force) FORCE=0;;
429 --no-keep-going) KEEP_GOING=0;;
430 --no-memory) MEMORY=0;;
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200431 --no-quiet) QUIET=0;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100432 --openssl) shift; OPENSSL="$1";;
433 --openssl-legacy) shift; OPENSSL_LEGACY="$1";;
434 --openssl-next) shift; OPENSSL_NEXT="$1";;
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200435 --outcome-file) shift; MBEDTLS_TEST_OUTCOME_FILE="$1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100436 --out-of-source-dir) shift; OUT_OF_SOURCE_DIR="$1";;
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200437 --quiet|-q) QUIET=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100438 --random-seed) unset SEED;;
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200439 --release-test|-r) SEED=$RELEASE_SEED;;
Gilles Peskine8eb3c952021-08-06 11:51:59 +0200440 --restore) restore_first=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100441 --seed|-s) shift; SEED="$1";;
442 -*)
443 echo >&2 "Unknown option: $1"
444 echo >&2 "Run $0 --help for usage."
445 exit 120
446 ;;
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000447 *) COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS $1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100448 esac
449 shift
Gilles Peskine8f073122018-11-27 15:58:47 +0100450 done
SimonB2e23c822016-04-16 21:54:39 +0100451
Gilles Peskinea28db922019-01-10 00:05:18 +0100452 # With no list of components, run everything.
Gilles Peskine8eb3c952021-08-06 11:51:59 +0200453 if [ -z "$COMMAND_LINE_COMPONENTS" ] && [ $restore_first -eq 0 ]; then
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000454 all_except=1
Andres AGdc192212016-08-31 17:33:13 +0100455 fi
456
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000457 # --no-armcc is a legacy option. The modern way is --except '*_armcc*'.
458 # Ignore it if components are listed explicitly on the command line.
Gilles Peskinea28db922019-01-10 00:05:18 +0100459 if [ -n "$no_armcc" ] && [ $all_except -eq 1 ]; then
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000460 COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS *_armcc*"
SimonB2e23c822016-04-16 21:54:39 +0100461 fi
SimonB2e23c822016-04-16 21:54:39 +0100462
Gilles Peskine4fa948f2021-08-03 13:44:28 +0200463 # Error out if an explicitly requested component doesn't exist.
Gilles Peskinee8056c52020-03-28 21:37:59 +0100464 if [ $all_except -eq 0 ]; then
465 unsupported=0
Gilles Peskine6702ce92021-08-06 11:35:17 +0200466 # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS
467 # only does word splitting.
Gilles Peskine8bfe15f2021-08-03 13:43:36 +0200468 set -f
Gilles Peskinee8056c52020-03-28 21:37:59 +0100469 for component in $COMMAND_LINE_COMPONENTS; do
Gilles Peskine8bfe15f2021-08-03 13:43:36 +0200470 set +f
Gilles Peskine4fa948f2021-08-03 13:44:28 +0200471 # If the requested name includes a wildcard character, don't
472 # check it. Accept wildcard patterns that don't match anything.
Gilles Peskinee8056c52020-03-28 21:37:59 +0100473 case $component in
474 *[*?\[]*) continue;;
475 esac
476 case " $SUPPORTED_COMPONENTS " in
477 *" $component "*) :;;
478 *)
479 echo >&2 "Component $component was explicitly requested, but is not known or not supported."
480 unsupported=$((unsupported + 1));;
481 esac
482 done
Gilles Peskine8bfe15f2021-08-03 13:43:36 +0200483 set +f
Gilles Peskinee8056c52020-03-28 21:37:59 +0100484 if [ $unsupported -ne 0 ]; then
485 exit 2
486 fi
487 fi
488
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000489 # Build the list of components to run.
Gilles Peskinea28db922019-01-10 00:05:18 +0100490 RUN_COMPONENTS=
491 for component in $SUPPORTED_COMPONENTS; do
492 if is_component_included "$component"; [ $? -eq $all_except ]; then
493 RUN_COMPONENTS="$RUN_COMPONENTS $component"
494 fi
495 done
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000496
497 unset all_except
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000498 unset no_armcc
Gilles Peskine8f073122018-11-27 15:58:47 +0100499}
SimonB2e23c822016-04-16 21:54:39 +0100500
Gilles Peskine8f073122018-11-27 15:58:47 +0100501pre_check_git () {
502 if [ $FORCE -eq 1 ]; then
Gilles Peskine53190e62019-01-09 23:17:35 +0100503 rm -rf "$OUT_OF_SOURCE_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +0100504 git checkout-index -f -q $CONFIG_H
505 cleanup
506 else
SimonB2e23c822016-04-16 21:54:39 +0100507
Gilles Peskine8f073122018-11-27 15:58:47 +0100508 if [ -d "$OUT_OF_SOURCE_DIR" ]; then
509 echo "Warning - there is an existing directory at '$OUT_OF_SOURCE_DIR'" >&2
510 echo "You can either delete this directory manually, or force the test by rerunning"
511 echo "the script as: $0 --force --out-of-source-dir $OUT_OF_SOURCE_DIR"
512 exit 1
513 fi
514
Gilles Peskined1174cf2019-01-09 22:30:01 +0100515 if ! git diff --quiet include/mbedtls/config.h; then
Gilles Peskine8f073122018-11-27 15:58:47 +0100516 err_msg "Warning - the configuration file 'include/mbedtls/config.h' has been edited. "
517 echo "You can either delete or preserve your work, or force the test by rerunning the"
518 echo "script as: $0 --force"
519 exit 1
520 fi
SimonB2e23c822016-04-16 21:54:39 +0100521 fi
Andrzej Kurekeb508712019-02-14 07:18:59 -0500522}
523
Gilles Peskineef64e7f2021-07-12 18:16:01 +0200524pre_restore_files () {
525 # If the makefiles have been generated by a framework such as cmake,
526 # restore them from git. If the makefiles look like modifications from
527 # the ones checked into git, take care not to modify them. Whatever
528 # this function leaves behind is what the script will restore before
529 # each component.
530 case "$(head -n1 Makefile)" in
531 *[Gg]enerated*)
532 git update-index --no-skip-worktree Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile
533 git checkout -- Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile
534 ;;
535 esac
536}
537
Gilles Peskine24bdf022020-03-30 20:11:39 +0200538pre_back_up () {
539 for x in $files_to_back_up; do
540 cp -p "$x" "$x$backup_suffix"
541 done
542}
543
Gilles Peskine8f073122018-11-27 15:58:47 +0100544pre_setup_keep_going () {
Gilles Peskine7105a332020-03-28 18:50:43 +0100545 failure_count=0 # Number of failed components
546 last_failure_status=0 # Last failure status in this component
547
Gilles Peskine4848d7b2020-03-28 19:34:23 +0100548 # See err_trap
549 previous_failure_status=0
550 previous_failed_command=
551 previous_failure_funcall_depth=0
Gilles Peskine39a3b112020-03-28 21:27:40 +0100552 unset report_failed_command
Gilles Peskine4848d7b2020-03-28 19:34:23 +0100553
Gilles Peskine7c652162017-12-11 00:01:40 +0100554 start_red=
555 end_color=
556 if [ -t 1 ]; then
Gilles Peskine9736b9d2018-01-02 21:54:17 +0100557 case "${TERM:-}" in
Gilles Peskine7c652162017-12-11 00:01:40 +0100558 *color*|cygwin|linux|rxvt*|screen|[Eex]term*)
559 start_red=$(printf '\033[31m')
560 end_color=$(printf '\033[0m')
561 ;;
562 esac
563 fi
Gilles Peskine7105a332020-03-28 18:50:43 +0100564
565 # Keep a summary of failures in a file. We'll print it out at the end.
566 failure_summary_file=$PWD/all-sh-failures-$$.log
567 : >"$failure_summary_file"
568
569 # Whether it makes sense to keep a component going after the specified
570 # command fails (test command) or not (configure or build).
Gilles Peskine6702ce92021-08-06 11:35:17 +0200571 # This function normally receives the failing simple command
572 # ($BASH_COMMAND) as an argument, but if $report_failed_command is set,
573 # this is passed instead.
Gilles Peskine7105a332020-03-28 18:50:43 +0100574 # This doesn't have to be 100% accurate: all failures are recorded anyway.
Gilles Peskine76d40fa2021-08-02 23:29:53 +0200575 # False positives result in running things that can't be expected to
576 # work. False negatives result in things not running after something else
577 # failed even though they might have given useful feedback.
Gilles Peskine7105a332020-03-28 18:50:43 +0100578 can_keep_going_after_failure () {
579 case "$1" in
580 "msg "*) false;;
Gilles Peskine76d40fa2021-08-02 23:29:53 +0200581 "cd "*) false;;
582 *make*[\ /]tests*) false;; # make tests, make CFLAGS=-I../tests, ...
583 *test*) true;; # make test, tests/stuff, env V=v tests/stuff, ...
584 *make*check*) true;;
585 "grep "*) true;;
586 "[ "*) true;;
587 "! "*) true;;
Gilles Peskine7105a332020-03-28 18:50:43 +0100588 *) false;;
Gilles Peskine7c652162017-12-11 00:01:40 +0100589 esac
590 }
Gilles Peskine7105a332020-03-28 18:50:43 +0100591
592 # This function runs if there is any error in a component.
593 # It must either exit with a nonzero status, or set
594 # last_failure_status to a nonzero value.
595 err_trap () {
596 # Save $? (status of the failing command). This must be the very
597 # first thing, before $? is overridden.
598 last_failure_status=$?
Gilles Peskine39a3b112020-03-28 21:27:40 +0100599 failed_command=${report_failed_command-$BASH_COMMAND}
Gilles Peskine7105a332020-03-28 18:50:43 +0100600
Gilles Peskine4848d7b2020-03-28 19:34:23 +0100601 if [[ $last_failure_status -eq $previous_failure_status &&
602 "$failed_command" == "$previous_failed_command" &&
603 ${#FUNCNAME[@]} == $((previous_failure_funcall_depth - 1)) ]]
604 then
605 # The same command failed twice in a row, but this time one level
606 # less deep in the function call stack. This happens when the last
607 # command of a function returns a nonzero status, and the function
608 # returns that same status. Ignore the second failure.
609 previous_failure_funcall_depth=${#FUNCNAME[@]}
610 return
611 fi
612 previous_failure_status=$last_failure_status
613 previous_failed_command=$failed_command
614 previous_failure_funcall_depth=${#FUNCNAME[@]}
615
Gilles Peskine7105a332020-03-28 18:50:43 +0100616 text="$current_section: $failed_command -> $last_failure_status"
617 echo "${start_red}^^^^$text^^^^${end_color}" >&2
618 echo "$text" >>"$failure_summary_file"
619
620 # If the command is fatal (configure or build command), stop this
621 # component. Otherwise (test command) keep the component running
622 # (run more tests from the same build).
623 if ! can_keep_going_after_failure "$failed_command"; then
624 exit $last_failure_status
625 fi
626 }
627
Gilles Peskine7c652162017-12-11 00:01:40 +0100628 final_report () {
629 if [ $failure_count -gt 0 ]; then
630 echo
631 echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
Gilles Peskine7105a332020-03-28 18:50:43 +0100632 echo "${start_red}FAILED: $failure_count components${end_color}"
633 cat "$failure_summary_file"
Gilles Peskine7c652162017-12-11 00:01:40 +0100634 echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
635 elif [ -z "${1-}" ]; then
636 echo "SUCCESS :)"
637 fi
638 if [ -n "${1-}" ]; then
639 echo "Killed by SIG$1."
640 fi
Gilles Peskine7105a332020-03-28 18:50:43 +0100641 rm -f "$failure_summary_file"
642 if [ $failure_count -gt 0 ]; then
643 exit 1
644 fi
Gilles Peskine7c652162017-12-11 00:01:40 +0100645 }
Gilles Peskine8f073122018-11-27 15:58:47 +0100646}
647
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200648# record_status() and if_build_succeeded() are kept temporarily for backward
649# compatibility. Don't use them in new components.
Gilles Peskine7105a332020-03-28 18:50:43 +0100650record_status () {
651 "$@"
Gilles Peskine7c652162017-12-11 00:01:40 +0100652}
Gilles Peskine7c652162017-12-11 00:01:40 +0100653if_build_succeeded () {
Gilles Peskine7105a332020-03-28 18:50:43 +0100654 "$@"
Gilles Peskine7c652162017-12-11 00:01:40 +0100655}
656
Gilles Peskine39a3b112020-03-28 21:27:40 +0100657# '! true' does not trigger the ERR trap. Arrange to trigger it, with
658# a reasonably informative error message (not just "$@").
659not () {
660 if "$@"; then
661 report_failed_command="! $*"
662 false
663 unset report_failed_command
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200664 fi
665}
666
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200667pre_prepare_outcome_file () {
668 case "$MBEDTLS_TEST_OUTCOME_FILE" in
669 [!/]*) MBEDTLS_TEST_OUTCOME_FILE="$PWD/$MBEDTLS_TEST_OUTCOME_FILE";;
670 esac
671 if [ -n "$MBEDTLS_TEST_OUTCOME_FILE" ] && [ "$append_outcome" -eq 0 ]; then
672 rm -f "$MBEDTLS_TEST_OUTCOME_FILE"
673 fi
674}
675
Gilles Peskine8f073122018-11-27 15:58:47 +0100676pre_print_configuration () {
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200677 if [ $QUIET -eq 1 ]; then
678 return
679 fi
680
Gilles Peskine8f073122018-11-27 15:58:47 +0100681 msg "info: $0 configuration"
682 echo "MEMORY: $MEMORY"
683 echo "FORCE: $FORCE"
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200684 echo "MBEDTLS_TEST_OUTCOME_FILE: ${MBEDTLS_TEST_OUTCOME_FILE:-(none)}"
Gilles Peskine8f073122018-11-27 15:58:47 +0100685 echo "SEED: ${SEED-"UNSET"}"
Gilles Peskine636c26a2020-03-04 20:46:15 +0100686 echo
Gilles Peskine8f073122018-11-27 15:58:47 +0100687 echo "OPENSSL: $OPENSSL"
688 echo "OPENSSL_LEGACY: $OPENSSL_LEGACY"
689 echo "OPENSSL_NEXT: $OPENSSL_NEXT"
690 echo "GNUTLS_CLI: $GNUTLS_CLI"
691 echo "GNUTLS_SERV: $GNUTLS_SERV"
692 echo "GNUTLS_LEGACY_CLI: $GNUTLS_LEGACY_CLI"
693 echo "GNUTLS_LEGACY_SERV: $GNUTLS_LEGACY_SERV"
694 echo "ARMC5_BIN_DIR: $ARMC5_BIN_DIR"
695 echo "ARMC6_BIN_DIR: $ARMC6_BIN_DIR"
696}
Andres AG7770ea82016-10-10 15:46:20 +0100697
Andres AGd9eba4b2016-08-26 14:42:14 +0100698# Make sure the tools we need are available.
Gilles Peskine8f073122018-11-27 15:58:47 +0100699pre_check_tools () {
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000700 # Build the list of variables to pass to output_env.sh.
701 set env
SimonB2e23c822016-04-16 21:54:39 +0100702
Gilles Peskine87964262019-01-06 22:40:00 +0000703 case " $RUN_COMPONENTS " in
704 # Require OpenSSL and GnuTLS if running any tests (as opposed to
705 # only doing builds). Not all tests run OpenSSL and GnuTLS, but this
706 # is a good enough approximation in practice.
707 *" test_"*)
708 # To avoid setting OpenSSL and GnuTLS for each call to compat.sh
709 # and ssl-opt.sh, we just export the variables they require.
