cachepc-qemu

Fork of AMDESE/qemu with changes for cachepc side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-qemu
Log | Files | Refs | Submodules | LICENSE | sfeed.txt

092 (3302B)


      1#!/usr/bin/env bash
      2# group: rw quick
      3#
      4# qcow1 format input validation tests
      5#
      6# Copyright (C) 2014 Red Hat, Inc.
      7#
      8# This program is free software; you can redistribute it and/or modify
      9# it under the terms of the GNU General Public License as published by
     10# the Free Software Foundation; either version 2 of the License, or
     11# (at your option) any later version.
     12#
     13# This program is distributed in the hope that it will be useful,
     14# but WITHOUT ANY WARRANTY; without even the implied warranty of
     15# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
     16# GNU General Public License for more details.
     17#
     18# You should have received a copy of the GNU General Public License
     19# along with this program.  If not, see <http://www.gnu.org/licenses/>.
     20#
     21
     22# creator
     23owner=kwolf@redhat.com
     24
     25seq=`basename $0`
     26echo "QA output created by $seq"
     27
     28status=1	# failure is the default!
     29
     30_cleanup()
     31{
     32    _rm_test_img "$TEST_IMG.snap"
     33    _cleanup_test_img
     34}
     35trap "_cleanup; exit \$status" 0 1 2 3 15
     36
     37# get standard environment, filters and checks
     38. ./common.rc
     39. ./common.filter
     40
     41_supported_fmt qcow
     42_supported_proto file
     43_supported_os Linux
     44
     45offset_backing_file_offset=8
     46offset_backing_file_size=16
     47offset_size=24
     48offset_cluster_bits=32
     49offset_l2_bits=33
     50
     51echo
     52echo "== Invalid cluster size =="
     53_make_test_img 64M
     54poke_file "$TEST_IMG" "$offset_cluster_bits" "\xff"
     55{ $QEMU_IO -c "read 0 512" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     56poke_file "$TEST_IMG" "$offset_cluster_bits" "\x1f"
     57{ $QEMU_IO -c "read 0 512" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     58poke_file "$TEST_IMG" "$offset_cluster_bits" "\x08"
     59{ $QEMU_IO -c "read 0 512" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     60poke_file "$TEST_IMG" "$offset_cluster_bits" "\x11"
     61{ $QEMU_IO -c "read 0 512" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     62
     63echo
     64echo "== Invalid L2 table size =="
     65_make_test_img 64M
     66poke_file "$TEST_IMG" "$offset_l2_bits" "\xff"
     67{ $QEMU_IO -c "read 0 512" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     68poke_file "$TEST_IMG" "$offset_l2_bits" "\x05"
     69{ $QEMU_IO -c "read 0 512" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     70poke_file "$TEST_IMG" "$offset_l2_bits" "\x0e"
     71{ $QEMU_IO -c "read 0 512" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     72
     73# 1 << 0x1b = 2^31 / L2_CACHE_SIZE
     74poke_file "$TEST_IMG" "$offset_l2_bits" "\x1b"
     75{ $QEMU_IO -c "read 0 512" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     76
     77echo
     78echo "== Invalid size =="
     79_make_test_img 64M
     80poke_file "$TEST_IMG" "$offset_size" "\xee\xee\xee\xee\xee\xee\xee\xee"
     81{ $QEMU_IO -c "read 0 512" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     82poke_file "$TEST_IMG" "$offset_size" "\x7f\xff\xff\xff\xff\xff\xff\xff"
     83{ $QEMU_IO -c "write 0 64M" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     84
     85echo
     86echo "== Invalid backing file length =="
     87_make_test_img 64M
     88poke_file "$TEST_IMG" "$offset_backing_file_offset" "\x00\x00\x00\xff"
     89poke_file "$TEST_IMG" "$offset_backing_file_size" "\xff\xff\xff\xff"
     90{ $QEMU_IO -c "read 0 512" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     91poke_file "$TEST_IMG" "$offset_backing_file_size" "\x7f\xff\xff\xff"
     92{ $QEMU_IO -c "read 0 512" $TEST_IMG; } 2>&1 | _filter_qemu_io | _filter_testdir
     93
     94# success, all done
     95echo "*** done"
     96rm -f $seq.full
     97status=0