Gilles Peskine | 693611e | 2024-06-11 19:32:22 +0200 | [diff] [blame] | 1 | #!/usr/bin/env python3 |
| 2 | """Generate test data for configuration reporting. |
| 3 | """ |
| 4 | |
| 5 | # Copyright The Mbed TLS Contributors |
| 6 | # SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later |
| 7 | |
| 8 | import re |
| 9 | import sys |
| 10 | from typing import Iterable, Iterator, List, Optional, Tuple |
| 11 | |
| 12 | import project_scripts # pylint: disable=unused-import |
| 13 | import config |
| 14 | from mbedtls_framework import test_case |
| 15 | from mbedtls_framework import test_data_generation |
| 16 | |
| 17 | |
| 18 | def single_option_case(setting: config.Setting, when_on: bool, |
| 19 | dependencies: List[str], |
| 20 | note: Optional[str]) -> test_case.TestCase: |
| 21 | """Construct a test case for a boolean setting. |
| 22 | |
| 23 | This test case passes if the setting and its dependencies are enabled, |
| 24 | and is skipped otherwise. |
| 25 | |
| 26 | * setting: the setting to be tested. |
| 27 | * when_on: True to test with the setting enabled, or False to test |
| 28 | with the setting disabled. |
| 29 | * dependencies: extra dependencies for the test case. |
| 30 | * note: a note to add after the option name in the test description. |
| 31 | This is generally a summary of dependencies, and is generally empty |
| 32 | if the given setting is only tested once. |
| 33 | """ |
| 34 | base = setting.name if when_on else '!' + setting.name |
| 35 | tc = test_case.TestCase() |
| 36 | tc.set_function('pass') |
| 37 | description_suffix = ' (' + note + ')' if note else '' |
| 38 | tc.set_description('Config: ' + base + description_suffix) |
| 39 | tc.set_dependencies([base] + dependencies) |
| 40 | return tc |
| 41 | |
| 42 | |
Gilles Peskine | c79ecea | 2024-05-23 16:32:39 +0200 | [diff] [blame] | 43 | PSA_WANT_KEY_TYPE_KEY_PAIR_RE = \ |
| 44 | re.compile(r'(?P<prefix>PSA_WANT_KEY_TYPE_(?P<type>\w+)_KEY_PAIR_)(?P<operation>\w+)\Z') |
| 45 | |
| 46 | # If foo is an option that is only meaningful when bar is enabled, set |
| 47 | # SUPER_SETTINGS[foo]=bar. More generally, bar can be a colon-separated |
| 48 | # list of options, meaning that all the options must be enabled. Each option |
| 49 | # can be prefixed with '!' to negate it. This is the same syntax as a |
| 50 | # depends_on directive in test data. |
| 51 | # See also `find_super_option`. |
| 52 | SUPER_SETTINGS = { |
| 53 | 'MBEDTLS_AESCE_C': 'MBEDTLS_AES_C', |
| 54 | 'MBEDTLS_AESNI_C': 'MBEDTLS_AES_C', |
| 55 | 'MBEDTLS_ERROR_STRERROR_DUMMY': '!MBEDTLS_ERROR_C', |
| 56 | 'MBEDTLS_GENPRIME': 'MBEDTLS_RSA_C', |
| 57 | 'MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES': 'MBEDTLS_ENTROPY_C', |
| 58 | 'MBEDTLS_NO_PLATFORM_ENTROPY': 'MBEDTLS_ENTROPY_C', |
| 59 | 'MBEDTLS_PKCS1_V15': 'MBEDTLS_RSA_C', |
| 60 | 'MBEDTLS_PKCS1_V21': 'MBEDTLS_RSA_C', |
Gilles Peskine | c08d5bf | 2024-05-28 19:18:31 +0200 | [diff] [blame^] | 61 | 'MBEDTLS_PSA_CRYPTO_CLIENT': '!MBEDTLS_PSA_CRYPTO_C', |
Gilles Peskine | c79ecea | 2024-05-23 16:32:39 +0200 | [diff] [blame] | 62 | 'MBEDTLS_PSA_INJECT_ENTROPY': 'MBEDTLS_PSA_CRYPTO_C', |
| 63 | 'MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS': 'MBEDTLS_PSA_CRYPTO_C', |
| 64 | } |
| 65 | |
| 66 | def find_super_option(cfg: config.Config, |
| 67 | setting: config.Setting) -> Optional[str]: |
| 68 | """If setting is only meaningful when some option is enabled, return that option. |
| 69 | |
| 70 | The return value can be a colon-separated list of options, if the setting |
| 71 | is only meaningful when all of these options are enabled. Options can be |
| 72 | negated by prefixing them with '!'. This is the same syntax as a |
| 73 | depends_on directive in test data. |
| 74 | """ |
| 75 | #pylint: disable=too-many-return-statements |
| 76 | name = setting.name |
| 77 | if name in SUPER_SETTINGS: |
| 78 | return SUPER_SETTINGS[name] |
| 79 | if name.startswith('MBEDTLS_') and not name.endswith('_C'): |
| 80 | if name.startswith('MBEDTLS_CIPHER_PADDING_'): |