710 export OPENSSL_CMD="$OPENSSL"
711 export GNUTLS_CLI="$GNUTLS_CLI"
712 export GNUTLS_SERV="$GNUTLS_SERV"
713 # Avoid passing --seed flag in every call to ssl-opt.sh
714 if [ -n "${SEED-}" ]; then
715 export SEED
716 fi
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000717 set "$@" OPENSSL="$OPENSSL" OPENSSL_LEGACY="$OPENSSL_LEGACY"
718 set "$@" GNUTLS_CLI="$GNUTLS_CLI" GNUTLS_SERV="$GNUTLS_SERV"
719 set "$@" GNUTLS_LEGACY_CLI="$GNUTLS_LEGACY_CLI"
720 set "$@" GNUTLS_LEGACY_SERV="$GNUTLS_LEGACY_SERV"
Gilles Peskine87964262019-01-06 22:40:00 +0000721 check_tools "$OPENSSL" "$OPENSSL_LEGACY" "$OPENSSL_NEXT" \
722 "$GNUTLS_CLI" "$GNUTLS_SERV" \
723 "$GNUTLS_LEGACY_CLI" "$GNUTLS_LEGACY_SERV"
724 ;;
725 esac
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200726
Gilles Peskine87964262019-01-06 22:40:00 +0000727 case " $RUN_COMPONENTS " in
728 *_doxygen[_\ ]*) check_tools "doxygen" "dot";;
729 esac
Andres AGd9eba4b2016-08-26 14:42:14 +0100730
Gilles Peskine87964262019-01-06 22:40:00 +0000731 case " $RUN_COMPONENTS " in
Gilles Peskine6d061342020-04-30 18:19:32 +0200732 *_arm_none_eabi_gcc[_\ ]*) check_tools "${ARM_NONE_EABI_GCC_PREFIX}gcc";;
Gilles Peskine87964262019-01-06 22:40:00 +0000733 esac
Andres AGd9eba4b2016-08-26 14:42:14 +0100734
Gilles Peskine87964262019-01-06 22:40:00 +0000735 case " $RUN_COMPONENTS " in
736 *_mingw[_\ ]*) check_tools "i686-w64-mingw32-gcc";;
737 esac
738
739 case " $RUN_COMPONENTS " in
740 *" test_zeroize "*) check_tools "gdb";;
741 esac
742
743 case " $RUN_COMPONENTS " in
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000744 *_armcc*)
Gilles Peskine87964262019-01-06 22:40:00 +0000745 ARMC5_CC="$ARMC5_BIN_DIR/armcc"
746 ARMC5_AR="$ARMC5_BIN_DIR/armar"
Gilles Peskine18487f62020-04-30 23:11:54 +0200747 ARMC5_FROMELF="$ARMC5_BIN_DIR/fromelf"
Gilles Peskine87964262019-01-06 22:40:00 +0000748 ARMC6_CC="$ARMC6_BIN_DIR/armclang"
749 ARMC6_AR="$ARMC6_BIN_DIR/armar"
Gilles Peskine18487f62020-04-30 23:11:54 +0200750 ARMC6_FROMELF="$ARMC6_BIN_DIR/fromelf"
751 check_tools "$ARMC5_CC" "$ARMC5_AR" "$ARMC5_FROMELF" \
752 "$ARMC6_CC" "$ARMC6_AR" "$ARMC6_FROMELF";;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000753 esac
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000754
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200755 # past this point, no call to check_tool, only printing output
756 if [ $QUIET -eq 1 ]; then
757 return
758 fi
759
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000760 msg "info: output_env.sh"
761 case $RUN_COMPONENTS in
762 *_armcc*)
763 set "$@" ARMC5_CC="$ARMC5_CC" ARMC6_CC="$ARMC6_CC" RUN_ARMCC=1;;
764 *) set "$@" RUN_ARMCC=0;;
765 esac
766 "$@" scripts/output_env.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100767}
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +0100768
Gilles Peskine192c72f2017-12-21 15:59:21 +0100769
770
771################################################################
772#### Basic checks
773################################################################
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +0100774
775#
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200776# Test Suites to be executed
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100777#
Manuel Pégourié-Gonnard3d404b42015-07-08 21:59:16 +0100778# The test ordering tries to optimize for the following criteria:
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200779# 1. Catch possible problems early, by running first tests that run quickly
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100780# and/or are more likely to fail than others (eg I use Clang most of the
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200781# time, so start with a GCC build).
782# 2. Minimize total running time, by avoiding useless rebuilds
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100783#
Manuel Pégourié-Gonnard259b08a2016-01-08 16:27:41 +0100784# Indicative running times are given for reference.
785
Gilles Peskine8f073122018-11-27 15:58:47 +0100786component_check_recursion () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200787 msg "Check: recursion.pl" # < 1s
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200788 tests/scripts/recursion.pl library/*.c
Gilles Peskine8f073122018-11-27 15:58:47 +0100789}
Janos Follathb72c6782016-07-19 14:54:17 +0100790
Gilles Peskine8f073122018-11-27 15:58:47 +0100791component_check_generated_files () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200792 msg "Check: freshness of generated source files" # < 1s
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200793 tests/scripts/check-generated-files.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100794}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200795
Gilles Peskine8f073122018-11-27 15:58:47 +0100796component_check_doxy_blocks () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200797 msg "Check: doxygen markup outside doxygen blocks" # < 1s
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200798 tests/scripts/check-doxy-blocks.pl
Gilles Peskine8f073122018-11-27 15:58:47 +0100799}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200800
Gilles Peskine8f073122018-11-27 15:58:47 +0100801component_check_files () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200802 msg "Check: file sanity checks (permissions, encodings)" # < 1s
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200803 tests/scripts/check_files.py
Gilles Peskine8f073122018-11-27 15:58:47 +0100804}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200805
Gilles Peskine30e0bb42020-05-10 17:40:49 +0200806component_check_changelog () {
807 msg "Check: changelog entries" # < 1s
808 rm -f ChangeLog.new
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200809 scripts/assemble_changelog.py -o ChangeLog.new
Gilles Peskine30e0bb42020-05-10 17:40:49 +0200810 if [ -e ChangeLog.new ]; then
811 # Show the diff for information. It isn't an error if the diff is
812 # non-empty.
813 diff -u ChangeLog ChangeLog.new || true
814 rm ChangeLog.new
815 fi
816}
817
Gilles Peskine8f073122018-11-27 15:58:47 +0100818component_check_names () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200819 msg "Check: declared and exported names (builds the library)" # < 3s
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200820 tests/scripts/check_names.py -v
Gilles Peskine8f073122018-11-27 15:58:47 +0100821}
Darryl Greena07039c2018-03-13 16:48:16 +0000822
Gilles Peskine895868b2019-09-19 21:30:05 +0200823component_check_test_cases () {
824 msg "Check: test case descriptions" # < 1s
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +0200825 if [ $QUIET -eq 1 ]; then
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +0200826 opt='--quiet'
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +0200827 else
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +0200828 opt=''
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +0200829 fi
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200830 tests/scripts/check_test_cases.py $opt
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +0200831 unset opt
Gilles Peskine895868b2019-09-19 21:30:05 +0200832}
833
Gilles Peskine8f073122018-11-27 15:58:47 +0100834component_check_doxygen_warnings () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200835 msg "Check: doxygen warnings (builds the documentation)" # ~ 3s
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200836 tests/scripts/doxygen.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100837}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200838
Gilles Peskine192c72f2017-12-21 15:59:21 +0100839
Gilles Peskine636c26a2020-03-04 20:46:15 +0100840
Gilles Peskine192c72f2017-12-21 15:59:21 +0100841################################################################
842#### Build and test many configurations and targets
843################################################################
844
Gilles Peskine7832c9f2019-04-08 17:00:15 +0200845component_test_default_out_of_box () {
846 msg "build: make, default config (out-of-box)" # ~1min
847 make
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200848 # Disable fancy stuff
849 unset MBEDTLS_TEST_OUTCOME_FILE
Gilles Peskine7832c9f2019-04-08 17:00:15 +0200850
851 msg "test: main suites make, default config (out-of-box)" # ~10s
852 make test
853
854 msg "selftest: make, default config (out-of-box)" # ~10s
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200855 programs/test/selftest
Gilles Peskine7832c9f2019-04-08 17:00:15 +0200856}
857
Gilles Peskine8f073122018-11-27 15:58:47 +0100858component_test_default_cmake_gcc_asan () {
859 msg "build: cmake, gcc, ASan" # ~ 1 min 50s
Gilles Peskine8f073122018-11-27 15:58:47 +0100860 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
861 make
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200862
Gilles Peskine8f073122018-11-27 15:58:47 +0100863 msg "test: main suites (inc. selftests) (ASan build)" # ~ 50s
864 make test
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200865
Gilles Peskine97bea012020-04-23 23:37:45 +0200866 msg "test: selftest (ASan build)" # ~ 10s
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200867 programs/test/selftest
Gilles Peskine97bea012020-04-23 23:37:45 +0200868
Gilles Peskine8f073122018-11-27 15:58:47 +0100869 msg "test: ssl-opt.sh (ASan build)" # ~ 1 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200870 tests/ssl-opt.sh
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200871
Gilles Peskine8f073122018-11-27 15:58:47 +0100872 msg "test: compat.sh (ASan build)" # ~ 6 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200873 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +0200874
875 msg "test: context-info.sh (ASan build)" # ~ 15 sec
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200876 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100877}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200878
Hanno Becker01635512019-02-26 14:27:09 +0000879component_test_full_cmake_gcc_asan () {
880 msg "build: full config, cmake, gcc, ASan"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +0200881 scripts/config.py full
Hanno Becker01635512019-02-26 14:27:09 +0000882 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
883 make
884
885 msg "test: main suites (inc. selftests) (full config, ASan build)"
886 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +0100887
Gilles Peskine97bea012020-04-23 23:37:45 +0200888 msg "test: selftest (ASan build)" # ~ 10s
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200889 programs/test/selftest
Gilles Peskine97bea012020-04-23 23:37:45 +0200890
Gilles Peskine636c26a2020-03-04 20:46:15 +0100891 msg "test: ssl-opt.sh (full config, ASan build)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200892 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +0100893
894 msg "test: compat.sh (full config, ASan build)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200895 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +0200896
897 msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200898 tests/context-info.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +0100899}
900
Ronald Cronc3623db2020-10-29 10:51:32 +0100901component_test_psa_crypto_key_id_encodes_owner () {
902 msg "build: full config - USE_PSA_CRYPTO + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
903 scripts/config.py full
904 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
905 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
906 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
907 make
908
909 msg "test: full config - USE_PSA_CRYPTO + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
910 make test
911}
912
Gilles Peskine99a34622021-06-17 11:37:52 +0200913# check_renamed_symbols HEADER LIB
914# Check that if HEADER contains '#define MACRO ...' then MACRO is not a symbol
915# name is LIB.
916check_renamed_symbols () {
917 ! nm "$2" | sed 's/.* //' |
918 grep -x -F "$(sed -n 's/^ *# *define *\([A-Z_a-z][0-9A-Z_a-z]*\)..*/\1/p' "$1")"
919}
920
Gilles Peskine984c19f2021-06-15 18:37:38 +0200921component_build_psa_crypto_spm () {
922 msg "build: full config - USE_PSA_CRYPTO + PSA_CRYPTO_KEY_ID_ENCODES_OWNER + PSA_CRYPTO_SPM, make, gcc"
923 scripts/config.py full
924 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
925 scripts/config.py unset MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS
926 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
927 scripts/config.py set MBEDTLS_PSA_CRYPTO_SPM
928 # We can only compile, not link, since our test and sample programs
929 # aren't equipped for the modified names used when MBEDTLS_PSA_CRYPTO_SPM
930 # is active.
931 make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/spe' lib
Gilles Peskine99a34622021-06-17 11:37:52 +0200932
933 # Check that if a symbol is renamed by crypto_spe.h, the non-renamed
934 # version is not present.
935 echo "Checking for renamed symbols in the library"
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200936 check_renamed_symbols tests/include/spe/crypto_spe.h library/libmbedcrypto.a
Gilles Peskine984c19f2021-06-15 18:37:38 +0200937}
938
Ronald Cron336678b2021-01-28 17:54:24 +0100939component_test_psa_crypto_client () {
940 msg "build: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make"
941 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
942 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
943 scripts/config.py set MBEDTLS_PSA_CRYPTO_CLIENT
944 make
945
946 msg "test: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make"
947 make test
948}
949
Gilles Peskine636c26a2020-03-04 20:46:15 +0100950component_test_zlib_make() {
951 msg "build: zlib enabled, make"
952 scripts/config.py set MBEDTLS_ZLIB_SUPPORT
Gilles Peskine6fa69862021-10-05 09:36:03 +0200953 make ZLIB=1 CFLAGS='-Werror -O2'
Gilles Peskine636c26a2020-03-04 20:46:15 +0100954
955 msg "test: main suites (zlib, make)"
956 make test
957
958 msg "test: ssl-opt.sh (zlib, make)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200959 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +0100960}
961support_test_zlib_make () {
962 base=support_test_zlib_$$
963 cat <<'EOF' > ${base}.c
964#include "zlib.h"
965int main(void) { return 0; }
966EOF
967 gcc -o ${base}.exe ${base}.c -lz 2>/dev/null
968 ret=$?
969 rm -f ${base}.*
970 return $ret
971}
972
973component_test_zlib_cmake() {
974 msg "build: zlib enabled, cmake"
975 scripts/config.py set MBEDTLS_ZLIB_SUPPORT
Gilles Peskine25319702021-10-07 19:34:57 +0200976 cmake -D ENABLE_ZLIB_SUPPORT=On -D CMAKE_BUILD_TYPE:String=Release .
Gilles Peskine636c26a2020-03-04 20:46:15 +0100977 make
978
979 msg "test: main suites (zlib, cmake)"
980 make test
981
982 msg "test: ssl-opt.sh (zlib, cmake)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +0200983 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +0100984}
985support_test_zlib_cmake () {
986 support_test_zlib_make "$@"
Manuel Pégourié-Gonnardf2e29022020-01-24 10:17:20 +0100987}
Manuel Pégourié-Gonnard95e04492020-01-02 11:45:12 +0100988
Jaeden Ameroc17f2932021-05-14 08:34:32 +0100989component_test_psa_crypto_rsa_no_genprime() {
990 msg "build: default config minus MBEDTLS_GENPRIME"
991 scripts/config.py unset MBEDTLS_GENPRIME
992 make
993
994 msg "test: default config minus MBEDTLS_GENPRIME"
995 make test
996}
997
Gilles Peskine782f4112018-11-27 16:11:09 +0100998component_test_ref_configs () {
999 msg "test/build: ref-configs (ASan build)" # ~ 6 min 20s
1000 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001001 tests/scripts/test-ref-configs.pl
Gilles Peskine782f4112018-11-27 16:11:09 +01001002}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001003
Gilles Peskine8f073122018-11-27 15:58:47 +01001004component_test_sslv3 () {
1005 msg "build: Default + SSLv3 (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001006 scripts/config.py set MBEDTLS_SSL_PROTO_SSL3
Gilles Peskine8f073122018-11-27 15:58:47 +01001007 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1008 make
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001009
Gilles Peskine8f073122018-11-27 15:58:47 +01001010 msg "test: SSLv3 - main suites (inc. selftests) (ASan build)" # ~ 50s
1011 make test
Simon Butcher3ea7f522016-03-07 23:22:10 +00001012
Gilles Peskine8f073122018-11-27 15:58:47 +01001013 msg "build: SSLv3 - compat.sh (ASan build)" # ~ 6 min
Xiaofei Baif40545d2021-12-02 08:43:35 +00001014 tests/compat.sh -m 'tls1 tls1_1 tls12 dtls1 dtls12'
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001015 env OPENSSL_CMD="$OPENSSL_LEGACY" tests/compat.sh -m 'ssl3'
Simon Butcher3ea7f522016-03-07 23:22:10 +00001016
Gilles Peskine8f073122018-11-27 15:58:47 +01001017 msg "build: SSLv3 - ssl-opt.sh (ASan build)" # ~ 6 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001018 tests/ssl-opt.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02001019
1020 msg "build: SSLv3 - context-info.sh (ASan build)" # ~ 15 sec
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001021 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001022}
Simon Butcher3ea7f522016-03-07 23:22:10 +00001023
Gilles Peskine8f073122018-11-27 15:58:47 +01001024component_test_no_renegotiation () {
1025 msg "build: Default + !MBEDTLS_SSL_RENEGOTIATION (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001026 scripts/config.py unset MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine8f073122018-11-27 15:58:47 +01001027 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1028 make
Simon Butcher3ea7f522016-03-07 23:22:10 +00001029
Gilles Peskine8f073122018-11-27 15:58:47 +01001030 msg "test: !MBEDTLS_SSL_RENEGOTIATION - main suites (inc. selftests) (ASan build)" # ~ 50s
1031 make test
Hanno Becker134c2ab2017-10-12 15:29:50 +01001032
Gilles Peskine8f073122018-11-27 15:58:47 +01001033 msg "test: !MBEDTLS_SSL_RENEGOTIATION - ssl-opt.sh (ASan build)" # ~ 6 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001034 tests/ssl-opt.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001035}
Hanno Becker134c2ab2017-10-12 15:29:50 +01001036
Gilles Peskine636c26a2020-03-04 20:46:15 +01001037component_test_no_pem_no_fs () {
1038 msg "build: Default + !MBEDTLS_PEM_PARSE_C + !MBEDTLS_FS_IO (ASan build)"
1039 scripts/config.py unset MBEDTLS_PEM_PARSE_C
1040 scripts/config.py unset MBEDTLS_FS_IO
1041 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C # requires a filesystem
1042 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C # requires PSA ITS
1043 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1044 make
1045
1046 msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - main suites (inc. selftests) (ASan build)" # ~ 50s
1047 make test
1048
1049 msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - ssl-opt.sh (ASan build)" # ~ 6 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001050 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +01001051}
1052
Gilles Peskine8f073122018-11-27 15:58:47 +01001053component_test_rsa_no_crt () {
1054 msg "build: Default + RSA_NO_CRT (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001055 scripts/config.py set MBEDTLS_RSA_NO_CRT
Gilles Peskine8f073122018-11-27 15:58:47 +01001056 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1057 make
Manuel Pégourié-Gonnard246978d2014-11-20 13:29:53 +01001058
Gilles Peskine8f073122018-11-27 15:58:47 +01001059 msg "test: RSA_NO_CRT - main suites (inc. selftests) (ASan build)" # ~ 50s
1060 make test
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001061
Gilles Peskine8f073122018-11-27 15:58:47 +01001062 msg "test: RSA_NO_CRT - RSA-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001063 tests/ssl-opt.sh -f RSA
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001064
Gilles Peskine8f073122018-11-27 15:58:47 +01001065 msg "test: RSA_NO_CRT - RSA-related part of compat.sh (ASan build)" # ~ 3 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001066 tests/compat.sh -t RSA
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02001067
1068 msg "test: RSA_NO_CRT - RSA-related part of context-info.sh (ASan build)" # ~ 15 sec
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001069 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001070}
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001071
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001072component_test_no_ctr_drbg_classic () {
1073 msg "build: Full minus CTR_DRBG, classic crypto in TLS"
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001074 scripts/config.py full
1075 scripts/config.py unset MBEDTLS_CTR_DRBG_C
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001076 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001077
1078 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1079 make
1080
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001081 msg "test: Full minus CTR_DRBG, classic crypto - main suites"
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001082 make test
1083
Gilles Peskineba749042021-01-13 20:02:03 +01001084 # In this configuration, the TLS test programs use HMAC_DRBG.
