|
| 1 | +#!/bin/bash |
| 2 | + |
| 3 | +# Copyright (c) 2020 Arm Limited |
| 4 | +# |
| 5 | +# Licensed under the Apache License, Version 2.0 (the "License"); |
| 6 | +# you may not use this file except in compliance with the License. |
| 7 | +# You may obtain a copy of the License at |
| 8 | +# |
| 9 | +# http://www.apache.org/licenses/LICENSE-2.0 |
| 10 | +# |
| 11 | +# Unless required by applicable law or agreed to in writing, software |
| 12 | +# distributed under the License is distributed on an "AS IS" BASIS, |
| 13 | +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 14 | +# See the License for the specific language governing permissions and |
| 15 | +# limitations under the License. |
| 16 | + |
| 17 | +function skip_instruction { |
| 18 | + |
| 19 | + local SKIP_ADDRESS=$1 |
| 20 | + local SKIP_SIZE=$2 |
| 21 | + |
| 22 | + # Parse the ASM instruction from the address using gdb |
| 23 | + INSTR=$($GDB $AXF_FILE --batch -ex "disassemble $SKIP_ADDRESS" | grep "^ *$SKIP_ADDRESS" | sed "s/.*:[ \t]*\(.*\)$/\1/g") |
| 24 | + # Parse the C line from the address using gdb |
| 25 | + LINE=$($GDB $AXF_FILE --batch -ex "info line *$SKIP_ADDRESS" | sed "s/Line \([0-9]*\).*\"\(.*\)\".*/\2:\1/g") |
| 26 | + |
| 27 | + # Sometimes an address is in the middle of a 4 byte instruction. In that case |
| 28 | + # don't run the test |
| 29 | + if test "$INSTR" == ""; then |
| 30 | + return |
| 31 | + fi |
| 32 | + |
| 33 | + # Print out the meta-info about the test, in YAML |
| 34 | + echo "- skip_test:" |
| 35 | + echo " addr: $SKIP_ADDRESS" |
| 36 | + echo " asm: \"$INSTR\"" |
| 37 | + echo " line: \"$LINE\"" |
| 38 | + echo " skip: $SKIP_SIZE" |
| 39 | + # echo -ne "$SKIP_ADDRESS | $INSTR...\t" |
| 40 | + |
| 41 | + cat >commands.gdb <<EOF |
| 42 | +target remote localhost: 1234 |
| 43 | +b *$SKIP_ADDRESS |
| 44 | +continue& |
| 45 | +eval "shell sleep 0.5" |
| 46 | +interrupt |
| 47 | +if \$pc == $SKIP_ADDRESS |
| 48 | + echo "Stopped at breakpoint" |
| 49 | +else |
| 50 | + echo "Failed to stop at breakpoint" |
| 51 | +end |
| 52 | +echo "PC before increase:" |
| 53 | +print \$pc |
| 54 | +set \$pc += $SKIP_SIZE |
| 55 | +echo "PC after increase:" |
| 56 | +print \$pc |
| 57 | +detach |
| 58 | +eval "shell sleep 0.5" |
| 59 | +EOF |
| 60 | + |
| 61 | + echo -n '.' 1>&2 |
| 62 | + |
| 63 | + # start qemu, dump the serial output to $QEMU_LOG_FILE |
| 64 | + QEMU_LOG_FILE=qemu.log |
| 65 | + QEMU_PID_FILE=qemu_pid.txt |
| 66 | + rm -f $QEMU_PID_FILE $QEMU_LOG_FILE |
| 67 | + /usr/bin/qemu-system-arm \ |
| 68 | + -M mps2-an521 \ |
| 69 | + -s -S \ |
| 70 | + -kernel $IMAGE_DIR/bl2.axf \ |
| 71 | + -device loader,file=$IMAGE_DIR/tfm_s_ns_signed.bin,addr=0x10080000 \ |
| 72 | + -chardev file,id=char0,path=$QEMU_LOG_FILE \ |
| 73 | + -serial chardev:char0 \ |
| 74 | + -display none \ |
| 75 | + -pidfile $QEMU_PID_FILE \ |
| 76 | + -daemonize |
| 77 | + |
| 78 | + # start qemu, skip the instruction, and continue execution |
| 79 | + $GDB < ./commands.gdb &>gdb_out.txt |
| 80 | + |
| 81 | + # kill qemu |
| 82 | + kill -9 `cat $QEMU_PID_FILE` |
| 83 | + |
| 84 | + # If "Secure image initializing" is seen the TFM booted, which means that a skip |
| 85 | + # managed to defeat the signature check. Write out whether the image booted or |
| 86 | + # not to the log in YAML |
| 87 | + if cat $QEMU_LOG_FILE | grep -i "Starting bootloader" &>/dev/null; then |
| 88 | + # bootloader started successfully |
| 89 | + if cat gdb_out.txt | grep -i "Stopped at breakpoint" &>/dev/null; then |
| 90 | + # The target was stopped at the desired address |