| 81 | return 'MBEDTLS_CIPHER_C:MBEDTLS_CIPHER_MODE_CBC' |
| 82 | if name.startswith('MBEDTLS_PK_PARSE_EC_'): |
| 83 | return 'MBEDTLS_PK_C:MBEDTLS_PK_HAVE_ECC_KEYS' |
| 84 | if name.startswith('MBEDTLS_SSL_TLS1_3_') or \ |
| 85 | name == 'MBEDTLS_SSL_EARLY_DATA': |
| 86 | return 'MBEDTLS_SSL_CLI_C:MBEDTLS_SSL_SRV_C:MBEDTLS_SSL_PROTO_TLS1_3' |
| 87 | if name.startswith('MBEDTLS_SSL_DTLS_'): |
| 88 | return 'MBEDTLS_SSL_CLI_C:MBEDTLS_SSL_SRV_C:MBEDTLS_SSL_PROTO_DTLS' |
| 89 | if name.startswith('MBEDTLS_SSL_'): |
| 90 | return 'MBEDTLS_SSL_CLI_C:MBEDTLS_SSL_SRV_C' |
Gilles Peskine | 556249e | 2024-05-23 19:37:20 +0200 | [diff] [blame] | 91 | for pos in re.finditer(r'_', name): |
| 92 | super_name = name[:pos.start()] + '_C' |
Gilles Peskine | c79ecea | 2024-05-23 16:32:39 +0200 | [diff] [blame] | 93 | if cfg.known(super_name): |
| 94 | return super_name |
Gilles Peskine | 556249e | 2024-05-23 19:37:20 +0200 | [diff] [blame] | 95 | m = PSA_WANT_KEY_TYPE_KEY_PAIR_RE.match(name) |
Gilles Peskine | c79ecea | 2024-05-23 16:32:39 +0200 | [diff] [blame] | 96 | if m and m.group('operation') != 'BASIC': |
| 97 | return m.group('prefix') + 'BASIC' |
| 98 | return None |
| 99 | |
Gilles Peskine | 693611e | 2024-06-11 19:32:22 +0200 | [diff] [blame] | 100 | def conditions_for_option(cfg: config.Config, |
| 101 | setting: config.Setting |
| 102 | ) -> Iterator[Tuple[List[str], str]]: |
| 103 | """Enumerate the conditions under which to test the given setting. |
| 104 | |
| 105 | * cfg: all configuration options. |
| 106 | * setting: the setting to be tested. |
| 107 | |
| 108 | Generate a stream of conditions, i.e. extra dependencies to test with |
| 109 | together with a human-readable explanation of each dependency. Some |
| 110 | typical cases: |
| 111 | |
| 112 | * By default, generate a one-element stream with no extra dependencies. |
| 113 | * If the setting is ignored unless some other option is enabled, generate |
| 114 | a one-element stream with that other option as an extra dependency. |
| 115 | * If the setting is known to interact with some other option, generate |
| 116 | a stream with one element where this option is on and one where it's off. |
| 117 | * To skip the setting altogether, generate an empty stream. |
| 118 | """ |
| 119 | name = setting.name |
| 120 | if name.endswith('_ALT') and not config.is_seamless_alt(name): |
| 121 | # We don't test alt implementations, except (most) platform alts |
| 122 | return |
Gilles Peskine | c79ecea | 2024-05-23 16:32:39 +0200 | [diff] [blame] | 123 | super_setting = find_super_option(cfg, setting) |
| 124 | if super_setting: |
| 125 | yield [super_setting], '' |
| 126 | return |
Gilles Peskine | 693611e | 2024-06-11 19:32:22 +0200 | [diff] [blame] | 127 | yield [], '' |
| 128 | |
| 129 | |
| 130 | def enumerate_boolean_option_cases(cfg: config.Config |
| 131 | ) -> Iterable[test_case.TestCase]: |
| 132 | """Emit test cases for all boolean options.""" |
| 133 | for name in sorted(cfg.settings.keys()): |
| 134 | setting = cfg.settings[name] |
| 135 | if not name.startswith('PSA_WANT_') and setting.value: |
| 136 | continue # non-boolean setting |
| 137 | for when_on in True, False: |
| 138 | for deps, note in conditions_for_option(cfg, setting): |
| 139 | yield single_option_case(setting, when_on, deps, note) |
| 140 | |
| 141 | |
| 142 | |
| 143 | class ConfigTestGenerator(test_data_generation.TestGenerator): |
| 144 | """Generate test cases for configuration reporting.""" |
| 145 | |
| 146 | def __init__(self, options): |
| 147 | self.mbedtls_config = config.ConfigFile() |
| 148 | self.targets['test_suite_config.mbedtls_boolean'] = \ |
| 149 | lambda: enumerate_boolean_option_cases(self.mbedtls_config) |
| 150 | self.psa_config = config.ConfigFile('include/psa/crypto_config.h') |
| 151 | self.targets['test_suite_config.psa_boolean'] = \ |
| 152 | lambda: enumerate_boolean_option_cases(self.psa_config) |
| 153 | super().__init__(options) |
| 154 | |
| 155 | |
| 156 | if __name__ == '__main__': |
| 157 | test_data_generation.main(sys.argv[1:], __doc__, ConfigTestGenerator) |