1085 # The SSL tests are slow, so run a small subset, just enough to get
1086 # confidence that the SSL code copes with HMAC_DRBG.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001087 msg "test: Full minus CTR_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001088 tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server'
Gilles Peskineba749042021-01-13 20:02:03 +01001089
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001090 msg "test: Full minus CTR_DRBG, classic crypto - compat.sh (subset)"
Xiaofei Baif40545d2021-12-02 08:43:35 +00001091 tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001092}
1093
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001094component_test_no_ctr_drbg_use_psa () {
1095 msg "build: Full minus CTR_DRBG, PSA crypto in TLS"
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001096 scripts/config.py full
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001097 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1098 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001099
1100 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1101 make
1102
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001103 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - main suites"
1104 make test
1105
1106 # In this configuration, the TLS test programs use HMAC_DRBG.
1107 # The SSL tests are slow, so run a small subset, just enough to get
1108 # confidence that the SSL code copes with HMAC_DRBG.
1109 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001110 tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001111
1112 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - compat.sh (subset)"
Xiaofei Baif40545d2021-12-02 08:43:35 +00001113 tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001114}
1115
1116component_test_no_hmac_drbg_classic () {
1117 msg "build: Full minus HMAC_DRBG, classic crypto in TLS"
1118 scripts/config.py full
1119 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1120 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1121 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1122
1123 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1124 make
1125
1126 msg "test: Full minus HMAC_DRBG, classic crypto - main suites"
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001127 make test
1128
Gilles Peskinea2224342020-11-19 22:14:34 +01001129 # Normally our ECDSA implementation uses deterministic ECDSA. But since
1130 # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used
1131 # instead.
1132 # Test SSL with non-deterministic ECDSA. Only test features that
1133 # might be affected by how ECDSA signature is performed.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001134 msg "test: Full minus HMAC_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001135 tests/ssl-opt.sh -f 'Default\|SSL async private: sign'
Gilles Peskinea2224342020-11-19 22:14:34 +01001136
1137 # To save time, only test one protocol version, since this part of
1138 # the protocol is identical in (D)TLS up to 1.2.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001139 msg "test: Full minus HMAC_DRBG, classic crypto - compat.sh (ECDSA)"
Xiaofei Baif40545d2021-12-02 08:43:35 +00001140 tests/compat.sh -m tls12 -t 'ECDSA'
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001141}
1142
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001143component_test_no_hmac_drbg_use_psa () {
1144 msg "build: Full minus HMAC_DRBG, PSA crypto in TLS"
1145 scripts/config.py full
1146 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1147 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1148 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1149
1150 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1151 make
1152
1153 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - main suites"
1154 make test
1155
1156 # Normally our ECDSA implementation uses deterministic ECDSA. But since
1157 # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used
1158 # instead.
1159 # Test SSL with non-deterministic ECDSA. Only test features that
1160 # might be affected by how ECDSA signature is performed.
1161 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001162 tests/ssl-opt.sh -f 'Default\|SSL async private: sign'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001163
1164 # To save time, only test one protocol version, since this part of
1165 # the protocol is identical in (D)TLS up to 1.2.
1166 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - compat.sh (ECDSA)"
Xiaofei Baif40545d2021-12-02 08:43:35 +00001167 tests/compat.sh -m tls12 -t 'ECDSA'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001168}
1169
1170component_test_psa_external_rng_no_drbg_classic () {
1171 msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto in TLS"
1172 scripts/config.py full
1173 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1174 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
Gilles Peskine38c12fd2021-02-08 21:02:53 +01001175 scripts/config.py unset MBEDTLS_ENTROPY_C
1176 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1177 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001178 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1179 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1180 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1181 scripts/config.py set MBEDTLS_ECP_NO_INTERNAL_RNG
Gilles Peskine8eb29432021-02-03 20:07:11 +01001182 # When MBEDTLS_USE_PSA_CRYPTO is disabled and there is no DRBG,
1183 # the SSL test programs don't have an RNG and can't work. Explicitly
1184 # make them use the PSA RNG with -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG.
1185 make CFLAGS="$ASAN_CFLAGS -O2 -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001186
1187 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - main suites"
1188 make test
1189
Gilles Peskine8eb29432021-02-03 20:07:11 +01001190 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001191 tests/ssl-opt.sh -f 'Default'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001192}
1193
1194component_test_psa_external_rng_no_drbg_use_psa () {
1195 msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto in TLS"
Gilles Peskinec109b372020-11-23 17:39:04 +01001196 scripts/config.py full
1197 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
Gilles Peskine38c12fd2021-02-08 21:02:53 +01001198 scripts/config.py unset MBEDTLS_ENTROPY_C
1199 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1200 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskinec109b372020-11-23 17:39:04 +01001201 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1202 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1203 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1204 scripts/config.py set MBEDTLS_ECP_NO_INTERNAL_RNG
1205 make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
1206
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001207 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - main suites"
Gilles Peskinec109b372020-11-23 17:39:04 +01001208 make test
1209
Gilles Peskine8eb29432021-02-03 20:07:11 +01001210 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - ssl-opt.sh (subset)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001211 tests/ssl-opt.sh -f 'Default\|opaque'
Gilles Peskinec109b372020-11-23 17:39:04 +01001212}
1213
1214component_test_psa_external_rng_use_psa_crypto () {
1215 msg "build: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1216 scripts/config.py full
1217 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
1218 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1219 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1220 make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
1221
1222 msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1223 make test
1224
Gilles Peskineba749042021-01-13 20:02:03 +01001225 msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001226 tests/ssl-opt.sh -f 'Default\|opaque'
Gilles Peskinec109b372020-11-23 17:39:04 +01001227}
1228
Manuel Pégourié-Gonnard1a3f9ed2020-05-19 12:38:31 +02001229component_test_ecp_no_internal_rng () {
1230 msg "build: Default plus ECP_NO_INTERNAL_RNG minus DRBG modules"
1231 scripts/config.py set MBEDTLS_ECP_NO_INTERNAL_RNG
1232 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1233 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1234 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1235 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C # requires a DRBG
1236 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C # requires PSA Crypto
1237
1238 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1239 make
1240
1241 msg "test: ECP_NO_INTERNAL_RNG, no DRBG module"
1242 make test
1243
1244 # no SSL tests as they all depend on having a DRBG
1245}
1246
Manuel Pégourié-Gonnard53fb66d2020-06-04 09:43:14 +02001247component_test_ecp_restartable_no_internal_rng () {
1248 msg "build: Default plus ECP_RESTARTABLE and ECP_NO_INTERNAL_RNG, no DRBG"
1249 scripts/config.py set MBEDTLS_ECP_NO_INTERNAL_RNG
1250 scripts/config.py set MBEDTLS_ECP_RESTARTABLE
1251 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1252 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1253 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1254 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C # requires CTR_DRBG
1255 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C # requires PSA Crypto
1256
1257 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1258 make
1259
1260 msg "test: ECP_RESTARTABLE and ECP_NO_INTERNAL_RNG, no DRBG module"
1261 make test
1262
1263 # no SSL tests as they all depend on having a DRBG
1264}
1265
Gilles Peskine636c26a2020-03-04 20:46:15 +01001266component_test_new_ecdh_context () {
1267 msg "build: new ECDH context (ASan build)" # ~ 6 min
1268 scripts/config.py unset MBEDTLS_ECDH_LEGACY_CONTEXT
1269 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1270 make
1271
1272 msg "test: new ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s
1273 make test
1274
1275 msg "test: new ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001276 tests/ssl-opt.sh -f ECDH
Gilles Peskine636c26a2020-03-04 20:46:15 +01001277
1278 msg "test: new ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min
1279 # Exclude some symmetric ciphers that are redundant here to gain time.
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001280 tests/compat.sh -f ECDH -V NO -e 'ARCFOUR\|ARIA\|CAMELLIA\|CHACHA\|DES\|RC4'
Gilles Peskine636c26a2020-03-04 20:46:15 +01001281}
1282
1283component_test_everest () {
1284 msg "build: Everest ECDH context (ASan build)" # ~ 6 min
1285 scripts/config.py unset MBEDTLS_ECDH_LEGACY_CONTEXT
1286 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
1287 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Asan .
1288 make
1289
1290 msg "test: Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s
1291 make test
1292
1293 msg "test: Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001294 tests/ssl-opt.sh -f ECDH
Gilles Peskine636c26a2020-03-04 20:46:15 +01001295
1296 msg "test: Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min
1297 # Exclude some symmetric ciphers that are redundant here to gain time.
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001298 tests/compat.sh -f ECDH -V NO -e 'ARCFOUR\|ARIA\|CAMELLIA\|CHACHA\|DES\|RC4'
Gilles Peskine636c26a2020-03-04 20:46:15 +01001299}
1300
Gilles Peskined3beca92020-07-03 00:15:37 +02001301component_test_everest_curve25519_only () {
1302 msg "build: Everest ECDH context, only Curve25519" # ~ 6 min
1303 scripts/config.py unset MBEDTLS_ECDH_LEGACY_CONTEXT
1304 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
1305 scripts/config.py unset MBEDTLS_ECDSA_C
1306 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1307 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
1308 # Disable all curves
1309 for c in $(sed -n 's/#define \(MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED\).*/\1/p' <"$CONFIG_H"); do
1310 scripts/config.py unset "$c"
1311 done
1312 scripts/config.py set MBEDTLS_ECP_DP_CURVE25519_ENABLED
1313
1314 make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
1315
1316 msg "test: Everest ECDH context, only Curve25519" # ~ 50s
1317 make test
1318}
1319
Gilles Peskine8f073122018-11-27 15:58:47 +01001320component_test_small_ssl_out_content_len () {
1321 msg "build: small SSL_OUT_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001322 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
1323 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
Gilles Peskine8f073122018-11-27 15:58:47 +01001324 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1325 make
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001326
Gilles Peskine8f073122018-11-27 15:58:47 +01001327 msg "test: small SSL_OUT_CONTENT_LEN - ssl-opt.sh MFL and large packet tests"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001328 tests/ssl-opt.sh -f "Max fragment\|Large packet"
Gilles Peskine8f073122018-11-27 15:58:47 +01001329}
Angus Grattonc4dd0732018-04-11 16:28:39 +10001330
Gilles Peskine8f073122018-11-27 15:58:47 +01001331component_test_small_ssl_in_content_len () {
1332 msg "build: small SSL_IN_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001333 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 4096
1334 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 16384
Gilles Peskine8f073122018-11-27 15:58:47 +01001335 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1336 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10001337
Gilles Peskine8f073122018-11-27 15:58:47 +01001338 msg "test: small SSL_IN_CONTENT_LEN - ssl-opt.sh MFL tests"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001339 tests/ssl-opt.sh -f "Max fragment"
Gilles Peskine8f073122018-11-27 15:58:47 +01001340}
Angus Grattonc4dd0732018-04-11 16:28:39 +10001341
Gilles Peskine8f073122018-11-27 15:58:47 +01001342component_test_small_ssl_dtls_max_buffering () {
1343 msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001344 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 1000
Gilles Peskine8f073122018-11-27 15:58:47 +01001345 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1346 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10001347
Gilles Peskine8f073122018-11-27 15:58:47 +01001348 msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0 - ssl-opt.sh specific reordering test"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001349 tests/ssl-opt.sh -f "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg"
Gilles Peskine8f073122018-11-27 15:58:47 +01001350}
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001351
Gilles Peskine8f073122018-11-27 15:58:47 +01001352component_test_small_mbedtls_ssl_dtls_max_buffering () {
1353 msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1"
Gilles Peskine636c26a2020-03-04 20:46:15 +01001354 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 190
Gilles Peskine8f073122018-11-27 15:58:47 +01001355 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1356 make
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001357
Gilles Peskine8f073122018-11-27 15:58:47 +01001358 msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1 - ssl-opt.sh specific reordering test"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001359 tests/ssl-opt.sh -f "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket"
Gilles Peskine8f073122018-11-27 15:58:47 +01001360}
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001361
Gilles Peskine75cc7712019-09-06 19:47:17 +02001362component_test_psa_collect_statuses () {
1363 msg "build+test: psa_collect_statuses" # ~30s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02001364 scripts/config.py full
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001365 tests/scripts/psa_collect_statuses.py
Gilles Peskine75cc7712019-09-06 19:47:17 +02001366 # Check that psa_crypto_init() succeeded at least once
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001367 grep -q '^0:psa_crypto_init:' tests/statuses.log
Gilles Peskine75cc7712019-09-06 19:47:17 +02001368 rm -f tests/statuses.log
1369}
1370
Gilles Peskine8f073122018-11-27 15:58:47 +01001371component_test_full_cmake_clang () {
1372 msg "build: cmake, full config, clang" # ~ 50s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001373 scripts/config.py full
Gilles Peskine25319702021-10-07 19:34:57 +02001374 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release -D ENABLE_TESTING=On .
Gilles Peskine8f073122018-11-27 15:58:47 +01001375 make
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001376
k-stachowiak0291cb72019-06-26 15:52:12 +02001377 msg "test: main suites (full config, clang)" # ~ 5s
Gilles Peskine8f073122018-11-27 15:58:47 +01001378 make test
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +01001379
k-stachowiak0291cb72019-06-26 15:52:12 +02001380 msg "test: psa_constant_names (full config, clang)" # ~ 1s
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001381 tests/scripts/test_psa_constant_names.py
Gilles Peskine69e8f7f2020-02-26 19:51:43 +01001382
Gilles Peskine8f073122018-11-27 15:58:47 +01001383 msg "test: ssl-opt.sh default, ECJPAKE, SSL async (full config)" # ~ 1s
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001384 tests/ssl-opt.sh -f 'Default\|ECJPAKE\|SSL async private'
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001385
Andres Amaya Garcia2dadab72019-01-08 21:42:27 +00001386 msg "test: compat.sh RC4, DES, 3DES & NULL (full config)" # ~ 2 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001387 env OPENSSL_CMD="$OPENSSL_LEGACY" GNUTLS_CLI="$GNUTLS_LEGACY_CLI" GNUTLS_SERV="$GNUTLS_LEGACY_SERV" tests/compat.sh -e '^$' -f 'NULL\|DES\|RC4\|ARCFOUR'
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001388
Gilles Peskine8f073122018-11-27 15:58:47 +01001389 msg "test: compat.sh ARIA + ChachaPoly"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001390 env OPENSSL_CMD="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA'
Gilles Peskine8f073122018-11-27 15:58:47 +01001391}
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001392
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02001393component_test_memsan_constant_flow () {
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02001394 # This tests both (1) accesses to undefined memory, and (2) branches or
1395 # memory access depending on secret values. To distinguish between those:
1396 # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist?
1397 # - or alternatively, change the build type to MemSanDbg, which enables
1398 # origin tracking and nicer stack traces (which are useful for debugging
1399 # anyway), and check if the origin was TEST_CF_SECRET() or something else.
1400 msg "build: cmake MSan (clang), full config with constant flow testing"
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02001401 scripts/config.py full
1402 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
1403 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
1404 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
1405 make
1406
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02001407 msg "test: main suites (Msan + constant flow)"
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02001408 make test
1409}
1410
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02001411component_test_valgrind_constant_flow () {
1412 # This tests both (1) everything that valgrind's memcheck usually checks
1413 # (heap buffer overflows, use of uninitialized memory, use-after-free,
1414 # etc.) and (2) branches or memory access depending on secret values,
1415 # which will be reported as uninitialized memory. To distinguish between
1416 # secret and actually uninitialized:
1417 # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist?
1418 # - or alternatively, build with debug info and manually run the offending
1419 # test suite with valgrind --track-origins=yes, then check if the origin
1420 # was TEST_CF_SECRET() or something else.
1421 msg "build: cmake release GCC, full config with constant flow testing"
1422 scripts/config.py full
1423 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
1424 cmake -D CMAKE_BUILD_TYPE:String=Release .
