Gilles Peskine | 62cf2e8 | 2020-03-27 16:35:23 +0100 | [diff] [blame] | 1 | #! /usr/bin/env bash |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 2 | |
Simon Butcher | 3ea7f52 | 2016-03-07 23:22:10 +0000 | [diff] [blame] | 3 | # all.sh |
| 4 | # |
Bence Szépkúti | 1e14827 | 2020-08-07 13:07:28 +0200 | [diff] [blame] | 5 | # Copyright The Mbed TLS Contributors |
Bence Szépkúti | c7da1fe | 2020-05-26 01:54:15 +0200 | [diff] [blame] | 6 | # SPDX-License-Identifier: Apache-2.0 |
| 7 | # |
| 8 | # Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 9 | # not use this file except in compliance with the License. |
| 10 | # You may obtain a copy of the License at |
| 11 | # |
| 12 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 13 | # |
| 14 | # Unless required by applicable law or agreed to in writing, software |
| 15 | # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 16 | # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 17 | # See the License for the specific language governing permissions and |
| 18 | # limitations under the License. |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 19 | |
| 20 | |
| 21 | |
| 22 | ################################################################ |
| 23 | #### Documentation |
| 24 | ################################################################ |
| 25 | |
Simon Butcher | 3ea7f52 | 2016-03-07 23:22:10 +0000 | [diff] [blame] | 26 | # Purpose |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 27 | # ------- |
Simon Butcher | 3ea7f52 | 2016-03-07 23:22:10 +0000 | [diff] [blame] | 28 | # |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 29 | # To run all tests possible or available on the platform. |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 30 | # |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 31 | # Notes for users |
| 32 | # --------------- |
| 33 | # |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 34 | # Warning: the test is destructive. It includes various build modes and |
| 35 | # configurations, and can and will arbitrarily change the current CMake |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 36 | # configuration. The following files must be committed into git: |
Bence Szépkúti | bb0cfeb | 2021-05-28 09:42:25 +0200 | [diff] [blame] | 37 | # * include/mbedtls/mbedtls_config.h |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 38 | # * Makefile, library/Makefile, programs/Makefile, tests/Makefile, |
| 39 | # programs/fuzz/Makefile |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 40 | # After running this script, the CMake cache will be lost and CMake |
| 41 | # will no longer be initialised. |
Manuel Pégourié-Gonnard | 3895f5a | 2014-03-27 14:44:04 +0100 | [diff] [blame] | 42 | # |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 43 | # The script assumes the presence of a number of tools: |
| 44 | # * Basic Unix tools (Windows users note: a Unix-style find must be before |
| 45 | # the Windows find in the PATH) |
| 46 | # * Perl |
| 47 | # * GNU Make |
| 48 | # * CMake |
| 49 | # * GCC and Clang (recent enough for using ASan with gcc and MemSan with clang, or valgrind) |
Andrzej Kurek | 05be06c | 2018-06-28 04:41:50 -0400 | [diff] [blame] | 50 | # * G++ |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 51 | # * arm-gcc and mingw-gcc |
| 52 | # * ArmCC 5 and ArmCC 6, unless invoked with --no-armcc |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 53 | # * OpenSSL and GnuTLS command line tools, recent enough for the |
Mateusz Starzyk | f5c5351 | 2021-04-15 13:28:52 +0200 | [diff] [blame] | 54 | # interoperability tests. If they don't support old features which we want |
| 55 | # to test, then a legacy version of these tools must be present as well |
| 56 | # (search for LEGACY below). |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 57 | # See the invocation of check_tools below for details. |
| 58 | # |
| 59 | # This script must be invoked from the toplevel directory of a git |
| 60 | # working copy of Mbed TLS. |
| 61 | # |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 62 | # The behavior on an error depends on whether --keep-going (alias -k) |
| 63 | # is in effect. |
| 64 | # * Without --keep-going: the script stops on the first error without |
| 65 | # cleaning up. This lets you work in the configuration of the failing |
| 66 | # component. |
| 67 | # * With --keep-going: the script runs all requested components and |
| 68 | # reports failures at the end. In particular the script always cleans |
| 69 | # up on exit. |
| 70 | # |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 71 | # Note that the output is not saved. You may want to run |
| 72 | # script -c tests/scripts/all.sh |
| 73 | # or |
| 74 | # tests/scripts/all.sh >all.log 2>&1 |
| 75 | # |
| 76 | # Notes for maintainers |
| 77 | # --------------------- |
| 78 | # |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 79 | # The bulk of the code is organized into functions that follow one of the |
| 80 | # following naming conventions: |
| 81 | # * pre_XXX: things to do before running the tests, in order. |
| 82 | # * component_XXX: independent components. They can be run in any order. |
Gilles Peskine | c70637a | 2019-01-09 22:29:17 +0100 | [diff] [blame] | 83 | # * component_check_XXX: quick tests that aren't worth parallelizing. |
| 84 | # * component_build_XXX: build things but don't run them. |
| 85 | # * component_test_XXX: build and test. |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 86 | # * support_XXX: if support_XXX exists and returns false then |
| 87 | # component_XXX is not run by default. |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 88 | # * post_XXX: things to do after running the tests. |
| 89 | # * other: miscellaneous support functions. |
| 90 | # |
Gilles Peskine | c70637a | 2019-01-09 22:29:17 +0100 | [diff] [blame] | 91 | # Each component must start by invoking `msg` with a short informative message. |
| 92 | # |
Gilles Peskine | a681c59 | 2020-03-28 21:27:40 +0100 | [diff] [blame] | 93 | # Warning: due to the way bash detects errors, the failure of a command |
| 94 | # inside 'if' or '!' is not detected. Use the 'not' function instead of '!'. |
| 95 | # |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 96 | # Each component is executed in a separate shell process. The component |
| 97 | # fails if any command in it returns a non-zero status. |
| 98 | # |
Gilles Peskine | c70637a | 2019-01-09 22:29:17 +0100 | [diff] [blame] | 99 | # The framework performs some cleanup tasks after each component. This |
| 100 | # means that components can assume that the working directory is in a |
| 101 | # cleaned-up state, and don't need to perform the cleanup themselves. |
| 102 | # * Run `make clean`. |
Bence Szépkúti | 414d6bd | 2021-06-28 14:11:11 +0100 | [diff] [blame] | 103 | # * Restore `include/mbedtls/mbedtls_config.h` from a backup made before running |
Gilles Peskine | c70637a | 2019-01-09 22:29:17 +0100 | [diff] [blame] | 104 | # the component. |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 105 | # * Check out `Makefile`, `library/Makefile`, `programs/Makefile`, |
| 106 | # `tests/Makefile` and `programs/fuzz/Makefile` from git. |
| 107 | # This cleans up after an in-tree use of CMake. |
Gilles Peskine | c70637a | 2019-01-09 22:29:17 +0100 | [diff] [blame] | 108 | # |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 109 | # The tests are roughly in order from fastest to slowest. This doesn't |
| 110 | # have to be exact, but in general you should add slower tests towards |
| 111 | # the end and fast checks near the beginning. |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 112 | |
| 113 | |
| 114 | |
| 115 | ################################################################ |
| 116 | #### Initialization and command line parsing |
| 117 | ################################################################ |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 118 | |
Gilles Peskine | 3664780 | 2020-03-28 18:50:49 +0100 | [diff] [blame] | 119 | # Abort on errors (even on the left-hand side of a pipe). |
| 120 | # Treat uninitialised variables as errors. |
| 121 | set -e -o pipefail -u |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 122 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 123 | pre_check_environment () { |
Gilles Peskine | a16c2b1 | 2019-01-06 19:58:02 +0000 | [diff] [blame] | 124 | if [ -d library -a -d include -a -d tests ]; then :; else |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 125 | echo "Must be run from mbed TLS root" >&2 |
| 126 | exit 1 |
| 127 | fi |
| 128 | } |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 129 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 130 | pre_initialize_variables () { |
Bence Szépkúti | bb0cfeb | 2021-05-28 09:42:25 +0200 | [diff] [blame] | 131 | CONFIG_H='include/mbedtls/mbedtls_config.h' |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 132 | CRYPTO_CONFIG_H='include/psa/crypto_config.h' |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 133 | |
| 134 | # Files that are clobbered by some jobs will be backed up. Use a different |
| 135 | # suffix from auxiliary scripts so that all.sh and auxiliary scripts can |
| 136 | # independently decide when to remove the backup file. |
| 137 | backup_suffix='.all.bak' |
| 138 | # Files clobbered by config.py |
| 139 | files_to_back_up="$CONFIG_H $CRYPTO_CONFIG_H" |
Gilles Peskine | 568f53a | 2021-07-12 18:16:01 +0200 | [diff] [blame] | 140 | # Files clobbered by in-tree cmake |
| 141 | files_to_back_up="$files_to_back_up Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile" |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 142 | |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 143 | append_outcome=0 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 144 | MEMORY=0 |
| 145 | FORCE=0 |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 146 | QUIET=0 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 147 | KEEP_GOING=0 |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 148 | |
Manuel Pégourié-Gonnard | e050191 | 2020-06-08 12:59:27 +0200 | [diff] [blame] | 149 | # Seed value used with the --release-test option. |
Manuel Pégourié-Gonnard | 5430447 | 2020-06-22 10:11:47 +0200 | [diff] [blame] | 150 | # |
| 151 | # See also RELEASE_SEED in basic-build-test.sh. Debugging is easier if |
| 152 | # both values are kept in sync. If you change the value here because it |
| 153 | # breaks some tests, you'll definitely want to change it in |
| 154 | # basic-build-test.sh as well. |
Manuel Pégourié-Gonnard | e050191 | 2020-06-08 12:59:27 +0200 | [diff] [blame] | 155 | RELEASE_SEED=1 |
| 156 | |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 157 | : ${MBEDTLS_TEST_OUTCOME_FILE=} |
Gilles Peskine | 9004a17 | 2019-09-16 15:20:36 +0200 | [diff] [blame] | 158 | : ${MBEDTLS_TEST_PLATFORM="$(uname -s | tr -c \\n0-9A-Za-z _)-$(uname -m | tr -c \\n0-9A-Za-z _)"} |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 159 | export MBEDTLS_TEST_OUTCOME_FILE |
Gilles Peskine | 9004a17 | 2019-09-16 15:20:36 +0200 | [diff] [blame] | 160 | export MBEDTLS_TEST_PLATFORM |
| 161 | |
Jaeden Amero | c4cc251 | 2019-01-30 15:35:44 +0000 | [diff] [blame] | 162 | # Default commands, can be overridden by the environment |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 163 | : ${OPENSSL:="openssl"} |
| 164 | : ${OPENSSL_LEGACY:="$OPENSSL"} |
| 165 | : ${OPENSSL_NEXT:="$OPENSSL"} |
| 166 | : ${GNUTLS_CLI:="gnutls-cli"} |
| 167 | : ${GNUTLS_SERV:="gnutls-serv"} |
| 168 | : ${GNUTLS_LEGACY_CLI:="$GNUTLS_CLI"} |
| 169 | : ${GNUTLS_LEGACY_SERV:="$GNUTLS_SERV"} |
| 170 | : ${OUT_OF_SOURCE_DIR:=./mbedtls_out_of_source_build} |
| 171 | : ${ARMC5_BIN_DIR:=/usr/bin} |
| 172 | : ${ARMC6_BIN_DIR:=/usr/bin} |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 173 | : ${ARM_NONE_EABI_GCC_PREFIX:=arm-none-eabi-} |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 174 | : ${ARM_LINUX_GNUEABI_GCC_PREFIX:=arm-linux-gnueabi-} |
Andres AG | dc19221 | 2016-08-31 17:33:13 +0100 | [diff] [blame] | 175 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 176 | # if MAKEFLAGS is not set add the -j option to speed up invocations of make |
Gilles Peskine | a1fc4b5 | 2019-01-06 20:15:26 +0000 | [diff] [blame] | 177 | if [ -z "${MAKEFLAGS+set}" ]; then |
Gilles Peskine | 050d2fc | 2021-09-30 18:24:21 +0200 | [diff] [blame] | 178 | export MAKEFLAGS="-j$(all_sh_nproc)" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 179 | fi |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 180 | |
Gilles Peskine | 396853a | 2021-09-20 18:57:55 +0200 | [diff] [blame] | 181 | # Include more verbose output for failing tests run by CMake or make |
Jaeden Amero | d48e9c7 | 2019-02-07 17:43:39 +0000 | [diff] [blame] | 182 | export CTEST_OUTPUT_ON_FAILURE=1 |
| 183 | |
Gilles Peskine | 8fd5942 | 2019-10-21 17:11:33 +0200 | [diff] [blame] | 184 | # CFLAGS and LDFLAGS for Asan builds that don't use CMake |
Gilles Peskine | 5ca393f | 2019-10-21 19:06:33 +0200 | [diff] [blame] | 185 | ASAN_CFLAGS='-Werror -Wall -Wextra -fsanitize=address,undefined -fno-sanitize-recover=all' |
Gilles Peskine | 8fd5942 | 2019-10-21 17:11:33 +0200 | [diff] [blame] | 186 | |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 187 | # Gather the list of available components. These are the functions |
| 188 | # defined in this script whose name starts with "component_". |
Gilles Peskine | 62cf2e8 | 2020-03-27 16:35:23 +0100 | [diff] [blame] | 189 | # Parse the script with sed. This way we get the functions in the order |
| 190 | # they are defined. |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 191 | ALL_COMPONENTS=$(sed -n 's/^ *component_\([0-9A-Z_a-z]*\) *().*/\1/p' <"$0") |
| 192 | |
| 193 | # Exclude components that are not supported on this platform. |
| 194 | SUPPORTED_COMPONENTS= |
| 195 | for component in $ALL_COMPONENTS; do |
| 196 | case $(type "support_$component" 2>&1) in |
| 197 | *' function'*) |
| 198 | if ! support_$component; then continue; fi;; |
| 199 | esac |
| 200 | SUPPORTED_COMPONENTS="$SUPPORTED_COMPONENTS $component" |
| 201 | done |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 202 | } |
Andres AG | 38495a3 | 2016-07-12 16:54:33 +0100 | [diff] [blame] | 203 | |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 204 | # Test whether the component $1 is included in the command line patterns. |
| 205 | is_component_included() |
Gilles Peskine | 81b96ed | 2018-11-27 21:37:53 +0100 | [diff] [blame] | 206 | { |
Gilles Peskine | 03af678 | 2021-08-06 11:35:17 +0200 | [diff] [blame] | 207 | # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS |
| 208 | # only does word splitting. |
Gilles Peskine | 81b96ed | 2018-11-27 21:37:53 +0100 | [diff] [blame] | 209 | set -f |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 210 | for pattern in $COMMAND_LINE_COMPONENTS; do |
Gilles Peskine | 81b96ed | 2018-11-27 21:37:53 +0100 | [diff] [blame] | 211 | set +f |
| 212 | case ${1#component_} in $pattern) return 0;; esac |
| 213 | done |
| 214 | set +f |
| 215 | return 1 |
| 216 | } |
Andres AG | 7770ea8 | 2016-10-10 15:46:20 +0100 | [diff] [blame] | 217 | |
Simon Butcher | 41eeccf | 2016-09-07 00:07:09 +0100 | [diff] [blame] | 218 | usage() |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 219 | { |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 220 | cat <<EOF |
Gilles Peskine | 9252511 | 2018-11-27 18:15:35 +0100 | [diff] [blame] | 221 | Usage: $0 [OPTION]... [COMPONENT]... |
Gilles Peskine | 348fb9a | 2018-11-27 17:04:29 +0100 | [diff] [blame] | 222 | Run mbedtls release validation tests. |
Gilles Peskine | 9252511 | 2018-11-27 18:15:35 +0100 | [diff] [blame] | 223 | By default, run all tests. With one or more COMPONENT, run only those. |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 224 | COMPONENT can be the name of a component or a shell wildcard pattern. |
| 225 | |
| 226 | Examples: |
| 227 | $0 "check_*" |
| 228 | Run all sanity checks. |
| 229 | $0 --no-armcc --except test_memsan |
| 230 | Run everything except builds that require armcc and MemSan. |
Gilles Peskine | 348fb9a | 2018-11-27 17:04:29 +0100 | [diff] [blame] | 231 | |
| 232 | Special options: |
| 233 | -h|--help Print this help and exit. |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 234 | --list-all-components List all available test components and exit. |
| 235 | --list-components List components supported on this platform and exit. |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 236 | |
| 237 | General options: |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 238 | -q|--quiet Only output component names, and errors if any. |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 239 | -f|--force Force the tests to overwrite any modified files. |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 240 | -k|--keep-going Run all tests and report errors at the end. |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 241 | -m|--memory Additional optional memory tests. |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 242 | --append-outcome Append to the outcome file (if used). |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 243 | --arm-none-eabi-gcc-prefix=<string> |
| 244 | Prefix for a cross-compiler for arm-none-eabi |
| 245 | (default: "${ARM_NONE_EABI_GCC_PREFIX}") |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 246 | --arm-linux-gnueabi-gcc-prefix=<string> |
| 247 | Prefix for a cross-compiler for arm-linux-gnueabi |
| 248 | (default: "${ARM_LINUX_GNUEABI_GCC_PREFIX}") |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 249 | --armcc Run ARM Compiler builds (on by default). |
Gilles Peskine | 80ddb99 | 2021-08-06 11:51:59 +0200 | [diff] [blame] | 250 | --restore First clean up the build tree, restoring backed up |
| 251 | files. Do not run any components unless they are |
| 252 | explicitly specified. |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 253 | --error-test Error test mode: run a failing function in addition |
Gilles Peskine | 86f6129 | 2021-08-05 15:11:33 +0200 | [diff] [blame] | 254 | to any specified component. May be repeated. |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 255 | --except Exclude the COMPONENTs listed on the command line, |
| 256 | instead of running only those. |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 257 | --no-append-outcome Write a new outcome file and analyze it (default). |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 258 | --no-armcc Skip ARM Compiler builds. |
Gilles Peskine | 38d8165 | 2018-03-21 08:40:26 +0100 | [diff] [blame] | 259 | --no-force Refuse to overwrite modified files (default). |
| 260 | --no-keep-going Stop at the first error (default). |
| 261 | --no-memory No additional memory tests (default). |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 262 | --no-quiet Print full ouput from components. |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 263 | --out-of-source-dir=<path> Directory used for CMake out-of-source build tests. |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 264 | --outcome-file=<path> File where test outcomes are written (not done if |
| 265 | empty; default: \$MBEDTLS_TEST_OUTCOME_FILE). |
Gilles Peskine | 38d8165 | 2018-03-21 08:40:26 +0100 | [diff] [blame] | 266 | --random-seed Use a random seed value for randomized tests (default). |
Manuel Pégourié-Gonnard | e050191 | 2020-06-08 12:59:27 +0200 | [diff] [blame] | 267 | -r|--release-test Run this script in release mode. This fixes the seed value to ${RELEASE_SEED}. |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 268 | -s|--seed Integer seed value to use for this test run. |
| 269 | |
| 270 | Tool path options: |
| 271 | --armc5-bin-dir=<ARMC5_bin_dir_path> ARM Compiler 5 bin directory. |
| 272 | --armc6-bin-dir=<ARMC6_bin_dir_path> ARM Compiler 6 bin directory. |
| 273 | --gnutls-cli=<GnuTLS_cli_path> GnuTLS client executable to use for most tests. |
| 274 | --gnutls-serv=<GnuTLS_serv_path> GnuTLS server executable to use for most tests. |
| 275 | --gnutls-legacy-cli=<GnuTLS_cli_path> GnuTLS client executable to use for legacy tests. |
| 276 | --gnutls-legacy-serv=<GnuTLS_serv_path> GnuTLS server executable to use for legacy tests. |
| 277 | --openssl=<OpenSSL_path> OpenSSL executable to use for most tests. |
Mateusz Starzyk | 06b07fb | 2021-02-18 13:55:21 +0100 | [diff] [blame] | 278 | --openssl-legacy=<OpenSSL_path> OpenSSL executable to use for legacy tests.. |
Manuel Pégourié-Gonnard | 6b36892 | 2018-02-20 12:02:07 +0100 | [diff] [blame] | 279 | --openssl-next=<OpenSSL_path> OpenSSL executable to use for recent things like ARIA |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 280 | EOF |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 281 | } |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 282 | |
Gilles Peskine | bf66e2c | 2021-08-03 13:44:28 +0200 | [diff] [blame] | 283 | # Cleanup before/after running a component. |
| 284 | # Remove built files as well as the cmake cache/config. |
| 285 | # Does not remove generated source files. |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 286 | cleanup() |
| 287 | { |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 288 | command make clean |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 289 | |
Gilles Peskine | 31b07e2 | 2018-03-21 12:15:06 +0100 | [diff] [blame] | 290 | # Remove CMake artefacts |
Jaeden Amero | 2d0e00f | 2018-11-07 18:46:41 +0000 | [diff] [blame] | 291 | find . -name .git -prune -o \ |
Gilles Peskine | 31b07e2 | 2018-03-21 12:15:06 +0100 | [diff] [blame] | 292 | -iname CMakeFiles -exec rm -rf {} \+ -o \ |
| 293 | \( -iname cmake_install.cmake -o \ |
| 294 | -iname CTestTestfile.cmake -o \ |
Manuel Pégourié-Gonnard | bfe54d7 | 2021-09-09 11:11:44 +0200 | [diff] [blame] | 295 | -iname CMakeCache.txt -o \ |
| 296 | -path './cmake/*.cmake' \) -exec rm -f {} \+ |
Gilles Peskine | 31b07e2 | 2018-03-21 12:15:06 +0100 | [diff] [blame] | 297 | # Recover files overwritten by in-tree CMake builds |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 298 | rm -f include/Makefile include/mbedtls/Makefile programs/*/Makefile |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 299 | |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 300 | # Remove any artifacts from the component_test_cmake_as_subdirectory test. |
| 301 | rm -rf programs/test/cmake_subproject/build |
| 302 | rm -f programs/test/cmake_subproject/Makefile |
| 303 | rm -f programs/test/cmake_subproject/cmake_subproject |
| 304 | |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 305 | # Remove any artifacts from the component_test_cmake_as_package test. |
| 306 | rm -rf programs/test/cmake_package/build |
| 307 | rm -f programs/test/cmake_package/Makefile |
| 308 | rm -f programs/test/cmake_package/cmake_package |
| 309 | |
| 310 | # Remove any artifacts from the component_test_cmake_as_installed_package test. |
| 311 | rm -rf programs/test/cmake_package_install/build |
| 312 | rm -f programs/test/cmake_package_install/Makefile |
| 313 | rm -f programs/test/cmake_package_install/cmake_package_install |
| 314 | |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 315 | # Restore files that may have been clobbered by the job |
| 316 | for x in $files_to_back_up; do |
| 317 | cp -p "$x$backup_suffix" "$x" |
| 318 | done |
| 319 | } |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 320 | |
Gilles Peskine | bf66e2c | 2021-08-03 13:44:28 +0200 | [diff] [blame] | 321 | # Final cleanup when this script exits (except when exiting on a failure |
| 322 | # in non-keep-going mode). |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 323 | final_cleanup () { |
| 324 | cleanup |
| 325 | |
| 326 | for x in $files_to_back_up; do |
| 327 | rm -f "$x$backup_suffix" |
| 328 | done |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 329 | } |
| 330 | |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 331 | # Executed on exit. May be redefined depending on command line options. |
| 332 | final_report () { |
| 333 | : |
| 334 | } |
| 335 | |
| 336 | fatal_signal () { |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 337 | final_cleanup |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 338 | final_report $1 |
| 339 | trap - $1 |
| 340 | kill -$1 $$ |
| 341 | } |
| 342 | |
| 343 | trap 'fatal_signal HUP' HUP |
| 344 | trap 'fatal_signal INT' INT |
| 345 | trap 'fatal_signal TERM' TERM |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 346 | |
Gilles Peskine | 050d2fc | 2021-09-30 18:24:21 +0200 | [diff] [blame] | 347 | # Number of processors on this machine. Used as the default setting |
| 348 | # for parallel make. |
| 349 | all_sh_nproc () |
| 350 | { |
| 351 | { |
| 352 | nproc || # Linux |
| 353 | sysctl -n hw.ncpuonline || # NetBSD, OpenBSD |
| 354 | sysctl -n hw.ncpu || # FreeBSD |
| 355 | echo 1 |
| 356 | } 2>/dev/null |
| 357 | } |
| 358 | |
Manuel Pégourié-Gonnard | 3895f5a | 2014-03-27 14:44:04 +0100 | [diff] [blame] | 359 | msg() |
| 360 | { |
Gilles Peskine | ffcdeff | 2018-12-04 12:49:28 +0100 | [diff] [blame] | 361 | if [ -n "${current_component:-}" ]; then |
| 362 | current_section="${current_component#component_}: $1" |
| 363 | else |
| 364 | current_section="$1" |
| 365 | fi |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 366 | |
| 367 | if [ $QUIET -eq 1 ]; then |
| 368 | return |
| 369 | fi |
| 370 | |
Manuel Pégourié-Gonnard | 3895f5a | 2014-03-27 14:44:04 +0100 | [diff] [blame] | 371 | echo "" |
| 372 | echo "******************************************************************" |
Gilles Peskine | ffcdeff | 2018-12-04 12:49:28 +0100 | [diff] [blame] | 373 | echo "* $current_section " |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 374 | printf "* "; date |
Manuel Pégourié-Gonnard | 3895f5a | 2014-03-27 14:44:04 +0100 | [diff] [blame] | 375 | echo "******************************************************************" |
| 376 | } |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 377 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 378 | armc6_build_test() |
| 379 | { |
| 380 | FLAGS="$1" |
Andres AG | a5cd973 | 2016-10-17 15:23:10 +0100 | [diff] [blame] | 381 | |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 382 | msg "build: ARM Compiler 6 ($FLAGS)" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 383 | ARM_TOOL_VARIANT="ult" CC="$ARMC6_CC" AR="$ARMC6_AR" CFLAGS="$FLAGS" \ |
| 384 | WARNING_CFLAGS='-xc -std=c99' make lib |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 385 | |
| 386 | msg "size: ARM Compiler 6 ($FLAGS)" |
| 387 | "$ARMC6_FROMELF" -z library/*.o |
| 388 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 389 | make clean |
| 390 | } |
Andres AG | a5cd973 | 2016-10-17 15:23:10 +0100 | [diff] [blame] | 391 | |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 392 | err_msg() |
| 393 | { |
| 394 | echo "$1" >&2 |
| 395 | } |
| 396 | |
| 397 | check_tools() |
| 398 | { |
| 399 | for TOOL in "$@"; do |
Andres AG | 9839360 | 2017-01-31 17:04:45 +0000 | [diff] [blame] | 400 | if ! `type "$TOOL" >/dev/null 2>&1`; then |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 401 | err_msg "$TOOL not found!" |
| 402 | exit 1 |
| 403 | fi |
| 404 | done |
| 405 | } |
| 406 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 407 | pre_parse_command_line () { |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 408 | COMMAND_LINE_COMPONENTS= |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 409 | all_except=0 |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 410 | error_test=0 |