| 91 | + if cat $QEMU_LOG_FILE | grep -i "Secure image initializing" &>/dev/null; then |
| 92 | + echo " test_exec_ok: True" |
| 93 | + echo " skipped: True" |
| 94 | + echo " boot: True" |
| 95 | + |
| 96 | + #print the address that was skipped, and some context to the console |
| 97 | + echo "" 1>&2 |
| 98 | + echo "Boot success: address: $SKIP_ADDRESS skipped: $SKIP_SIZE" 1>&2 |
| 99 | + arm-none-eabi-objdump -d $IMAGE_DIR/bl2.axf --start-address=$SKIP_ADDRESS -S | tail -n +7 | head -n 14 1>&2 |
| 100 | + echo "" 1>&2 |
| 101 | + echo "" 1>&2 |
| 102 | + else |
| 103 | + LAST_LINE=`tail -n 1 $QEMU_LOG_FILE | tr -dc '[:print:]'` |
| 104 | + echo " test_exec_ok: True" |
| 105 | + echo " skipped: True" |
| 106 | + echo " boot: False" |
| 107 | + echo " last_line: '$LAST_LINE' " |
| 108 | + fi |
| 109 | + else |
| 110 | + # The target was not stopped at the desired address. |
| 111 | + # The most probable reason is that the instruction for that address is |
| 112 | + # on a call path that is not taken in this run (e.g. error handling) |
| 113 | + if cat $QEMU_LOG_FILE | grep -i "Secure image initializing" &>/dev/null; then |
| 114 | + # The image booted, although it shouldn't happen as the test is to |
| 115 | + # be run with a corrupt image. |
| 116 | + echo " test_exec_ok: False" |
| 117 | + echo " test_exec_fail_reason: \"No instructions were skipped (e.g. branch was not executed), but booted successfully\"" |
| 118 | + else |
| 119 | + # the execution didn't stop at the address (e.g. the instruction |
| 120 | + # is on a branch that is not taken) |
| 121 | + echo " test_exec_ok: True" |
| 122 | + echo " skipped: False" |
| 123 | + fi |
| 124 | + fi |
| 125 | + else |
| 126 | + # failed before the first printout |
| 127 | + echo " test_exec_ok: True" |
| 128 | + echo " skipped: True" |
| 129 | + echo " boot: False" |
| 130 | + echo " last_line: 'N/A' " |
| 131 | + fi |
| 132 | +} |
| 133 | + |
| 134 | +# Inform how the script is used |
| 135 | +usage() { |
| 136 | + echo "$0 <image_dir> <start_addr> [<end_addr>] [(-s | --skip) <skip_len>]" |
| 137 | +} |
| 138 | + |
| 139 | +#defaults |
| 140 | +SKIP=2 |
| 141 | +BIN_DIR=$(pwd)/install/outputs/MPS2/AN521 |
| 142 | +AXF_FILE=$BIN_DIR/bl2.axf |
| 143 | +GDB=gdb-multiarch |
| 144 | +BOOTLOADER=true |
| 145 | + |
| 146 | +# Parse arguments |
| 147 | +while [[ $# -gt 0 ]]; do |
| 148 | + case $1 in |
| 149 | + -s|--skip) |
| 150 | + SKIP="$2" |
| 151 | + shift |
| 152 | + shift |
| 153 | + ;; |
| 154 | + -h|--help) |
| 155 | + usage |
| 156 | + exit 0 |
| 157 | + ;; |
| 158 | + *) |
| 159 | + if test -z "$IMAGE_DIR"; then |
| 160 | + IMAGE_DIR=$1 |
| 161 | + elif test -z "$START"; then |
| 162 | + START=$1 |
| 163 | + elif test -z "$END"; then |
| 164 | + END=$1 |
| 165 | + else |
| 166 | + usage |
| 167 | + exit 1 |
| 168 | + fi |
| 169 | + shift |
| 170 | + ;; |
| 171 | + esac |
| 172 | +done |
| 173 | + |
| 174 | +# Check that image directory, start and end address have been supplied |
| 175 | +if test -z "$IMAGE_DIR"; then |
| 176 | + usage |
| 177 | + exit 2 |
| 178 | +fi |
| 179 | + |
| 180 | +if test -z "$START"; then |
| 181 | + usage |
| 182 | + exit 2 |
| 183 | +fi |
| 184 | + |
| 185 | +if test -z "$END"; then |
| 186 | + END=$START |
| 187 | +fi |
| 188 | + |
| 189 | +if test -z "$SKIP"; then |
| 190 | + SKIP='2' |
| 191 | +fi |
| 192 | + |
| 193 | +# Create the start-end address range (step 2) |
| 194 | +ADDRS=$(printf '0x%x\n' $(seq "$START" 2 "$END")) |
| 195 | + |
| 196 | +# For each address run the skip_instruction function on it |
| 197 | +for ADDR in $ADDRS; do |
| 198 | + skip_instruction $ADDR $SKIP |
| 199 | +done |
0 commit comments