1425 make
1426
1427 # this only shows a summary of the results (how many of each type)
1428 # details are left in Testing/<date>/DynamicAnalysis.xml
1429 msg "test: main suites (valgrind + constant flow)"
1430 make memcheck
1431}
1432
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001433component_test_default_no_deprecated () {
Gilles Peskine8386ea22020-04-30 09:07:29 +02001434 # Test that removing the deprecated features from the default
1435 # configuration leaves something consistent.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001436 msg "build: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 30s
1437 scripts/config.py set MBEDTLS_DEPRECATED_REMOVED
1438 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra'
1439
1440 msg "test: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 5s
1441 make test
1442}
1443
1444component_test_full_no_deprecated () {
Gilles Peskine30de2e82020-04-20 21:39:22 +02001445 msg "build: make, full_no_deprecated config" # ~ 30s
1446 scripts/config.py full_no_deprecated
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001447 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra'
1448
Gilles Peskine30de2e82020-04-20 21:39:22 +02001449 msg "test: make, full_no_deprecated config" # ~ 5s
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001450 make test
1451}
1452
Gilles Peskine8386ea22020-04-30 09:07:29 +02001453component_test_full_no_deprecated_deprecated_warning () {
1454 # Test that there is nothing deprecated in "full_no_deprecated".
1455 # A deprecated feature would trigger a warning (made fatal) from
1456 # MBEDTLS_DEPRECATED_WARNING.
Gilles Peskine30de2e82020-04-20 21:39:22 +02001457 msg "build: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 30s
1458 scripts/config.py full_no_deprecated
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001459 scripts/config.py unset MBEDTLS_DEPRECATED_REMOVED
1460 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
1461 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra'
1462
Gilles Peskine30de2e82020-04-20 21:39:22 +02001463 msg "test: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 5s
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001464 make test
1465}
1466
Gilles Peskine8386ea22020-04-30 09:07:29 +02001467component_test_full_deprecated_warning () {
1468 # Test that when MBEDTLS_DEPRECATED_WARNING is enabled, the build passes
1469 # with only certain whitelisted types of warnings.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001470 msg "build: make, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001471 scripts/config.py full
1472 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001473 # Expect warnings from '#warning' directives in check_config.h.
1474 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=cpp' lib programs
Manuel Pégourié-Gonnard6b368922018-02-20 12:02:07 +01001475
Gilles Peskine8386ea22020-04-30 09:07:29 +02001476 msg "build: make tests, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
1477 # Set MBEDTLS_TEST_DEPRECATED to enable tests for deprecated features.
1478 # By default those are disabled when MBEDTLS_DEPRECATED_WARNING is set.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001479 # Expect warnings from '#warning' directives in check_config.h and
1480 # from the use of deprecated functions in test suites.
1481 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=deprecated-declarations -Wno-error=cpp -DMBEDTLS_TEST_DEPRECATED' tests
Gilles Peskine841b14b2019-11-26 17:37:37 +01001482
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001483 msg "test: full config + MBEDTLS_TEST_DEPRECATED" # ~ 30s
1484 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01001485}
Jaeden Ameroed93bdc2018-11-02 16:57:24 +00001486
Gilles Peskineec541fe2020-01-31 14:24:14 +01001487# Check that the specified libraries exist and are empty.
1488are_empty_libraries () {
1489 nm "$@" >/dev/null 2>/dev/null
1490 ! nm "$@" 2>/dev/null | grep -v ':$' | grep .
1491}
1492
1493component_build_crypto_default () {
1494 msg "build: make, crypto only"
1495 scripts/config.py crypto
Gilles Peskine6bb39152020-02-03 11:59:20 +01001496 make CFLAGS='-O1 -Werror'
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001497 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01001498}
1499
1500component_build_crypto_full () {
1501 msg "build: make, crypto only, full config"
1502 scripts/config.py crypto_full
Gilles Peskine6bb39152020-02-03 11:59:20 +01001503 make CFLAGS='-O1 -Werror'
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001504 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01001505}
1506
1507component_build_crypto_baremetal () {
1508 msg "build: make, crypto only, baremetal config"
1509 scripts/config.py crypto_baremetal
David Horstmann3cb5e9b2021-11-30 11:40:54 +00001510 make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001511 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01001512}
Daniel Axtens6f63cc72020-09-02 21:30:13 +10001513support_build_crypto_baremetal () {
Daniel Axtens1a021af2020-08-31 14:22:58 +10001514 support_build_baremetal "$@"
1515}
1516
1517component_build_baremetal () {
1518 msg "build: make, baremetal config"
1519 scripts/config.py baremetal
David Horstmann3cb5e9b2021-11-30 11:40:54 +00001520 make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/"
Daniel Axtens1a021af2020-08-31 14:22:58 +10001521}
1522support_build_baremetal () {
Daniel Axtens6f63cc72020-09-02 21:30:13 +10001523 # Older Glibc versions include time.h from other headers such as stdlib.h,
1524 # which makes the no-time.h-in-baremetal check fail. Ubuntu 16.04 has this
1525 # problem, Ubuntu 18.04 is ok.
1526 ! grep -q -F time.h /usr/include/x86_64-linux-gnu/sys/types.h
1527}
Gilles Peskineec541fe2020-01-31 14:24:14 +01001528
Gilles Peskine8f073122018-11-27 15:58:47 +01001529component_test_depends_curves () {
1530 msg "test/build: curves.pl (gcc)" # ~ 4 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001531 tests/scripts/curves.pl
Gilles Peskine8f073122018-11-27 15:58:47 +01001532}
Jaeden Ameroacaabe72018-11-07 11:52:52 +00001533
John Durkopc14be902020-08-20 06:16:41 -07001534component_test_depends_curves_psa () {
1535 msg "test/build: curves.pl with MBEDTLS_USE_PSA_CRYPTO defined (gcc)"
1536 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001537 tests/scripts/curves.pl
John Durkopc14be902020-08-20 06:16:41 -07001538}
1539
Gilles Peskine8f073122018-11-27 15:58:47 +01001540component_test_depends_hashes () {
1541 msg "test/build: depends-hashes.pl (gcc)" # ~ 2 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001542 tests/scripts/depends-hashes.pl
Gilles Peskine8f073122018-11-27 15:58:47 +01001543}
Jaeden Ameroacaabe72018-11-07 11:52:52 +00001544
John Durkop2ec2eaa2020-08-24 18:29:15 -07001545component_test_depends_hashes_psa () {
1546 msg "test/build: depends-hashes.pl with MBEDTLS_USE_PSA_CRYPTO defined (gcc)"
1547 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001548 tests/scripts/depends-hashes.pl
John Durkop2ec2eaa2020-08-24 18:29:15 -07001549}
1550
Gilles Peskine8f073122018-11-27 15:58:47 +01001551component_test_depends_pkalgs () {
1552 msg "test/build: depends-pkalgs.pl (gcc)" # ~ 2 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001553 tests/scripts/depends-pkalgs.pl
Gilles Peskine8f073122018-11-27 15:58:47 +01001554}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001555
John Durkop619e09e2020-09-08 22:19:56 -07001556component_test_depends_pkalgs_psa () {
1557 msg "test/build: depends-pkalgs.pl with MBEDTLS_USE_PSA_CRYPTO defined (gcc)"
1558 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001559 tests/scripts/depends-pkalgs.pl
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001560}
1561
Gilles Peskine8f073122018-11-27 15:58:47 +01001562component_build_key_exchanges () {
1563 msg "test/build: key-exchanges (gcc)" # ~ 1 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001564 tests/scripts/key-exchanges.pl
Gilles Peskine8f073122018-11-27 15:58:47 +01001565}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001566
Gilles Peskine9b356402021-07-09 15:19:28 +02001567component_test_make_cxx () {
1568 msg "build: Unix make, full, gcc + g++"
1569 scripts/config.py full
1570 make TEST_CPP=1 lib programs
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001571
Gilles Peskine9b356402021-07-09 15:19:28 +02001572 msg "test: cpp_dummy_build"
1573 programs/test/cpp_dummy_build
Gilles Peskine8f073122018-11-27 15:58:47 +01001574}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001575
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001576component_test_no_use_psa_crypto_full_cmake_asan() {
1577 # full minus MBEDTLS_USE_PSA_CRYPTO: run the same set of tests as basic-build-test.sh
Gilles Peskinedc3a1792019-09-03 11:42:04 +02001578 msg "build: cmake, full config minus MBEDTLS_USE_PSA_CRYPTO, ASan"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001579 scripts/config.py full
1580 scripts/config.py set MBEDTLS_ECP_RESTARTABLE # not using PSA, so enable restartable ECC
1581 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
1582 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1583 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
Gilles Peskinedc6d8382020-04-12 14:21:55 +02001584 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001585 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
Manuel Pégourié-Gonnardd8167e82019-02-01 11:12:52 +01001586 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
Andrzej Kurekde5a0072019-02-01 07:03:03 -05001587 make
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +02001588
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001589 msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO)"
Andrzej Kurekde5a0072019-02-01 07:03:03 -05001590 make test
Manuel Pégourié-Gonnard503a5ef2015-10-23 09:04:45 +02001591
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001592 msg "test: ssl-opt.sh (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001593 tests/ssl-opt.sh
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01001594
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001595 msg "test: compat.sh default (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001596 tests/compat.sh
Andrzej Kurek991f9fe2018-07-02 09:08:21 -04001597
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001598 msg "test: compat.sh RC4, DES & NULL (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001599 env OPENSSL_CMD="$OPENSSL_LEGACY" GNUTLS_CLI="$GNUTLS_LEGACY_CLI" GNUTLS_SERV="$GNUTLS_LEGACY_SERV" tests/compat.sh -e '3DES\|DES-CBC3' -f 'NULL\|DES\|RC4\|ARCFOUR'
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05001600
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001601 msg "test: compat.sh ARIA + ChachaPoly (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02001602 env OPENSSL_CMD="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA'
Andrzej Kurekde5a0072019-02-01 07:03:03 -05001603}
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05001604
Ronald Crond2c53e62021-09-13 09:38:05 +02001605component_test_psa_crypto_config_accel_ecdsa () {
1606 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA"
1607
1608 # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having
1609 # partial support for cipher operations in the driver test library.
1610 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
1611 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
1612
1613 # SHA384 needed for some ECDSA signature tests.
1614 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA512_C
1615
1616 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA KEY_TYPE_ECC_KEY_PAIR KEY_TYPE_ECC_PUBLIC_KEY"
1617 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
1618 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
1619
1620 # Restore test driver base configuration
1621 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA512_C
1622
1623 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1624 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1625 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1626 scripts/config.py unset MBEDTLS_ECDSA_C
1627 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
1628 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1629
1630 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
1631 make CFLAGS="$ASAN_CFLAGS -O -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
1632
Gilles Peskined4c5c3d2022-02-04 00:30:54 +01001633 not grep mbedtls_ecdsa_ library/ecdsa.o
Ronald Crond2c53e62021-09-13 09:38:05 +02001634
1635 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA"
1636 make test
1637}
1638
1639component_test_psa_crypto_config_accel_rsa_signature () {
1640 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated RSA signature"
1641
1642 # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having
1643 # partial support for cipher operations in the driver test library.
1644 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
1645 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
1646
1647 # It seems it is not possible to remove only the support for RSA signature
1648 # in the library. Thus we have to remove all RSA support (signature and
1649 # encryption/decryption). AS there is no driver support for asymmetric
1650 # encryption/decryption so far remove RSA encryption/decryption from the
1651 # application algorithm list.
1652 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
1653 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
1654
1655 # Make sure both the library and the test library support the SHA hash
1656 # algorithms and only those ones (SHA256 is included by default). That way:
1657 # - the test library can compute the RSA signatures even in the case of a
1658 # composite RSA signature algorithm based on a SHA hash (no other hash
1659 # used in the unit tests).
1660 # - the dependency of RSA signature tests on PSA_WANT_ALG_SHA_xyz is
1661 # fulfilled as the hash SHA algorithm is supported by the library, and
1662 # thus the tests are run, not skipped.
1663 # - when testing a signature key with an algorithm wildcard built from
1664 # PSA_ALG_ANY_HASH as algorithm to test with the key, the chosen hash
1665 # algorithm based on the hashes supported by the library is also
1666 # supported by the test library.
1667 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD2
1668 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD4
1669 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
1670 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160_C
1671
1672 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA1_C
1673 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA512_C
1674 # We need PEM parsing in the test library as well to support the import
1675 # of PEM encoded RSA keys.
1676 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_PEM_PARSE_C
1677 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_BASE64_C
1678
1679 loc_accel_list="ALG_RSA_PKCS1V15_SIGN ALG_RSA_PSS KEY_TYPE_RSA_KEY_PAIR KEY_TYPE_RSA_PUBLIC_KEY"
1680 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
1681 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
1682
1683 # Restore test driver base configuration
1684 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA1_C
1685 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA512_C
1686 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_PEM_PARSE_C
1687 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_BASE64_C
1688
1689
1690 # Mbed TLS library build
1691 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1692 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1693
1694 # Remove RSA support and its dependencies
1695 scripts/config.py unset MBEDTLS_PKCS1_V15
1696 scripts/config.py unset MBEDTLS_PKCS1_V21
1697 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
1698 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
1699 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
1700 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
1701 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
1702 scripts/config.py unset MBEDTLS_RSA_C
1703 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
1704
1705 scripts/config.py unset MBEDTLS_MD2_C
1706 scripts/config.py unset MBEDTLS_MD4_C
1707 scripts/config.py unset MBEDTLS_MD5_C
1708 scripts/config.py unset MBEDTLS_RIPEMD160_C
1709 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1
1710 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_1
1711 scripts/config.py unset MBEDTLS_SSL_CBC_RECORD_SPLITTING
1712
1713 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
1714 make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
1715
Gilles Peskined4c5c3d2022-02-04 00:30:54 +01001716 not grep mbedtls_rsa_rsassa_pkcs1_v15_sign library/rsa.o
1717 not grep mbedtls_rsa_rsassa_pss_sign_ext library/rsa.o
Ronald Crond2c53e62021-09-13 09:38:05 +02001718
1719 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated RSA signature"
1720 make test
1721}
1722
Ronald Cronf7e483c2021-05-08 14:32:59 +02001723component_test_psa_crypto_config_accel_hash () {
1724 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
1725
1726 # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having
1727 # partial support for cipher operations in the driver test library.
1728 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
1729 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
1730
1731 loc_accel_list="ALG_MD4 ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512"
1732 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
1733 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
1734
1735 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1736 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1737 scripts/config.py unset MBEDTLS_MD2_C
1738 scripts/config.py unset MBEDTLS_MD4_C
1739 scripts/config.py unset MBEDTLS_MD5_C
1740 scripts/config.py unset MBEDTLS_RIPEMD160_C
1741 scripts/config.py unset MBEDTLS_SHA1_C
1742 # Don't unset MBEDTLS_SHA256_C as it is needed by PSA crypto core.
1743 scripts/config.py unset MBEDTLS_SHA512_C
1744 # Unset MBEDTLS_SSL_PROTO_SSL3, MBEDTLS_SSL_PROTO_TLS1 and MBEDTLS_SSL_PROTO_TLS1_1 as they depend on MBEDTLS_SHA1_C
1745 scripts/config.py unset MBEDTLS_SSL_PROTO_SSL3
1746 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1
1747 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_1
1748 # Unset MBEDTLS_SSL_CBC_RECORD_SPLITTING as it depends on MBEDTLS_SSL_PROTO_TLS1 in the default configuration.
1749 scripts/config.py unset MBEDTLS_SSL_CBC_RECORD_SPLITTING
1750 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
1751 make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
1752
Gilles Peskined4c5c3d2022-02-04 00:30:54 +01001753 not grep mbedtls_sha512_init library/sha512.o
1754 not grep mbedtls_sha1_init library/sha1.o
Ronald Cronf7e483c2021-05-08 14:32:59 +02001755
1756 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
1757 make test
1758}
1759
Ronald Cron09623702021-10-18 11:26:01 +02001760component_test_psa_crypto_config_accel_cipher () {
1761 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated cipher"
1762
1763 loc_accel_list="ALG_CBC_NO_PADDING ALG_CBC_PKCS7 ALG_CTR ALG_CFB ALG_OFB ALG_XTS KEY_TYPE_DES"
1764 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
1765 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
1766
1767 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1768 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1769
1770 # There is no intended accelerator support for ALG STREAM_CIPHER and
1771 # ALG_ECB_NO_PADDING. Therefore, asking for them in the build implies the
1772 # inclusion of the Mbed TLS cipher operations. As we want to test here with
1773 # cipher operations solely supported by accelerators, disabled those
1774 # PSA configuration options.