Gilles Peskine | 80ddb99 | 2021-08-06 11:51:59 +0200 | [diff] [blame] | 411 | restore_first=0 |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 412 | no_armcc= |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 413 | |
Jaeden Amero | 9b90f2e | 2018-11-02 18:34:17 +0000 | [diff] [blame] | 414 | # Note that legacy options are ignored instead of being omitted from this |
| 415 | # list of options, so invocations that worked with previous version of |
| 416 | # all.sh will still run and work properly. |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 417 | while [ $# -gt 0 ]; do |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 418 | case "$1" in |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 419 | --append-outcome) append_outcome=1;; |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 420 | --arm-none-eabi-gcc-prefix) shift; ARM_NONE_EABI_GCC_PREFIX="$1";; |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 421 | --arm-linux-gnueabi-gcc-prefix) shift; ARM_LINUX_GNUEABI_GCC_PREFIX="$1";; |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 422 | --armcc) no_armcc=;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 423 | --armc5-bin-dir) shift; ARMC5_BIN_DIR="$1";; |
| 424 | --armc6-bin-dir) shift; ARMC6_BIN_DIR="$1";; |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 425 | --error-test) error_test=$((error_test + 1));; |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 426 | --except) all_except=1;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 427 | --force|-f) FORCE=1;; |
| 428 | --gnutls-cli) shift; GNUTLS_CLI="$1";; |
| 429 | --gnutls-legacy-cli) shift; GNUTLS_LEGACY_CLI="$1";; |
| 430 | --gnutls-legacy-serv) shift; GNUTLS_LEGACY_SERV="$1";; |
| 431 | --gnutls-serv) shift; GNUTLS_SERV="$1";; |
| 432 | --help|-h) usage; exit;; |
| 433 | --keep-going|-k) KEEP_GOING=1;; |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 434 | --list-all-components) printf '%s\n' $ALL_COMPONENTS; exit;; |
| 435 | --list-components) printf '%s\n' $SUPPORTED_COMPONENTS; exit;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 436 | --memory|-m) MEMORY=1;; |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 437 | --no-append-outcome) append_outcome=0;; |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 438 | --no-armcc) no_armcc=1;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 439 | --no-force) FORCE=0;; |
| 440 | --no-keep-going) KEEP_GOING=0;; |
| 441 | --no-memory) MEMORY=0;; |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 442 | --no-quiet) QUIET=0;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 443 | --openssl) shift; OPENSSL="$1";; |
| 444 | --openssl-legacy) shift; OPENSSL_LEGACY="$1";; |
| 445 | --openssl-next) shift; OPENSSL_NEXT="$1";; |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 446 | --outcome-file) shift; MBEDTLS_TEST_OUTCOME_FILE="$1";; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 447 | --out-of-source-dir) shift; OUT_OF_SOURCE_DIR="$1";; |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 448 | --quiet|-q) QUIET=1;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 449 | --random-seed) unset SEED;; |
Manuel Pégourié-Gonnard | e050191 | 2020-06-08 12:59:27 +0200 | [diff] [blame] | 450 | --release-test|-r) SEED=$RELEASE_SEED;; |
Gilles Peskine | 80ddb99 | 2021-08-06 11:51:59 +0200 | [diff] [blame] | 451 | --restore) restore_first=1;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 452 | --seed|-s) shift; SEED="$1";; |
| 453 | -*) |
| 454 | echo >&2 "Unknown option: $1" |
| 455 | echo >&2 "Run $0 --help for usage." |
| 456 | exit 120 |
| 457 | ;; |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 458 | *) COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS $1";; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 459 | esac |
| 460 | shift |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 461 | done |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 462 | |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 463 | # With no list of components, run everything. |
Gilles Peskine | 80ddb99 | 2021-08-06 11:51:59 +0200 | [diff] [blame] | 464 | if [ -z "$COMMAND_LINE_COMPONENTS" ] && [ $restore_first -eq 0 ]; then |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 465 | all_except=1 |
Andres AG | dc19221 | 2016-08-31 17:33:13 +0100 | [diff] [blame] | 466 | fi |
| 467 | |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 468 | # --no-armcc is a legacy option. The modern way is --except '*_armcc*'. |
| 469 | # Ignore it if components are listed explicitly on the command line. |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 470 | if [ -n "$no_armcc" ] && [ $all_except -eq 1 ]; then |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 471 | COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS *_armcc*" |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 472 | fi |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 473 | |
Gilles Peskine | bf66e2c | 2021-08-03 13:44:28 +0200 | [diff] [blame] | 474 | # Error out if an explicitly requested component doesn't exist. |
Gilles Peskine | b80f0d2 | 2020-03-28 21:37:59 +0100 | [diff] [blame] | 475 | if [ $all_except -eq 0 ]; then |
| 476 | unsupported=0 |
Gilles Peskine | 03af678 | 2021-08-06 11:35:17 +0200 | [diff] [blame] | 477 | # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS |
| 478 | # only does word splitting. |
Gilles Peskine | 1d475b6 | 2021-08-03 13:43:36 +0200 | [diff] [blame] | 479 | set -f |
Gilles Peskine | b80f0d2 | 2020-03-28 21:37:59 +0100 | [diff] [blame] | 480 | for component in $COMMAND_LINE_COMPONENTS; do |
Gilles Peskine | 1d475b6 | 2021-08-03 13:43:36 +0200 | [diff] [blame] | 481 | set +f |
Gilles Peskine | bf66e2c | 2021-08-03 13:44:28 +0200 | [diff] [blame] | 482 | # If the requested name includes a wildcard character, don't |
| 483 | # check it. Accept wildcard patterns that don't match anything. |
Gilles Peskine | b80f0d2 | 2020-03-28 21:37:59 +0100 | [diff] [blame] | 484 | case $component in |
| 485 | *[*?\[]*) continue;; |
| 486 | esac |
| 487 | case " $SUPPORTED_COMPONENTS " in |
| 488 | *" $component "*) :;; |
| 489 | *) |
| 490 | echo >&2 "Component $component was explicitly requested, but is not known or not supported." |
| 491 | unsupported=$((unsupported + 1));; |
| 492 | esac |
| 493 | done |
Gilles Peskine | 1d475b6 | 2021-08-03 13:43:36 +0200 | [diff] [blame] | 494 | set +f |
Gilles Peskine | b80f0d2 | 2020-03-28 21:37:59 +0100 | [diff] [blame] | 495 | if [ $unsupported -ne 0 ]; then |
| 496 | exit 2 |
| 497 | fi |
| 498 | fi |
| 499 | |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 500 | # Build the list of components to run. |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 501 | RUN_COMPONENTS= |
| 502 | for component in $SUPPORTED_COMPONENTS; do |
| 503 | if is_component_included "$component"; [ $? -eq $all_except ]; then |
| 504 | RUN_COMPONENTS="$RUN_COMPONENTS $component" |
| 505 | fi |
| 506 | done |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 507 | |
| 508 | unset all_except |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 509 | unset no_armcc |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 510 | } |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 511 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 512 | pre_check_git () { |
| 513 | if [ $FORCE -eq 1 ]; then |
Gilles Peskine | 53190e6 | 2019-01-09 23:17:35 +0100 | [diff] [blame] | 514 | rm -rf "$OUT_OF_SOURCE_DIR" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 515 | git checkout-index -f -q $CONFIG_H |
| 516 | cleanup |
| 517 | else |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 518 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 519 | if [ -d "$OUT_OF_SOURCE_DIR" ]; then |
| 520 | echo "Warning - there is an existing directory at '$OUT_OF_SOURCE_DIR'" >&2 |
| 521 | echo "You can either delete this directory manually, or force the test by rerunning" |
| 522 | echo "the script as: $0 --force --out-of-source-dir $OUT_OF_SOURCE_DIR" |
| 523 | exit 1 |
| 524 | fi |
| 525 | |
Bence Szépkúti | bb0cfeb | 2021-05-28 09:42:25 +0200 | [diff] [blame] | 526 | if ! git diff --quiet include/mbedtls/mbedtls_config.h; then |
| 527 | err_msg "Warning - the configuration file 'include/mbedtls/mbedtls_config.h' has been edited. " |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 528 | echo "You can either delete or preserve your work, or force the test by rerunning the" |
| 529 | echo "script as: $0 --force" |
| 530 | exit 1 |
| 531 | fi |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 532 | fi |
Andrzej Kurek | eb50871 | 2019-02-14 07:18:59 -0500 | [diff] [blame] | 533 | } |
| 534 | |
Gilles Peskine | 568f53a | 2021-07-12 18:16:01 +0200 | [diff] [blame] | 535 | pre_restore_files () { |
| 536 | # If the makefiles have been generated by a framework such as cmake, |
| 537 | # restore them from git. If the makefiles look like modifications from |
| 538 | # the ones checked into git, take care not to modify them. Whatever |
| 539 | # this function leaves behind is what the script will restore before |
| 540 | # each component. |
| 541 | case "$(head -n1 Makefile)" in |
| 542 | *[Gg]enerated*) |
| 543 | git update-index --no-skip-worktree Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile |
| 544 | git checkout -- Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile |
| 545 | ;; |
| 546 | esac |
| 547 | } |
| 548 | |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 549 | pre_back_up () { |
| 550 | for x in $files_to_back_up; do |
| 551 | cp -p "$x" "$x$backup_suffix" |
| 552 | done |
| 553 | } |
| 554 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 555 | pre_setup_keep_going () { |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 556 | failure_count=0 # Number of failed components |
| 557 | last_failure_status=0 # Last failure status in this component |
| 558 | |
Gilles Peskine | fec30cb | 2020-03-28 19:34:23 +0100 | [diff] [blame] | 559 | # See err_trap |
| 560 | previous_failure_status=0 |
| 561 | previous_failed_command= |
| 562 | previous_failure_funcall_depth=0 |
Gilles Peskine | a681c59 | 2020-03-28 21:27:40 +0100 | [diff] [blame] | 563 | unset report_failed_command |
Gilles Peskine | fec30cb | 2020-03-28 19:34:23 +0100 | [diff] [blame] | 564 | |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 565 | start_red= |
| 566 | end_color= |
| 567 | if [ -t 1 ]; then |
Gilles Peskine | 9736b9d | 2018-01-02 21:54:17 +0100 | [diff] [blame] | 568 | case "${TERM:-}" in |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 569 | *color*|cygwin|linux|rxvt*|screen|[Eex]term*) |
| 570 | start_red=$(printf '\033[31m') |
| 571 | end_color=$(printf '\033[0m') |
| 572 | ;; |
| 573 | esac |
| 574 | fi |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 575 | |
| 576 | # Keep a summary of failures in a file. We'll print it out at the end. |
| 577 | failure_summary_file=$PWD/all-sh-failures-$$.log |
| 578 | : >"$failure_summary_file" |
| 579 | |
| 580 | # Whether it makes sense to keep a component going after the specified |
| 581 | # command fails (test command) or not (configure or build). |
Gilles Peskine | 03af678 | 2021-08-06 11:35:17 +0200 | [diff] [blame] | 582 | # This function normally receives the failing simple command |
| 583 | # ($BASH_COMMAND) as an argument, but if $report_failed_command is set, |
| 584 | # this is passed instead. |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 585 | # This doesn't have to be 100% accurate: all failures are recorded anyway. |
Gilles Peskine | c111e24 | 2021-08-02 23:29:53 +0200 | [diff] [blame] | 586 | # False positives result in running things that can't be expected to |
| 587 | # work. False negatives result in things not running after something else |
| 588 | # failed even though they might have given useful feedback. |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 589 | can_keep_going_after_failure () { |
| 590 | case "$1" in |
| 591 | "msg "*) false;; |
Gilles Peskine | c111e24 | 2021-08-02 23:29:53 +0200 | [diff] [blame] | 592 | "cd "*) false;; |
| 593 | *make*[\ /]tests*) false;; # make tests, make CFLAGS=-I../tests, ... |
| 594 | *test*) true;; # make test, tests/stuff, env V=v tests/stuff, ... |
| 595 | *make*check*) true;; |
| 596 | "grep "*) true;; |
| 597 | "[ "*) true;; |
| 598 | "! "*) true;; |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 599 | *) false;; |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 600 | esac |
| 601 | } |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 602 | |
| 603 | # This function runs if there is any error in a component. |
| 604 | # It must either exit with a nonzero status, or set |
| 605 | # last_failure_status to a nonzero value. |
| 606 | err_trap () { |
| 607 | # Save $? (status of the failing command). This must be the very |
| 608 | # first thing, before $? is overridden. |
| 609 | last_failure_status=$? |
Gilles Peskine | a681c59 | 2020-03-28 21:27:40 +0100 | [diff] [blame] | 610 | failed_command=${report_failed_command-$BASH_COMMAND} |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 611 | |
Gilles Peskine | fec30cb | 2020-03-28 19:34:23 +0100 | [diff] [blame] | 612 | if [[ $last_failure_status -eq $previous_failure_status && |
| 613 | "$failed_command" == "$previous_failed_command" && |
| 614 | ${#FUNCNAME[@]} == $((previous_failure_funcall_depth - 1)) ]] |
| 615 | then |
| 616 | # The same command failed twice in a row, but this time one level |
| 617 | # less deep in the function call stack. This happens when the last |
| 618 | # command of a function returns a nonzero status, and the function |
| 619 | # returns that same status. Ignore the second failure. |
| 620 | previous_failure_funcall_depth=${#FUNCNAME[@]} |
| 621 | return |
| 622 | fi |
| 623 | previous_failure_status=$last_failure_status |
| 624 | previous_failed_command=$failed_command |
| 625 | previous_failure_funcall_depth=${#FUNCNAME[@]} |
| 626 | |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 627 | text="$current_section: $failed_command -> $last_failure_status" |
| 628 | echo "${start_red}^^^^$text^^^^${end_color}" >&2 |
| 629 | echo "$text" >>"$failure_summary_file" |
| 630 | |
| 631 | # If the command is fatal (configure or build command), stop this |
| 632 | # component. Otherwise (test command) keep the component running |
| 633 | # (run more tests from the same build). |
| 634 | if ! can_keep_going_after_failure "$failed_command"; then |
| 635 | exit $last_failure_status |
| 636 | fi |
| 637 | } |
| 638 | |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 639 | final_report () { |
| 640 | if [ $failure_count -gt 0 ]; then |
| 641 | echo |
| 642 | echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!" |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 643 | echo "${start_red}FAILED: $failure_count components${end_color}" |
| 644 | cat "$failure_summary_file" |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 645 | echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!" |
| 646 | elif [ -z "${1-}" ]; then |
| 647 | echo "SUCCESS :)" |
| 648 | fi |
| 649 | if [ -n "${1-}" ]; then |
| 650 | echo "Killed by SIG$1." |
| 651 | fi |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 652 | rm -f "$failure_summary_file" |
| 653 | if [ $failure_count -gt 0 ]; then |
| 654 | exit 1 |
| 655 | fi |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 656 | } |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 657 | } |
| 658 | |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 659 | # record_status() and if_build_succeeded() are kept temporarily for backward |
| 660 | # compatibility. Don't use them in new components. |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 661 | record_status () { |
| 662 | "$@" |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 663 | } |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 664 | if_build_succeeded () { |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 665 | "$@" |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 666 | } |
| 667 | |
Gilles Peskine | a681c59 | 2020-03-28 21:27:40 +0100 | [diff] [blame] | 668 | # '! true' does not trigger the ERR trap. Arrange to trigger it, with |
| 669 | # a reasonably informative error message (not just "$@"). |
| 670 | not () { |
| 671 | if "$@"; then |
| 672 | report_failed_command="! $*" |
| 673 | false |
| 674 | unset report_failed_command |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 675 | fi |
| 676 | } |
| 677 | |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 678 | pre_prepare_outcome_file () { |
| 679 | case "$MBEDTLS_TEST_OUTCOME_FILE" in |
| 680 | [!/]*) MBEDTLS_TEST_OUTCOME_FILE="$PWD/$MBEDTLS_TEST_OUTCOME_FILE";; |
| 681 | esac |
| 682 | if [ -n "$MBEDTLS_TEST_OUTCOME_FILE" ] && [ "$append_outcome" -eq 0 ]; then |
| 683 | rm -f "$MBEDTLS_TEST_OUTCOME_FILE" |
| 684 | fi |
| 685 | } |
| 686 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 687 | pre_print_configuration () { |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 688 | if [ $QUIET -eq 1 ]; then |
| 689 | return |
| 690 | fi |
| 691 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 692 | msg "info: $0 configuration" |
| 693 | echo "MEMORY: $MEMORY" |
| 694 | echo "FORCE: $FORCE" |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 695 | echo "MBEDTLS_TEST_OUTCOME_FILE: ${MBEDTLS_TEST_OUTCOME_FILE:-(none)}" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 696 | echo "SEED: ${SEED-"UNSET"}" |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 697 | echo |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 698 | echo "OPENSSL: $OPENSSL" |
| 699 | echo "OPENSSL_LEGACY: $OPENSSL_LEGACY" |
| 700 | echo "OPENSSL_NEXT: $OPENSSL_NEXT" |
| 701 | echo "GNUTLS_CLI: $GNUTLS_CLI" |
| 702 | echo "GNUTLS_SERV: $GNUTLS_SERV" |
| 703 | echo "GNUTLS_LEGACY_CLI: $GNUTLS_LEGACY_CLI" |
| 704 | echo "GNUTLS_LEGACY_SERV: $GNUTLS_LEGACY_SERV" |
| 705 | echo "ARMC5_BIN_DIR: $ARMC5_BIN_DIR" |
| 706 | echo "ARMC6_BIN_DIR: $ARMC6_BIN_DIR" |
| 707 | } |
Andres AG | 7770ea8 | 2016-10-10 15:46:20 +0100 | [diff] [blame] | 708 | |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 709 | # Make sure the tools we need are available. |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 710 | pre_check_tools () { |
Gilles Peskine | cc9f0b9 | 2019-01-06 22:46:21 +0000 | [diff] [blame] | 711 | # Build the list of variables to pass to output_env.sh. |
| 712 | set env |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 713 | |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 714 | case " $RUN_COMPONENTS " in |
| 715 | # Require OpenSSL and GnuTLS if running any tests (as opposed to |
| 716 | # only doing builds). Not all tests run OpenSSL and GnuTLS, but this |
| 717 | # is a good enough approximation in practice. |
| 718 | *" test_"*) |
| 719 | # To avoid setting OpenSSL and GnuTLS for each call to compat.sh |
| 720 | # and ssl-opt.sh, we just export the variables they require. |
| 721 | export OPENSSL_CMD="$OPENSSL" |
| 722 | export GNUTLS_CLI="$GNUTLS_CLI" |
| 723 | export GNUTLS_SERV="$GNUTLS_SERV" |
| 724 | # Avoid passing --seed flag in every call to ssl-opt.sh |
| 725 | if [ -n "${SEED-}" ]; then |
| 726 | export SEED |
| 727 | fi |
Gilles Peskine | cc9f0b9 | 2019-01-06 22:46:21 +0000 | [diff] [blame] | 728 | set "$@" OPENSSL="$OPENSSL" OPENSSL_LEGACY="$OPENSSL_LEGACY" |
| 729 | set "$@" GNUTLS_CLI="$GNUTLS_CLI" GNUTLS_SERV="$GNUTLS_SERV" |
| 730 | set "$@" GNUTLS_LEGACY_CLI="$GNUTLS_LEGACY_CLI" |
| 731 | set "$@" GNUTLS_LEGACY_SERV="$GNUTLS_LEGACY_SERV" |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 732 | check_tools "$OPENSSL" "$OPENSSL_LEGACY" "$OPENSSL_NEXT" \ |
| 733 | "$GNUTLS_CLI" "$GNUTLS_SERV" \ |
| 734 | "$GNUTLS_LEGACY_CLI" "$GNUTLS_LEGACY_SERV" |
| 735 | ;; |
| 736 | esac |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 737 | |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 738 | case " $RUN_COMPONENTS " in |
| 739 | *_doxygen[_\ ]*) check_tools "doxygen" "dot";; |
| 740 | esac |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 741 | |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 742 | case " $RUN_COMPONENTS " in |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 743 | *_arm_none_eabi_gcc[_\ ]*) check_tools "${ARM_NONE_EABI_GCC_PREFIX}gcc";; |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 744 | esac |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 745 | |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 746 | case " $RUN_COMPONENTS " in |
| 747 | *_mingw[_\ ]*) check_tools "i686-w64-mingw32-gcc";; |
| 748 | esac |
| 749 | |
| 750 | case " $RUN_COMPONENTS " in |
| 751 | *" test_zeroize "*) check_tools "gdb";; |
| 752 | esac |
| 753 | |
| 754 | case " $RUN_COMPONENTS " in |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 755 | *_armcc*) |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 756 | ARMC5_CC="$ARMC5_BIN_DIR/armcc" |
| 757 | ARMC5_AR="$ARMC5_BIN_DIR/armar" |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 758 | ARMC5_FROMELF="$ARMC5_BIN_DIR/fromelf" |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 759 | ARMC6_CC="$ARMC6_BIN_DIR/armclang" |
| 760 | ARMC6_AR="$ARMC6_BIN_DIR/armar" |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 761 | ARMC6_FROMELF="$ARMC6_BIN_DIR/fromelf" |
| 762 | check_tools "$ARMC5_CC" "$ARMC5_AR" "$ARMC5_FROMELF" \ |
| 763 | "$ARMC6_CC" "$ARMC6_AR" "$ARMC6_FROMELF";; |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 764 | esac |
Gilles Peskine | cc9f0b9 | 2019-01-06 22:46:21 +0000 | [diff] [blame] | 765 | |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 766 | # past this point, no call to check_tool, only printing output |
| 767 | if [ $QUIET -eq 1 ]; then |
| 768 | return |
| 769 | fi |
| 770 | |
Gilles Peskine | cc9f0b9 | 2019-01-06 22:46:21 +0000 | [diff] [blame] | 771 | msg "info: output_env.sh" |
| 772 | case $RUN_COMPONENTS in |
| 773 | *_armcc*) |
| 774 | set "$@" ARMC5_CC="$ARMC5_CC" ARMC6_CC="$ARMC6_CC" RUN_ARMCC=1;; |
| 775 | *) set "$@" RUN_ARMCC=0;; |
| 776 | esac |
| 777 | "$@" scripts/output_env.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 778 | } |
Manuel Pégourié-Gonnard | 9bda9b3 | 2014-11-20 13:10:22 +0100 | [diff] [blame] | 779 | |
Gilles Peskine | 1570b59 | 2021-04-22 01:10:12 +0200 | [diff] [blame] | 780 | pre_generate_files() { |
Manuel Pégourié-Gonnard | 87db8a2 | 2021-06-18 13:30:14 +0200 | [diff] [blame] | 781 | # since make doesn't have proper dependencies, remove any possibly outdate |
| 782 | # file that might be around before generating fresh ones |
| 783 | make neat |
Gilles Peskine | 7238503 | 2021-07-08 19:07:07 +0200 | [diff] [blame] | 784 | if [ $QUIET -eq 1 ]; then |
Gilles Peskine | 7530163 | 2021-08-05 15:10:47 +0200 | [diff] [blame] | 785 | make generated_files >/dev/null |
Gilles Peskine | 7238503 | 2021-07-08 19:07:07 +0200 | [diff] [blame] | 786 | else |
| 787 | make generated_files |
| 788 | fi |
Gilles Peskine | 1570b59 | 2021-04-22 01:10:12 +0200 | [diff] [blame] | 789 | } |
| 790 | |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 791 | |
| 792 | |
| 793 | ################################################################ |
| 794 | #### Basic checks |
| 795 | ################################################################ |
Manuel Pégourié-Gonnard | 9bda9b3 | 2014-11-20 13:10:22 +0100 | [diff] [blame] | 796 | |
| 797 | # |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 798 | # Test Suites to be executed |
Manuel Pégourié-Gonnard | 89d69b3 | 2014-11-20 13:48:53 +0100 | [diff] [blame] | 799 | # |
Manuel Pégourié-Gonnard | 3d404b4 | 2015-07-08 21:59:16 +0100 | [diff] [blame] | 800 | # The test ordering tries to optimize for the following criteria: |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 801 | # 1. Catch possible problems early, by running first tests that run quickly |
Manuel Pégourié-Gonnard | 89d69b3 | 2014-11-20 13:48:53 +0100 | [diff] [blame] | 802 | # and/or are more likely to fail than others (eg I use Clang most of the |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 803 | # time, so start with a GCC build). |
| 804 | # 2. Minimize total running time, by avoiding useless rebuilds |
Manuel Pégourié-Gonnard | 89d69b3 | 2014-11-20 13:48:53 +0100 | [diff] [blame] | 805 | # |
Manuel Pégourié-Gonnard | 259b08a | 2016-01-08 16:27:41 +0100 | [diff] [blame] | 806 | # Indicative running times are given for reference. |
| 807 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 808 | component_check_recursion () { |
Gilles Peskine | 600bb69 | 2019-09-19 21:29:11 +0200 | [diff] [blame] | 809 | msg "Check: recursion.pl" # < 1s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 810 | tests/scripts/recursion.pl library/*.c |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 811 | } |
Janos Follath | b72c678 | 2016-07-19 14:54:17 +0100 | [diff] [blame] | 812 | |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 813 | component_check_generated_files () { |
| 814 | msg "Check: check-generated-files, files generated with make" # 2s |
| 815 | make generated_files |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 816 | tests/scripts/check-generated-files.sh |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 817 | |
| 818 | msg "Check: check-generated-files -u, files present" # 2s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 819 | tests/scripts/check-generated-files.sh -u |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 820 | # Check that the generated files are considered up to date. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 821 | tests/scripts/check-generated-files.sh |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 822 | |
| 823 | msg "Check: check-generated-files -u, files absent" # 2s |
| 824 | command make neat |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 825 | tests/scripts/check-generated-files.sh -u |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 826 | # Check that the generated files are considered up to date. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 827 | tests/scripts/check-generated-files.sh |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 828 | |
| 829 | # This component ends with the generated files present in the source tree. |
| 830 | # This is necessary for subsequent components! |
| 831 | } |
| 832 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 833 | component_check_doxy_blocks () { |
Gilles Peskine | 600bb69 | 2019-09-19 21:29:11 +0200 | [diff] [blame] | 834 | msg "Check: doxygen markup outside doxygen blocks" # < 1s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 835 | tests/scripts/check-doxy-blocks.pl |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 836 | } |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 837 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 838 | component_check_files () { |
Gilles Peskine | 600bb69 | 2019-09-19 21:29:11 +0200 | [diff] [blame] | 839 | msg "Check: file sanity checks (permissions, encodings)" # < 1s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 840 | tests/scripts/check_files.py |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 841 | } |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 842 | |
Gilles Peskine | 30e0bb4 | 2020-05-10 17:40:49 +0200 | [diff] [blame] | 843 | component_check_changelog () { |
| 844 | msg "Check: changelog entries" # < 1s |
| 845 | rm -f ChangeLog.new |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 846 | scripts/assemble_changelog.py -o ChangeLog.new |
Gilles Peskine | 30e0bb4 | 2020-05-10 17:40:49 +0200 | [diff] [blame] | 847 | if [ -e ChangeLog.new ]; then |
| 848 | # Show the diff for information. It isn't an error if the diff is |