1775 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
1776 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
1777 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_CMAC
1778
1779 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
1780 scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7
1781 scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR
1782 scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB
1783 scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB
1784 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
1785 scripts/config.py unset MBEDTLS_DES_C
1786
1787 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
1788 make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
1789
Gilles Peskined4c5c3d2022-02-04 00:30:54 +01001790 not grep mbedtls_des* library/des.o
Ronald Cron09623702021-10-18 11:26:01 +02001791
1792 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
1793 make test
1794}
1795
John Durkop4377bf72020-10-23 01:26:57 -07001796component_test_psa_crypto_config_no_driver() {
1797 # full plus MBEDTLS_PSA_CRYPTO_CONFIG
1798 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG minus MBEDTLS_PSA_CRYPTO_DRIVERS"
1799 scripts/config.py full
1800 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1801 scripts/config.py unset MBEDTLS_PSA_CRYPTO_DRIVERS
1802 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
John Durkope7012c72020-10-26 09:55:01 -07001803 make CC=gcc CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkop4377bf72020-10-23 01:26:57 -07001804
1805 msg "test: full + MBEDTLS_PSA_CRYPTO_CONFIG minus MBEDTLS_PSA_CRYPTO_DRIVERS"
John Durkopd8959392020-09-20 23:09:17 -07001806 make test
1807}
1808
Przemyslaw Stekiel7ce979a2021-10-13 11:09:44 +02001809component_test_psa_crypto_config_chachapoly_disabled() {
1810 # full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305
1811 msg "build: full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305"
1812 scripts/config.py full
1813 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
1814 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_GCM
1815 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_CHACHA20_POLY1305
1816 make CC=gcc CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
1817
1818 msg "test: full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305"
1819 make test
1820}
1821
John Durkop8ac0b802020-10-23 01:32:15 -07001822# This should be renamed to test and updated once the accelerator ECDSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001823component_build_psa_accel_alg_ecdsa() {
John Durkopdd544e12020-10-12 21:47:19 -07001824 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_ECDSA
1825 # without MBEDTLS_ECDSA_C
John Durkop28baa1f2020-10-23 00:51:52 -07001826 # PSA_WANT_ALG_ECDSA and PSA_WANT_ALG_DETERMINISTIC_ECDSA are already
1827 # set in include/psa/crypto_config.h
John Durkopdd544e12020-10-12 21:47:19 -07001828 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_ECDSA without MBEDTLS_ECDSA_C"
John Durkopd8959392020-09-20 23:09:17 -07001829 scripts/config.py full
1830 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1831 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1832 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1833 scripts/config.py unset MBEDTLS_ECDSA_C
John Durkop28baa1f2020-10-23 00:51:52 -07001834 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1835 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
John Durkopd8959392020-09-20 23:09:17 -07001836 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
John Durkop28baa1f2020-10-23 00:51:52 -07001837 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_ECDSA -DMBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkopd8959392020-09-20 23:09:17 -07001838}
1839
John Durkopd0321952020-10-29 21:37:36 -07001840# This should be renamed to test and updated once the accelerator ECDH code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001841component_build_psa_accel_alg_ecdh() {
John Durkopd0321952020-10-29 21:37:36 -07001842 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_ECDH
1843 # without MBEDTLS_ECDH_C
1844 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_ECDH without MBEDTLS_ECDH_C"
1845 scripts/config.py full
1846 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1847 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1848 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1849 scripts/config.py unset MBEDTLS_ECDH_C
1850 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
1851 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1852 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
1853 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
1854 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1855 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1856 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_ECDH -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1857}
1858
John Durkopf4c4cb02020-10-28 20:09:55 -07001859# This should be renamed to test and updated once the accelerator ECC key pair code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001860component_build_psa_accel_key_type_ecc_key_pair() {
John Durkop9814fa22020-11-04 12:28:15 -08001861 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_ECC_KEY_PAIR
1862 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_ECC_KEY_PAIR"
John Durkopf4c4cb02020-10-28 20:09:55 -07001863 scripts/config.py full
1864 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1865 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1866 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
John Durkop9814fa22020-11-04 12:28:15 -08001867 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_KEY_PAIR 1
John Durkop07cc04a2020-11-16 22:08:34 -08001868 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
John Durkopf4c4cb02020-10-28 20:09:55 -07001869 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
John Durkop9814fa22020-11-04 12:28:15 -08001870 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkopf4c4cb02020-10-28 20:09:55 -07001871}
1872
1873# This should be renamed to test and updated once the accelerator ECC public key code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001874component_build_psa_accel_key_type_ecc_public_key() {
John Durkop9814fa22020-11-04 12:28:15 -08001875 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY
1876 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY"
John Durkopf4c4cb02020-10-28 20:09:55 -07001877 scripts/config.py full
1878 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1879 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1880 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
John Durkop9814fa22020-11-04 12:28:15 -08001881 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
1882 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR
John Durkopf4c4cb02020-10-28 20:09:55 -07001883 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
John Durkop9814fa22020-11-04 12:28:15 -08001884 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkopf4c4cb02020-10-28 20:09:55 -07001885}
1886
John Durkopd0321952020-10-29 21:37:36 -07001887# This should be renamed to test and updated once the accelerator HMAC code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001888component_build_psa_accel_alg_hmac() {
John Durkopd0321952020-10-29 21:37:36 -07001889 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_HMAC
1890 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_HMAC"
1891 scripts/config.py full
1892 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1893 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1894 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1895 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1896 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HMAC -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1897}
1898
1899# This should be renamed to test and updated once the accelerator HKDF code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001900component_build_psa_accel_alg_hkdf() {
John Durkopd0321952020-10-29 21:37:36 -07001901 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_HKDF
1902 # without MBEDTLS_HKDF_C
1903 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_HKDF without MBEDTLS_HKDF_C"
1904 scripts/config.py full
1905 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1906 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1907 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1908 scripts/config.py unset MBEDTLS_HKDF_C
John Durkopbd069d32020-10-31 22:14:03 -07001909 # Make sure to unset TLS1_3_EXPERIMENTAL since it requires HKDF_C and will not build properly without it.
1910 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
John Durkopd0321952020-10-29 21:37:36 -07001911 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1912 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HKDF -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1913}
1914
John Durkop1b7ee052020-11-27 08:51:22 -08001915# This should be renamed to test and updated once the accelerator MD2 code is in place and ready to test.
1916component_build_psa_accel_alg_md2() {
1917 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_MD2 without other hashes
1918 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_MD2 - other hashes"
1919 scripts/config.py full
1920 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1921 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1922 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1923 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD4
1924 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
1925 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
1926 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
1927 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
1928 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
1929 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
1930 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
1931 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1932 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_MD2 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1933}
1934
1935# This should be renamed to test and updated once the accelerator MD4 code is in place and ready to test.
1936component_build_psa_accel_alg_md4() {
1937 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_MD4 without other hashes
1938 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_MD4 - other hashes"
1939 scripts/config.py full
1940 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1941 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1942 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1943 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD2
1944 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
1945 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
1946 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
1947 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
1948 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
1949 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
1950 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
1951 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1952 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_MD4 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1953}
1954
1955# This should be renamed to test and updated once the accelerator MD5 code is in place and ready to test.
1956component_build_psa_accel_alg_md5() {
1957 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_MD5 without other hashes
1958 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_MD5 - other hashes"
1959 scripts/config.py full
1960 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1961 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1962 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1963 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD2
1964 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD4
1965 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
1966 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
1967 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
1968 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
1969 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
1970 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
1971 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1972 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_MD5 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1973}
1974
1975# This should be renamed to test and updated once the accelerator RIPEMD160 code is in place and ready to test.
1976component_build_psa_accel_alg_ripemd160() {
1977 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RIPEMD160 without other hashes
1978 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RIPEMD160 - other hashes"
1979 scripts/config.py full
1980 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1981 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1982 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1983 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD2
1984 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD4
1985 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
1986 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
1987 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
1988 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
1989 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
1990 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
1991 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1992 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RIPEMD160 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1993}
1994
1995# This should be renamed to test and updated once the accelerator SHA1 code is in place and ready to test.
1996component_build_psa_accel_alg_sha1() {
1997 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_1 without other hashes
1998 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_1 - other hashes"
1999 scripts/config.py full
2000 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2001 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2002 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2003 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD2
2004 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD4
2005 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2006 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2007 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2008 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
2009 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2010 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
2011 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2012 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_1 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2013}
2014
2015# This should be renamed to test and updated once the accelerator SHA224 code is in place and ready to test.
2016component_build_psa_accel_alg_sha224() {
2017 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_224 without other hashes
2018 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_224 - other hashes"
2019 scripts/config.py full
2020 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2021 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2022 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2023 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD2
2024 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD4
2025 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2026 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2027 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2028 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2029 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
2030 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2031 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_224 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2032}
2033
2034# This should be renamed to test and updated once the accelerator SHA256 code is in place and ready to test.
2035component_build_psa_accel_alg_sha256() {
2036 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_256 without other hashes
2037 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_256 - other hashes"
2038 scripts/config.py full
2039 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2040 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2041 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2042 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD2
2043 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD4
2044 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2045 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2046 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2047 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2048 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2049 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
2050 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2051 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_256 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2052}
2053
2054# This should be renamed to test and updated once the accelerator SHA384 code is in place and ready to test.
2055component_build_psa_accel_alg_sha384() {
2056 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_384 without other hashes
2057 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_384 - other hashes"
2058 scripts/config.py full
2059 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2060 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2061 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2062 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD2
2063 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD4
2064 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2065 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2066 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2067 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2068 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
2069 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2070 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_384 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2071}
2072
2073# This should be renamed to test and updated once the accelerator SHA512 code is in place and ready to test.
2074component_build_psa_accel_alg_sha512() {
2075 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_512 without other hashes
2076 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_512 - other hashes"
2077 scripts/config.py full
2078 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2079 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2080 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2081 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD2
2082 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD4
2083 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2084 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2085 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2086 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2087 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
2088 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2089 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2090 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_512 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2091}
2092
John Durkopd0321952020-10-29 21:37:36 -07002093# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002094component_build_psa_accel_alg_rsa_pkcs1v15_crypt() {
John Durkopbd069d32020-10-31 22:14:03 -07002095 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2096 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PKCS1V15_CRYPT + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
John Durkopd0321952020-10-29 21:37:36 -07002097 scripts/config.py full
2098 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2099 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2100 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
John Durkopbd069d32020-10-31 22:14:03 -07002101 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002102 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
2103 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
2104 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS
John Durkopd0321952020-10-29 21:37:36 -07002105 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
John Durkopbd069d32020-10-31 22:14:03 -07002106 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2107}
2108
2109# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002110component_build_psa_accel_alg_rsa_pkcs1v15_sign() {
John Durkopbd069d32020-10-31 22:14:03 -07002111 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PKCS1V15_SIGN and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
2112 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PKCS1V15_SIGN + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
2113 scripts/config.py full
2114 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2115 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2116 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2117 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002118 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2119 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
2120 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS
John Durkopbd069d32020-10-31 22:14:03 -07002121 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2122 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2123}
2124
2125# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002126component_build_psa_accel_alg_rsa_oaep() {
John Durkopbd069d32020-10-31 22:14:03 -07002127 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_OAEP and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
2128 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_OAEP + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
2129 scripts/config.py full
2130 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2131 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2132 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2133 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_OAEP 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002134 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2135 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
2136 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS
John Durkopbd069d32020-10-31 22:14:03 -07002137 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2138 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_OAEP -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2139}
2140
2141# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002142component_build_psa_accel_alg_rsa_pss() {
John Durkopbd069d32020-10-31 22:14:03 -07002143 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PSS and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
2144 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PSS + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
2145 scripts/config.py full
2146 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2147 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2148 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2149 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002150 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2151 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
2152 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
John Durkopbd069d32020-10-31 22:14:03 -07002153 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2154 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PSS -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2155}
2156
2157# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002158component_build_psa_accel_key_type_rsa_key_pair() {
John Durkopbd069d32020-10-31 22:14:03 -07002159 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_RSA_KEY_PAIR and PSA_WANT_ALG_RSA_PSS
2160 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR + PSA_WANT_ALG_RSA_PSS"
2161 scripts/config.py full
2162 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2163 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2164 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2165 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1
2166 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR 1
2167 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2168 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2169}
2170
2171# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002172component_build_psa_accel_key_type_rsa_public_key() {
John Durkopbd069d32020-10-31 22:14:03 -07002173 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY and PSA_WANT_ALG_RSA_PSS
2174 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY + PSA_WANT_ALG_RSA_PSS"
2175 scripts/config.py full
2176 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2177 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2178 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2179 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1
2180 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
2181 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2182 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07002183}
2184
Gilles Peskineadcde5e2019-06-12 16:05:50 +02002185component_test_check_params_functionality () {
2186 msg "build+test: MBEDTLS_CHECK_PARAMS functionality"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002187 scripts/config.py full # includes CHECK_PARAMS
Gilles Peskineadcde5e2019-06-12 16:05:50 +02002188 # Make MBEDTLS_PARAM_FAILED call mbedtls_param_failed().
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002189 scripts/config.py unset MBEDTLS_CHECK_PARAMS_ASSERT
Ronald Crona1236142020-07-01 16:01:21 +02002190 make CC=gcc CFLAGS='-Werror -O1' all test
Gilles Peskineadcde5e2019-06-12 16:05:50 +02002191}
2192
Gilles Peskineb28636b2019-01-02 19:06:24 +01002193component_test_check_params_without_platform () {
2194 msg "build+test: MBEDTLS_CHECK_PARAMS without MBEDTLS_PLATFORM_C"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002195 scripts/config.py full # includes CHECK_PARAMS
Gilles Peskineadcde5e2019-06-12 16:05:50 +02002196 # Keep MBEDTLS_PARAM_FAILED as assert.
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002197 scripts/config.py unset MBEDTLS_PLATFORM_EXIT_ALT
2198 scripts/config.py unset MBEDTLS_PLATFORM_TIME_ALT
2199 scripts/config.py unset MBEDTLS_PLATFORM_FPRINTF_ALT
2200 scripts/config.py unset MBEDTLS_PLATFORM_MEMORY
Gilles Peskine32e889d2020-04-12 23:43:28 +02002201 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002202 scripts/config.py unset MBEDTLS_PLATFORM_PRINTF_ALT
2203 scripts/config.py unset MBEDTLS_PLATFORM_SNPRINTF_ALT
2204 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
2205 scripts/config.py unset MBEDTLS_PLATFORM_C
Gilles Peskineb28636b2019-01-02 19:06:24 +01002206 make CC=gcc CFLAGS='-Werror -O1' all test
2207}
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05002208
Gilles Peskineb28636b2019-01-02 19:06:24 +01002209component_test_check_params_silent () {
2210 msg "build+test: MBEDTLS_CHECK_PARAMS with alternative MBEDTLS_PARAM_FAILED()"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002211 scripts/config.py full # includes CHECK_PARAMS
Gilles Peskineadcde5e2019-06-12 16:05:50 +02002212 # Set MBEDTLS_PARAM_FAILED to nothing.
Gilles Peskineb28636b2019-01-02 19:06:24 +01002213 sed -i 's/.*\(#define MBEDTLS_PARAM_FAILED( cond )\).*/\1/' "$CONFIG_H"
2214 make CC=gcc CFLAGS='-Werror -O1' all test
2215}
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05002216
Gilles Peskine8f073122018-11-27 15:58:47 +01002217component_test_no_platform () {
2218 # Full configuration build, without platform support, file IO and net sockets.
2219 # This should catch missing mbedtls_printf definitions, and by disabling file
2220 # IO, it should catch missing '#include <stdio.h>'
2221 msg "build: full config except platform/fsio/net, make, gcc, C99" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002222 scripts/config.py full
2223 scripts/config.py unset MBEDTLS_PLATFORM_C
2224 scripts/config.py unset MBEDTLS_NET_C
2225 scripts/config.py unset MBEDTLS_PLATFORM_MEMORY
2226 scripts/config.py unset MBEDTLS_PLATFORM_PRINTF_ALT
2227 scripts/config.py unset MBEDTLS_PLATFORM_FPRINTF_ALT
2228 scripts/config.py unset MBEDTLS_PLATFORM_SNPRINTF_ALT
2229 scripts/config.py unset MBEDTLS_PLATFORM_TIME_ALT
2230 scripts/config.py unset MBEDTLS_PLATFORM_EXIT_ALT
Gilles Peskine32e889d2020-04-12 23:43:28 +02002231 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002232 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
2233 scripts/config.py unset MBEDTLS_FS_IO
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002234 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002235 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
2236 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
Gilles Peskine8f073122018-11-27 15:58:47 +01002237 # Note, _DEFAULT_SOURCE needs to be defined for platforms using glibc version >2.19,
2238 # to re-enable platform integration features otherwise disabled in C99 builds
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002239 make CC=gcc CFLAGS='-Werror -Wall -Wextra -std=c99 -pedantic -Os -D_DEFAULT_SOURCE' lib programs
2240 make CC=gcc CFLAGS='-Werror -Wall -Wextra -Os' test
Gilles Peskine8f073122018-11-27 15:58:47 +01002241}
Manuel Pégourié-Gonnarda71780e2015-02-13 13:56:55 +00002242
Gilles Peskine8f073122018-11-27 15:58:47 +01002243component_build_no_std_function () {
2244 # catch compile bugs in _uninit functions
2245 msg "build: full config with NO_STD_FUNCTION, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002246 scripts/config.py full
2247 scripts/config.py set MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
2248 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
Gilles Peskine32e889d2020-04-12 23:43:28 +02002249 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskine31fdda12021-10-08 11:45:47 +02002250 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Check .
Gilles Peskine25319702021-10-07 19:34:57 +02002251 make
Gilles Peskine8f073122018-11-27 15:58:47 +01002252}
Manuel Pégourié-Gonnarddccb80b2015-06-03 10:20:33 +01002253
Gilles Peskine8f073122018-11-27 15:58:47 +01002254component_build_no_ssl_srv () {
2255 msg "build: full config except ssl_srv.c, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002256 scripts/config.py full
2257 scripts/config.py unset MBEDTLS_SSL_SRV_C
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002258 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1'
Gilles Peskine8f073122018-11-27 15:58:47 +01002259}
Manuel Pégourié-Gonnard66b8e952015-05-20 11:13:56 +02002260
Gilles Peskine8f073122018-11-27 15:58:47 +01002261component_build_no_ssl_cli () {
2262 msg "build: full config except ssl_cli.c, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002263 scripts/config.py full
2264 scripts/config.py unset MBEDTLS_SSL_CLI_C
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002265 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1'
Gilles Peskine8f073122018-11-27 15:58:47 +01002266}
Manuel Pégourié-Gonnard66b8e952015-05-20 11:13:56 +02002267
Gilles Peskine8f073122018-11-27 15:58:47 +01002268component_build_no_sockets () {
2269 # Note, C99 compliance can also be tested with the sockets support disabled,
2270 # as that requires a POSIX platform (which isn't the same as C99).
2271 msg "build: full config except net_sockets.c, make, gcc -std=c99 -pedantic" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002272 scripts/config.py full
2273 scripts/config.py unset MBEDTLS_NET_C # getaddrinfo() undeclared, etc.
2274 scripts/config.py set MBEDTLS_NO_PLATFORM_ENTROPY # uses syscall() on GNU/Linux
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002275 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1 -std=c99 -pedantic' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01002276}
Manuel Pégourié-Gonnard009a2642015-05-29 10:31:13 +02002277
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04002278component_test_memory_buffer_allocator_backtrace () {
2279 msg "build: default config with memory buffer allocator and backtrace enabled"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002280 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
2281 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
2282 scripts/config.py set MBEDTLS_MEMORY_BACKTRACE
2283 scripts/config.py set MBEDTLS_MEMORY_DEBUG
Gilles Peskineff30bd02021-10-19 21:33:32 +02002284 CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release .
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04002285 make
2286
2287 msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE"
2288 make test
2289}
2290
2291component_test_memory_buffer_allocator () {
2292 msg "build: default config with memory buffer allocator"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002293 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
2294 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
Gilles Peskineff30bd02021-10-19 21:33:32 +02002295 CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release .
Hanno Becker0fb9ba22019-02-26 14:34:13 +00002296 make
2297
2298 msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C"
2299 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01002300
2301 msg "test: ssl-opt.sh, MBEDTLS_MEMORY_BUFFER_ALLOC_C"
2302 # MBEDTLS_MEMORY_BUFFER_ALLOC is slow. Skip tests that tend to time out.
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002303 tests/ssl-opt.sh -e '^DTLS proxy'
Hanno Becker0fb9ba22019-02-26 14:34:13 +00002304}
2305
Gilles Peskine8f073122018-11-27 15:58:47 +01002306component_test_no_max_fragment_length () {
2307 # Run max fragment length tests with MFL disabled
2308 msg "build: default config except MFL extension (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002309 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Gilles Peskine8f073122018-11-27 15:58:47 +01002310 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2311 make
Hanno Becker5175ac62017-09-18 15:36:25 +01002312
Gilles Peskine8f073122018-11-27 15:58:47 +01002313 msg "test: ssl-opt.sh, MFL-related tests"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002314 tests/ssl-opt.sh -f "Max fragment length"
Gilles Peskine8f073122018-11-27 15:58:47 +01002315}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00002316
Hanno Becker545ced42019-02-19 11:10:48 +00002317component_test_asan_remove_peer_certificate () {
2318 msg "build: default config with MBEDTLS_SSL_KEEP_PEER_CERTIFICATE disabled (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002319 scripts/config.py unset MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
Hanno Becker545ced42019-02-19 11:10:48 +00002320 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2321 make
2322
2323 msg "test: !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
2324 make test
2325
2326 msg "test: ssl-opt.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002327 tests/ssl-opt.sh
Hanno Becker545ced42019-02-19 11:10:48 +00002328
2329 msg "test: compat.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002330 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02002331
2332 msg "test: context-info.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002333 tests/context-info.sh
Hanno Becker545ced42019-02-19 11:10:48 +00002334}
2335
Gilles Peskine8f073122018-11-27 15:58:47 +01002336component_test_no_max_fragment_length_small_ssl_out_content_len () {
2337 msg "build: no MFL extension, small SSL_OUT_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002338 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2339 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
2340 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
Gilles Peskine8f073122018-11-27 15:58:47 +01002341 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2342 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10002343
Gilles Peskine8f073122018-11-27 15:58:47 +01002344 msg "test: MFL tests (disabled MFL extension case) & large packet tests"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002345 tests/ssl-opt.sh -f "Max fragment length\|Large buffer"
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02002346
2347 msg "test: context-info.sh (disabled MFL extension case)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002348 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01002349}
Angus Grattonc4dd0732018-04-11 16:28:39 +10002350
Darryl Greenaad82f92019-12-02 10:53:11 +00002351component_test_variable_ssl_in_out_buffer_len () {
2352 msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled (ASan build)"
2353 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
2354 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2355 make
2356
2357 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
2358 make test
2359
2360 msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002361 tests/ssl-opt.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002362
2363 msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002364 tests/compat.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002365}
2366
2367component_test_variable_ssl_in_out_buffer_len_CID () {
2368 msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled (ASan build)"
2369 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
2370 scripts/config.py set MBEDTLS_SSL_DTLS_CONNECTION_ID
2371
2372 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2373 make
2374
2375 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID"
2376 make test
2377
2378 msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002379 tests/ssl-opt.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002380
2381 msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002382 tests/compat.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002383}
2384
2385component_test_variable_ssl_in_out_buffer_len_record_splitting () {
2386 msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_CBC_RECORD_SPLITTING enabled (ASan build)"
2387 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
2388 scripts/config.py set MBEDTLS_SSL_CBC_RECORD_SPLITTING
2389
2390 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2391 make
2392
2393 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_CBC_RECORD_SPLITTING"
2394 make test
2395
2396 msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_CBC_RECORD_SPLITTING enabled"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002397 tests/ssl-opt.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002398
2399 msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_CBC_RECORD_SPLITTING enabled"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002400 tests/compat.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002401}
2402
Piotr Nowicki0937ed22019-11-26 16:32:40 +01002403component_test_ssl_alloc_buffer_and_mfl () {
2404 msg "build: default config with memory buffer allocator and MFL extension"
2405 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
2406 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
2407 scripts/config.py set MBEDTLS_MEMORY_DEBUG
2408 scripts/config.py set MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2409 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Gilles Peskineff30bd02021-10-19 21:33:32 +02002410 CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release .
Piotr Nowicki0937ed22019-11-26 16:32:40 +01002411 make
2412
2413 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH"
2414 make test
2415
2416 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002417 tests/ssl-opt.sh -f "Handshake memory usage"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01002418}
2419
Gilles Peskine636c26a2020-03-04 20:46:15 +01002420component_test_when_no_ciphersuites_have_mac () {
2421 msg "build: when no ciphersuites have MAC"
2422 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
2423 scripts/config.py unset MBEDTLS_ARC4_C
2424 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
2425 make
2426
2427 msg "test: !MBEDTLS_SSL_SOME_MODES_USE_MAC"
2428 make test
2429
2430 msg "test ssl-opt.sh: !MBEDTLS_SSL_SOME_MODES_USE_MAC"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002431 tests/ssl-opt.sh -f 'Default\|EtM' -e 'without EtM'
Gilles Peskine636c26a2020-03-04 20:46:15 +01002432}
2433
Gilles Peskine8f073122018-11-27 15:58:47 +01002434component_test_null_entropy () {
2435 msg "build: default config with MBEDTLS_TEST_NULL_ENTROPY (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002436 scripts/config.py set MBEDTLS_TEST_NULL_ENTROPY
2437 scripts/config.py set MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
2438 scripts/config.py set MBEDTLS_ENTROPY_C
2439 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
Gilles Peskine32e889d2020-04-12 23:43:28 +02002440 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002441 scripts/config.py unset MBEDTLS_ENTROPY_HARDWARE_ALT
2442 scripts/config.py unset MBEDTLS_HAVEGE_C
Gilles Peskine5fa32a72019-01-06 19:48:30 +00002443 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan -D UNSAFE_BUILD=ON .
Gilles Peskine8f073122018-11-27 15:58:47 +01002444 make
Janos Follath06c54002016-06-09 13:57:40 +01002445
Gilles Peskine8f073122018-11-27 15:58:47 +01002446 msg "test: MBEDTLS_TEST_NULL_ENTROPY - main suites (inc. selftests) (ASan build)"
2447 make test
2448}
Janos Follath06c54002016-06-09 13:57:40 +01002449
Raoul Strackxa4e86142020-06-15 17:03:13 +02002450component_test_no_date_time () {
2451 msg "build: default config without MBEDTLS_HAVE_TIME_DATE"
2452 scripts/config.py unset MBEDTLS_HAVE_TIME_DATE
Gilles Peskine31fdda12021-10-08 11:45:47 +02002453 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Check .
Raoul Strackxa4e86142020-06-15 17:03:13 +02002454 make
2455
2456 msg "test: !MBEDTLS_HAVE_TIME_DATE - main suites"
2457 make test
2458}
2459
Gilles Peskine8f073122018-11-27 15:58:47 +01002460component_test_platform_calloc_macro () {
2461 msg "build: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002462 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
2463 scripts/config.py set MBEDTLS_PLATFORM_CALLOC_MACRO calloc
2464 scripts/config.py set MBEDTLS_PLATFORM_FREE_MACRO free
Gilles Peskine8f073122018-11-27 15:58:47 +01002465 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2466 make
Hanno Beckere5fecec2018-10-11 11:02:52 +01002467
Gilles Peskine8f073122018-11-27 15:58:47 +01002468 msg "test: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)"
2469 make test
2470}
Hanno Beckere5fecec2018-10-11 11:02:52 +01002471
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02002472component_test_malloc_0_null () {
2473 msg "build: malloc(0) returns NULL (ASan+UBSan build)"
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01002474 scripts/config.py full
Gilles Peskine004206c2019-10-21 17:11:33 +02002475 make CC=gcc CFLAGS="'-DMBEDTLS_CONFIG_FILE=\"$PWD/tests/configs/config-wrapper-malloc-0-null.h\"' $ASAN_CFLAGS -O" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02002476
2477 msg "test: malloc(0) returns NULL (ASan+UBSan build)"
2478 make test
2479
2480 msg "selftest: malloc(0) returns NULL (ASan+UBSan build)"
2481 # Just the calloc selftest. "make test" ran the others as part of the
2482 # test suites.
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002483 programs/test/selftest calloc
Gilles Peskine765d2402020-02-11 18:26:34 +01002484
2485 msg "test ssl-opt.sh: malloc(0) returns NULL (ASan+UBSan build)"
2486 # Run a subset of the tests. The choice is a balance between coverage
2487 # and time (including time indirectly wasted due to flaky tests).
2488 # The current choice is to skip tests whose description includes
2489 # "proxy", which is an approximation of skipping tests that use the
2490 # UDP proxy, which tend to be slower and flakier.
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002491 tests/ssl-opt.sh -e 'proxy'
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02002492}
2493
Gilles Peskine8f073122018-11-27 15:58:47 +01002494component_test_aes_fewer_tables () {
2495 msg "build: default config with AES_FEWER_TABLES enabled"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002496 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
Gilles Peskine8f073122018-11-27 15:58:47 +01002497 make CC=gcc CFLAGS='-Werror -Wall -Wextra'
Hanno Becker83ebf782017-07-07 12:29:15 +01002498
Gilles Peskine8f073122018-11-27 15:58:47 +01002499 msg "test: AES_FEWER_TABLES"
2500 make test
2501}
Hanno Becker83ebf782017-07-07 12:29:15 +01002502
Gilles Peskine8f073122018-11-27 15:58:47 +01002503component_test_aes_rom_tables () {
2504 msg "build: default config with AES_ROM_TABLES enabled"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002505 scripts/config.py set MBEDTLS_AES_ROM_TABLES
Gilles Peskine8f073122018-11-27 15:58:47 +01002506 make CC=gcc CFLAGS='-Werror -Wall -Wextra'
Hanno Becker83ebf782017-07-07 12:29:15 +01002507
Gilles Peskine8f073122018-11-27 15:58:47 +01002508 msg "test: AES_ROM_TABLES"
2509 make test
2510}
Hanno Becker83ebf782017-07-07 12:29:15 +01002511
Gilles Peskine8f073122018-11-27 15:58:47 +01002512component_test_aes_fewer_tables_and_rom_tables () {
2513 msg "build: default config with AES_ROM_TABLES and AES_FEWER_TABLES enabled"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002514 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
2515 scripts/config.py set MBEDTLS_AES_ROM_TABLES
Gilles Peskine8f073122018-11-27 15:58:47 +01002516 make CC=gcc CFLAGS='-Werror -Wall -Wextra'
Hanno Becker83ebf782017-07-07 12:29:15 +01002517
Gilles Peskine8f073122018-11-27 15:58:47 +01002518 msg "test: AES_FEWER_TABLES + AES_ROM_TABLES"
2519 make test
2520}
2521
Gilles Peskine592f5912019-10-07 18:49:32 +02002522component_test_ctr_drbg_aes_256_sha_256 () {
2523 msg "build: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01002524 scripts/config.py full
2525 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
2526 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
Gilles Peskine592f5912019-10-07 18:49:32 +02002527 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2528 make
2529
2530 msg "test: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
2531 make test
2532}
2533
2534component_test_ctr_drbg_aes_128_sha_512 () {
2535 msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01002536 scripts/config.py full
2537 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
2538 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
Gilles Peskine592f5912019-10-07 18:49:32 +02002539 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2540 make
2541
2542 msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)"
2543 make test
2544}
2545
2546component_test_ctr_drbg_aes_128_sha_256 () {
2547 msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01002548 scripts/config.py full
2549 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
2550 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
2551 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
Gilles Peskine592f5912019-10-07 18:49:32 +02002552 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2553 make
2554
2555 msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
2556 make test
2557}
2558
Gilles Peskinef96aefe2019-07-24 14:58:38 +02002559component_test_se_default () {
2560 msg "build: default config + MBEDTLS_PSA_CRYPTO_SE_C"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002561 scripts/config.py set MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine004206c2019-10-21 17:11:33 +02002562 make CC=clang CFLAGS="$ASAN_CFLAGS -Os" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinef96aefe2019-07-24 14:58:38 +02002563
2564 msg "test: default config + MBEDTLS_PSA_CRYPTO_SE_C"
2565 make test
2566}
2567
Steven Cooremand57203d2020-07-16 20:28:59 +02002568component_test_psa_crypto_drivers () {
Steven Cooreman55ae2172020-07-17 19:46:15 +02002569 msg "build: MBEDTLS_PSA_CRYPTO_DRIVERS w/ driver hooks"
Steven Cooreman753f9732021-03-15 11:38:44 +01002570 scripts/config.py full
Steven Cooremand57203d2020-07-16 20:28:59 +02002571 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
Steven Cooreman6801f082021-02-19 17:21:22 +01002572 scripts/config.py set MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS
Gilles Peskinefe0acc62021-09-20 19:20:04 +02002573 loc_cflags="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST_ALL"
2574 loc_cflags="${loc_cflags} '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'"
Ronald Cron17b3afc2020-12-10 18:17:09 +01002575 loc_cflags="${loc_cflags} -I../tests/include -O2"
2576
2577 make CC=gcc CFLAGS="${loc_cflags}" LDFLAGS="$ASAN_CFLAGS"
Steven Cooremand57203d2020-07-16 20:28:59 +02002578
Steven Cooreman753f9732021-03-15 11:38:44 +01002579 msg "test: full + MBEDTLS_PSA_CRYPTO_DRIVERS"
Steven Cooremand57203d2020-07-16 20:28:59 +02002580 make test
2581}
2582
Gilles Peskine8f073122018-11-27 15:58:47 +01002583component_test_make_shared () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002584 msg "build/test: make shared" # ~ 40s
Andrzej Kurek232e8f92019-10-03 03:18:01 -04002585 make SHARED=1 all check
Gilles Peskine56c01612019-07-03 20:43:32 +02002586 ldd programs/util/strerror | grep libmbedcrypto
Gilles Peskine27482f12021-11-04 12:52:14 +01002587 programs/test/dlopen_demo.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01002588}
Manuel Pégourié-Gonnard9b06abe2015-06-25 09:56:07 +02002589
Gilles Peskinecf740502019-07-03 20:43:05 +02002590component_test_cmake_shared () {
2591 msg "build/test: cmake shared" # ~ 2min
2592 cmake -DUSE_SHARED_MBEDTLS_LIBRARY=On .
2593 make
Gilles Peskine56c01612019-07-03 20:43:32 +02002594 ldd programs/util/strerror | grep libmbedcrypto
Gilles Peskinecf740502019-07-03 20:43:05 +02002595 make test
Gilles Peskine27482f12021-11-04 12:52:14 +01002596 programs/test/dlopen_demo.sh
Gilles Peskinecf740502019-07-03 20:43:05 +02002597}
2598
Gilles Peskineec10bf12019-09-20 19:56:06 +02002599test_build_opt () {
2600 info=$1 cc=$2; shift 2
2601 for opt in "$@"; do
2602 msg "build/test: $cc $opt, $info" # ~ 30s
Gilles Peskinee094a182020-04-14 20:08:41 +02002603 make CC="$cc" CFLAGS="$opt -std=c99 -pedantic -Wall -Wextra -Werror"
Gilles Peskineec10bf12019-09-20 19:56:06 +02002604 # We're confident enough in compilers to not run _all_ the tests,
2605 # but at least run the unit tests. In particular, runs with
2606 # optimizations use inline assembly whereas runs with -O0
2607 # skip inline assembly.