| 849 | # non-empty. |
| 850 | diff -u ChangeLog ChangeLog.new || true |
| 851 | rm ChangeLog.new |
| 852 | fi |
| 853 | } |
| 854 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 855 | component_check_names () { |
Gilles Peskine | 600bb69 | 2019-09-19 21:29:11 +0200 | [diff] [blame] | 856 | msg "Check: declared and exported names (builds the library)" # < 3s |
Yuto Takano | c3a6f63 | 2021-09-24 18:02:56 +0100 | [diff] [blame] | 857 | tests/scripts/check_names.py -v |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 858 | } |
Darryl Green | a07039c | 2018-03-13 16:48:16 +0000 | [diff] [blame] | 859 | |
Gilles Peskine | 895868b | 2019-09-19 21:30:05 +0200 | [diff] [blame] | 860 | component_check_test_cases () { |
| 861 | msg "Check: test case descriptions" # < 1s |
Manuel Pégourié-Gonnard | a911916 | 2020-06-02 11:51:40 +0200 | [diff] [blame] | 862 | if [ $QUIET -eq 1 ]; then |
Manuel Pégourié-Gonnard | 304b099 | 2020-06-08 10:59:41 +0200 | [diff] [blame] | 863 | opt='--quiet' |
Manuel Pégourié-Gonnard | a911916 | 2020-06-02 11:51:40 +0200 | [diff] [blame] | 864 | else |
Manuel Pégourié-Gonnard | 304b099 | 2020-06-08 10:59:41 +0200 | [diff] [blame] | 865 | opt='' |
Manuel Pégourié-Gonnard | a911916 | 2020-06-02 11:51:40 +0200 | [diff] [blame] | 866 | fi |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 867 | tests/scripts/check_test_cases.py $opt |
Manuel Pégourié-Gonnard | 304b099 | 2020-06-08 10:59:41 +0200 | [diff] [blame] | 868 | unset opt |
Neil Armstrong | 882e02e | 2022-04-22 16:50:29 +0200 | [diff] [blame^] | 869 | |
| 870 | # Check if some test are explicitely disabled when USE_PSA_CRYPTO is set |
| 871 | not grep -n -R 'depends_on.*!MBEDTLS_USE_PSA_CRYPTO' tests/suites/*.function tests/suites/*.data |
| 872 | not grep -n -R '^ *requires_config_disabled.*MBEDTLS_USE_PSA_CRYPTO' tests/ssl-opt.sh tests/opt-testcases/*.sh |
Gilles Peskine | 895868b | 2019-09-19 21:30:05 +0200 | [diff] [blame] | 873 | } |
| 874 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 875 | component_check_doxygen_warnings () { |
Gilles Peskine | 600bb69 | 2019-09-19 21:29:11 +0200 | [diff] [blame] | 876 | msg "Check: doxygen warnings (builds the documentation)" # ~ 3s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 877 | tests/scripts/doxygen.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 878 | } |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 879 | |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 880 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 881 | |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 882 | ################################################################ |
| 883 | #### Build and test many configurations and targets |
| 884 | ################################################################ |
| 885 | |
Gilles Peskine | 7832c9f | 2019-04-08 17:00:15 +0200 | [diff] [blame] | 886 | component_test_default_out_of_box () { |
| 887 | msg "build: make, default config (out-of-box)" # ~1min |
| 888 | make |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 889 | # Disable fancy stuff |
| 890 | unset MBEDTLS_TEST_OUTCOME_FILE |
Gilles Peskine | 7832c9f | 2019-04-08 17:00:15 +0200 | [diff] [blame] | 891 | |
| 892 | msg "test: main suites make, default config (out-of-box)" # ~10s |
| 893 | make test |
| 894 | |
| 895 | msg "selftest: make, default config (out-of-box)" # ~10s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 896 | programs/test/selftest |
Gilles Peskine | 7832c9f | 2019-04-08 17:00:15 +0200 | [diff] [blame] | 897 | } |
| 898 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 899 | component_test_default_cmake_gcc_asan () { |
| 900 | msg "build: cmake, gcc, ASan" # ~ 1 min 50s |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 901 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 902 | make |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 903 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 904 | msg "test: main suites (inc. selftests) (ASan build)" # ~ 50s |
| 905 | make test |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 906 | |
Gilles Peskine | 97bea01 | 2020-04-23 23:37:45 +0200 | [diff] [blame] | 907 | msg "test: selftest (ASan build)" # ~ 10s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 908 | programs/test/selftest |
Gilles Peskine | 97bea01 | 2020-04-23 23:37:45 +0200 | [diff] [blame] | 909 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 910 | msg "test: ssl-opt.sh (ASan build)" # ~ 1 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 911 | tests/ssl-opt.sh |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 912 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 913 | msg "test: compat.sh (ASan build)" # ~ 6 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 914 | tests/compat.sh |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 915 | |
| 916 | msg "test: context-info.sh (ASan build)" # ~ 15 sec |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 917 | tests/context-info.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 918 | } |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 919 | |
Hanno Becker | 0163551 | 2019-02-26 14:27:09 +0000 | [diff] [blame] | 920 | component_test_full_cmake_gcc_asan () { |
| 921 | msg "build: full config, cmake, gcc, ASan" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 922 | scripts/config.py full |
Hanno Becker | 0163551 | 2019-02-26 14:27:09 +0000 | [diff] [blame] | 923 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 924 | make |
| 925 | |
| 926 | msg "test: main suites (inc. selftests) (full config, ASan build)" |
| 927 | make test |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 928 | |
Gilles Peskine | 97bea01 | 2020-04-23 23:37:45 +0200 | [diff] [blame] | 929 | msg "test: selftest (ASan build)" # ~ 10s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 930 | programs/test/selftest |
Gilles Peskine | 97bea01 | 2020-04-23 23:37:45 +0200 | [diff] [blame] | 931 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 932 | msg "test: ssl-opt.sh (full config, ASan build)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 933 | tests/ssl-opt.sh |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 934 | |
| 935 | msg "test: compat.sh (full config, ASan build)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 936 | tests/compat.sh |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 937 | |
| 938 | msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 939 | tests/context-info.sh |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 940 | } |
| 941 | |
Ronald Cron | c3623db | 2020-10-29 10:51:32 +0100 | [diff] [blame] | 942 | component_test_psa_crypto_key_id_encodes_owner () { |
Andrzej Kurek | 03e0146 | 2022-01-03 12:53:24 +0100 | [diff] [blame] | 943 | msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan" |
Ronald Cron | c3623db | 2020-10-29 10:51:32 +0100 | [diff] [blame] | 944 | scripts/config.py full |
Ronald Cron | c3623db | 2020-10-29 10:51:32 +0100 | [diff] [blame] | 945 | scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER |
| 946 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 947 | make |
| 948 | |
| 949 | msg "test: full config - USE_PSA_CRYPTO + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan" |
| 950 | make test |
| 951 | } |
| 952 | |
Gilles Peskine | a354867 | 2021-06-17 11:37:52 +0200 | [diff] [blame] | 953 | # check_renamed_symbols HEADER LIB |
| 954 | # Check that if HEADER contains '#define MACRO ...' then MACRO is not a symbol |
| 955 | # name is LIB. |
| 956 | check_renamed_symbols () { |
| 957 | ! nm "$2" | sed 's/.* //' | |
| 958 | grep -x -F "$(sed -n 's/^ *# *define *\([A-Z_a-z][0-9A-Z_a-z]*\)..*/\1/p' "$1")" |
| 959 | } |
| 960 | |
Gilles Peskine | d1dcfd5 | 2021-06-15 18:37:38 +0200 | [diff] [blame] | 961 | component_build_psa_crypto_spm () { |
Andrzej Kurek | 03e0146 | 2022-01-03 12:53:24 +0100 | [diff] [blame] | 962 | msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER + PSA_CRYPTO_SPM, make, gcc" |
Gilles Peskine | d1dcfd5 | 2021-06-15 18:37:38 +0200 | [diff] [blame] | 963 | scripts/config.py full |
Gilles Peskine | d1dcfd5 | 2021-06-15 18:37:38 +0200 | [diff] [blame] | 964 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS |
| 965 | scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER |
| 966 | scripts/config.py set MBEDTLS_PSA_CRYPTO_SPM |
| 967 | # We can only compile, not link, since our test and sample programs |
| 968 | # aren't equipped for the modified names used when MBEDTLS_PSA_CRYPTO_SPM |
| 969 | # is active. |
| 970 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/spe' lib |
Gilles Peskine | a354867 | 2021-06-17 11:37:52 +0200 | [diff] [blame] | 971 | |
| 972 | # Check that if a symbol is renamed by crypto_spe.h, the non-renamed |
| 973 | # version is not present. |
| 974 | echo "Checking for renamed symbols in the library" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 975 | check_renamed_symbols tests/include/spe/crypto_spe.h library/libmbedcrypto.a |
Gilles Peskine | d1dcfd5 | 2021-06-15 18:37:38 +0200 | [diff] [blame] | 976 | } |
| 977 | |
Ronald Cron | 336678b | 2021-01-28 17:54:24 +0100 | [diff] [blame] | 978 | component_test_psa_crypto_client () { |
| 979 | msg "build: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make" |
| 980 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_C |
| 981 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C |
| 982 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CLIENT |
| 983 | make |
| 984 | |
| 985 | msg "test: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make" |
| 986 | make test |
| 987 | } |
| 988 | |
Jaeden Amero | 424fa93 | 2021-05-14 08:34:32 +0100 | [diff] [blame] | 989 | component_test_psa_crypto_rsa_no_genprime() { |
| 990 | msg "build: default config minus MBEDTLS_GENPRIME" |
| 991 | scripts/config.py unset MBEDTLS_GENPRIME |
| 992 | make |
| 993 | |
| 994 | msg "test: default config minus MBEDTLS_GENPRIME" |
| 995 | make test |
| 996 | } |
| 997 | |
Gilles Peskine | 782f411 | 2018-11-27 16:11:09 +0100 | [diff] [blame] | 998 | component_test_ref_configs () { |
| 999 | msg "test/build: ref-configs (ASan build)" # ~ 6 min 20s |
Manuel Pégourié-Gonnard | 9327fb3 | 2021-09-09 11:46:25 +0200 | [diff] [blame] | 1000 | # test-ref-configs works by overwriting mbedtls_config.h; this makes cmake |
| 1001 | # want to re-generate generated files that depend on it, quite correctly. |
| 1002 | # However this doesn't work as the generation script expects a specific |
| 1003 | # format for mbedtls_config.h, which the other files don't follow. Also, |
| 1004 | # cmake can't know this, but re-generation is actually not necessary as |
David Horstmann | d64f4b2 | 2021-10-20 12:29:47 +0100 | [diff] [blame] | 1005 | # the generated files only depend on the list of available options, not |
Manuel Pégourié-Gonnard | 9327fb3 | 2021-09-09 11:46:25 +0200 | [diff] [blame] | 1006 | # whether they're on or off. So, disable cmake's (over-sensitive here) |
| 1007 | # dependency resolution for generated files and just rely on them being |
David Horstmann | a8d1406 | 2021-10-20 17:14:23 +0100 | [diff] [blame] | 1008 | # present (thanks to pre_generate_files) by turning GEN_FILES off. |
| 1009 | CC=gcc cmake -D GEN_FILES=Off -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1010 | tests/scripts/test-ref-configs.pl |
Gilles Peskine | 782f411 | 2018-11-27 16:11:09 +0100 | [diff] [blame] | 1011 | } |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 1012 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1013 | component_test_no_renegotiation () { |
| 1014 | msg "build: Default + !MBEDTLS_SSL_RENEGOTIATION (ASan build)" # ~ 6 min |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1015 | scripts/config.py unset MBEDTLS_SSL_RENEGOTIATION |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1016 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1017 | make |
Simon Butcher | 3ea7f52 | 2016-03-07 23:22:10 +0000 | [diff] [blame] | 1018 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1019 | msg "test: !MBEDTLS_SSL_RENEGOTIATION - main suites (inc. selftests) (ASan build)" # ~ 50s |
| 1020 | make test |
Hanno Becker | 134c2ab | 2017-10-12 15:29:50 +0100 | [diff] [blame] | 1021 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1022 | msg "test: !MBEDTLS_SSL_RENEGOTIATION - ssl-opt.sh (ASan build)" # ~ 6 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1023 | tests/ssl-opt.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1024 | } |
Hanno Becker | 134c2ab | 2017-10-12 15:29:50 +0100 | [diff] [blame] | 1025 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1026 | component_test_no_pem_no_fs () { |
| 1027 | msg "build: Default + !MBEDTLS_PEM_PARSE_C + !MBEDTLS_FS_IO (ASan build)" |
| 1028 | scripts/config.py unset MBEDTLS_PEM_PARSE_C |
| 1029 | scripts/config.py unset MBEDTLS_FS_IO |
| 1030 | scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C # requires a filesystem |
| 1031 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C # requires PSA ITS |
| 1032 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1033 | make |
| 1034 | |
| 1035 | msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - main suites (inc. selftests) (ASan build)" # ~ 50s |
| 1036 | make test |
| 1037 | |
| 1038 | msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - ssl-opt.sh (ASan build)" # ~ 6 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1039 | tests/ssl-opt.sh |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1040 | } |
| 1041 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1042 | component_test_rsa_no_crt () { |
| 1043 | msg "build: Default + RSA_NO_CRT (ASan build)" # ~ 6 min |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1044 | scripts/config.py set MBEDTLS_RSA_NO_CRT |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1045 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1046 | make |
Manuel Pégourié-Gonnard | 246978d | 2014-11-20 13:29:53 +0100 | [diff] [blame] | 1047 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1048 | msg "test: RSA_NO_CRT - main suites (inc. selftests) (ASan build)" # ~ 50s |
| 1049 | make test |
Hanno Becker | d5ba5ef | 2017-09-28 12:53:51 +0100 | [diff] [blame] | 1050 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1051 | msg "test: RSA_NO_CRT - RSA-related part of ssl-opt.sh (ASan build)" # ~ 5s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1052 | tests/ssl-opt.sh -f RSA |
Hanno Becker | d5ba5ef | 2017-09-28 12:53:51 +0100 | [diff] [blame] | 1053 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1054 | msg "test: RSA_NO_CRT - RSA-related part of compat.sh (ASan build)" # ~ 3 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1055 | tests/compat.sh -t RSA |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 1056 | |
| 1057 | msg "test: RSA_NO_CRT - RSA-related part of context-info.sh (ASan build)" # ~ 15 sec |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1058 | tests/context-info.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1059 | } |
Hanno Becker | d5ba5ef | 2017-09-28 12:53:51 +0100 | [diff] [blame] | 1060 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1061 | component_test_no_ctr_drbg_classic () { |
| 1062 | msg "build: Full minus CTR_DRBG, classic crypto in TLS" |
Manuel Pégourié-Gonnard | 817e368 | 2020-05-28 12:55:10 +0200 | [diff] [blame] | 1063 | scripts/config.py full |
| 1064 | scripts/config.py unset MBEDTLS_CTR_DRBG_C |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1065 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1066 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Manuel Pégourié-Gonnard | 817e368 | 2020-05-28 12:55:10 +0200 | [diff] [blame] | 1067 | |
| 1068 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1069 | make |
| 1070 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1071 | msg "test: Full minus CTR_DRBG, classic crypto - main suites" |
Manuel Pégourié-Gonnard | 817e368 | 2020-05-28 12:55:10 +0200 | [diff] [blame] | 1072 | make test |
| 1073 | |
Gilles Peskine | ba74904 | 2021-01-13 20:02:03 +0100 | [diff] [blame] | 1074 | # In this configuration, the TLS test programs use HMAC_DRBG. |
| 1075 | # The SSL tests are slow, so run a small subset, just enough to get |
| 1076 | # confidence that the SSL code copes with HMAC_DRBG. |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1077 | msg "test: Full minus CTR_DRBG, classic crypto - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1078 | tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server' |
Gilles Peskine | ba74904 | 2021-01-13 20:02:03 +0100 | [diff] [blame] | 1079 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1080 | msg "test: Full minus CTR_DRBG, classic crypto - compat.sh (subset)" |
Xiaofei Bai | 8b5c382 | 2021-12-02 08:43:35 +0000 | [diff] [blame] | 1081 | tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL |
Manuel Pégourié-Gonnard | 5b942dc | 2020-06-05 09:29:51 +0200 | [diff] [blame] | 1082 | } |
| 1083 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1084 | component_test_no_ctr_drbg_use_psa () { |
| 1085 | msg "build: Full minus CTR_DRBG, PSA crypto in TLS" |
Manuel Pégourié-Gonnard | 5b942dc | 2020-06-05 09:29:51 +0200 | [diff] [blame] | 1086 | scripts/config.py full |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1087 | scripts/config.py unset MBEDTLS_CTR_DRBG_C |
| 1088 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
Manuel Pégourié-Gonnard | 5b942dc | 2020-06-05 09:29:51 +0200 | [diff] [blame] | 1089 | |
| 1090 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1091 | make |
| 1092 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1093 | msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - main suites" |
| 1094 | make test |
| 1095 | |
| 1096 | # In this configuration, the TLS test programs use HMAC_DRBG. |
| 1097 | # The SSL tests are slow, so run a small subset, just enough to get |
| 1098 | # confidence that the SSL code copes with HMAC_DRBG. |
| 1099 | msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1100 | tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server' |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1101 | |
| 1102 | msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - compat.sh (subset)" |
Xiaofei Bai | 8b5c382 | 2021-12-02 08:43:35 +0000 | [diff] [blame] | 1103 | tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1104 | } |
| 1105 | |
| 1106 | component_test_no_hmac_drbg_classic () { |
| 1107 | msg "build: Full minus HMAC_DRBG, classic crypto in TLS" |
| 1108 | scripts/config.py full |
| 1109 | scripts/config.py unset MBEDTLS_HMAC_DRBG_C |
| 1110 | scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG |
| 1111 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1112 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1113 | |
| 1114 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1115 | make |
| 1116 | |
| 1117 | msg "test: Full minus HMAC_DRBG, classic crypto - main suites" |
Manuel Pégourié-Gonnard | 5b942dc | 2020-06-05 09:29:51 +0200 | [diff] [blame] | 1118 | make test |
| 1119 | |
Gilles Peskine | a222434 | 2020-11-19 22:14:34 +0100 | [diff] [blame] | 1120 | # Normally our ECDSA implementation uses deterministic ECDSA. But since |
| 1121 | # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used |
| 1122 | # instead. |
| 1123 | # Test SSL with non-deterministic ECDSA. Only test features that |
| 1124 | # might be affected by how ECDSA signature is performed. |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1125 | msg "test: Full minus HMAC_DRBG, classic crypto - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1126 | tests/ssl-opt.sh -f 'Default\|SSL async private: sign' |
Gilles Peskine | a222434 | 2020-11-19 22:14:34 +0100 | [diff] [blame] | 1127 | |
| 1128 | # To save time, only test one protocol version, since this part of |
| 1129 | # the protocol is identical in (D)TLS up to 1.2. |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1130 | msg "test: Full minus HMAC_DRBG, classic crypto - compat.sh (ECDSA)" |
Xiaofei Bai | 8b5c382 | 2021-12-02 08:43:35 +0000 | [diff] [blame] | 1131 | tests/compat.sh -m tls12 -t 'ECDSA' |
Manuel Pégourié-Gonnard | 817e368 | 2020-05-28 12:55:10 +0200 | [diff] [blame] | 1132 | } |
| 1133 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1134 | component_test_no_hmac_drbg_use_psa () { |
| 1135 | msg "build: Full minus HMAC_DRBG, PSA crypto in TLS" |
| 1136 | scripts/config.py full |
| 1137 | scripts/config.py unset MBEDTLS_HMAC_DRBG_C |
| 1138 | scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG |
| 1139 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
| 1140 | |
| 1141 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1142 | make |
| 1143 | |
| 1144 | msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - main suites" |
| 1145 | make test |
| 1146 | |
| 1147 | # Normally our ECDSA implementation uses deterministic ECDSA. But since |
| 1148 | # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used |
| 1149 | # instead. |
| 1150 | # Test SSL with non-deterministic ECDSA. Only test features that |
| 1151 | # might be affected by how ECDSA signature is performed. |
| 1152 | msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1153 | tests/ssl-opt.sh -f 'Default\|SSL async private: sign' |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1154 | |
| 1155 | # To save time, only test one protocol version, since this part of |
| 1156 | # the protocol is identical in (D)TLS up to 1.2. |
| 1157 | msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - compat.sh (ECDSA)" |
Xiaofei Bai | 8b5c382 | 2021-12-02 08:43:35 +0000 | [diff] [blame] | 1158 | tests/compat.sh -m tls12 -t 'ECDSA' |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1159 | } |
| 1160 | |
| 1161 | component_test_psa_external_rng_no_drbg_classic () { |
| 1162 | msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto in TLS" |
| 1163 | scripts/config.py full |
| 1164 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1165 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1166 | scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG |
Gilles Peskine | 38c12fd | 2021-02-08 21:02:53 +0100 | [diff] [blame] | 1167 | scripts/config.py unset MBEDTLS_ENTROPY_C |
| 1168 | scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED |
| 1169 | scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1170 | scripts/config.py unset MBEDTLS_CTR_DRBG_C |
| 1171 | scripts/config.py unset MBEDTLS_HMAC_DRBG_C |
| 1172 | scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG |
Gilles Peskine | 8eb2943 | 2021-02-03 20:07:11 +0100 | [diff] [blame] | 1173 | # When MBEDTLS_USE_PSA_CRYPTO is disabled and there is no DRBG, |
| 1174 | # the SSL test programs don't have an RNG and can't work. Explicitly |
| 1175 | # make them use the PSA RNG with -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG. |
| 1176 | make CFLAGS="$ASAN_CFLAGS -O2 -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG" LDFLAGS="$ASAN_CFLAGS" |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1177 | |
| 1178 | msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - main suites" |
| 1179 | make test |
| 1180 | |
Gilles Peskine | 8eb2943 | 2021-02-03 20:07:11 +0100 | [diff] [blame] | 1181 | msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1182 | tests/ssl-opt.sh -f 'Default' |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1183 | } |
| 1184 | |
| 1185 | component_test_psa_external_rng_no_drbg_use_psa () { |
| 1186 | msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto in TLS" |
Gilles Peskine | c109b37 | 2020-11-23 17:39:04 +0100 | [diff] [blame] | 1187 | scripts/config.py full |
| 1188 | scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG |
Gilles Peskine | 38c12fd | 2021-02-08 21:02:53 +0100 | [diff] [blame] | 1189 | scripts/config.py unset MBEDTLS_ENTROPY_C |
| 1190 | scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED |
| 1191 | scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT |
Gilles Peskine | c109b37 | 2020-11-23 17:39:04 +0100 | [diff] [blame] | 1192 | scripts/config.py unset MBEDTLS_CTR_DRBG_C |
| 1193 | scripts/config.py unset MBEDTLS_HMAC_DRBG_C |
| 1194 | scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG |
Gilles Peskine | c109b37 | 2020-11-23 17:39:04 +0100 | [diff] [blame] | 1195 | make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS" |
| 1196 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1197 | msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - main suites" |
Gilles Peskine | c109b37 | 2020-11-23 17:39:04 +0100 | [diff] [blame] | 1198 | make test |
| 1199 | |
Gilles Peskine | 8eb2943 | 2021-02-03 20:07:11 +0100 | [diff] [blame] | 1200 | msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1201 | tests/ssl-opt.sh -f 'Default\|opaque' |
Gilles Peskine | c109b37 | 2020-11-23 17:39:04 +0100 | [diff] [blame] | 1202 | } |
| 1203 | |
| 1204 | component_test_psa_external_rng_use_psa_crypto () { |
| 1205 | msg "build: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG" |
| 1206 | scripts/config.py full |
| 1207 | scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG |
| 1208 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
| 1209 | scripts/config.py unset MBEDTLS_CTR_DRBG_C |
| 1210 | make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS" |
| 1211 | |
| 1212 | msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG" |
| 1213 | make test |
| 1214 | |
Gilles Peskine | ba74904 | 2021-01-13 20:02:03 +0100 | [diff] [blame] | 1215 | msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1216 | tests/ssl-opt.sh -f 'Default\|opaque' |
Gilles Peskine | c109b37 | 2020-11-23 17:39:04 +0100 | [diff] [blame] | 1217 | } |
| 1218 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1219 | component_test_everest () { |
| 1220 | msg "build: Everest ECDH context (ASan build)" # ~ 6 min |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1221 | scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED |
| 1222 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1223 | make |
| 1224 | |
| 1225 | msg "test: Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s |
| 1226 | make test |
| 1227 | |
| 1228 | msg "test: Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1229 | tests/ssl-opt.sh -f ECDH |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1230 | |
| 1231 | msg "test: Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min |
| 1232 | # Exclude some symmetric ciphers that are redundant here to gain time. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1233 | tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA\|DES' |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1234 | } |
| 1235 | |
Gilles Peskine | d3beca9 | 2020-07-03 00:15:37 +0200 | [diff] [blame] | 1236 | component_test_everest_curve25519_only () { |
| 1237 | msg "build: Everest ECDH context, only Curve25519" # ~ 6 min |
Gilles Peskine | d3beca9 | 2020-07-03 00:15:37 +0200 | [diff] [blame] | 1238 | scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED |
| 1239 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 1240 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED |
| 1241 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED |
TRodziewicz | 7c1d41d | 2021-04-23 13:33:44 +0200 | [diff] [blame] | 1242 | scripts/config.py unset MBEDTLS_ECJPAKE_C |
Gilles Peskine | d3beca9 | 2020-07-03 00:15:37 +0200 | [diff] [blame] | 1243 | # Disable all curves |
| 1244 | for c in $(sed -n 's/#define \(MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED\).*/\1/p' <"$CONFIG_H"); do |
| 1245 | scripts/config.py unset "$c" |
| 1246 | done |
| 1247 | scripts/config.py set MBEDTLS_ECP_DP_CURVE25519_ENABLED |
| 1248 | |
| 1249 | make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS" |
| 1250 | |
| 1251 | msg "test: Everest ECDH context, only Curve25519" # ~ 50s |
| 1252 | make test |
| 1253 | } |
| 1254 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1255 | component_test_small_ssl_out_content_len () { |
| 1256 | msg "build: small SSL_OUT_CONTENT_LEN (ASan build)" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1257 | scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384 |
| 1258 | scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1259 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1260 | make |
Hanno Becker | d5ba5ef | 2017-09-28 12:53:51 +0100 | [diff] [blame] | 1261 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1262 | msg "test: small SSL_OUT_CONTENT_LEN - ssl-opt.sh MFL and large packet tests" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1263 | tests/ssl-opt.sh -f "Max fragment\|Large packet" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1264 | } |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 1265 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1266 | component_test_small_ssl_in_content_len () { |
| 1267 | msg "build: small SSL_IN_CONTENT_LEN (ASan build)" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1268 | scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 4096 |
| 1269 | scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 16384 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1270 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1271 | make |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 1272 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1273 | msg "test: small SSL_IN_CONTENT_LEN - ssl-opt.sh MFL tests" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1274 | tests/ssl-opt.sh -f "Max fragment" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1275 | } |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 1276 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1277 | component_test_small_ssl_dtls_max_buffering () { |
| 1278 | msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1279 | scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 1000 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1280 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1281 | make |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 1282 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1283 | msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0 - ssl-opt.sh specific reordering test" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1284 | tests/ssl-opt.sh -f "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1285 | } |
Hanno Becker | 2f5aa4c | 2018-08-24 14:43:44 +0100 | [diff] [blame] | 1286 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1287 | component_test_small_mbedtls_ssl_dtls_max_buffering () { |
| 1288 | msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1" |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1289 | scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 190 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1290 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1291 | make |
Hanno Becker | 2f5aa4c | 2018-08-24 14:43:44 +0100 | [diff] [blame] | 1292 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1293 | msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1 - ssl-opt.sh specific reordering test" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1294 | tests/ssl-opt.sh -f "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1295 | } |
Hanno Becker | 2f5aa4c | 2018-08-24 14:43:44 +0100 | [diff] [blame] | 1296 | |
Gilles Peskine | 75cc771 | 2019-09-06 19:47:17 +0200 | [diff] [blame] | 1297 | component_test_psa_collect_statuses () { |
| 1298 | msg "build+test: psa_collect_statuses" # ~30s |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1299 | scripts/config.py full |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1300 | tests/scripts/psa_collect_statuses.py |
Gilles Peskine | 75cc771 | 2019-09-06 19:47:17 +0200 | [diff] [blame] | 1301 | # Check that psa_crypto_init() succeeded at least once |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1302 | grep -q '^0:psa_crypto_init:' tests/statuses.log |
Gilles Peskine | 75cc771 | 2019-09-06 19:47:17 +0200 | [diff] [blame] | 1303 | rm -f tests/statuses.log |
| 1304 | } |
| 1305 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1306 | component_test_full_cmake_clang () { |
| 1307 | msg "build: cmake, full config, clang" # ~ 50s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1308 | scripts/config.py full |
Gilles Peskine | dbf7b7e | 2021-10-07 19:34:57 +0200 | [diff] [blame] | 1309 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release -D ENABLE_TESTING=On . |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1310 | make |
Hanno Becker | 2f5aa4c | 2018-08-24 14:43:44 +0100 | [diff] [blame] | 1311 | |
k-stachowiak | 0291cb7 | 2019-06-26 15:52:12 +0200 | [diff] [blame] | 1312 | msg "test: main suites (full config, clang)" # ~ 5s |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1313 | make test |
Manuel Pégourié-Gonnard | 3895f5a | 2014-03-27 14:44:04 +0100 | [diff] [blame] | 1314 | |
k-stachowiak | 0291cb7 | 2019-06-26 15:52:12 +0200 | [diff] [blame] | 1315 | msg "test: psa_constant_names (full config, clang)" # ~ 1s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1316 | tests/scripts/test_psa_constant_names.py |
Gilles Peskine | 69e8f7f | 2020-02-26 19:51:43 +0100 | [diff] [blame] | 1317 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1318 | msg "test: ssl-opt.sh default, ECJPAKE, SSL async (full config)" # ~ 1s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1319 | tests/ssl-opt.sh -f 'Default\|ECJPAKE\|SSL async private' |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 1320 | |
TRodziewicz | 10e8cf5 | 2021-05-31 17:58:57 +0200 | [diff] [blame] | 1321 | msg "test: compat.sh DES, 3DES & NULL (full config)" # ~ 2 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1322 | env OPENSSL_CMD="$OPENSSL_LEGACY" GNUTLS_CLI="$GNUTLS_LEGACY_CLI" GNUTLS_SERV="$GNUTLS_LEGACY_SERV" tests/compat.sh -e '^$' -f 'NULL\|DES' |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 1323 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1324 | msg "test: compat.sh ARIA + ChachaPoly" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1325 | env OPENSSL_CMD="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA' |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1326 | } |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 1327 | |
Manuel Pégourié-Gonnard | 6240def | 2020-07-10 09:35:54 +0200 | [diff] [blame] | 1328 | component_test_memsan_constant_flow () { |
Manuel Pégourié-Gonnard | 0b2112d | 2020-07-22 11:09:28 +0200 | [diff] [blame] | 1329 | # This tests both (1) accesses to undefined memory, and (2) branches or |
| 1330 | # memory access depending on secret values. To distinguish between those: |
| 1331 | # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist? |
| 1332 | # - or alternatively, change the build type to MemSanDbg, which enables |
| 1333 | # origin tracking and nicer stack traces (which are useful for debugging |
| 1334 | # anyway), and check if the origin was TEST_CF_SECRET() or something else. |
Neil Armstrong | 0ab7a23 | 2022-03-18 09:57:32 +0100 | [diff] [blame] | 1335 | msg "build: cmake MSan (clang), full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing" |
| 1336 | scripts/config.py full |
| 1337 | scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN |
| 1338 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
| 1339 | scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm |
| 1340 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan . |
| 1341 | make |
| 1342 | |
| 1343 | msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO, Msan + constant flow)" |
| 1344 | make test |
| 1345 | } |
| 1346 | |
| 1347 | component_test_memsan_constant_flow_psa () { |
| 1348 | # This tests both (1) accesses to undefined memory, and (2) branches or |
| 1349 | # memory access depending on secret values. To distinguish between those: |
| 1350 | # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist? |
| 1351 | # - or alternatively, change the build type to MemSanDbg, which enables |
| 1352 | # origin tracking and nicer stack traces (which are useful for debugging |
| 1353 | # anyway), and check if the origin was TEST_CF_SECRET() or something else. |
Manuel Pégourié-Gonnard | 0b2112d | 2020-07-22 11:09:28 +0200 | [diff] [blame] | 1354 | msg "build: cmake MSan (clang), full config with constant flow testing" |
Manuel Pégourié-Gonnard | 6240def | 2020-07-10 09:35:54 +0200 | [diff] [blame] | 1355 | scripts/config.py full |
| 1356 | scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN |
| 1357 | scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm |
| 1358 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan . |
| 1359 | make |
| 1360 | |
Manuel Pégourié-Gonnard | 0b2112d | 2020-07-22 11:09:28 +0200 | [diff] [blame] | 1361 | msg "test: main suites (Msan + constant flow)" |
Manuel Pégourié-Gonnard | 6240def | 2020-07-10 09:35:54 +0200 | [diff] [blame] | 1362 | make test |
| 1363 | } |
| 1364 | |
Manuel Pégourié-Gonnard | 73afa37 | 2020-08-19 10:27:38 +0200 | [diff] [blame] | 1365 | component_test_valgrind_constant_flow () { |
| 1366 | # This tests both (1) everything that valgrind's memcheck usually checks |
| 1367 | # (heap buffer overflows, use of uninitialized memory, use-after-free, |
| 1368 | # etc.) and (2) branches or memory access depending on secret values, |
| 1369 | # which will be reported as uninitialized memory. To distinguish between |
| 1370 | # secret and actually uninitialized: |
| 1371 | # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist? |
| 1372 | # - or alternatively, build with debug info and manually run the offending |
| 1373 | # test suite with valgrind --track-origins=yes, then check if the origin |
| 1374 | # was TEST_CF_SECRET() or something else. |
Neil Armstrong | 0ab7a23 | 2022-03-18 09:57:32 +0100 | [diff] [blame] | 1375 | msg "build: cmake release GCC, full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing" |
| 1376 | scripts/config.py full |
| 1377 | scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND |
| 1378 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
| 1379 | cmake -D CMAKE_BUILD_TYPE:String=Release . |
| 1380 | make |
| 1381 | |
| 1382 | # this only shows a summary of the results (how many of each type) |
| 1383 | # details are left in Testing/<date>/DynamicAnalysis.xml |
| 1384 | msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO, valgrind + constant flow)" |
| 1385 | make memcheck |
| 1386 | } |
| 1387 | |
| 1388 | component_test_valgrind_constant_flow_psa () { |
| 1389 | # This tests both (1) everything that valgrind's memcheck usually checks |
| 1390 | # (heap buffer overflows, use of uninitialized memory, use-after-free, |
| 1391 | # etc.) and (2) branches or memory access depending on secret values, |
| 1392 | # which will be reported as uninitialized memory. To distinguish between |
| 1393 | # secret and actually uninitialized: |
| 1394 | # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist? |
| 1395 | # - or alternatively, build with debug info and manually run the offending |
| 1396 | # test suite with valgrind --track-origins=yes, then check if the origin |
| 1397 | # was TEST_CF_SECRET() or something else. |
Manuel Pégourié-Gonnard | 73afa37 | 2020-08-19 10:27:38 +0200 | [diff] [blame] | 1398 | msg "build: cmake release GCC, full config with constant flow testing" |
| 1399 | scripts/config.py full |
| 1400 | scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND |
| 1401 | cmake -D CMAKE_BUILD_TYPE:String=Release . |
| 1402 | make |
| 1403 | |
| 1404 | # this only shows a summary of the results (how many of each type) |
| 1405 | # details are left in Testing/<date>/DynamicAnalysis.xml |
| 1406 | msg "test: main suites (valgrind + constant flow)" |
| 1407 | make memcheck |
| 1408 | } |
| 1409 | |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 1410 | component_test_default_no_deprecated () { |
Gilles Peskine | 8386ea2 | 2020-04-30 09:07:29 +0200 | [diff] [blame] | 1411 | # Test that removing the deprecated features from the default |
| 1412 | # configuration leaves something consistent. |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 1413 | msg "build: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 30s |
| 1414 | scripts/config.py set MBEDTLS_DEPRECATED_REMOVED |
| 1415 | make CC=gcc CFLAGS='-O -Werror -Wall -Wextra' |
| 1416 | |
| 1417 | msg "test: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 5s |
| 1418 | make test |
| 1419 | } |
| 1420 | |
| 1421 | component_test_full_no_deprecated () { |
Gilles Peskine | 30de2e8 | 2020-04-20 21:39:22 +0200 | [diff] [blame] | 1422 | msg "build: make, full_no_deprecated config" # ~ 30s |
| 1423 | scripts/config.py full_no_deprecated |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 1424 | make CC=gcc CFLAGS='-O -Werror -Wall -Wextra' |
| 1425 | |
Gilles Peskine | 30de2e8 | 2020-04-20 21:39:22 +0200 | [diff] [blame] | 1426 | msg "test: make, full_no_deprecated config" # ~ 5s |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 1427 | make test |
| 1428 | } |
| 1429 | |
Gilles Peskine | 8386ea2 | 2020-04-30 09:07:29 +0200 | [diff] [blame] | 1430 | component_test_full_no_deprecated_deprecated_warning () { |
| 1431 | # Test that there is nothing deprecated in "full_no_deprecated". |
| 1432 | # A deprecated feature would trigger a warning (made fatal) from |
| 1433 | # MBEDTLS_DEPRECATED_WARNING. |
Gilles Peskine | 30de2e8 | 2020-04-20 21:39:22 +0200 | [diff] [blame] | 1434 | msg "build: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 30s |
| 1435 | scripts/config.py full_no_deprecated |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 1436 | scripts/config.py unset MBEDTLS_DEPRECATED_REMOVED |
| 1437 | scripts/config.py set MBEDTLS_DEPRECATED_WARNING |
| 1438 | make CC=gcc CFLAGS='-O -Werror -Wall -Wextra' |
| 1439 | |
Gilles Peskine | 30de2e8 | 2020-04-20 21:39:22 +0200 | [diff] [blame] | 1440 | msg "test: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 5s |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 1441 | make test |
| 1442 | } |
| 1443 | |
Gilles Peskine | 8386ea2 | 2020-04-30 09:07:29 +0200 | [diff] [blame] | 1444 | component_test_full_deprecated_warning () { |
| 1445 | # Test that when MBEDTLS_DEPRECATED_WARNING is enabled, the build passes |
| 1446 | # with only certain whitelisted types of warnings. |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 1447 | msg "build: make, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1448 | scripts/config.py full |
| 1449 | scripts/config.py set MBEDTLS_DEPRECATED_WARNING |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 1450 | # Expect warnings from '#warning' directives in check_config.h. |
| 1451 | make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=cpp' lib programs |
Manuel Pégourié-Gonnard | 6b36892 | 2018-02-20 12:02:07 +0100 | [diff] [blame] | 1452 | |
Gilles Peskine | 8386ea2 | 2020-04-30 09:07:29 +0200 | [diff] [blame] | 1453 | msg "build: make tests, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s |
| 1454 | # Set MBEDTLS_TEST_DEPRECATED to enable tests for deprecated features. |
| 1455 | # By default those are disabled when MBEDTLS_DEPRECATED_WARNING is set. |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 1456 | # Expect warnings from '#warning' directives in check_config.h and |
| 1457 | # from the use of deprecated functions in test suites. |
| 1458 | make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=deprecated-declarations -Wno-error=cpp -DMBEDTLS_TEST_DEPRECATED' tests |
Gilles Peskine | 841b14b | 2019-11-26 17:37:37 +0100 | [diff] [blame] | 1459 | |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 1460 | msg "test: full config + MBEDTLS_TEST_DEPRECATED" # ~ 30s |
| 1461 | make test |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1462 | } |
Jaeden Amero | ed93bdc | 2018-11-02 16:57:24 +0000 | [diff] [blame] | 1463 | |
Gilles Peskine | ec541fe | 2020-01-31 14:24:14 +0100 | [diff] [blame] | 1464 | # Check that the specified libraries exist and are empty. |
| 1465 | are_empty_libraries () { |
| 1466 | nm "$@" >/dev/null 2>/dev/null |
| 1467 | ! nm "$@" 2>/dev/null | grep -v ':$' | grep . |
| 1468 | } |
| 1469 | |
| 1470 | component_build_crypto_default () { |
| 1471 | msg "build: make, crypto only" |
| 1472 | scripts/config.py crypto |
Gilles Peskine | 6bb3915 | 2020-02-03 11:59:20 +0100 | [diff] [blame] | 1473 | make CFLAGS='-O1 -Werror' |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1474 | are_empty_libraries library/libmbedx509.* library/libmbedtls.* |
Gilles Peskine | ec541fe | 2020-01-31 14:24:14 +0100 | [diff] [blame] | 1475 | } |
| 1476 | |
| 1477 | component_build_crypto_full () { |
| 1478 | msg "build: make, crypto only, full config" |
| 1479 | scripts/config.py crypto_full |
Gilles Peskine | 6bb3915 | 2020-02-03 11:59:20 +0100 | [diff] [blame] | 1480 | make CFLAGS='-O1 -Werror' |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1481 | are_empty_libraries library/libmbedx509.* library/libmbedtls.* |
Gilles Peskine | ec541fe | 2020-01-31 14:24:14 +0100 | [diff] [blame] | 1482 | } |
| 1483 | |
| 1484 | component_build_crypto_baremetal () { |
| 1485 | msg "build: make, crypto only, baremetal config" |
| 1486 | scripts/config.py crypto_baremetal |
David Horstmann | 61faf66 | 2021-11-30 11:40:54 +0000 | [diff] [blame] | 1487 | make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1488 | are_empty_libraries library/libmbedx509.* library/libmbedtls.* |
Gilles Peskine | ec541fe | 2020-01-31 14:24:14 +0100 | [diff] [blame] | 1489 | } |
Daniel Axtens | 446af20 | 2020-09-02 21:30:13 +1000 | [diff] [blame] | 1490 | support_build_crypto_baremetal () { |
Daniel Axtens | 814c813 | 2020-08-31 14:22:58 +1000 | [diff] [blame] | 1491 | support_build_baremetal "$@" |
| 1492 | } |
| 1493 | |
| 1494 | component_build_baremetal () { |
| 1495 | msg "build: make, baremetal config" |
| 1496 | scripts/config.py baremetal |
David Horstmann | 61faf66 | 2021-11-30 11:40:54 +0000 | [diff] [blame] | 1497 | make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/" |
Daniel Axtens | 814c813 | 2020-08-31 14:22:58 +1000 | [diff] [blame] | 1498 | } |
| 1499 | support_build_baremetal () { |
Daniel Axtens | 446af20 | 2020-09-02 21:30:13 +1000 | [diff] [blame] | 1500 | # Older Glibc versions include time.h from other headers such as stdlib.h, |
| 1501 | # which makes the no-time.h-in-baremetal check fail. Ubuntu 16.04 has this |
| 1502 | # problem, Ubuntu 18.04 is ok. |
| 1503 | ! grep -q -F time.h /usr/include/x86_64-linux-gnu/sys/types.h |
| 1504 | } |
Gilles Peskine | ec541fe | 2020-01-31 14:24:14 +0100 | [diff] [blame] | 1505 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1506 | component_test_depends_curves () { |
| 1507 | msg "test/build: curves.pl (gcc)" # ~ 4 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1508 | tests/scripts/curves.pl |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1509 | } |
Jaeden Amero | acaabe7 | 2018-11-07 11:52:52 +0000 | [diff] [blame] | 1510 | |
John Durkop | c14be90 | 2020-08-20 06:16:41 -0700 | [diff] [blame] | 1511 | component_test_depends_curves_psa () { |
| 1512 | msg "test/build: curves.pl with MBEDTLS_USE_PSA_CRYPTO defined (gcc)" |
| 1513 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1514 | tests/scripts/curves.pl |
John Durkop | c14be90 | 2020-08-20 06:16:41 -0700 | [diff] [blame] | 1515 | } |
| 1516 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1517 | component_test_depends_hashes () { |
| 1518 | msg "test/build: depends-hashes.pl (gcc)" # ~ 2 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1519 | tests/scripts/depends-hashes.pl |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1520 | } |
Jaeden Amero | acaabe7 | 2018-11-07 11:52:52 +0000 | [diff] [blame] | 1521 | |
John Durkop | 2ec2eaa | 2020-08-24 18:29:15 -0700 | [diff] [blame] | 1522 | component_test_depends_hashes_psa () { |
| 1523 | msg "test/build: depends-hashes.pl with MBEDTLS_USE_PSA_CRYPTO defined (gcc)" |
| 1524 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1525 | tests/scripts/depends-hashes.pl |
John Durkop | 2ec2eaa | 2020-08-24 18:29:15 -0700 | [diff] [blame] | 1526 | } |
| 1527 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1528 | component_test_depends_pkalgs () { |
| 1529 | msg "test/build: depends-pkalgs.pl (gcc)" # ~ 2 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1530 | tests/scripts/depends-pkalgs.pl |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1531 | } |
Manuel Pégourié-Gonnard | 655c0a8 | 2018-10-30 11:20:45 +0100 | [diff] [blame] | 1532 | |
John Durkop | 619e09e | 2020-09-08 22:19:56 -0700 | [diff] [blame] | 1533 | component_test_depends_pkalgs_psa () { |
| 1534 | msg "test/build: depends-pkalgs.pl with MBEDTLS_USE_PSA_CRYPTO defined (gcc)" |
| 1535 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1536 | tests/scripts/depends-pkalgs.pl |
Manuel Pégourié-Gonnard | 655c0a8 | 2018-10-30 11:20:45 +0100 | [diff] [blame] | 1537 | } |
| 1538 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1539 | component_build_key_exchanges () { |
| 1540 | msg "test/build: key-exchanges (gcc)" # ~ 1 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1541 | tests/scripts/key-exchanges.pl |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1542 | } |
Manuel Pégourié-Gonnard | 655c0a8 | 2018-10-30 11:20:45 +0100 | [diff] [blame] | 1543 | |
Gilles Peskine | 03ab544 | 2021-07-09 15:19:28 +0200 | [diff] [blame] | 1544 | component_test_make_cxx () { |
| 1545 | msg "build: Unix make, full, gcc + g++" |
| 1546 | scripts/config.py full |
| 1547 | make TEST_CPP=1 lib programs |
Manuel Pégourié-Gonnard | 655c0a8 | 2018-10-30 11:20:45 +0100 | [diff] [blame] | 1548 | |
Gilles Peskine | 03ab544 | 2021-07-09 15:19:28 +0200 | [diff] [blame] | 1549 | msg "test: cpp_dummy_build" |
| 1550 | programs/test/cpp_dummy_build |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1551 | } |
Manuel Pégourié-Gonnard | 655c0a8 | 2018-10-30 11:20:45 +0100 | [diff] [blame] | 1552 | |
Gilles Peskine | cc73cc5 | 2021-05-25 09:04:46 +0200 | [diff] [blame] | 1553 | component_build_module_alt () { |
| 1554 | msg "build: MBEDTLS_XXX_ALT" # ~30s |
| 1555 | scripts/config.py full |
| 1556 | # Disable options that are incompatible with some ALT implementations. |
| 1557 | # aesni.c and padlock.c reference mbedtls_aes_context fields directly. |
| 1558 | scripts/config.py unset MBEDTLS_AESNI_C |
| 1559 | scripts/config.py unset MBEDTLS_PADLOCK_C |
Gilles Peskine | cc73cc5 | 2021-05-25 09:04:46 +0200 | [diff] [blame] | 1560 | # You can only have one threading implementation: alt or pthread, not both. |
| 1561 | scripts/config.py unset MBEDTLS_THREADING_PTHREAD |
Gilles Peskine | 5c3f18d | 2021-05-31 21:21:12 +0200 | [diff] [blame] | 1562 | # The SpecifiedECDomain parsing code accesses mbedtls_ecp_group fields |
| 1563 | # directly and assumes the implementation works with partial groups. |
| 1564 | scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED |
Tom Cosgrove | f3ebd90 | 2022-02-20 22:25:31 +0000 | [diff] [blame] | 1565 | # MBEDTLS_SHA256_*ALT can't be used with MBEDTLS_SHA256_USE_A64_CRYPTO_* |
| 1566 | scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT |
| 1567 | scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY |
Tom Cosgrove | 87fbfb5 | 2022-03-15 10:51:52 +0000 | [diff] [blame] | 1568 | # MBEDTLS_SHA512_*ALT can't be used with MBEDTLS_SHA512_USE_A64_CRYPTO_* |
| 1569 | scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT |
| 1570 | scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY |
Gilles Peskine | cc73cc5 | 2021-05-25 09:04:46 +0200 | [diff] [blame] | 1571 | # Enable all MBEDTLS_XXX_ALT for whole modules. Do not enable |
| 1572 | # MBEDTLS_XXX_YYY_ALT which are for single functions. |
| 1573 | scripts/config.py set-all 'MBEDTLS_([A-Z0-9]*|NIST_KW)_ALT' |
Gilles Peskine | 1628a9c | 2021-05-31 22:09:58 +0200 | [diff] [blame] | 1574 | scripts/config.py unset MBEDTLS_DHM_ALT #incompatible with MBEDTLS_DEBUG_C |
| 1575 | # We can only compile, not link, since we don't have any implementations |
| 1576 | # suitable for testing with the dummy alt headers. |
| 1577 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib |
| 1578 | } |
| 1579 | |
| 1580 | component_build_dhm_alt () { |
| 1581 | msg "build: MBEDTLS_DHM_ALT" # ~30s |
| 1582 | scripts/config.py full |
| 1583 | scripts/config.py set MBEDTLS_DHM_ALT |
| 1584 | # debug.c currently references mbedtls_dhm_context fields directly. |
| 1585 | scripts/config.py unset MBEDTLS_DEBUG_C |
Gilles Peskine | cc73cc5 | 2021-05-25 09:04:46 +0200 | [diff] [blame] | 1586 | # We can only compile, not link, since we don't have any implementations |
| 1587 | # suitable for testing with the dummy alt headers. |
| 1588 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib |
| 1589 | } |
| 1590 | |
Manuel Pégourié-Gonnard | 971dea3 | 2019-02-01 12:38:40 +0100 | [diff] [blame] | 1591 | component_test_no_use_psa_crypto_full_cmake_asan() { |
| 1592 | # full minus MBEDTLS_USE_PSA_CRYPTO: run the same set of tests as basic-build-test.sh |
Gilles Peskine | dc3a179 | 2019-09-03 11:42:04 +0200 | [diff] [blame] | 1593 | msg "build: cmake, full config minus MBEDTLS_USE_PSA_CRYPTO, ASan" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1594 | scripts/config.py full |
| 1595 | scripts/config.py set MBEDTLS_ECP_RESTARTABLE # not using PSA, so enable restartable ECC |
| 1596 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_C |
| 1597 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 1598 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1599 | scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C |
Gilles Peskine | dc6d838 | 2020-04-12 14:21:55 +0200 | [diff] [blame] | 1600 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1601 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C |
Manuel Pégourié-Gonnard | d8167e8 | 2019-02-01 11:12:52 +0100 | [diff] [blame] | 1602 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Andrzej Kurek | de5a007 | 2019-02-01 07:03:03 -0500 | [diff] [blame] | 1603 | make |
Manuel Pégourié-Gonnard | 43be6cd | 2017-06-20 09:53:42 +0200 | [diff] [blame] | 1604 | |
Manuel Pégourié-Gonnard | 971dea3 | 2019-02-01 12:38:40 +0100 | [diff] [blame] | 1605 | msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO)" |
Andrzej Kurek | de5a007 | 2019-02-01 07:03:03 -0500 | [diff] [blame] | 1606 | make test |
Manuel Pégourié-Gonnard | 503a5ef | 2015-10-23 09:04:45 +0200 | [diff] [blame] | 1607 | |
Manuel Pégourié-Gonnard | 971dea3 | 2019-02-01 12:38:40 +0100 | [diff] [blame] | 1608 | msg "test: ssl-opt.sh (full minus MBEDTLS_USE_PSA_CRYPTO)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1609 | tests/ssl-opt.sh |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 1610 | |
Manuel Pégourié-Gonnard | 971dea3 | 2019-02-01 12:38:40 +0100 | [diff] [blame] | 1611 | msg "test: compat.sh default (full minus MBEDTLS_USE_PSA_CRYPTO)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1612 | tests/compat.sh |
Andrzej Kurek | 991f9fe | 2018-07-02 09:08:21 -0400 | [diff] [blame] | 1613 | |