2608 make test # ~30s
2609 make clean
2610 done
2611}
2612
2613component_test_clang_opt () {
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01002614 scripts/config.py full
Gilles Peskineec10bf12019-09-20 19:56:06 +02002615 test_build_opt 'full config' clang -O0 -Os -O2
2616}
2617
2618component_test_gcc_opt () {
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01002619 scripts/config.py full
Gilles Peskineec10bf12019-09-20 19:56:06 +02002620 test_build_opt 'full config' gcc -O0 -Os -O2
2621}
2622
Gilles Peskineabf9b4d2019-07-03 20:42:16 +02002623component_build_mbedtls_config_file () {
2624 msg "build: make with MBEDTLS_CONFIG_FILE" # ~40s
Gilles Peskine6af9dc92022-04-07 20:55:57 +02002625 scripts/config.py -w full_config.h full
Gilles Peskineabf9b4d2019-07-03 20:42:16 +02002626 echo '#error "MBEDTLS_CONFIG_FILE is not working"' >"$CONFIG_H"
2627 make CFLAGS="-I '$PWD' -DMBEDTLS_CONFIG_FILE='\"full_config.h\"'"
2628 rm -f full_config.h
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00002629}
2630
Gilles Peskine8f073122018-11-27 15:58:47 +01002631component_test_m32_o0 () {
Gilles Peskinea0c51fb2021-10-07 19:27:16 +02002632 # Build without optimization, so as to use portable C code (in a 32-bit
2633 # build) and not the i386-specific inline assembly.
Simon Butcher8e6a22a2018-07-20 21:27:33 +01002634 msg "build: i386, make, gcc -O0 (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002635 scripts/config.py full
Gilles Peskine8fd59422019-10-21 17:11:33 +02002636 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O0" LDFLAGS="-m32 $ASAN_CFLAGS"
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01002637
Simon Butcher8e6a22a2018-07-20 21:27:33 +01002638 msg "test: i386, make, gcc -O0 (ASan build)"
2639 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01002640}
Gilles Peskine878cf602019-01-06 20:50:38 +00002641support_test_m32_o0 () {
2642 case $(uname -m) in
2643 *64*) true;;
2644 *) false;;
2645 esac
2646}
Simon Butcher8e6a22a2018-07-20 21:27:33 +01002647
Gilles Peskine6fa69862021-10-05 09:36:03 +02002648component_test_m32_o2 () {
2649 # Build with optimization, to use the i386 specific inline assembly
2650 # and go faster for tests.
2651 msg "build: i386, make, gcc -O2 (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002652 scripts/config.py full
Gilles Peskine6fa69862021-10-05 09:36:03 +02002653 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O2" LDFLAGS="-m32 $ASAN_CFLAGS"
Simon Butcher8e6a22a2018-07-20 21:27:33 +01002654
Gilles Peskine6fa69862021-10-05 09:36:03 +02002655 msg "test: i386, make, gcc -O2 (ASan build)"
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01002656 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01002657
Gilles Peskine6fa69862021-10-05 09:36:03 +02002658 msg "test ssl-opt.sh, i386, make, gcc-O2"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002659 tests/ssl-opt.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01002660}
Gilles Peskine3daa83e2021-10-07 19:25:29 +02002661support_test_m32_o2 () {
Gilles Peskine878cf602019-01-06 20:50:38 +00002662 support_test_m32_o0 "$@"
2663}
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01002664
Gilles Peskine0c6b7992019-04-12 20:29:48 +02002665component_test_m32_everest () {
2666 msg "build: i386, Everest ECDH context (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002667 scripts/config.py unset MBEDTLS_ECDH_LEGACY_CONTEXT
2668 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
Gilles Peskine8fd59422019-10-21 17:11:33 +02002669 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O2" LDFLAGS="-m32 $ASAN_CFLAGS"
Gilles Peskine0c6b7992019-04-12 20:29:48 +02002670
2671 msg "test: i386, Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s
2672 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01002673
2674 msg "test: i386, Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002675 tests/ssl-opt.sh -f ECDH
Gilles Peskine636c26a2020-03-04 20:46:15 +01002676
2677 msg "test: i386, Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min
2678 # Exclude some symmetric ciphers that are redundant here to gain time.
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002679 tests/compat.sh -f ECDH -V NO -e 'ARCFOUR\|ARIA\|CAMELLIA\|CHACHA\|DES\|RC4'
Gilles Peskine0c6b7992019-04-12 20:29:48 +02002680}
2681support_test_m32_everest () {
2682 support_test_m32_o0 "$@"
2683}
2684
Gilles Peskine8f073122018-11-27 15:58:47 +01002685component_test_mx32 () {
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01002686 msg "build: 64-bit ILP32, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002687 scripts/config.py full
Gilles Peskine5d26e7c2019-06-07 14:50:09 +02002688 make CC=gcc CFLAGS='-Werror -Wall -Wextra -mx32' LDFLAGS='-mx32'
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01002689
2690 msg "test: 64-bit ILP32, make, gcc"
2691 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01002692}
Gilles Peskine878cf602019-01-06 20:50:38 +00002693support_test_mx32 () {
2694 case $(uname -m) in
2695 amd64|x86_64) true;;
2696 *) false;;
2697 esac
2698}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00002699
Peter Kolbus60c6da22018-12-27 06:59:04 -06002700component_test_min_mpi_window_size () {
2701 msg "build: Default + MBEDTLS_MPI_WINDOW_SIZE=1 (ASan build)" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002702 scripts/config.py set MBEDTLS_MPI_WINDOW_SIZE 1
Peter Kolbus60c6da22018-12-27 06:59:04 -06002703 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2704 make
2705
2706 msg "test: MBEDTLS_MPI_WINDOW_SIZE=1 - main suites (inc. selftests) (ASan build)" # ~ 10s
2707 make test
2708}
2709
Gilles Peskine8f073122018-11-27 15:58:47 +01002710component_test_have_int32 () {
2711 msg "build: gcc, force 32-bit bignum limbs"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002712 scripts/config.py unset MBEDTLS_HAVE_ASM
2713 scripts/config.py unset MBEDTLS_AESNI_C
2714 scripts/config.py unset MBEDTLS_PADLOCK_C
Gilles Peskine8f073122018-11-27 15:58:47 +01002715 make CC=gcc CFLAGS='-Werror -Wall -Wextra -DMBEDTLS_HAVE_INT32'
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01002716
Gilles Peskine8f073122018-11-27 15:58:47 +01002717 msg "test: gcc, force 32-bit bignum limbs"
2718 make test
2719}
Andres Amaya Garciafe843a32017-07-20 13:21:34 +01002720
Gilles Peskine8f073122018-11-27 15:58:47 +01002721component_test_have_int64 () {
2722 msg "build: gcc, force 64-bit bignum limbs"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002723 scripts/config.py unset MBEDTLS_HAVE_ASM
2724 scripts/config.py unset MBEDTLS_AESNI_C
2725 scripts/config.py unset MBEDTLS_PADLOCK_C
Gilles Peskine8f073122018-11-27 15:58:47 +01002726 make CC=gcc CFLAGS='-Werror -Wall -Wextra -DMBEDTLS_HAVE_INT64'
Gilles Peskine14c3c062018-01-29 21:25:12 +01002727
Gilles Peskine8f073122018-11-27 15:58:47 +01002728 msg "test: gcc, force 64-bit bignum limbs"
2729 make test
2730}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00002731
Gilles Peskine8f073122018-11-27 15:58:47 +01002732component_test_no_udbl_division () {
2733 msg "build: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002734 scripts/config.py full
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002735 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
Gilles Peskine8f073122018-11-27 15:58:47 +01002736 make CFLAGS='-Werror -O1'
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002737
Gilles Peskine8f073122018-11-27 15:58:47 +01002738 msg "test: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s
2739 make test
2740}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002741
Gilles Peskine8f073122018-11-27 15:58:47 +01002742component_test_no_64bit_multiplication () {
2743 msg "build: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002744 scripts/config.py full
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002745 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
Gilles Peskine8f073122018-11-27 15:58:47 +01002746 make CFLAGS='-Werror -O1'
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002747
Gilles Peskine8f073122018-11-27 15:58:47 +01002748 msg "test: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s
2749 make test
2750}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002751
Gilles Peskine3809f5f2020-11-09 15:40:05 +01002752component_test_no_strings () {
2753 msg "build: no strings" # ~10s
2754 scripts/config.py full
2755 # Disable options that activate a large amount of string constants.
2756 scripts/config.py unset MBEDTLS_DEBUG_C
2757 scripts/config.py unset MBEDTLS_ERROR_C
2758 scripts/config.py set MBEDTLS_ERROR_STRERROR_DUMMY
2759 scripts/config.py unset MBEDTLS_VERSION_FEATURES
2760 make CFLAGS='-Werror -Os'
2761
2762 msg "test: no strings" # ~ 10s
2763 make test
2764}
2765
Gilles Peskine8f073122018-11-27 15:58:47 +01002766component_build_arm_none_eabi_gcc () {
Gilles Peskine60d99472021-09-01 20:00:33 +02002767 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002768 scripts/config.py baremetal
Gilles Peskineaeedd742020-09-02 11:03:04 +02002769 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -O1' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02002770
Gilles Peskine60d99472021-09-01 20:00:33 +02002771 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug"
Gilles Peskine18487f62020-04-30 23:11:54 +02002772 ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01002773}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002774
Manuel Pégourié-Gonnard71930162020-08-18 10:28:51 +02002775component_build_arm_linux_gnueabi_gcc_arm5vte () {
Gilles Peskine60d99472021-09-01 20:00:33 +02002776 msg "build: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002777 scripts/config.py baremetal
Gilles Peskine2c897d72019-08-09 16:05:05 +02002778 # Build for a target platform that's close to what Debian uses
2779 # for its "armel" distribution (https://wiki.debian.org/ArmEabiPort).
Dave Rodgman52af7692022-03-31 14:27:24 +01002780 # See https://github.com/Mbed-TLS/mbedtls/pull/2169 and comments.
Manuel Pégourié-Gonnard71930162020-08-18 10:28:51 +02002781 # Build everything including programs, see for example
Dave Rodgman52af7692022-03-31 14:27:24 +01002782 # https://github.com/Mbed-TLS/mbedtls/pull/3449#issuecomment-675313720
Manuel Pégourié-Gonnard71930162020-08-18 10:28:51 +02002783 make CC="${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc" AR="${ARM_LINUX_GNUEABI_GCC_PREFIX}ar" CFLAGS='-Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te'
2784
Gilles Peskine60d99472021-09-01 20:00:33 +02002785 msg "size: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug"
Manuel Pégourié-Gonnard71930162020-08-18 10:28:51 +02002786 ${ARM_LINUX_GNUEABI_GCC_PREFIX}size library/*.o
2787}
2788support_build_arm_linux_gnueabi_gcc_arm5vte () {
2789 type ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc >/dev/null 2>&1
2790}
2791
2792component_build_arm_none_eabi_gcc_arm5vte () {
Gilles Peskine60d99472021-09-01 20:00:33 +02002793 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s
Manuel Pégourié-Gonnard71930162020-08-18 10:28:51 +02002794 scripts/config.py baremetal
2795 # This is an imperfect substitute for
2796 # component_build_arm_linux_gnueabi_gcc_arm5vte
Manuel Pégourié-Gonnard9a260a62021-07-06 09:44:59 +02002797 # in case the gcc-arm-linux-gnueabi toolchain is not available
Gilles Peskineaeedd742020-09-02 11:03:04 +02002798 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" CFLAGS='-std=c99 -Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te' SHELL='sh -x' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02002799
Gilles Peskine60d99472021-09-01 20:00:33 +02002800 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug"
Gilles Peskine18487f62020-04-30 23:11:54 +02002801 ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o
Gilles Peskine93e4e032019-08-05 11:34:25 +02002802}
2803
Gilles Peskine6e2fb862020-04-30 23:00:53 +02002804component_build_arm_none_eabi_gcc_m0plus () {
Gilles Peskine60d99472021-09-01 20:00:33 +02002805 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus, baremetal_size" # ~ 10s
2806 scripts/config.py baremetal_size
Gilles Peskineaeedd742020-09-02 11:03:04 +02002807 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -mthumb -mcpu=cortex-m0plus -Os' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02002808
Gilles Peskine60d99472021-09-01 20:00:33 +02002809 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus -Os, baremetal_size"
Gilles Peskine18487f62020-04-30 23:11:54 +02002810 ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o
Gilles Peskine6e2fb862020-04-30 23:00:53 +02002811}
2812
Gilles Peskine8f073122018-11-27 15:58:47 +01002813component_build_arm_none_eabi_gcc_no_udbl_division () {
Gilles Peskine6d061342020-04-30 18:19:32 +02002814 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -DMBEDTLS_NO_UDBL_DIVISION, make" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002815 scripts/config.py baremetal
2816 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
Gilles Peskineaeedd742020-09-02 11:03:04 +02002817 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01002818 echo "Checking that software 64-bit division is not required"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002819 not grep __aeabi_uldiv library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01002820}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002821
Gilles Peskine8f073122018-11-27 15:58:47 +01002822component_build_arm_none_eabi_gcc_no_64bit_multiplication () {
Gilles Peskine6d061342020-04-30 18:19:32 +02002823 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc MBEDTLS_NO_64BIT_MULTIPLICATION, make" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002824 scripts/config.py baremetal
2825 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
Gilles Peskineaeedd742020-09-02 11:03:04 +02002826 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -O1 -march=armv6-m -mthumb' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01002827 echo "Checking that software 64-bit multiplication is not required"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002828 not grep __aeabi_lmul library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01002829}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002830
Gilles Peskine8f073122018-11-27 15:58:47 +01002831component_build_armcc () {
Gilles Peskine18487f62020-04-30 23:11:54 +02002832 msg "build: ARM Compiler 5"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002833 scripts/config.py baremetal
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002834 make CC="$ARMC5_CC" AR="$ARMC5_AR" WARNING_CFLAGS='--strict --c99' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02002835
2836 msg "size: ARM Compiler 5"
2837 "$ARMC5_FROMELF" -z library/*.o
2838
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002839 make clean
Andres AG87bb5772016-09-27 15:05:15 +01002840
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002841 # ARM Compiler 6 - Target ARMv7-A
2842 armc6_build_test "--target=arm-arm-none-eabi -march=armv7-a"
Simon Butcher940737f2017-07-23 13:42:36 +02002843
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002844 # ARM Compiler 6 - Target ARMv7-M
2845 armc6_build_test "--target=arm-arm-none-eabi -march=armv7-m"
Simon Butcher940737f2017-07-23 13:42:36 +02002846
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002847 # ARM Compiler 6 - Target ARMv8-A - AArch32
2848 armc6_build_test "--target=arm-arm-none-eabi -march=armv8.2-a"
Simon Butcher940737f2017-07-23 13:42:36 +02002849
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002850 # ARM Compiler 6 - Target ARMv8-M
2851 armc6_build_test "--target=arm-arm-none-eabi -march=armv8-m.main"
Simon Butcher940737f2017-07-23 13:42:36 +02002852
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002853 # ARM Compiler 6 - Target ARMv8-A - AArch64
2854 armc6_build_test "--target=aarch64-arm-none-eabi -march=armv8.2-a"
Gilles Peskine8f073122018-11-27 15:58:47 +01002855}
Manuel Pégourié-Gonnardc5c59392015-02-10 17:38:54 +01002856
Manuel Pégourié-Gonnarddd8807f2020-02-26 09:56:27 +01002857component_build_ssl_hw_record_accel() {
2858 msg "build: default config with MBEDTLS_SSL_HW_RECORD_ACCEL enabled"
2859 scripts/config.pl set MBEDTLS_SSL_HW_RECORD_ACCEL
2860 make CFLAGS='-Werror -O1'
2861}
2862
Hanno Beckera711f6e2020-05-04 12:03:51 +01002863component_test_tls13_experimental () {
2864 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL enabled"
2865 scripts/config.pl set MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
2866 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2867 make
2868 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL enabled"
2869 make test
2870}
2871
Gilles Peskine8f073122018-11-27 15:58:47 +01002872component_build_mingw () {
2873 msg "build: Windows cross build - mingw64, make (Link Library)" # ~ 30s
Andrzej Kurek232e8f92019-10-03 03:18:01 -04002874 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 lib programs
Hanno Beckere963efa2018-01-03 10:03:43 +00002875
Gilles Peskine8f073122018-11-27 15:58:47 +01002876 # note Make tests only builds the tests, but doesn't run them
Andrzej Kurek232e8f92019-10-03 03:18:01 -04002877 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror' WINDOWS_BUILD=1 tests
Gilles Peskine8f073122018-11-27 15:58:47 +01002878 make WINDOWS_BUILD=1 clean
Gilles Peskine2a458da2017-05-12 15:26:58 +02002879
Gilles Peskine8f073122018-11-27 15:58:47 +01002880 msg "build: Windows cross build - mingw64, make (DLL)" # ~ 30s
Andrzej Kurek232e8f92019-10-03 03:18:01 -04002881 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 SHARED=1 lib programs
2882 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 SHARED=1 tests
Gilles Peskine8f073122018-11-27 15:58:47 +01002883 make WINDOWS_BUILD=1 clean
2884}
Jaeden Amero117b8a42019-04-17 15:19:26 +01002885support_build_mingw() {
2886 case $(i686-w64-mingw32-gcc -dumpversion) in
2887 [0-5]*) false;;
2888 *) true;;
2889 esac
2890}
Simon Butcher91aef332016-11-17 09:20:50 +00002891
Gilles Peskine8f073122018-11-27 15:58:47 +01002892component_test_memsan () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002893 msg "build: MSan (clang)" # ~ 1 min 20s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002894 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002895 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
2896 make
Manuel Pégourié-Gonnard4a9dc2a2014-05-09 13:46:59 +02002897
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002898 msg "test: main suites (MSan)" # ~ 10s
2899 make test
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01002900
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002901 msg "test: ssl-opt.sh (MSan)" # ~ 1 min
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002902 tests/ssl-opt.sh
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01002903
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002904 # Optional part(s)
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01002905
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002906 if [ "$MEMORY" -gt 0 ]; then
2907 msg "test: compat.sh (MSan)" # ~ 6 min 20s
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002908 tests/compat.sh
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002909 fi
Gilles Peskine8f073122018-11-27 15:58:47 +01002910}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01002911
Gilles Peskine69f190e2019-01-10 00:11:42 +01002912component_test_valgrind () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002913 msg "build: Release (clang)"
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002914 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release .