TRodziewicz | 10e8cf5 | 2021-05-31 17:58:57 +0200 | [diff] [blame] | 1614 | msg "test: compat.sh DES & NULL (full minus MBEDTLS_USE_PSA_CRYPTO)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1615 | env OPENSSL_CMD="$OPENSSL_LEGACY" GNUTLS_CLI="$GNUTLS_LEGACY_CLI" GNUTLS_SERV="$GNUTLS_LEGACY_SERV" tests/compat.sh -e '3DES\|DES-CBC3' -f 'NULL\|DES' |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 1616 | |
Manuel Pégourié-Gonnard | 971dea3 | 2019-02-01 12:38:40 +0100 | [diff] [blame] | 1617 | msg "test: compat.sh ARIA + ChachaPoly (full minus MBEDTLS_USE_PSA_CRYPTO)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1618 | env OPENSSL_CMD="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA' |
Andrzej Kurek | de5a007 | 2019-02-01 07:03:03 -0500 | [diff] [blame] | 1619 | } |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 1620 | |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 1621 | component_test_psa_crypto_config_accel_ecdsa () { |
| 1622 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA" |
| 1623 | |
| 1624 | # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having |
| 1625 | # partial support for cipher operations in the driver test library. |
| 1626 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER |
| 1627 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING |
| 1628 | |
| 1629 | # SHA384 needed for some ECDSA signature tests. |
| 1630 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA384_C |
| 1631 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA512_C |
| 1632 | |
| 1633 | loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA KEY_TYPE_ECC_KEY_PAIR KEY_TYPE_ECC_PUBLIC_KEY" |
| 1634 | loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' ) |
| 1635 | make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS" |
| 1636 | |
| 1637 | # Restore test driver base configuration |
| 1638 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA384_C |
| 1639 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA512_C |
| 1640 | |
John Durkop | d895939 | 2020-09-20 23:09:17 -0700 | [diff] [blame] | 1641 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 1642 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
John Durkop | d895939 | 2020-09-20 23:09:17 -0700 | [diff] [blame] | 1643 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1644 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 1645 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 1646 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED |
| 1647 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED |
| 1648 | |
| 1649 | loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )" |
| 1650 | make CFLAGS="$ASAN_CFLAGS -O -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS" |
| 1651 | |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 1652 | not grep mbedtls_ecdsa_ library/ecdsa.o |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 1653 | |
| 1654 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA" |
| 1655 | make test |
| 1656 | } |
| 1657 | |
| 1658 | component_test_psa_crypto_config_accel_rsa_signature () { |
| 1659 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated RSA signature" |
| 1660 | |
| 1661 | # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having |
| 1662 | # partial support for cipher operations in the driver test library. |
| 1663 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER |
| 1664 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING |
| 1665 | |
| 1666 | # It seems it is not possible to remove only the support for RSA signature |
| 1667 | # in the library. Thus we have to remove all RSA support (signature and |
| 1668 | # encryption/decryption). AS there is no driver support for asymmetric |
| 1669 | # encryption/decryption so far remove RSA encryption/decryption from the |
| 1670 | # application algorithm list. |
| 1671 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP |
| 1672 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT |
| 1673 | |
| 1674 | # Make sure both the library and the test library support the SHA hash |
| 1675 | # algorithms and only those ones (SHA256 is included by default). That way: |
| 1676 | # - the test library can compute the RSA signatures even in the case of a |
| 1677 | # composite RSA signature algorithm based on a SHA hash (no other hash |
| 1678 | # used in the unit tests). |
| 1679 | # - the dependency of RSA signature tests on PSA_WANT_ALG_SHA_xyz is |
| 1680 | # fulfilled as the hash SHA algorithm is supported by the library, and |
| 1681 | # thus the tests are run, not skipped. |
| 1682 | # - when testing a signature key with an algorithm wildcard built from |
| 1683 | # PSA_ALG_ANY_HASH as algorithm to test with the key, the chosen hash |
| 1684 | # algorithm based on the hashes supported by the library is also |
| 1685 | # supported by the test library. |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 1686 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5 |
| 1687 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160_C |
| 1688 | |
| 1689 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA1_C |
| 1690 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA512_C |
| 1691 | # We need PEM parsing in the test library as well to support the import |
| 1692 | # of PEM encoded RSA keys. |
| 1693 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_PEM_PARSE_C |
| 1694 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_BASE64_C |
| 1695 | |
| 1696 | loc_accel_list="ALG_RSA_PKCS1V15_SIGN ALG_RSA_PSS KEY_TYPE_RSA_KEY_PAIR KEY_TYPE_RSA_PUBLIC_KEY" |
| 1697 | loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' ) |
| 1698 | make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS" |
| 1699 | |
| 1700 | # Restore test driver base configuration |
| 1701 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA1_C |
| 1702 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA512_C |
| 1703 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_PEM_PARSE_C |
| 1704 | scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_BASE64_C |
| 1705 | |
| 1706 | |
| 1707 | # Mbed TLS library build |
| 1708 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1709 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1710 | |
| 1711 | # Remove RSA support and its dependencies |
| 1712 | scripts/config.py unset MBEDTLS_PKCS1_V15 |
| 1713 | scripts/config.py unset MBEDTLS_PKCS1_V21 |
| 1714 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED |
| 1715 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED |
| 1716 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED |
| 1717 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED |
| 1718 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED |
| 1719 | scripts/config.py unset MBEDTLS_RSA_C |
| 1720 | scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT |
| 1721 | |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 1722 | scripts/config.py unset MBEDTLS_MD5_C |
| 1723 | scripts/config.py unset MBEDTLS_RIPEMD160_C |
| 1724 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1 |
| 1725 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_1 |
| 1726 | scripts/config.py unset MBEDTLS_SSL_CBC_RECORD_SPLITTING |
| 1727 | |
| 1728 | loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )" |
| 1729 | make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS" |
| 1730 | |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 1731 | not grep mbedtls_rsa_rsassa_pkcs1_v15_sign library/rsa.o |
| 1732 | not grep mbedtls_rsa_rsassa_pss_sign_ext library/rsa.o |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 1733 | |
| 1734 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated RSA signature" |
| 1735 | make test |
| 1736 | } |
| 1737 | |
Ronald Cron | b231245 | 2021-05-08 14:32:59 +0200 | [diff] [blame] | 1738 | component_test_psa_crypto_config_accel_hash () { |
| 1739 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash" |
| 1740 | |
| 1741 | # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having |
| 1742 | # partial support for cipher operations in the driver test library. |
| 1743 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER |
| 1744 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING |
| 1745 | |
Ronald Cron | 27d4771 | 2021-12-07 09:54:36 +0100 | [diff] [blame] | 1746 | loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512" |
Ronald Cron | b231245 | 2021-05-08 14:32:59 +0200 | [diff] [blame] | 1747 | loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' ) |
| 1748 | make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS" |
| 1749 | |
| 1750 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1751 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
Ronald Cron | b231245 | 2021-05-08 14:32:59 +0200 | [diff] [blame] | 1752 | scripts/config.py unset MBEDTLS_MD5_C |
| 1753 | scripts/config.py unset MBEDTLS_RIPEMD160_C |
| 1754 | scripts/config.py unset MBEDTLS_SHA1_C |
| 1755 | # Don't unset MBEDTLS_SHA256_C as it is needed by PSA crypto core. |
| 1756 | scripts/config.py unset MBEDTLS_SHA384_C |
| 1757 | scripts/config.py unset MBEDTLS_SHA512_C |
| 1758 | # Unset MBEDTLS_SSL_PROTO_SSL3, MBEDTLS_SSL_PROTO_TLS1 and MBEDTLS_SSL_PROTO_TLS1_1 as they depend on MBEDTLS_SHA1_C |
| 1759 | scripts/config.py unset MBEDTLS_SSL_PROTO_SSL3 |
| 1760 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1 |
| 1761 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_1 |
| 1762 | # Unset MBEDTLS_SSL_CBC_RECORD_SPLITTING as it depends on MBEDTLS_SSL_PROTO_TLS1 in the default configuration. |
| 1763 | scripts/config.py unset MBEDTLS_SSL_CBC_RECORD_SPLITTING |
| 1764 | loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )" |
| 1765 | make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS" |
| 1766 | |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 1767 | not grep mbedtls_sha512_init library/sha512.o |
| 1768 | not grep mbedtls_sha1_init library/sha1.o |
Ronald Cron | b231245 | 2021-05-08 14:32:59 +0200 | [diff] [blame] | 1769 | |
| 1770 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash" |
| 1771 | make test |
| 1772 | } |
| 1773 | |
Ronald Cron | 3a8714d | 2021-10-18 11:26:01 +0200 | [diff] [blame] | 1774 | component_test_psa_crypto_config_accel_cipher () { |
| 1775 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated cipher" |
| 1776 | |
| 1777 | loc_accel_list="ALG_CBC_NO_PADDING ALG_CBC_PKCS7 ALG_CTR ALG_CFB ALG_OFB ALG_XTS KEY_TYPE_DES" |
| 1778 | loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' ) |
| 1779 | make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS" |
| 1780 | |
| 1781 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1782 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
Ronald Cron | 067de3b | 2021-03-11 11:49:03 +0100 | [diff] [blame] | 1783 | |
| 1784 | # There is no intended accelerator support for ALG STREAM_CIPHER and |
| 1785 | # ALG_ECB_NO_PADDING. Therefore, asking for them in the build implies the |
| 1786 | # inclusion of the Mbed TLS cipher operations. As we want to test here with |
| 1787 | # cipher operations solely supported by accelerators, disabled those |
| 1788 | # PSA configuration options. |
| 1789 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER |
| 1790 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING |
Ronald Cron | 3a8714d | 2021-10-18 11:26:01 +0200 | [diff] [blame] | 1791 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_CMAC |
Ronald Cron | 067de3b | 2021-03-11 11:49:03 +0100 | [diff] [blame] | 1792 | |
Ronald Cron | 3a8714d | 2021-10-18 11:26:01 +0200 | [diff] [blame] | 1793 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC |
| 1794 | scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7 |
| 1795 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR |
| 1796 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB |
| 1797 | scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB |
| 1798 | scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS |
Ronald Cron | 067de3b | 2021-03-11 11:49:03 +0100 | [diff] [blame] | 1799 | scripts/config.py unset MBEDTLS_DES_C |
| 1800 | |
Ronald Cron | 3a8714d | 2021-10-18 11:26:01 +0200 | [diff] [blame] | 1801 | loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )" |
| 1802 | make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS" |
Ronald Cron | 17b3afc | 2020-12-10 18:17:09 +0100 | [diff] [blame] | 1803 | |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 1804 | not grep mbedtls_des* library/des.o |
Ronald Cron | 3a8714d | 2021-10-18 11:26:01 +0200 | [diff] [blame] | 1805 | |
| 1806 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash" |
John Durkop | 4377bf7 | 2020-10-23 01:26:57 -0700 | [diff] [blame] | 1807 | make test |
| 1808 | } |
| 1809 | |
| 1810 | component_test_psa_crypto_config_no_driver() { |
| 1811 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG |
| 1812 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG minus MBEDTLS_PSA_CRYPTO_DRIVERS" |
| 1813 | scripts/config.py full |
| 1814 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1815 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1816 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1817 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | e7012c7 | 2020-10-26 09:55:01 -0700 | [diff] [blame] | 1818 | make CC=gcc CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | 4377bf7 | 2020-10-23 01:26:57 -0700 | [diff] [blame] | 1819 | |
| 1820 | msg "test: full + MBEDTLS_PSA_CRYPTO_CONFIG minus MBEDTLS_PSA_CRYPTO_DRIVERS" |
John Durkop | d895939 | 2020-09-20 23:09:17 -0700 | [diff] [blame] | 1821 | make test |
| 1822 | } |
| 1823 | |
Przemyslaw Stekiel | 1ecfdea | 2021-10-13 11:09:44 +0200 | [diff] [blame] | 1824 | component_test_psa_crypto_config_chachapoly_disabled() { |
Przemyslaw Stekiel | 316c4fa | 2021-10-15 08:04:53 +0200 | [diff] [blame] | 1825 | # full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305 |
| 1826 | msg "build: full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305" |
Przemyslaw Stekiel | 1ecfdea | 2021-10-13 11:09:44 +0200 | [diff] [blame] | 1827 | scripts/config.py full |
| 1828 | scripts/config.py unset MBEDTLS_CHACHAPOLY_C |
| 1829 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_GCM |
| 1830 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_CHACHA20_POLY1305 |
| 1831 | make CC=gcc CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS" |
| 1832 | |
Przemyslaw Stekiel | 316c4fa | 2021-10-15 08:04:53 +0200 | [diff] [blame] | 1833 | msg "test: full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305" |
Przemyslaw Stekiel | 1ecfdea | 2021-10-13 11:09:44 +0200 | [diff] [blame] | 1834 | make test |
| 1835 | } |
| 1836 | |
John Durkop | 8ac0b80 | 2020-10-23 01:32:15 -0700 | [diff] [blame] | 1837 | # This should be renamed to test and updated once the accelerator ECDSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 1838 | component_build_psa_accel_alg_ecdsa() { |
John Durkop | dd544e1 | 2020-10-12 21:47:19 -0700 | [diff] [blame] | 1839 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_ECDSA |
| 1840 | # without MBEDTLS_ECDSA_C |
John Durkop | 28baa1f | 2020-10-23 00:51:52 -0700 | [diff] [blame] | 1841 | # PSA_WANT_ALG_ECDSA and PSA_WANT_ALG_DETERMINISTIC_ECDSA are already |
| 1842 | # set in include/psa/crypto_config.h |
John Durkop | dd544e1 | 2020-10-12 21:47:19 -0700 | [diff] [blame] | 1843 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_ECDSA without MBEDTLS_ECDSA_C" |
John Durkop | d895939 | 2020-09-20 23:09:17 -0700 | [diff] [blame] | 1844 | scripts/config.py full |
| 1845 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1846 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1847 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1848 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | d895939 | 2020-09-20 23:09:17 -0700 | [diff] [blame] | 1849 | scripts/config.py unset MBEDTLS_ECDSA_C |
John Durkop | 28baa1f | 2020-10-23 00:51:52 -0700 | [diff] [blame] | 1850 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED |
| 1851 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED |
John Durkop | d895939 | 2020-09-20 23:09:17 -0700 | [diff] [blame] | 1852 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
John Durkop | 28baa1f | 2020-10-23 00:51:52 -0700 | [diff] [blame] | 1853 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_ECDSA -DMBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | d895939 | 2020-09-20 23:09:17 -0700 | [diff] [blame] | 1854 | } |
| 1855 | |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 1856 | # This should be renamed to test and updated once the accelerator ECDH code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 1857 | component_build_psa_accel_alg_ecdh() { |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 1858 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_ECDH |
| 1859 | # without MBEDTLS_ECDH_C |
| 1860 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_ECDH without MBEDTLS_ECDH_C" |
| 1861 | scripts/config.py full |
| 1862 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1863 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1864 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1865 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 1866 | scripts/config.py unset MBEDTLS_ECDH_C |
| 1867 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED |
| 1868 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED |
| 1869 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED |
| 1870 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED |
| 1871 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 1872 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 1873 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_ECDH -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 1874 | } |
| 1875 | |
John Durkop | f4c4cb0 | 2020-10-28 20:09:55 -0700 | [diff] [blame] | 1876 | # This should be renamed to test and updated once the accelerator ECC key pair code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 1877 | component_build_psa_accel_key_type_ecc_key_pair() { |
John Durkop | 9814fa2 | 2020-11-04 12:28:15 -0800 | [diff] [blame] | 1878 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_ECC_KEY_PAIR |
| 1879 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_ECC_KEY_PAIR" |
John Durkop | f4c4cb0 | 2020-10-28 20:09:55 -0700 | [diff] [blame] | 1880 | scripts/config.py full |
| 1881 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1882 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1883 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1884 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | 9814fa2 | 2020-11-04 12:28:15 -0800 | [diff] [blame] | 1885 | scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_KEY_PAIR 1 |
John Durkop | 07cc04a | 2020-11-16 22:08:34 -0800 | [diff] [blame] | 1886 | scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1 |
John Durkop | f4c4cb0 | 2020-10-28 20:09:55 -0700 | [diff] [blame] | 1887 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
John Durkop | 9814fa2 | 2020-11-04 12:28:15 -0800 | [diff] [blame] | 1888 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | f4c4cb0 | 2020-10-28 20:09:55 -0700 | [diff] [blame] | 1889 | } |
| 1890 | |
| 1891 | # This should be renamed to test and updated once the accelerator ECC public key code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 1892 | component_build_psa_accel_key_type_ecc_public_key() { |
John Durkop | 9814fa2 | 2020-11-04 12:28:15 -0800 | [diff] [blame] | 1893 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY |
| 1894 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY" |
John Durkop | f4c4cb0 | 2020-10-28 20:09:55 -0700 | [diff] [blame] | 1895 | scripts/config.py full |
| 1896 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1897 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1898 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1899 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | 9814fa2 | 2020-11-04 12:28:15 -0800 | [diff] [blame] | 1900 | scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1 |
| 1901 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR |
John Durkop | f4c4cb0 | 2020-10-28 20:09:55 -0700 | [diff] [blame] | 1902 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
John Durkop | 9814fa2 | 2020-11-04 12:28:15 -0800 | [diff] [blame] | 1903 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | f4c4cb0 | 2020-10-28 20:09:55 -0700 | [diff] [blame] | 1904 | } |
| 1905 | |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 1906 | # This should be renamed to test and updated once the accelerator HMAC code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 1907 | component_build_psa_accel_alg_hmac() { |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 1908 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_HMAC |
| 1909 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_HMAC" |
| 1910 | scripts/config.py full |
| 1911 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1912 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1913 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1914 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 1915 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 1916 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HMAC -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 1917 | } |
| 1918 | |
| 1919 | # This should be renamed to test and updated once the accelerator HKDF code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 1920 | component_build_psa_accel_alg_hkdf() { |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 1921 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_HKDF |
| 1922 | # without MBEDTLS_HKDF_C |
| 1923 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_HKDF without MBEDTLS_HKDF_C" |
| 1924 | scripts/config.py full |
| 1925 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1926 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1927 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1928 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 1929 | scripts/config.py unset MBEDTLS_HKDF_C |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 1930 | # Make sure to unset TLS1_3 since it requires HKDF_C and will not build properly without it. |
| 1931 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 1932 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 1933 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HKDF -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 1934 | } |
| 1935 | |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 1936 | # This should be renamed to test and updated once the accelerator MD5 code is in place and ready to test. |
| 1937 | component_build_psa_accel_alg_md5() { |
| 1938 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_MD5 without other hashes |
| 1939 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_MD5 - other hashes" |
| 1940 | scripts/config.py full |
| 1941 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1942 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1943 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1944 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 1945 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160 |
| 1946 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1 |
| 1947 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224 |
| 1948 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256 |
| 1949 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384 |
| 1950 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512 |
| 1951 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 1952 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_MD5 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 1953 | } |
| 1954 | |
| 1955 | # This should be renamed to test and updated once the accelerator RIPEMD160 code is in place and ready to test. |
| 1956 | component_build_psa_accel_alg_ripemd160() { |
| 1957 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RIPEMD160 without other hashes |
| 1958 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RIPEMD160 - other hashes" |
| 1959 | scripts/config.py full |
| 1960 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1961 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1962 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1963 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 1964 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5 |
| 1965 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1 |
| 1966 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224 |
| 1967 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256 |
| 1968 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384 |
| 1969 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512 |
| 1970 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 1971 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RIPEMD160 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 1972 | } |
| 1973 | |
| 1974 | # This should be renamed to test and updated once the accelerator SHA1 code is in place and ready to test. |
| 1975 | component_build_psa_accel_alg_sha1() { |
| 1976 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_1 without other hashes |
| 1977 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_1 - other hashes" |
| 1978 | scripts/config.py full |
| 1979 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1980 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 1981 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1982 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 1983 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5 |
| 1984 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160 |
| 1985 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224 |
| 1986 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256 |
| 1987 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384 |
| 1988 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512 |
| 1989 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 1990 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_1 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 1991 | } |
| 1992 | |
| 1993 | # This should be renamed to test and updated once the accelerator SHA224 code is in place and ready to test. |
| 1994 | component_build_psa_accel_alg_sha224() { |
| 1995 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_224 without other hashes |
| 1996 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_224 - other hashes" |
| 1997 | scripts/config.py full |
| 1998 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 1999 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 2000 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 2001 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 2002 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5 |
| 2003 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160 |
| 2004 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1 |
| 2005 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384 |
| 2006 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512 |
| 2007 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 2008 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_224 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 2009 | } |
| 2010 | |
| 2011 | # This should be renamed to test and updated once the accelerator SHA256 code is in place and ready to test. |
| 2012 | component_build_psa_accel_alg_sha256() { |
| 2013 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_256 without other hashes |
| 2014 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_256 - other hashes" |
| 2015 | scripts/config.py full |