2915 make
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00002916
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002917 msg "test: main suites valgrind (Release)"
2918 make memcheck
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00002919
Gilles Peskine636c26a2020-03-04 20:46:15 +01002920 # Optional parts (slow; currently broken on OS X because programs don't
2921 # seem to receive signals under valgrind on OS X).
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002922 if [ "$MEMORY" -gt 0 ]; then
2923 msg "test: ssl-opt.sh --memcheck (Release)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002924 tests/ssl-opt.sh --memcheck
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002925 fi
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00002926
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002927 if [ "$MEMORY" -gt 1 ]; then
2928 msg "test: compat.sh --memcheck (Release)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002929 tests/compat.sh --memcheck
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002930 fi
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02002931
2932 if [ "$MEMORY" -gt 0 ]; then
2933 msg "test: context-info.sh --memcheck (Release)"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002934 tests/context-info.sh --memcheck
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02002935 fi
Gilles Peskine8f073122018-11-27 15:58:47 +01002936}
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00002937
Paul Elliott2ab9a7a2021-11-25 17:29:40 +00002938support_test_cmake_out_of_source () {
2939 distrib_id=""
2940 distrib_ver=""
2941 distrib_ver_minor=""
2942 distrib_ver_major=""
2943
2944 # Attempt to parse lsb-release to find out distribution and version. If not
2945 # found this should fail safe (test is supported).
2946 if [[ -f /etc/lsb-release ]]; then
2947
2948 while read -r lsb_line; do
2949 case "$lsb_line" in
2950 "DISTRIB_ID"*) distrib_id=${lsb_line/#DISTRIB_ID=};;
2951 "DISTRIB_RELEASE"*) distrib_ver=${lsb_line/#DISTRIB_RELEASE=};;
2952 esac
2953 done < /etc/lsb-release
2954
2955 distrib_ver_major="${distrib_ver%%.*}"
2956 distrib_ver="${distrib_ver#*.}"
2957 distrib_ver_minor="${distrib_ver%%.*}"
2958 fi
2959
2960 # Running the out of source CMake test on Ubuntu 16.04 using more than one
2961 # processor (as the CI does) can create a race condition whereby the build
2962 # fails to see a generated file, despite that file actually having been
2963 # generated. This problem appears to go away with 18.04 or newer, so make
2964 # the out of source tests unsupported on Ubuntu 16.04.
2965 [ "$distrib_id" != "Ubuntu" ] || [ "$distrib_ver_major" -gt 16 ]
2966}
2967
Gilles Peskine8f073122018-11-27 15:58:47 +01002968component_test_cmake_out_of_source () {
2969 msg "build: cmake 'out-of-source' build"
Gilles Peskine8f073122018-11-27 15:58:47 +01002970 MBEDTLS_ROOT_DIR="$PWD"
2971 mkdir "$OUT_OF_SOURCE_DIR"
2972 cd "$OUT_OF_SOURCE_DIR"
Gilles Peskine25319702021-10-07 19:34:57 +02002973 cmake -D CMAKE_BUILD_TYPE:String=Check "$MBEDTLS_ROOT_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +01002974 make
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00002975
Gilles Peskine8f073122018-11-27 15:58:47 +01002976 msg "test: cmake 'out-of-source' build"
2977 make test
2978 # Test an SSL option that requires an auxiliary script in test/scripts/.
2979 # Also ensure that there are no error messages such as
2980 # "No such file or directory", which would indicate that some required
2981 # file is missing (ssl-opt.sh tolerates the absence of some files so
2982 # may exit with status 0 but emit errors).
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002983 ./tests/ssl-opt.sh -f 'Fallback SCSV: beginning of list' 2>ssl-opt.err
Gilles Peskine0a7984f2020-03-28 18:56:09 +01002984 cat ssl-opt.err >&2
2985 # If ssl-opt.err is non-empty, record an error and keep going.
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002986 [ ! -s ssl-opt.err ]
Gilles Peskine0a7984f2020-03-28 18:56:09 +01002987 rm ssl-opt.err
Gilles Peskine8f073122018-11-27 15:58:47 +01002988 cd "$MBEDTLS_ROOT_DIR"
2989 rm -rf "$OUT_OF_SOURCE_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +01002990}
Andres AGdc192212016-08-31 17:33:13 +01002991
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01002992component_test_cmake_as_subdirectory () {
2993 msg "build: cmake 'as-subdirectory' build"
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01002994 cd programs/test/cmake_subproject
2995 cmake .
2996 make
Gilles Peskinef6d29c62021-07-08 18:41:16 +02002997 ./cmake_subproject
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01002998}
Gilles Peskineca9cfca2022-02-04 00:21:12 +01002999support_test_cmake_as_subdirectory () {
3000 support_test_cmake_out_of_source
3001}
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01003002
Gilles Peskine8f073122018-11-27 15:58:47 +01003003component_test_zeroize () {
3004 # Test that the function mbedtls_platform_zeroize() is not optimized away by
3005 # different combinations of compilers and optimization flags by using an
3006 # auxiliary GDB script. Unfortunately, GDB does not return error values to the
3007 # system in all cases that the script fails, so we must manually search the
3008 # output to check whether the pass string is present and no failure strings
3009 # were printed.
Andres AGdc192212016-08-31 17:33:13 +01003010
Gilles Peskine4976e822019-01-06 19:52:22 +00003011 # Don't try to disable ASLR. We don't care about ASLR here. We do care
3012 # about a spurious message if Gdb tries and fails, so suppress that.
3013 gdb_disable_aslr=
3014 if [ -z "$(gdb -batch -nw -ex 'set disable-randomization off' 2>&1)" ]; then
3015 gdb_disable_aslr='set disable-randomization off'
3016 fi
3017
Gilles Peskine8f073122018-11-27 15:58:47 +01003018 for optimization_flag in -O2 -O3 -Ofast -Os; do
Gilles Peskine55f7c942019-01-09 22:28:21 +01003019 for compiler in clang gcc; do
3020 msg "test: $compiler $optimization_flag, mbedtls_platform_zeroize()"
3021 make programs CC="$compiler" DEBUG=1 CFLAGS="$optimization_flag"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02003022 gdb -ex "$gdb_disable_aslr" -x tests/scripts/test_zeroize.gdb -nw -batch -nx 2>&1 | tee test_zeroize.log
3023 grep "The buffer was correctly zeroized" test_zeroize.log
3024 not grep -i "error" test_zeroize.log
Gilles Peskine55f7c942019-01-09 22:28:21 +01003025 rm -f test_zeroize.log
3026 make clean
3027 done
Andres Amaya Garcia29673812017-10-25 10:35:51 +01003028 done
Gilles Peskine8f073122018-11-27 15:58:47 +01003029}
Gilles Peskine192c72f2017-12-21 15:59:21 +01003030
Bence Szépkúti9f849112021-10-19 15:05:36 +02003031component_test_psa_compliance () {
Bence Szépkútic1e79fd2021-11-11 20:13:14 +01003032 msg "build: make, default config + CMAC, libmbedcrypto.a only"
3033 scripts/config.py set MBEDTLS_CMAC_C
Bence Szépkútiab796e62021-10-25 19:29:07 +02003034 make -C library libmbedcrypto.a
Bence Szépkúti9f849112021-10-19 15:05:36 +02003035
3036 msg "unit test: test_psa_compliance.py"
3037 ./tests/scripts/test_psa_compliance.py
3038}
3039
3040support_test_psa_compliance () {
Bence Szépkútid6cf0892021-11-03 11:36:09 +01003041 # psa-compliance-tests only supports CMake >= 3.10.0
Bence Szépkútiab796e62021-10-25 19:29:07 +02003042 ver="$(cmake --version)"
3043 ver="${ver#cmake version }"
3044 ver_major="${ver%%.*}"
3045
3046 ver="${ver#*.}"
3047 ver_minor="${ver%%.*}"
3048
3049 [ "$ver_major" -eq 3 ] && [ "$ver_minor" -ge 10 ]
Bence Szépkúti9f849112021-10-19 15:05:36 +02003050}
3051
Gilles Peskine8f073122018-11-27 15:58:47 +01003052component_check_python_files () {
3053 msg "Lint: Python scripts"
Gilles Peskinef6d29c62021-07-08 18:41:16 +02003054 tests/scripts/check-python-files.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01003055}
Gilles Peskine192c72f2017-12-21 15:59:21 +01003056
Gilles Peskine8f073122018-11-27 15:58:47 +01003057component_check_generate_test_code () {
3058 msg "uint test: generate_test_code.py"
Manuel Pégourié-Gonnarddfb114a2020-06-02 11:40:08 +02003059 # unittest writes out mundane stuff like number or tests run on stderr.
3060 # Our convention is to reserve stderr for actual errors, and write
3061 # harmless info on stdout so it can be suppress with --quiet.
Gilles Peskinef6d29c62021-07-08 18:41:16 +02003062 ./tests/scripts/test_generate_test_code.py 2>&1
Gilles Peskine8f073122018-11-27 15:58:47 +01003063}
Gilles Peskine192c72f2017-12-21 15:59:21 +01003064
3065################################################################
3066#### Termination
3067################################################################
3068
Gilles Peskine8f073122018-11-27 15:58:47 +01003069post_report () {
3070 msg "Done, cleaning up"
Gilles Peskine24bdf022020-03-30 20:11:39 +02003071 final_cleanup
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01003072
Gilles Peskine8f073122018-11-27 15:58:47 +01003073 final_report
3074}
3075
3076
3077
3078################################################################
3079#### Run all the things
3080################################################################
3081
Gilles Peskinea5eb22d2020-03-28 21:09:21 +01003082# Function invoked by --error-test to test error reporting.
3083pseudo_component_error_test () {
Gilles Peskine202e9b42021-08-02 23:28:00 +02003084 msg "Testing error reporting $error_test_i"
Gilles Peskinea5eb22d2020-03-28 21:09:21 +01003085 if [ $KEEP_GOING -ne 0 ]; then
3086 echo "Expect three failing commands."
3087 fi
Gilles Peskine202e9b42021-08-02 23:28:00 +02003088 # If the component doesn't run in a subshell, changing error_test_i to an
3089 # invalid integer will cause an error in the loop that runs this function.
3090 error_test_i=this_should_not_be_used_since_the_component_runs_in_a_subshell
Gilles Peskinecb4bfac2021-08-02 23:14:03 +02003091 # Expected error: 'grep non_existent /dev/null -> 1'
Gilles Peskinea5eb22d2020-03-28 21:09:21 +01003092 grep non_existent /dev/null
Gilles Peskinecb4bfac2021-08-02 23:14:03 +02003093 # Expected error: '! grep -q . tests/scripts/all.sh -> 1'
Gilles Peskinea5eb22d2020-03-28 21:09:21 +01003094 not grep -q . "$0"
Gilles Peskinecb4bfac2021-08-02 23:14:03 +02003095 # Expected error: 'make unknown_target -> 2'
Gilles Peskinea5eb22d2020-03-28 21:09:21 +01003096 make unknown_target
3097 false "this should not be executed"
3098}
3099
Gilles Peskinee48351a2018-11-27 16:06:30 +01003100# Run one component and clean up afterwards.
Gilles Peskine8f073122018-11-27 15:58:47 +01003101run_component () {
Gilles Peskineffcdeff2018-12-04 12:49:28 +01003102 current_component="$1"
Gilles Peskine9004a172019-09-16 15:20:36 +02003103 export MBEDTLS_TEST_CONFIGURATION="$current_component"
Gilles Peskine2ef377d2019-10-07 18:44:21 +02003104
3105 # Unconditionally create a seedfile that's sufficiently long.
3106 # Do this before each component, because a previous component may
3107 # have messed it up or shortened it.
Gilles Peskinef3133362021-07-08 19:03:50 +02003108 local dd_cmd
3109 dd_cmd=(dd if=/dev/urandom of=./tests/seedfile bs=64 count=1)
3110 case $OSTYPE in
3111 linux*|freebsd*|openbsd*|darwin*) dd_cmd+=(status=none)
3112 esac
3113 "${dd_cmd[@]}"
Gilles Peskine2ef377d2019-10-07 18:44:21 +02003114
Gilles Peskinecb4bfac2021-08-02 23:14:03 +02003115 # Run the component in a subshell, with error trapping and output
3116 # redirection set up based on the relevant options.
Gilles Peskine7105a332020-03-28 18:50:43 +01003117 if [ $KEEP_GOING -eq 1 ]; then
Gilles Peskinecb4bfac2021-08-02 23:14:03 +02003118 # We want to keep running if the subshell fails, so 'set -e' must
3119 # be off when the subshell runs.
Gilles Peskine7105a332020-03-28 18:50:43 +01003120 set +e
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +02003121 fi
Gilles Peskine7105a332020-03-28 18:50:43 +01003122 (
3123 if [ $QUIET -eq 1 ]; then
3124 # msg() will be silenced, so just print the component name here.
3125 echo "${current_component#component_}"
3126 exec >/dev/null
3127 fi
3128 if [ $KEEP_GOING -eq 1 ]; then
3129 # Keep "set -e" off, and run an ERR trap instead to record failures.
3130 set -E
3131 trap err_trap ERR
3132 fi
3133 # The next line is what runs the component
3134 "$@"
3135 if [ $KEEP_GOING -eq 1 ]; then
3136 trap - ERR
3137 exit $last_failure_status
3138 fi
3139 )
3140 component_status=$?
3141 if [ $KEEP_GOING -eq 1 ]; then
3142 set -e
3143 if [ $component_status -ne 0 ]; then
3144 failure_count=$((failure_count + 1))
3145 fi
3146 fi
Gilles Peskine2ef377d2019-10-07 18:44:21 +02003147
3148 # Restore the build tree to a clean state.
Gilles Peskinee48351a2018-11-27 16:06:30 +01003149 cleanup
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +02003150 unset current_component
Gilles Peskine8f073122018-11-27 15:58:47 +01003151}
3152
3153# Preliminary setup
3154pre_check_environment
3155pre_initialize_variables
3156pre_parse_command_line "$@"
Gilles Peskine348fb9a2018-11-27 17:04:29 +01003157
Gilles Peskine878cf602019-01-06 20:50:38 +00003158pre_check_git
Gilles Peskineef64e7f2021-07-12 18:16:01 +02003159pre_restore_files
Gilles Peskine24bdf022020-03-30 20:11:39 +02003160pre_back_up
Andrzej Kurekeb508712019-02-14 07:18:59 -05003161
Gilles Peskine878cf602019-01-06 20:50:38 +00003162build_status=0
3163if [ $KEEP_GOING -eq 1 ]; then
3164 pre_setup_keep_going
Gilles Peskine8f073122018-11-27 15:58:47 +01003165fi
Gilles Peskine67ffdaf2019-09-16 15:55:46 +02003166pre_prepare_outcome_file
Gilles Peskine878cf602019-01-06 20:50:38 +00003167pre_print_configuration
3168pre_check_tools
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01003169cleanup
3170
Gilles Peskinebeb3a812019-01-06 22:11:25 +00003171# Run the requested tests.
Gilles Peskine202e9b42021-08-02 23:28:00 +02003172for ((error_test_i=1; error_test_i <= error_test; error_test_i++)); do
Gilles Peskinea5eb22d2020-03-28 21:09:21 +01003173 run_component pseudo_component_error_test
Gilles Peskinea5eb22d2020-03-28 21:09:21 +01003174done
Gilles Peskine202e9b42021-08-02 23:28:00 +02003175unset error_test_i
Gilles Peskinebeb3a812019-01-06 22:11:25 +00003176for component in $RUN_COMPONENTS; do
3177 run_component "component_$component"
3178done
Gilles Peskine8f073122018-11-27 15:58:47 +01003179
3180# We're done.
Gilles Peskine878cf602019-01-06 20:50:38 +00003181post_report