| 2016 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 2017 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 2018 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 2019 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 2020 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5 |
| 2021 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160 |
| 2022 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1 |
| 2023 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224 |
| 2024 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384 |
| 2025 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512 |
| 2026 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 2027 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_256 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 2028 | } |
| 2029 | |
| 2030 | # This should be renamed to test and updated once the accelerator SHA384 code is in place and ready to test. |
| 2031 | component_build_psa_accel_alg_sha384() { |
| 2032 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_384 without other hashes |
| 2033 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_384 - other hashes" |
| 2034 | scripts/config.py full |
| 2035 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 2036 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 2037 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 2038 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 2039 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5 |
| 2040 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160 |
| 2041 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1 |
| 2042 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224 |
| 2043 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256 |
| 2044 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 2045 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_384 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 2046 | } |
| 2047 | |
| 2048 | # This should be renamed to test and updated once the accelerator SHA512 code is in place and ready to test. |
| 2049 | component_build_psa_accel_alg_sha512() { |
| 2050 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_512 without other hashes |
| 2051 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_512 - other hashes" |
| 2052 | scripts/config.py full |
| 2053 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 2054 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 2055 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 2056 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 2057 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5 |
| 2058 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160 |
| 2059 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1 |
| 2060 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224 |
| 2061 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256 |
| 2062 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384 |
| 2063 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 2064 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_512 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 2065 | } |
| 2066 | |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 2067 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 2068 | component_build_psa_accel_alg_rsa_pkcs1v15_crypt() { |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2069 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PKCS1V15_CRYPT |
| 2070 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PKCS1V15_CRYPT + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY" |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 2071 | scripts/config.py full |
| 2072 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 2073 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 2074 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 2075 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2076 | scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1 |
John Durkop | 7fc75ea | 2020-11-03 19:05:36 -0800 | [diff] [blame] | 2077 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN |
| 2078 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP |
| 2079 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 2080 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2081 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 2082 | } |
| 2083 | |
| 2084 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 2085 | component_build_psa_accel_alg_rsa_pkcs1v15_sign() { |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2086 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PKCS1V15_SIGN and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY |
| 2087 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PKCS1V15_SIGN + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY" |
| 2088 | scripts/config.py full |
| 2089 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 2090 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 2091 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 2092 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2093 | scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1 |
John Durkop | 7fc75ea | 2020-11-03 19:05:36 -0800 | [diff] [blame] | 2094 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT |
| 2095 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP |
| 2096 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2097 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 2098 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 2099 | } |
| 2100 | |
| 2101 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 2102 | component_build_psa_accel_alg_rsa_oaep() { |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2103 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_OAEP and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY |
| 2104 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_OAEP + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY" |
| 2105 | scripts/config.py full |
| 2106 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 2107 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 2108 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 2109 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2110 | scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_OAEP 1 |
John Durkop | 7fc75ea | 2020-11-03 19:05:36 -0800 | [diff] [blame] | 2111 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT |
| 2112 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN |
| 2113 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2114 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 2115 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_OAEP -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 2116 | } |
| 2117 | |
| 2118 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 2119 | component_build_psa_accel_alg_rsa_pss() { |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2120 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PSS and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY |
| 2121 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PSS + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY" |
| 2122 | scripts/config.py full |
| 2123 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 2124 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 2125 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 2126 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2127 | scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1 |
John Durkop | 7fc75ea | 2020-11-03 19:05:36 -0800 | [diff] [blame] | 2128 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT |
| 2129 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN |
| 2130 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2131 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 2132 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PSS -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 2133 | } |
| 2134 | |
| 2135 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 2136 | component_build_psa_accel_key_type_rsa_key_pair() { |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2137 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_RSA_KEY_PAIR and PSA_WANT_ALG_RSA_PSS |
| 2138 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR + PSA_WANT_ALG_RSA_PSS" |
| 2139 | scripts/config.py full |
| 2140 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 2141 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 2142 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 2143 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2144 | scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1 |
| 2145 | scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR 1 |
| 2146 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 2147 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
| 2148 | } |
| 2149 | |
| 2150 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 2151 | component_build_psa_accel_key_type_rsa_public_key() { |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2152 | # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY and PSA_WANT_ALG_RSA_PSS |
| 2153 | msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY + PSA_WANT_ALG_RSA_PSS" |
| 2154 | scripts/config.py full |
| 2155 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 2156 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
| 2157 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 2158 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 2159 | scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1 |
| 2160 | scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1 |
| 2161 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
| 2162 | make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 2163 | } |
| 2164 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2165 | component_test_no_platform () { |
| 2166 | # Full configuration build, without platform support, file IO and net sockets. |
| 2167 | # This should catch missing mbedtls_printf definitions, and by disabling file |
| 2168 | # IO, it should catch missing '#include <stdio.h>' |
| 2169 | msg "build: full config except platform/fsio/net, make, gcc, C99" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2170 | scripts/config.py full |
| 2171 | scripts/config.py unset MBEDTLS_PLATFORM_C |
| 2172 | scripts/config.py unset MBEDTLS_NET_C |
| 2173 | scripts/config.py unset MBEDTLS_PLATFORM_MEMORY |
| 2174 | scripts/config.py unset MBEDTLS_PLATFORM_PRINTF_ALT |
| 2175 | scripts/config.py unset MBEDTLS_PLATFORM_FPRINTF_ALT |
| 2176 | scripts/config.py unset MBEDTLS_PLATFORM_SNPRINTF_ALT |
| 2177 | scripts/config.py unset MBEDTLS_PLATFORM_TIME_ALT |
| 2178 | scripts/config.py unset MBEDTLS_PLATFORM_EXIT_ALT |
Gilles Peskine | 32e889d | 2020-04-12 23:43:28 +0200 | [diff] [blame] | 2179 | scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2180 | scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED |
| 2181 | scripts/config.py unset MBEDTLS_FS_IO |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2182 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2183 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C |
| 2184 | scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2185 | # Note, _DEFAULT_SOURCE needs to be defined for platforms using glibc version >2.19, |
| 2186 | # to re-enable platform integration features otherwise disabled in C99 builds |
Gilles Peskine | 6ec0f0f | 2019-09-20 19:23:10 +0200 | [diff] [blame] | 2187 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -std=c99 -pedantic -Os -D_DEFAULT_SOURCE' lib programs |
| 2188 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -Os' test |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2189 | } |
Manuel Pégourié-Gonnard | a71780e | 2015-02-13 13:56:55 +0000 | [diff] [blame] | 2190 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2191 | component_build_no_std_function () { |
| 2192 | # catch compile bugs in _uninit functions |
| 2193 | msg "build: full config with NO_STD_FUNCTION, make, gcc" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2194 | scripts/config.py full |
| 2195 | scripts/config.py set MBEDTLS_PLATFORM_NO_STD_FUNCTIONS |
| 2196 | scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED |
Gilles Peskine | 32e889d | 2020-04-12 23:43:28 +0200 | [diff] [blame] | 2197 | scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT |
Gilles Peskine | f4d2fd4 | 2021-10-08 11:45:47 +0200 | [diff] [blame] | 2198 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Check . |
Gilles Peskine | dbf7b7e | 2021-10-07 19:34:57 +0200 | [diff] [blame] | 2199 | make |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2200 | } |
Manuel Pégourié-Gonnard | dccb80b | 2015-06-03 10:20:33 +0100 | [diff] [blame] | 2201 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2202 | component_build_no_ssl_srv () { |
Ronald Cron | de1adee | 2022-03-07 16:20:30 +0100 | [diff] [blame] | 2203 | msg "build: full config except SSL server, make, gcc" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2204 | scripts/config.py full |
| 2205 | scripts/config.py unset MBEDTLS_SSL_SRV_C |
Gilles Peskine | 6ec0f0f | 2019-09-20 19:23:10 +0200 | [diff] [blame] | 2206 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1' |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2207 | } |
Manuel Pégourié-Gonnard | 66b8e95 | 2015-05-20 11:13:56 +0200 | [diff] [blame] | 2208 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2209 | component_build_no_ssl_cli () { |
Ronald Cron | de1adee | 2022-03-07 16:20:30 +0100 | [diff] [blame] | 2210 | msg "build: full config except SSL client, make, gcc" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2211 | scripts/config.py full |
| 2212 | scripts/config.py unset MBEDTLS_SSL_CLI_C |
Gilles Peskine | 6ec0f0f | 2019-09-20 19:23:10 +0200 | [diff] [blame] | 2213 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1' |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2214 | } |
Manuel Pégourié-Gonnard | 66b8e95 | 2015-05-20 11:13:56 +0200 | [diff] [blame] | 2215 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2216 | component_build_no_sockets () { |
| 2217 | # Note, C99 compliance can also be tested with the sockets support disabled, |
| 2218 | # as that requires a POSIX platform (which isn't the same as C99). |
| 2219 | msg "build: full config except net_sockets.c, make, gcc -std=c99 -pedantic" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2220 | scripts/config.py full |
| 2221 | scripts/config.py unset MBEDTLS_NET_C # getaddrinfo() undeclared, etc. |
| 2222 | scripts/config.py set MBEDTLS_NO_PLATFORM_ENTROPY # uses syscall() on GNU/Linux |
Gilles Peskine | 6ec0f0f | 2019-09-20 19:23:10 +0200 | [diff] [blame] | 2223 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1 -std=c99 -pedantic' lib |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2224 | } |
Manuel Pégourié-Gonnard | 009a264 | 2015-05-29 10:31:13 +0200 | [diff] [blame] | 2225 | |
Andrzej Kurek | 69f20aa | 2019-09-05 09:27:47 -0400 | [diff] [blame] | 2226 | component_test_memory_buffer_allocator_backtrace () { |
| 2227 | msg "build: default config with memory buffer allocator and backtrace enabled" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2228 | scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 2229 | scripts/config.py set MBEDTLS_PLATFORM_MEMORY |
| 2230 | scripts/config.py set MBEDTLS_MEMORY_BACKTRACE |
| 2231 | scripts/config.py set MBEDTLS_MEMORY_DEBUG |
Gilles Peskine | e7fc7ef | 2021-10-19 21:33:32 +0200 | [diff] [blame] | 2232 | CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release . |
Andrzej Kurek | 69f20aa | 2019-09-05 09:27:47 -0400 | [diff] [blame] | 2233 | make |
| 2234 | |
| 2235 | msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE" |
| 2236 | make test |
| 2237 | } |
| 2238 | |
| 2239 | component_test_memory_buffer_allocator () { |
| 2240 | msg "build: default config with memory buffer allocator" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2241 | scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 2242 | scripts/config.py set MBEDTLS_PLATFORM_MEMORY |
Gilles Peskine | e7fc7ef | 2021-10-19 21:33:32 +0200 | [diff] [blame] | 2243 | CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release . |
Hanno Becker | 0fb9ba2 | 2019-02-26 14:34:13 +0000 | [diff] [blame] | 2244 | make |
| 2245 | |
| 2246 | msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C" |
| 2247 | make test |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 2248 | |
| 2249 | msg "test: ssl-opt.sh, MBEDTLS_MEMORY_BUFFER_ALLOC_C" |
| 2250 | # MBEDTLS_MEMORY_BUFFER_ALLOC is slow. Skip tests that tend to time out. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2251 | tests/ssl-opt.sh -e '^DTLS proxy' |
Hanno Becker | 0fb9ba2 | 2019-02-26 14:34:13 +0000 | [diff] [blame] | 2252 | } |
| 2253 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2254 | component_test_no_max_fragment_length () { |
| 2255 | # Run max fragment length tests with MFL disabled |
| 2256 | msg "build: default config except MFL extension (ASan build)" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2257 | scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2258 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2259 | make |
Hanno Becker | 5175ac6 | 2017-09-18 15:36:25 +0100 | [diff] [blame] | 2260 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2261 | msg "test: ssl-opt.sh, MFL-related tests" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2262 | tests/ssl-opt.sh -f "Max fragment length" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2263 | } |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 2264 | |
Hanno Becker | 545ced4 | 2019-02-19 11:10:48 +0000 | [diff] [blame] | 2265 | component_test_asan_remove_peer_certificate () { |
| 2266 | msg "build: default config with MBEDTLS_SSL_KEEP_PEER_CERTIFICATE disabled (ASan build)" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2267 | scripts/config.py unset MBEDTLS_SSL_KEEP_PEER_CERTIFICATE |
Hanno Becker | 545ced4 | 2019-02-19 11:10:48 +0000 | [diff] [blame] | 2268 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2269 | make |
| 2270 | |
| 2271 | msg "test: !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE" |
| 2272 | make test |
| 2273 | |
| 2274 | msg "test: ssl-opt.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2275 | tests/ssl-opt.sh |
Hanno Becker | 545ced4 | 2019-02-19 11:10:48 +0000 | [diff] [blame] | 2276 | |
| 2277 | msg "test: compat.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2278 | tests/compat.sh |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 2279 | |
| 2280 | msg "test: context-info.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2281 | tests/context-info.sh |
Hanno Becker | 545ced4 | 2019-02-19 11:10:48 +0000 | [diff] [blame] | 2282 | } |
| 2283 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2284 | component_test_no_max_fragment_length_small_ssl_out_content_len () { |
| 2285 | msg "build: no MFL extension, small SSL_OUT_CONTENT_LEN (ASan build)" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2286 | scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH |
| 2287 | scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384 |
| 2288 | scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2289 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2290 | make |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 2291 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2292 | msg "test: MFL tests (disabled MFL extension case) & large packet tests" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2293 | tests/ssl-opt.sh -f "Max fragment length\|Large buffer" |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 2294 | |
| 2295 | msg "test: context-info.sh (disabled MFL extension case)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2296 | tests/context-info.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2297 | } |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 2298 | |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 2299 | component_test_variable_ssl_in_out_buffer_len () { |
| 2300 | msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled (ASan build)" |
| 2301 | scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH |
| 2302 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2303 | make |
| 2304 | |
| 2305 | msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled" |
| 2306 | make test |
| 2307 | |
| 2308 | msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2309 | tests/ssl-opt.sh |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 2310 | |
| 2311 | msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2312 | tests/compat.sh |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 2313 | } |
| 2314 | |
| 2315 | component_test_variable_ssl_in_out_buffer_len_CID () { |
| 2316 | msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled (ASan build)" |
| 2317 | scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH |
| 2318 | scripts/config.py set MBEDTLS_SSL_DTLS_CONNECTION_ID |
| 2319 | |
| 2320 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2321 | make |
| 2322 | |
| 2323 | msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID" |
| 2324 | make test |
| 2325 | |
| 2326 | msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2327 | tests/ssl-opt.sh |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 2328 | |
| 2329 | msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2330 | tests/compat.sh |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 2331 | } |
| 2332 | |
Andrzej Kurek | 324f72e | 2021-09-29 04:21:21 -0400 | [diff] [blame] | 2333 | component_test_CID_no_debug() { |
| 2334 | msg "build: Connection ID enabled, debug disabled" |
| 2335 | scripts/config.py unset MBEDTLS_DEBUG_C |
| 2336 | scripts/config.py set MBEDTLS_SSL_DTLS_CONNECTION_ID |
| 2337 | |
| 2338 | CC=gcc cmake . |
| 2339 | make |
| 2340 | |
| 2341 | msg "test: Connection ID enabled, debug disabled" |
| 2342 | make test |
| 2343 | } |
| 2344 | |
Piotr Nowicki | 0937ed2 | 2019-11-26 16:32:40 +0100 | [diff] [blame] | 2345 | component_test_ssl_alloc_buffer_and_mfl () { |
| 2346 | msg "build: default config with memory buffer allocator and MFL extension" |
| 2347 | scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 2348 | scripts/config.py set MBEDTLS_PLATFORM_MEMORY |
| 2349 | scripts/config.py set MBEDTLS_MEMORY_DEBUG |
| 2350 | scripts/config.py set MBEDTLS_SSL_MAX_FRAGMENT_LENGTH |
| 2351 | scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH |
Gilles Peskine | e7fc7ef | 2021-10-19 21:33:32 +0200 | [diff] [blame] | 2352 | CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release . |
Piotr Nowicki | 0937ed2 | 2019-11-26 16:32:40 +0100 | [diff] [blame] | 2353 | make |
| 2354 | |
| 2355 | msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH" |
| 2356 | make test |
| 2357 | |
| 2358 | msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2359 | tests/ssl-opt.sh -f "Handshake memory usage" |
Piotr Nowicki | 0937ed2 | 2019-11-26 16:32:40 +0100 | [diff] [blame] | 2360 | } |
| 2361 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 2362 | component_test_when_no_ciphersuites_have_mac () { |
| 2363 | msg "build: when no ciphersuites have MAC" |
| 2364 | scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 2365 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC |
TRodziewicz | 2add5c1 | 2021-04-28 16:50:20 +0200 | [diff] [blame] | 2366 | scripts/config.py unset MBEDTLS_CMAC_C |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 2367 | make |
| 2368 | |
| 2369 | msg "test: !MBEDTLS_SSL_SOME_MODES_USE_MAC" |
| 2370 | make test |
| 2371 | |
| 2372 | msg "test ssl-opt.sh: !MBEDTLS_SSL_SOME_MODES_USE_MAC" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2373 | tests/ssl-opt.sh -f 'Default\|EtM' -e 'without EtM' |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 2374 | } |
| 2375 | |
Raoul Strackx | a4e8614 | 2020-06-15 17:03:13 +0200 | [diff] [blame] | 2376 | component_test_no_date_time () { |
| 2377 | msg "build: default config without MBEDTLS_HAVE_TIME_DATE" |
| 2378 | scripts/config.py unset MBEDTLS_HAVE_TIME_DATE |
Gilles Peskine | f4d2fd4 | 2021-10-08 11:45:47 +0200 | [diff] [blame] | 2379 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Check . |
Raoul Strackx | a4e8614 | 2020-06-15 17:03:13 +0200 | [diff] [blame] | 2380 | make |
| 2381 | |
| 2382 | msg "test: !MBEDTLS_HAVE_TIME_DATE - main suites" |
| 2383 | make test |
| 2384 | } |
| 2385 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2386 | component_test_platform_calloc_macro () { |
| 2387 | msg "build: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2388 | scripts/config.py set MBEDTLS_PLATFORM_MEMORY |
| 2389 | scripts/config.py set MBEDTLS_PLATFORM_CALLOC_MACRO calloc |
| 2390 | scripts/config.py set MBEDTLS_PLATFORM_FREE_MACRO free |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2391 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2392 | make |
Hanno Becker | e5fecec | 2018-10-11 11:02:52 +0100 | [diff] [blame] | 2393 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2394 | msg "test: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)" |
| 2395 | make test |
| 2396 | } |
Hanno Becker | e5fecec | 2018-10-11 11:02:52 +0100 | [diff] [blame] | 2397 | |
Gilles Peskine | c4ef7a9 | 2019-09-17 19:04:38 +0200 | [diff] [blame] | 2398 | component_test_malloc_0_null () { |
| 2399 | msg "build: malloc(0) returns NULL (ASan+UBSan build)" |
Manuel Pégourié-Gonnard | 68192fc | 2020-03-04 10:34:47 +0100 | [diff] [blame] | 2400 | scripts/config.py full |
Gilles Peskine | 004206c | 2019-10-21 17:11:33 +0200 | [diff] [blame] | 2401 | make CC=gcc CFLAGS="'-DMBEDTLS_CONFIG_FILE=\"$PWD/tests/configs/config-wrapper-malloc-0-null.h\"' $ASAN_CFLAGS -O" LDFLAGS="$ASAN_CFLAGS" |
Gilles Peskine | c4ef7a9 | 2019-09-17 19:04:38 +0200 | [diff] [blame] | 2402 | |
| 2403 | msg "test: malloc(0) returns NULL (ASan+UBSan build)" |
| 2404 | make test |
| 2405 | |
| 2406 | msg "selftest: malloc(0) returns NULL (ASan+UBSan build)" |
| 2407 | # Just the calloc selftest. "make test" ran the others as part of the |
| 2408 | # test suites. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2409 | programs/test/selftest calloc |
Gilles Peskine | 765d240 | 2020-02-11 18:26:34 +0100 | [diff] [blame] | 2410 | |
| 2411 | msg "test ssl-opt.sh: malloc(0) returns NULL (ASan+UBSan build)" |
| 2412 | # Run a subset of the tests. The choice is a balance between coverage |
| 2413 | # and time (including time indirectly wasted due to flaky tests). |
| 2414 | # The current choice is to skip tests whose description includes |
| 2415 | # "proxy", which is an approximation of skipping tests that use the |
| 2416 | # UDP proxy, which tend to be slower and flakier. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2417 | tests/ssl-opt.sh -e 'proxy' |
Gilles Peskine | c4ef7a9 | 2019-09-17 19:04:38 +0200 | [diff] [blame] | 2418 | } |
| 2419 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2420 | component_test_aes_fewer_tables () { |
| 2421 | msg "build: default config with AES_FEWER_TABLES enabled" |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2422 | scripts/config.py set MBEDTLS_AES_FEWER_TABLES |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2423 | make CC=gcc CFLAGS='-Werror -Wall -Wextra' |
Hanno Becker | 83ebf78 | 2017-07-07 12:29:15 +0100 | [diff] [blame] | 2424 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2425 | msg "test: AES_FEWER_TABLES" |
| 2426 | make test |
| 2427 | } |
Hanno Becker | 83ebf78 | 2017-07-07 12:29:15 +0100 | [diff] [blame] | 2428 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2429 | component_test_aes_rom_tables () { |
| 2430 | msg "build: default config with AES_ROM_TABLES enabled" |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2431 | scripts/config.py set MBEDTLS_AES_ROM_TABLES |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2432 | make CC=gcc CFLAGS='-Werror -Wall -Wextra' |
Hanno Becker | 83ebf78 | 2017-07-07 12:29:15 +0100 | [diff] [blame] | 2433 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2434 | msg "test: AES_ROM_TABLES" |
| 2435 | make test |
| 2436 | } |
Hanno Becker | 83ebf78 | 2017-07-07 12:29:15 +0100 | [diff] [blame] | 2437 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2438 | component_test_aes_fewer_tables_and_rom_tables () { |
| 2439 | msg "build: default config with AES_ROM_TABLES and AES_FEWER_TABLES enabled" |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2440 | scripts/config.py set MBEDTLS_AES_FEWER_TABLES |
| 2441 | scripts/config.py set MBEDTLS_AES_ROM_TABLES |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2442 | make CC=gcc CFLAGS='-Werror -Wall -Wextra' |
Hanno Becker | 83ebf78 | 2017-07-07 12:29:15 +0100 | [diff] [blame] | 2443 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2444 | msg "test: AES_FEWER_TABLES + AES_ROM_TABLES" |
| 2445 | make test |
| 2446 | } |
| 2447 | |
Gilles Peskine | 592f591 | 2019-10-07 18:49:32 +0200 | [diff] [blame] | 2448 | component_test_ctr_drbg_aes_256_sha_256 () { |
| 2449 | msg "build: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)" |
Gilles Peskine | 3b46cd3 | 2020-02-18 17:56:33 +0100 | [diff] [blame] | 2450 | scripts/config.py full |
| 2451 | scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 2452 | scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256 |
Gilles Peskine | 592f591 | 2019-10-07 18:49:32 +0200 | [diff] [blame] | 2453 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2454 | make |
| 2455 | |
| 2456 | msg "test: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)" |
| 2457 | make test |
| 2458 | } |
| 2459 | |
| 2460 | component_test_ctr_drbg_aes_128_sha_512 () { |
| 2461 | msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)" |
Gilles Peskine | 3b46cd3 | 2020-02-18 17:56:33 +0100 | [diff] [blame] | 2462 | scripts/config.py full |
| 2463 | scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 2464 | scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY |
Gilles Peskine | 592f591 | 2019-10-07 18:49:32 +0200 | [diff] [blame] | 2465 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2466 | make |
| 2467 | |
| 2468 | msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)" |
| 2469 | make test |
| 2470 | } |
| 2471 | |
| 2472 | component_test_ctr_drbg_aes_128_sha_256 () { |
| 2473 | msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)" |
Gilles Peskine | 3b46cd3 | 2020-02-18 17:56:33 +0100 | [diff] [blame] | 2474 | scripts/config.py full |
| 2475 | scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 2476 | scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY |
| 2477 | scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256 |
Gilles Peskine | 592f591 | 2019-10-07 18:49:32 +0200 | [diff] [blame] | 2478 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2479 | make |
| 2480 | |
| 2481 | msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)" |
| 2482 | make test |
| 2483 | } |
| 2484 | |
Gilles Peskine | f96aefe | 2019-07-24 14:58:38 +0200 | [diff] [blame] | 2485 | component_test_se_default () { |
| 2486 | msg "build: default config + MBEDTLS_PSA_CRYPTO_SE_C" |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2487 | scripts/config.py set MBEDTLS_PSA_CRYPTO_SE_C |
Gilles Peskine | 004206c | 2019-10-21 17:11:33 +0200 | [diff] [blame] | 2488 | make CC=clang CFLAGS="$ASAN_CFLAGS -Os" LDFLAGS="$ASAN_CFLAGS" |
Gilles Peskine | f96aefe | 2019-07-24 14:58:38 +0200 | [diff] [blame] | 2489 | |
| 2490 | msg "test: default config + MBEDTLS_PSA_CRYPTO_SE_C" |
| 2491 | make test |
| 2492 | } |
| 2493 | |
Steven Cooreman | d57203d | 2020-07-16 20:28:59 +0200 | [diff] [blame] | 2494 | component_test_psa_crypto_drivers () { |
Steven Cooreman | 55ae217 | 2020-07-17 19:46:15 +0200 | [diff] [blame] | 2495 | msg "build: MBEDTLS_PSA_CRYPTO_DRIVERS w/ driver hooks" |
Steven Cooreman | 753f973 | 2021-03-15 11:38:44 +0100 | [diff] [blame] | 2496 | scripts/config.py full |
Steven Cooreman | d57203d | 2020-07-16 20:28:59 +0200 | [diff] [blame] | 2497 | scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS |
Steven Cooreman | 6801f08 | 2021-02-19 17:21:22 +0100 | [diff] [blame] | 2498 | scripts/config.py set MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS |
Gilles Peskine | 3587dfd | 2021-09-20 19:20:04 +0200 | [diff] [blame] | 2499 | loc_cflags="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST_ALL" |
| 2500 | loc_cflags="${loc_cflags} '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'" |
Ronald Cron | 17b3afc | 2020-12-10 18:17:09 +0100 | [diff] [blame] | 2501 | loc_cflags="${loc_cflags} -I../tests/include -O2" |
| 2502 | |
| 2503 | make CC=gcc CFLAGS="${loc_cflags}" LDFLAGS="$ASAN_CFLAGS" |
Steven Cooreman | d57203d | 2020-07-16 20:28:59 +0200 | [diff] [blame] | 2504 | |
Steven Cooreman | 753f973 | 2021-03-15 11:38:44 +0100 | [diff] [blame] | 2505 | msg "test: full + MBEDTLS_PSA_CRYPTO_DRIVERS" |
Steven Cooreman | d57203d | 2020-07-16 20:28:59 +0200 | [diff] [blame] | 2506 | make test |
| 2507 | } |
| 2508 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2509 | component_test_make_shared () { |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2510 | msg "build/test: make shared" # ~ 40s |
Andrzej Kurek | 232e8f9 | 2019-10-03 03:18:01 -0400 | [diff] [blame] | 2511 | make SHARED=1 all check |
Gilles Peskine | 56c0161 | 2019-07-03 20:43:32 +0200 | [diff] [blame] | 2512 | ldd programs/util/strerror | grep libmbedcrypto |
Gilles Peskine | ca14459 | 2021-11-04 12:52:14 +0100 | [diff] [blame] | 2513 | programs/test/dlopen_demo.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2514 | } |
Manuel Pégourié-Gonnard | 9b06abe | 2015-06-25 09:56:07 +0200 | [diff] [blame] | 2515 | |
Gilles Peskine | cf74050 | 2019-07-03 20:43:05 +0200 | [diff] [blame] | 2516 | component_test_cmake_shared () { |
| 2517 | msg "build/test: cmake shared" # ~ 2min |
| 2518 | cmake -DUSE_SHARED_MBEDTLS_LIBRARY=On . |
| 2519 | make |
Gilles Peskine | 56c0161 | 2019-07-03 20:43:32 +0200 | [diff] [blame] | 2520 | ldd programs/util/strerror | grep libmbedcrypto |
Gilles Peskine | cf74050 | 2019-07-03 20:43:05 +0200 | [diff] [blame] | 2521 | make test |
Gilles Peskine | ca14459 | 2021-11-04 12:52:14 +0100 | [diff] [blame] | 2522 | programs/test/dlopen_demo.sh |
Gilles Peskine | cf74050 | 2019-07-03 20:43:05 +0200 | [diff] [blame] | 2523 | } |
| 2524 | |
Gilles Peskine | ec10bf1 | 2019-09-20 19:56:06 +0200 | [diff] [blame] | 2525 | test_build_opt () { |
| 2526 | info=$1 cc=$2; shift 2 |
| 2527 | for opt in "$@"; do |
| 2528 | msg "build/test: $cc $opt, $info" # ~ 30s |
Gilles Peskine | e094a18 | 2020-04-14 20:08:41 +0200 | [diff] [blame] | 2529 | make CC="$cc" CFLAGS="$opt -std=c99 -pedantic -Wall -Wextra -Werror" |
Gilles Peskine | ec10bf1 | 2019-09-20 19:56:06 +0200 | [diff] [blame] | 2530 | # We're confident enough in compilers to not run _all_ the tests, |
| 2531 | # but at least run the unit tests. In particular, runs with |
| 2532 | # optimizations use inline assembly whereas runs with -O0 |
| 2533 | # skip inline assembly. |
| 2534 | make test # ~30s |
| 2535 | make clean |
| 2536 | done |
| 2537 | } |
| 2538 | |
| 2539 | component_test_clang_opt () { |
Manuel Pégourié-Gonnard | 68192fc | 2020-03-04 10:34:47 +0100 | [diff] [blame] | 2540 | scripts/config.py full |
Gilles Peskine | ec10bf1 | 2019-09-20 19:56:06 +0200 | [diff] [blame] | 2541 | test_build_opt 'full config' clang -O0 -Os -O2 |
| 2542 | } |
| 2543 | |
| 2544 | component_test_gcc_opt () { |
Manuel Pégourié-Gonnard | 68192fc | 2020-03-04 10:34:47 +0100 | [diff] [blame] | 2545 | scripts/config.py full |
Gilles Peskine | ec10bf1 | 2019-09-20 19:56:06 +0200 | [diff] [blame] | 2546 | test_build_opt 'full config' gcc -O0 -Os -O2 |
| 2547 | } |
| 2548 | |
Gilles Peskine | abf9b4d | 2019-07-03 20:42:16 +0200 | [diff] [blame] | 2549 | component_build_mbedtls_config_file () { |
| 2550 | msg "build: make with MBEDTLS_CONFIG_FILE" # ~40s |
| 2551 | # Use the full config so as to catch a maximum of places where |
| 2552 | # the check of MBEDTLS_CONFIG_FILE might be missing. |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2553 | scripts/config.py full |
Gilles Peskine | abf9b4d | 2019-07-03 20:42:16 +0200 | [diff] [blame] | 2554 | sed 's!"check_config.h"!"mbedtls/check_config.h"!' <"$CONFIG_H" >full_config.h |
| 2555 | echo '#error "MBEDTLS_CONFIG_FILE is not working"' >"$CONFIG_H" |
| 2556 | make CFLAGS="-I '$PWD' -DMBEDTLS_CONFIG_FILE='\"full_config.h\"'" |
| 2557 | rm -f full_config.h |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 2558 | } |
| 2559 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2560 | component_test_m32_o0 () { |
Gilles Peskine | 77f0535 | 2021-10-07 19:27:16 +0200 | [diff] [blame] | 2561 | # Build without optimization, so as to use portable C code (in a 32-bit |
| 2562 | # build) and not the i386-specific inline assembly. |
Simon Butcher | 8e6a22a | 2018-07-20 21:27:33 +0100 | [diff] [blame] | 2563 | msg "build: i386, make, gcc -O0 (ASan build)" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2564 | scripts/config.py full |
Gilles Peskine | 8fd5942 | 2019-10-21 17:11:33 +0200 | [diff] [blame] | 2565 | make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O0" LDFLAGS="-m32 $ASAN_CFLAGS" |
Andres Amaya Garcia | 84e6ce8 | 2017-05-04 11:35:51 +0100 | [diff] [blame] | 2566 | |
Simon Butcher | 8e6a22a | 2018-07-20 21:27:33 +0100 | [diff] [blame] | 2567 | msg "test: i386, make, gcc -O0 (ASan build)" |
| 2568 | make test |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2569 | } |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 2570 | support_test_m32_o0 () { |
| 2571 | case $(uname -m) in |
| 2572 | *64*) true;; |
| 2573 | *) false;; |
| 2574 | esac |
| 2575 | } |
Simon Butcher | 8e6a22a | 2018-07-20 21:27:33 +0100 | [diff] [blame] | 2576 | |
Gilles Peskine | ff0aee0 | 2021-10-05 09:36:03 +0200 | [diff] [blame] | 2577 | component_test_m32_o2 () { |
| 2578 | # Build with optimization, to use the i386 specific inline assembly |
| 2579 | # and go faster for tests. |
| 2580 | msg "build: i386, make, gcc -O2 (ASan build)" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2581 | scripts/config.py full |
Gilles Peskine | ff0aee0 | 2021-10-05 09:36:03 +0200 | [diff] [blame] | 2582 | make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O2" LDFLAGS="-m32 $ASAN_CFLAGS" |
Simon Butcher | 8e6a22a | 2018-07-20 21:27:33 +0100 | [diff] [blame] | 2583 | |
Gilles Peskine | ff0aee0 | 2021-10-05 09:36:03 +0200 | [diff] [blame] | 2584 | msg "test: i386, make, gcc -O2 (ASan build)" |
Andres Amaya Garcia | f4fbdda | 2017-05-08 11:19:19 +0100 | [diff] [blame] | 2585 | make test |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 2586 | |
Gilles Peskine | ff0aee0 | 2021-10-05 09:36:03 +0200 | [diff] [blame] | 2587 | msg "test ssl-opt.sh, i386, make, gcc-O2" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2588 | tests/ssl-opt.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2589 | } |
Gilles Peskine | cf52222 | 2021-10-07 19:25:29 +0200 | [diff] [blame] | 2590 | support_test_m32_o2 () { |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 2591 | support_test_m32_o0 "$@" |
| 2592 | } |
Andres Amaya Garcia | f4fbdda | 2017-05-08 11:19:19 +0100 | [diff] [blame] | 2593 | |
Gilles Peskine | 0c6b799 | 2019-04-12 20:29:48 +0200 | [diff] [blame] | 2594 | component_test_m32_everest () { |
| 2595 | msg "build: i386, Everest ECDH context (ASan build)" # ~ 6 min |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2596 | scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED |
Gilles Peskine | 8fd5942 | 2019-10-21 17:11:33 +0200 | [diff] [blame] | 2597 | make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O2" LDFLAGS="-m32 $ASAN_CFLAGS" |
Gilles Peskine | 0c6b799 | 2019-04-12 20:29:48 +0200 | [diff] [blame] | 2598 | |
| 2599 | msg "test: i386, Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s |
| 2600 | make test |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 2601 | |
| 2602 | msg "test: i386, Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2603 | tests/ssl-opt.sh -f ECDH |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 2604 | |
| 2605 | msg "test: i386, Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min |
| 2606 | # Exclude some symmetric ciphers that are redundant here to gain time. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2607 | tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA\|DES' |
Gilles Peskine | 0c6b799 | 2019-04-12 20:29:48 +0200 | [diff] [blame] | 2608 | } |
| 2609 | support_test_m32_everest () { |
| 2610 | support_test_m32_o0 "$@" |
| 2611 | } |
| 2612 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2613 | component_test_mx32 () { |
Andres Amaya Garcia | f4fbdda | 2017-05-08 11:19:19 +0100 | [diff] [blame] | 2614 | msg "build: 64-bit ILP32, make, gcc" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2615 | scripts/config.py full |
Gilles Peskine | 5d26e7c | 2019-06-07 14:50:09 +0200 | [diff] [blame] | 2616 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -mx32' LDFLAGS='-mx32' |
Andres Amaya Garcia | f4fbdda | 2017-05-08 11:19:19 +0100 | [diff] [blame] | 2617 | |
| 2618 | msg "test: 64-bit ILP32, make, gcc" |
| 2619 | make test |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2620 | } |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 2621 | support_test_mx32 () { |
| 2622 | case $(uname -m) in |
| 2623 | amd64|x86_64) true;; |
| 2624 | *) false;; |
| 2625 | esac |
| 2626 | } |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 2627 | |
Peter Kolbus | 60c6da2 | 2018-12-27 06:59:04 -0600 | [diff] [blame] | 2628 | component_test_min_mpi_window_size () { |
| 2629 | msg "build: Default + MBEDTLS_MPI_WINDOW_SIZE=1 (ASan build)" # ~ 10s |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2630 | scripts/config.py set MBEDTLS_MPI_WINDOW_SIZE 1 |
Peter Kolbus | 60c6da2 | 2018-12-27 06:59:04 -0600 | [diff] [blame] | 2631 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2632 | make |
| 2633 | |
| 2634 | msg "test: MBEDTLS_MPI_WINDOW_SIZE=1 - main suites (inc. selftests) (ASan build)" # ~ 10s |
| 2635 | make test |
| 2636 | } |
| 2637 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2638 | component_test_have_int32 () { |
| 2639 | msg "build: gcc, force 32-bit bignum limbs" |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2640 | scripts/config.py unset MBEDTLS_HAVE_ASM |
| 2641 | scripts/config.py unset MBEDTLS_AESNI_C |
| 2642 | scripts/config.py unset MBEDTLS_PADLOCK_C |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2643 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -DMBEDTLS_HAVE_INT32' |
Andres Amaya Garcia | 84e6ce8 | 2017-05-04 11:35:51 +0100 | [diff] [blame] | 2644 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2645 | msg "test: gcc, force 32-bit bignum limbs" |
| 2646 | make test |
| 2647 | } |
Andres Amaya Garcia | fe843a3 | 2017-07-20 13:21:34 +0100 | [diff] [blame] | 2648 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2649 | component_test_have_int64 () { |
| 2650 | msg "build: gcc, force 64-bit bignum limbs" |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2651 | scripts/config.py unset MBEDTLS_HAVE_ASM |
| 2652 | scripts/config.py unset MBEDTLS_AESNI_C |
| 2653 | scripts/config.py unset MBEDTLS_PADLOCK_C |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2654 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -DMBEDTLS_HAVE_INT64' |
Gilles Peskine | 14c3c06 | 2018-01-29 21:25:12 +0100 | [diff] [blame] | 2655 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2656 | msg "test: gcc, force 64-bit bignum limbs" |
| 2657 | make test |
| 2658 | } |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 2659 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2660 | component_test_no_udbl_division () { |
| 2661 | msg "build: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2662 | scripts/config.py full |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2663 | scripts/config.py set MBEDTLS_NO_UDBL_DIVISION |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2664 | make CFLAGS='-Werror -O1' |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 2665 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2666 | msg "test: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s |
| 2667 | make test |
| 2668 | } |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 2669 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2670 | component_test_no_64bit_multiplication () { |
| 2671 | msg "build: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2672 | scripts/config.py full |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2673 | scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2674 | make CFLAGS='-Werror -O1' |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 2675 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2676 | msg "test: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s |
| 2677 | make test |
| 2678 | } |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 2679 | |
Gilles Peskine | 3809f5f | 2020-11-09 15:40:05 +0100 | [diff] [blame] | 2680 | component_test_no_strings () { |
| 2681 | msg "build: no strings" # ~10s |
| 2682 | scripts/config.py full |
| 2683 | # Disable options that activate a large amount of string constants. |
| 2684 | scripts/config.py unset MBEDTLS_DEBUG_C |
| 2685 | scripts/config.py unset MBEDTLS_ERROR_C |
| 2686 | scripts/config.py set MBEDTLS_ERROR_STRERROR_DUMMY |
| 2687 | scripts/config.py unset MBEDTLS_VERSION_FEATURES |
| 2688 | make CFLAGS='-Werror -Os' |
| 2689 | |
| 2690 | msg "test: no strings" # ~ 10s |
| 2691 | make test |
| 2692 | } |
| 2693 | |
Hanno Becker | c5722d1 | 2020-10-09 11:10:42 +0100 | [diff] [blame] | 2694 | component_test_no_x509_info () { |
| 2695 | msg "build: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s |
| 2696 | scripts/config.pl full |
| 2697 | scripts/config.pl unset MBEDTLS_MEMORY_BACKTRACE # too slow for tests |
| 2698 | scripts/config.pl set MBEDTLS_X509_REMOVE_INFO |
Gilles Peskine | ff0aee0 | 2021-10-05 09:36:03 +0200 | [diff] [blame] | 2699 | make CFLAGS='-Werror -O2' |
Hanno Becker | c5722d1 | 2020-10-09 11:10:42 +0100 | [diff] [blame] | 2700 | |
| 2701 | msg "test: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s |
| 2702 | make test |
| 2703 | |
| 2704 | msg "test: ssl-opt.sh, full + MBEDTLS_X509_REMOVE_INFO" # ~ 1 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2705 | tests/ssl-opt.sh |
Hanno Becker | c5722d1 | 2020-10-09 11:10:42 +0100 | [diff] [blame] | 2706 | } |
| 2707 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2708 | component_build_arm_none_eabi_gcc () { |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 2709 | msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug" # ~ 10s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2710 | scripts/config.py baremetal |
Gilles Peskine | aeedd74 | 2020-09-02 11:03:04 +0200 | [diff] [blame] | 2711 | make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -O1' lib |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 2712 | |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 2713 | msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug" |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 2714 | ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2715 | } |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 2716 | |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 2717 | component_build_arm_linux_gnueabi_gcc_arm5vte () { |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 2718 | msg "build: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2719 | scripts/config.py baremetal |
Gilles Peskine | 2c897d7 | 2019-08-09 16:05:05 +0200 | [diff] [blame] | 2720 | # Build for a target platform that's close to what Debian uses |
| 2721 | # for its "armel" distribution (https://wiki.debian.org/ArmEabiPort). |
Dave Rodgman | 017a199 | 2022-03-31 14:07:01 +0100 | [diff] [blame] | 2722 | # See https://github.com/Mbed-TLS/mbedtls/pull/2169 and comments. |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 2723 | # Build everything including programs, see for example |
Dave Rodgman | 017a199 | 2022-03-31 14:07:01 +0100 | [diff] [blame] | 2724 | # https://github.com/Mbed-TLS/mbedtls/pull/3449#issuecomment-675313720 |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 2725 | make CC="${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc" AR="${ARM_LINUX_GNUEABI_GCC_PREFIX}ar" CFLAGS='-Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te' |
| 2726 | |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 2727 | msg "size: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug" |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 2728 | ${ARM_LINUX_GNUEABI_GCC_PREFIX}size library/*.o |
| 2729 | } |
| 2730 | support_build_arm_linux_gnueabi_gcc_arm5vte () { |
| 2731 | type ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc >/dev/null 2>&1 |
| 2732 | } |
| 2733 | |
| 2734 | component_build_arm_none_eabi_gcc_arm5vte () { |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 2735 | msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 2736 | scripts/config.py baremetal |
| 2737 | # This is an imperfect substitute for |
| 2738 | # component_build_arm_linux_gnueabi_gcc_arm5vte |
Manuel Pégourié-Gonnard | ae505ee | 2021-07-06 09:44:59 +0200 | [diff] [blame] | 2739 | # in case the gcc-arm-linux-gnueabi toolchain is not available |
Gilles Peskine | aeedd74 | 2020-09-02 11:03:04 +0200 | [diff] [blame] | 2740 | make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" CFLAGS='-std=c99 -Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te' SHELL='sh -x' lib |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 2741 | |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 2742 | msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug" |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 2743 | ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o |
Gilles Peskine | 93e4e03 | 2019-08-05 11:34:25 +0200 | [diff] [blame] | 2744 | } |
| 2745 | |
Gilles Peskine | 6e2fb86 | 2020-04-30 23:00:53 +0200 | [diff] [blame] | 2746 | component_build_arm_none_eabi_gcc_m0plus () { |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 2747 | msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus, baremetal_size" # ~ 10s |
| 2748 | scripts/config.py baremetal_size |
Gilles Peskine | aeedd74 | 2020-09-02 11:03:04 +0200 | [diff] [blame] | 2749 | make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -mthumb -mcpu=cortex-m0plus -Os' lib |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 2750 | |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 2751 | msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus -Os, baremetal_size" |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 2752 | ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o |
Gilles Peskine | 6e2fb86 | 2020-04-30 23:00:53 +0200 | [diff] [blame] | 2753 | } |
| 2754 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2755 | component_build_arm_none_eabi_gcc_no_udbl_division () { |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 2756 | msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -DMBEDTLS_NO_UDBL_DIVISION, make" # ~ 10s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2757 | scripts/config.py baremetal |
| 2758 | scripts/config.py set MBEDTLS_NO_UDBL_DIVISION |
Gilles Peskine | aeedd74 | 2020-09-02 11:03:04 +0200 | [diff] [blame] | 2759 | make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra' lib |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2760 | echo "Checking that software 64-bit division is not required" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2761 | not grep __aeabi_uldiv library/*.o |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2762 | } |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 2763 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2764 | component_build_arm_none_eabi_gcc_no_64bit_multiplication () { |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 2765 | msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc MBEDTLS_NO_64BIT_MULTIPLICATION, make" # ~ 10s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2766 | scripts/config.py baremetal |
| 2767 | scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION |
Gilles Peskine | aeedd74 | 2020-09-02 11:03:04 +0200 | [diff] [blame] | 2768 | make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -O1 -march=armv6-m -mthumb' lib |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2769 | echo "Checking that software 64-bit multiplication is not required" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2770 | not grep __aeabi_lmul library/*.o |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2771 | } |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 2772 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2773 | component_build_armcc () { |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 2774 | msg "build: ARM Compiler 5" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2775 | scripts/config.py baremetal |
Tom Cosgrove | 87fbfb5 | 2022-03-15 10:51:52 +0000 | [diff] [blame] | 2776 | # armc[56] don't support SHA-512 intrinsics |
| 2777 | scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT |
| 2778 | |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 2779 | make CC="$ARMC5_CC" AR="$ARMC5_AR" WARNING_CFLAGS='--strict --c99' lib |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 2780 | |
| 2781 | msg "size: ARM Compiler 5" |
| 2782 | "$ARMC5_FROMELF" -z library/*.o |
| 2783 | |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 2784 | make clean |
Andres AG | 87bb577 | 2016-09-27 15:05:15 +0100 | [diff] [blame] | 2785 | |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 2786 | # ARM Compiler 6 - Target ARMv7-A |
| 2787 | armc6_build_test "--target=arm-arm-none-eabi -march=armv7-a" |
Simon Butcher | 940737f | 2017-07-23 13:42:36 +0200 | [diff] [blame] | 2788 | |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 2789 | # ARM Compiler 6 - Target ARMv7-M |
| 2790 | armc6_build_test "--target=arm-arm-none-eabi -march=armv7-m" |
Simon Butcher | 940737f | 2017-07-23 13:42:36 +0200 | [diff] [blame] | 2791 | |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 2792 | # ARM Compiler 6 - Target ARMv8-A - AArch32 |
| 2793 | armc6_build_test "--target=arm-arm-none-eabi -march=armv8.2-a" |
Simon Butcher | 940737f | 2017-07-23 13:42:36 +0200 | [diff] [blame] | 2794 | |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 2795 | # ARM Compiler 6 - Target ARMv8-M |
| 2796 | armc6_build_test "--target=arm-arm-none-eabi -march=armv8-m.main" |
Simon Butcher | 940737f | 2017-07-23 13:42:36 +0200 | [diff] [blame] | 2797 | |
Tom Cosgrove | 87fbfb5 | 2022-03-15 10:51:52 +0000 | [diff] [blame] | 2798 | # ARM Compiler 6 - Target ARMv8.2-A - AArch64 |
Tom Cosgrove | f3ebd90 | 2022-02-20 22:25:31 +0000 | [diff] [blame] | 2799 | armc6_build_test "--target=aarch64-arm-none-eabi -march=armv8.2-a+crypto" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2800 | } |
Manuel Pégourié-Gonnard | c5c5939 | 2015-02-10 17:38:54 +0100 | [diff] [blame] | 2801 | |
Jerry Yu | 81d5e1f | 2022-01-27 13:01:01 +0800 | [diff] [blame] | 2802 | component_test_tls13_only () { |
| 2803 | msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3, without MBEDTLS_SSL_PROTO_TLS1_2" |
Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 2804 | make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'" |
| 2805 | |
Jerry Yu | baa4934 | 2022-02-15 10:26:40 +0800 | [diff] [blame] | 2806 | msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without MBEDTLS_SSL_PROTO_TLS1_2" |
| 2807 | if_build_succeeded make test |
| 2808 | |
Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 2809 | msg "ssl-opt.sh (TLS 1.3)" |
| 2810 | if_build_succeeded tests/ssl-opt.sh |
| 2811 | } |
| 2812 | |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2813 | component_test_tls13 () { |
| 2814 | msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding" |
| 2815 | scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 2816 | scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE |
| 2817 | scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1 |
| 2818 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2819 | make |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2820 | msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding" |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 2821 | make test |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2822 | msg "ssl-opt.sh (TLS 1.3)" |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 2823 | tests/ssl-opt.sh |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 2824 | } |
| 2825 | |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2826 | component_test_tls13_no_compatibility_mode () { |
| 2827 | msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding" |
| 2828 | scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 2829 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE |
| 2830 | scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1 |
Hanno Becker | a711f6e | 2020-05-04 12:03:51 +0100 | [diff] [blame] | 2831 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2832 | make |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2833 | msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding" |
Hanno Becker | 6c53ecc | 2021-08-01 19:20:10 +0100 | [diff] [blame] | 2834 | make test |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2835 | msg "ssl-opt.sh (TLS 1.3 no compatibility mode)" |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 2836 | tests/ssl-opt.sh |
Hanno Becker | 6c53ecc | 2021-08-01 19:20:10 +0100 | [diff] [blame] | 2837 | } |
| 2838 | |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2839 | component_test_tls13_with_padding () { |
| 2840 | msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with padding" |
| 2841 | scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 2842 | scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE |
| 2843 | scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 16 |
Hanno Becker | 6c53ecc | 2021-08-01 19:20:10 +0100 | [diff] [blame] | 2844 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2845 | make |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2846 | msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with padding" |
Hanno Becker | a711f6e | 2020-05-04 12:03:51 +0100 | [diff] [blame] | 2847 | make test |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2848 | msg "ssl-opt.sh (TLS 1.3 with padding)" |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 2849 | tests/ssl-opt.sh |
Hanno Becker | a711f6e | 2020-05-04 12:03:51 +0100 | [diff] [blame] | 2850 | } |
| 2851 | |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2852 | component_test_tls13_with_ecp_restartable () { |
| 2853 | msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with ecp_restartable" |
| 2854 | scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 2855 | scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE |
Jerry Yu | 7a5ab04 | 2021-09-15 19:22:29 +0800 | [diff] [blame] | 2856 | scripts/config.py set MBEDTLS_ECP_RESTARTABLE |
| 2857 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2858 | make |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2859 | msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with ecp_restartable" |
Jerry Yu | 7a5ab04 | 2021-09-15 19:22:29 +0800 | [diff] [blame] | 2860 | make test |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2861 | msg "ssl-opt.sh (TLS 1.3 with ecp_restartable)" |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 2862 | tests/ssl-opt.sh |
Jerry Yu | 7a5ab04 | 2021-09-15 19:22:29 +0800 | [diff] [blame] | 2863 | } |
| 2864 | |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2865 | component_test_tls13_with_everest () { |
| 2866 | msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with Everest" |
| 2867 | scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 2868 | scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE |
Jerry Yu | 7a5ab04 | 2021-09-15 19:22:29 +0800 | [diff] [blame] | 2869 | scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED |
| 2870 | scripts/config.py unset MBEDTLS_ECP_RESTARTABLE |
| 2871 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 2872 | make |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2873 | msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with Everest" |
Jerry Yu | 7a5ab04 | 2021-09-15 19:22:29 +0800 | [diff] [blame] | 2874 | make test |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2875 | msg "ssl-opt.sh (TLS 1.3 with everest)" |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 2876 | tests/ssl-opt.sh |
Jerry Yu | 7a5ab04 | 2021-09-15 19:22:29 +0800 | [diff] [blame] | 2877 | } |
| 2878 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2879 | component_build_mingw () { |
| 2880 | msg "build: Windows cross build - mingw64, make (Link Library)" # ~ 30s |
Andrzej Kurek | 232e8f9 | 2019-10-03 03:18:01 -0400 | [diff] [blame] | 2881 | make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 lib programs |
Hanno Becker | e963efa | 2018-01-03 10:03:43 +0000 | [diff] [blame] | 2882 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2883 | # note Make tests only builds the tests, but doesn't run them |
Andrzej Kurek | 232e8f9 | 2019-10-03 03:18:01 -0400 | [diff] [blame] | 2884 | make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror' WINDOWS_BUILD=1 tests |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2885 | make WINDOWS_BUILD=1 clean |
Gilles Peskine | 2a458da | 2017-05-12 15:26:58 +0200 | [diff] [blame] | 2886 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2887 | msg "build: Windows cross build - mingw64, make (DLL)" # ~ 30s |
Andrzej Kurek | 232e8f9 | 2019-10-03 03:18:01 -0400 | [diff] [blame] | 2888 | make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 SHARED=1 lib programs |
| 2889 | make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 SHARED=1 tests |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2890 | make WINDOWS_BUILD=1 clean |
| 2891 | } |
Jaeden Amero | 117b8a4 | 2019-04-17 15:19:26 +0100 | [diff] [blame] | 2892 | support_build_mingw() { |
| 2893 | case $(i686-w64-mingw32-gcc -dumpversion) in |
| 2894 | [0-5]*) false;; |
| 2895 | *) true;; |
| 2896 | esac |
| 2897 | } |
Simon Butcher | 91aef33 | 2016-11-17 09:20:50 +0000 | [diff] [blame] | 2898 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2899 | component_test_memsan () { |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2900 | msg "build: MSan (clang)" # ~ 1 min 20s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2901 | scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2902 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan . |
| 2903 | make |
Manuel Pégourié-Gonnard | 4a9dc2a | 2014-05-09 13:46:59 +0200 | [diff] [blame] | 2904 | |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2905 | msg "test: main suites (MSan)" # ~ 10s |
| 2906 | make test |
Manuel Pégourié-Gonnard | 9bda9b3 | 2014-11-20 13:10:22 +0100 | [diff] [blame] | 2907 | |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2908 | msg "test: ssl-opt.sh (MSan)" # ~ 1 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2909 | tests/ssl-opt.sh |
Manuel Pégourié-Gonnard | 9bda9b3 | 2014-11-20 13:10:22 +0100 | [diff] [blame] | 2910 | |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2911 | # Optional part(s) |
Manuel Pégourié-Gonnard | 9bda9b3 | 2014-11-20 13:10:22 +0100 | [diff] [blame] | 2912 | |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2913 | if [ "$MEMORY" -gt 0 ]; then |
| 2914 | msg "test: compat.sh (MSan)" # ~ 6 min 20s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2915 | tests/compat.sh |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2916 | fi |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2917 | } |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 2918 | |
Gilles Peskine | 69f190e | 2019-01-10 00:11:42 +0100 | [diff] [blame] | 2919 | component_test_valgrind () { |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2920 | msg "build: Release (clang)" |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2921 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release . |
| 2922 | make |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 2923 | |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2924 | msg "test: main suites valgrind (Release)" |
| 2925 | make memcheck |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 2926 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 2927 | # Optional parts (slow; currently broken on OS X because programs don't |
| 2928 | # seem to receive signals under valgrind on OS X). |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2929 | if [ "$MEMORY" -gt 0 ]; then |
| 2930 | msg "test: ssl-opt.sh --memcheck (Release)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2931 | tests/ssl-opt.sh --memcheck |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2932 | fi |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 2933 | |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2934 | if [ "$MEMORY" -gt 1 ]; then |
| 2935 | msg "test: compat.sh --memcheck (Release)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2936 | tests/compat.sh --memcheck |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 2937 | fi |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 2938 | |
| 2939 | if [ "$MEMORY" -gt 0 ]; then |
| 2940 | msg "test: context-info.sh --memcheck (Release)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2941 | tests/context-info.sh --memcheck |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 2942 | fi |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2943 | } |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 2944 | |
Paul Elliott | 62dc392 | 2021-11-25 17:29:40 +0000 | [diff] [blame] | 2945 | support_test_cmake_out_of_source () { |
| 2946 | distrib_id="" |
| 2947 | distrib_ver="" |
| 2948 | distrib_ver_minor="" |
| 2949 | distrib_ver_major="" |
| 2950 | |
| 2951 | # Attempt to parse lsb-release to find out distribution and version. If not |
| 2952 | # found this should fail safe (test is supported). |
| 2953 | if [[ -f /etc/lsb-release ]]; then |
| 2954 | |
| 2955 | while read -r lsb_line; do |
| 2956 | case "$lsb_line" in |
| 2957 | "DISTRIB_ID"*) distrib_id=${lsb_line/#DISTRIB_ID=};; |
| 2958 | "DISTRIB_RELEASE"*) distrib_ver=${lsb_line/#DISTRIB_RELEASE=};; |
| 2959 | esac |
| 2960 | done < /etc/lsb-release |
| 2961 | |
| 2962 | distrib_ver_major="${distrib_ver%%.*}" |
| 2963 | distrib_ver="${distrib_ver#*.}" |
| 2964 | distrib_ver_minor="${distrib_ver%%.*}" |
| 2965 | fi |
| 2966 | |
| 2967 | # Running the out of source CMake test on Ubuntu 16.04 using more than one |
| 2968 | # processor (as the CI does) can create a race condition whereby the build |
| 2969 | # fails to see a generated file, despite that file actually having been |
| 2970 | # generated. This problem appears to go away with 18.04 or newer, so make |
| 2971 | # the out of source tests unsupported on Ubuntu 16.04. |
| 2972 | [ "$distrib_id" != "Ubuntu" ] || [ "$distrib_ver_major" -gt 16 ] |
| 2973 | } |
| 2974 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2975 | component_test_cmake_out_of_source () { |
| 2976 | msg "build: cmake 'out-of-source' build" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2977 | MBEDTLS_ROOT_DIR="$PWD" |
| 2978 | mkdir "$OUT_OF_SOURCE_DIR" |
| 2979 | cd "$OUT_OF_SOURCE_DIR" |
Gilles Peskine | dbf7b7e | 2021-10-07 19:34:57 +0200 | [diff] [blame] | 2980 | cmake -D CMAKE_BUILD_TYPE:String=Check "$MBEDTLS_ROOT_DIR" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2981 | make |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 2982 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2983 | msg "test: cmake 'out-of-source' build" |
| 2984 | make test |
| 2985 | # Test an SSL option that requires an auxiliary script in test/scripts/. |
| 2986 | # Also ensure that there are no error messages such as |
| 2987 | # "No such file or directory", which would indicate that some required |
| 2988 | # file is missing (ssl-opt.sh tolerates the absence of some files so |
| 2989 | # may exit with status 0 but emit errors). |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2990 | ./tests/ssl-opt.sh -f 'Fallback SCSV: beginning of list' 2>ssl-opt.err |
Gilles Peskine | f7e956c | 2020-03-28 18:56:09 +0100 | [diff] [blame] | 2991 | cat ssl-opt.err >&2 |
| 2992 | # If ssl-opt.err is non-empty, record an error and keep going. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2993 | [ ! -s ssl-opt.err ] |
Gilles Peskine | f7e956c | 2020-03-28 18:56:09 +0100 | [diff] [blame] | 2994 | rm ssl-opt.err |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2995 | cd "$MBEDTLS_ROOT_DIR" |
| 2996 | rm -rf "$OUT_OF_SOURCE_DIR" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2997 | } |
Andres AG | dc19221 | 2016-08-31 17:33:13 +0100 | [diff] [blame] | 2998 | |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 2999 | component_test_cmake_as_subdirectory () { |
| 3000 | msg "build: cmake 'as-subdirectory' build" |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 3001 | cd programs/test/cmake_subproject |
| 3002 | cmake . |
| 3003 | make |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 3004 | ./cmake_subproject |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 3005 | } |
Gilles Peskine | a300099 | 2022-02-04 00:21:12 +0100 | [diff] [blame] | 3006 | support_test_cmake_as_subdirectory () { |
| 3007 | support_test_cmake_out_of_source |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 3008 | } |
| 3009 | |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 3010 | component_test_cmake_as_package () { |
| 3011 | msg "build: cmake 'as-package' build" |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 3012 | cd programs/test/cmake_package |
| 3013 | cmake . |
| 3014 | make |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 3015 | ./cmake_package |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 3016 | } |
Gilles Peskine | a300099 | 2022-02-04 00:21:12 +0100 | [diff] [blame] | 3017 | support_test_cmake_as_package () { |
| 3018 | support_test_cmake_out_of_source |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 3019 | } |
| 3020 | |
| 3021 | component_test_cmake_as_package_install () { |
| 3022 | msg "build: cmake 'as-installed-package' build" |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 3023 | cd programs/test/cmake_package_install |
| 3024 | cmake . |
| 3025 | make |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 3026 | ./cmake_package_install |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 3027 | } |
Gilles Peskine | a300099 | 2022-02-04 00:21:12 +0100 | [diff] [blame] | 3028 | support_test_cmake_as_package_install () { |
| 3029 | support_test_cmake_out_of_source |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 3030 | } |
| 3031 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3032 | component_test_zeroize () { |
| 3033 | # Test that the function mbedtls_platform_zeroize() is not optimized away by |
| 3034 | # different combinations of compilers and optimization flags by using an |
| 3035 | # auxiliary GDB script. Unfortunately, GDB does not return error values to the |
| 3036 | # system in all cases that the script fails, so we must manually search the |
| 3037 | # output to check whether the pass string is present and no failure strings |
| 3038 | # were printed. |
Andres AG | dc19221 | 2016-08-31 17:33:13 +0100 | [diff] [blame] | 3039 | |
Gilles Peskine | 4976e82 | 2019-01-06 19:52:22 +0000 | [diff] [blame] | 3040 | # Don't try to disable ASLR. We don't care about ASLR here. We do care |
| 3041 | # about a spurious message if Gdb tries and fails, so suppress that. |
| 3042 | gdb_disable_aslr= |
| 3043 | if [ -z "$(gdb -batch -nw -ex 'set disable-randomization off' 2>&1)" ]; then |
| 3044 | gdb_disable_aslr='set disable-randomization off' |
| 3045 | fi |
| 3046 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3047 | for optimization_flag in -O2 -O3 -Ofast -Os; do |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 3048 | for compiler in clang gcc; do |
| 3049 | msg "test: $compiler $optimization_flag, mbedtls_platform_zeroize()" |
| 3050 | make programs CC="$compiler" DEBUG=1 CFLAGS="$optimization_flag" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 3051 | gdb -ex "$gdb_disable_aslr" -x tests/scripts/test_zeroize.gdb -nw -batch -nx 2>&1 | tee test_zeroize.log |
| 3052 | grep "The buffer was correctly zeroized" test_zeroize.log |
| 3053 | not grep -i "error" test_zeroize.log |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 3054 | rm -f test_zeroize.log |
| 3055 | make clean |
| 3056 | done |
Andres Amaya Garcia | 2967381 | 2017-10-25 10:35:51 +0100 | [diff] [blame] | 3057 | done |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3058 | } |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 3059 | |
Bence Szépkúti | 80b31c5 | 2021-10-19 15:05:36 +0200 | [diff] [blame] | 3060 | component_test_psa_compliance () { |
| 3061 | msg "build: make, default config (out-of-box), libmbedcrypto.a only" |
Bence Szépkúti | ca9236b | 2021-10-25 19:29:07 +0200 | [diff] [blame] | 3062 | make -C library libmbedcrypto.a |
Bence Szépkúti | 80b31c5 | 2021-10-19 15:05:36 +0200 | [diff] [blame] | 3063 | |
| 3064 | msg "unit test: test_psa_compliance.py" |
| 3065 | ./tests/scripts/test_psa_compliance.py |
| 3066 | } |
| 3067 | |
| 3068 | support_test_psa_compliance () { |
Bence Szépkúti | ef0d02e | 2021-11-03 11:36:09 +0100 | [diff] [blame] | 3069 | # psa-compliance-tests only supports CMake >= 3.10.0 |
Bence Szépkúti | ca9236b | 2021-10-25 19:29:07 +0200 | [diff] [blame] | 3070 | ver="$(cmake --version)" |
| 3071 | ver="${ver#cmake version }" |
| 3072 | ver_major="${ver%%.*}" |
| 3073 | |
| 3074 | ver="${ver#*.}" |
| 3075 | ver_minor="${ver%%.*}" |
| 3076 | |
| 3077 | [ "$ver_major" -eq 3 ] && [ "$ver_minor" -ge 10 ] |
Bence Szépkúti | 80b31c5 | 2021-10-19 15:05:36 +0200 | [diff] [blame] | 3078 | } |
| 3079 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3080 | component_check_python_files () { |
| 3081 | msg "Lint: Python scripts" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 3082 | tests/scripts/check-python-files.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3083 | } |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 3084 | |
Joe Subbiani | d614c0b | 2021-07-29 11:18:29 +0100 | [diff] [blame] | 3085 | component_check_test_helpers () { |
| 3086 | msg "unit test: generate_test_code.py" |
Manuel Pégourié-Gonnard | dfb114a | 2020-06-02 11:40:08 +0200 | [diff] [blame] | 3087 | # unittest writes out mundane stuff like number or tests run on stderr. |
| 3088 | # Our convention is to reserve stderr for actual errors, and write |
| 3089 | # harmless info on stdout so it can be suppress with --quiet. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 3090 | ./tests/scripts/test_generate_test_code.py 2>&1 |
Joe Subbiani | d614c0b | 2021-07-29 11:18:29 +0100 | [diff] [blame] | 3091 | |
Joe Subbiani | a25ffab | 2021-08-06 09:41:27 +0100 | [diff] [blame] | 3092 | msg "unit test: translate_ciphers.py" |
| 3093 | python3 -m unittest tests/scripts/translate_ciphers.py 2>&1 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3094 | } |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 3095 | |
| 3096 | ################################################################ |
| 3097 | #### Termination |
| 3098 | ################################################################ |
| 3099 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3100 | post_report () { |
| 3101 | msg "Done, cleaning up" |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 3102 | final_cleanup |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 3103 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3104 | final_report |
| 3105 | } |
| 3106 | |
| 3107 | |
| 3108 | |
| 3109 | ################################################################ |
| 3110 | #### Run all the things |
| 3111 | ################################################################ |
| 3112 | |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 3113 | # Function invoked by --error-test to test error reporting. |
| 3114 | pseudo_component_error_test () { |
Gilles Peskine | 88a7c2b | 2021-08-02 23:28:00 +0200 | [diff] [blame] | 3115 | msg "Testing error reporting $error_test_i" |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 3116 | if [ $KEEP_GOING -ne 0 ]; then |
| 3117 | echo "Expect three failing commands." |
| 3118 | fi |
Gilles Peskine | 88a7c2b | 2021-08-02 23:28:00 +0200 | [diff] [blame] | 3119 | # If the component doesn't run in a subshell, changing error_test_i to an |
| 3120 | # invalid integer will cause an error in the loop that runs this function. |
| 3121 | error_test_i=this_should_not_be_used_since_the_component_runs_in_a_subshell |
Gilles Peskine | ec13554 | 2021-08-02 23:14:03 +0200 | [diff] [blame] | 3122 | # Expected error: 'grep non_existent /dev/null -> 1' |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 3123 | grep non_existent /dev/null |
Gilles Peskine | ec13554 | 2021-08-02 23:14:03 +0200 | [diff] [blame] | 3124 | # Expected error: '! grep -q . tests/scripts/all.sh -> 1' |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 3125 | not grep -q . "$0" |
Gilles Peskine | ec13554 | 2021-08-02 23:14:03 +0200 | [diff] [blame] | 3126 | # Expected error: 'make unknown_target -> 2' |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 3127 | make unknown_target |
| 3128 | false "this should not be executed" |
| 3129 | } |
| 3130 | |
Gilles Peskine | e48351a | 2018-11-27 16:06:30 +0100 | [diff] [blame] | 3131 | # Run one component and clean up afterwards. |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3132 | run_component () { |
Gilles Peskine | ffcdeff | 2018-12-04 12:49:28 +0100 | [diff] [blame] | 3133 | current_component="$1" |
Gilles Peskine | 9004a17 | 2019-09-16 15:20:36 +0200 | [diff] [blame] | 3134 | export MBEDTLS_TEST_CONFIGURATION="$current_component" |
Gilles Peskine | 2ef377d | 2019-10-07 18:44:21 +0200 | [diff] [blame] | 3135 | |
| 3136 | # Unconditionally create a seedfile that's sufficiently long. |
| 3137 | # Do this before each component, because a previous component may |
| 3138 | # have messed it up or shortened it. |
Gilles Peskine | 88a0745 | 2021-07-08 19:03:50 +0200 | [diff] [blame] | 3139 | local dd_cmd |
| 3140 | dd_cmd=(dd if=/dev/urandom of=./tests/seedfile bs=64 count=1) |
| 3141 | case $OSTYPE in |
Tom Cosgrove | 226aca1 | 2022-03-16 14:11:07 +0000 | [diff] [blame] | 3142 | linux*|freebsd*|openbsd*) dd_cmd+=(status=none) |
Gilles Peskine | 88a0745 | 2021-07-08 19:03:50 +0200 | [diff] [blame] | 3143 | esac |
| 3144 | "${dd_cmd[@]}" |
Gilles Peskine | 2ef377d | 2019-10-07 18:44:21 +0200 | [diff] [blame] | 3145 | |
Gilles Peskine | ec13554 | 2021-08-02 23:14:03 +0200 | [diff] [blame] | 3146 | # Run the component in a subshell, with error trapping and output |
| 3147 | # redirection set up based on the relevant options. |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 3148 | if [ $KEEP_GOING -eq 1 ]; then |
Gilles Peskine | ec13554 | 2021-08-02 23:14:03 +0200 | [diff] [blame] | 3149 | # We want to keep running if the subshell fails, so 'set -e' must |
| 3150 | # be off when the subshell runs. |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 3151 | set +e |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 3152 | fi |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 3153 | ( |
| 3154 | if [ $QUIET -eq 1 ]; then |
| 3155 | # msg() will be silenced, so just print the component name here. |
| 3156 | echo "${current_component#component_}" |
| 3157 | exec >/dev/null |
| 3158 | fi |
| 3159 | if [ $KEEP_GOING -eq 1 ]; then |
| 3160 | # Keep "set -e" off, and run an ERR trap instead to record failures. |
| 3161 | set -E |
| 3162 | trap err_trap ERR |
| 3163 | fi |
| 3164 | # The next line is what runs the component |
| 3165 | "$@" |
| 3166 | if [ $KEEP_GOING -eq 1 ]; then |
| 3167 | trap - ERR |
| 3168 | exit $last_failure_status |
| 3169 | fi |
| 3170 | ) |
| 3171 | component_status=$? |
| 3172 | if [ $KEEP_GOING -eq 1 ]; then |
| 3173 | set -e |
| 3174 | if [ $component_status -ne 0 ]; then |
| 3175 | failure_count=$((failure_count + 1)) |
| 3176 | fi |
| 3177 | fi |
Gilles Peskine | 2ef377d | 2019-10-07 18:44:21 +0200 | [diff] [blame] | 3178 | |
| 3179 | # Restore the build tree to a clean state. |
Gilles Peskine | e48351a | 2018-11-27 16:06:30 +0100 | [diff] [blame] | 3180 | cleanup |
Manuel Pégourié-Gonnard | 304b099 | 2020-06-08 10:59:41 +0200 | [diff] [blame] | 3181 | unset current_component |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3182 | } |
| 3183 | |
| 3184 | # Preliminary setup |
| 3185 | pre_check_environment |
| 3186 | pre_initialize_variables |
| 3187 | pre_parse_command_line "$@" |
Gilles Peskine | 348fb9a | 2018-11-27 17:04:29 +0100 | [diff] [blame] | 3188 | |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 3189 | pre_check_git |
Gilles Peskine | 568f53a | 2021-07-12 18:16:01 +0200 | [diff] [blame] | 3190 | pre_restore_files |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 3191 | pre_back_up |
Andrzej Kurek | eb50871 | 2019-02-14 07:18:59 -0500 | [diff] [blame] | 3192 | |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 3193 | build_status=0 |
| 3194 | if [ $KEEP_GOING -eq 1 ]; then |
| 3195 | pre_setup_keep_going |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3196 | fi |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 3197 | pre_prepare_outcome_file |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 3198 | pre_print_configuration |
| 3199 | pre_check_tools |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 3200 | cleanup |
Gilles Peskine | 1570b59 | 2021-04-22 01:10:12 +0200 | [diff] [blame] | 3201 | pre_generate_files |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 3202 | |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 3203 | # Run the requested tests. |
Gilles Peskine | 88a7c2b | 2021-08-02 23:28:00 +0200 | [diff] [blame] | 3204 | for ((error_test_i=1; error_test_i <= error_test; error_test_i++)); do |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 3205 | run_component pseudo_component_error_test |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 3206 | done |
Gilles Peskine | 88a7c2b | 2021-08-02 23:28:00 +0200 | [diff] [blame] | 3207 | unset error_test_i |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 3208 | for component in $RUN_COMPONENTS; do |
| 3209 | run_component "component_$component" |
| 3210 | done |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 3211 | |
| 3212 | # We're done. |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 3213 | post_report |