tests/mts/bpf_existence_test.cpp

/*
 * Copyright 2022 The Android Open Source Project
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 * bpf_existence_test.cpp - checks that the device runs expected BPF programs
 */

#include <cstdint>
#include <set>
#include <string>

#include <android/api-level.h>
#include <android-base/properties.h>
#include <android-modules-utils/sdk_level.h>

#include <gtest/gtest.h>

using std::find;
using std::set;
using std::string;

using android::modules::sdklevel::IsAtLeastR;
using android::modules::sdklevel::IsAtLeastS;
using android::modules::sdklevel::IsAtLeastT;

// Mainline development branches lack the constant for the current development OS.
#ifndef __ANDROID_API_T__
#define __ANDROID_API_T__ 33
#endif

class BpfExistenceTest : public ::testing::Test {
};

static const set<string> INTRODUCED_R = {
    "/sys/fs/bpf/prog_offload_schedcls_ingress_tether_ether",
    "/sys/fs/bpf/prog_offload_schedcls_ingress_tether_rawip",
};

static const set<string> INTRODUCED_S = {
    "/sys/fs/bpf/tethering/prog_offload_schedcls_tether_downstream4_ether",
    "/sys/fs/bpf/tethering/prog_offload_schedcls_tether_downstream4_rawip",
    "/sys/fs/bpf/tethering/prog_offload_schedcls_tether_downstream6_ether",
    "/sys/fs/bpf/tethering/prog_offload_schedcls_tether_downstream6_rawip",
    "/sys/fs/bpf/tethering/prog_offload_schedcls_tether_upstream4_ether",
    "/sys/fs/bpf/tethering/prog_offload_schedcls_tether_upstream4_rawip",
    "/sys/fs/bpf/tethering/prog_offload_schedcls_tether_upstream6_ether",
    "/sys/fs/bpf/tethering/prog_offload_schedcls_tether_upstream6_rawip",
};

static const set<string> REMOVED_S = {
    "/sys/fs/bpf/prog_offload_schedcls_ingress_tether_ether",
    "/sys/fs/bpf/prog_offload_schedcls_ingress_tether_rawip",
};

static const set<string> INTRODUCED_T = {
};

static const set<string> REMOVED_T = {
};

void addAll(set<string>* a, const set<string>& b) {
    a->insert(b.begin(), b.end());
}

void removeAll(set<string>* a, const set<string> b) {
    for (const auto& toRemove : b) {
        a->erase(toRemove);
    }
}

void getFileLists(set<string>* expected, set<string>* unexpected) {
    unexpected->clear();
    expected->clear();

    addAll(unexpected, INTRODUCED_R);
    addAll(unexpected, INTRODUCED_S);
    addAll(unexpected, INTRODUCED_T);

    if (IsAtLeastR()) {
        addAll(expected, INTRODUCED_R);
        removeAll(unexpected, INTRODUCED_R);
        // Nothing removed in R.
    }

    if (IsAtLeastS()) {
        addAll(expected, INTRODUCED_S);
        removeAll(expected, REMOVED_S);

        addAll(unexpected, REMOVED_S);
        removeAll(unexpected, INTRODUCED_S);
    }

    // Nothing added or removed in SCv2.

    if (IsAtLeastT()) {
        addAll(expected, INTRODUCED_T);
        removeAll(expected, REMOVED_T);

        addAll(unexpected, REMOVED_T);
        removeAll(unexpected, INTRODUCED_T);
    }
}

void checkFiles() {
    set<string> mustExist;
    set<string> mustNotExist;

    getFileLists(&mustExist, &mustNotExist);

    for (const auto& file : mustExist) {
        EXPECT_EQ(0, access(file.c_str(), R_OK)) << file << " does not exist";
    }
    for (const auto& file : mustNotExist) {
        int ret = access(file.c_str(), R_OK);
        int err = errno;
        EXPECT_EQ(-1, ret) << file << " unexpectedly exists";
        if (ret == -1) {
            EXPECT_EQ(ENOENT, err) << " accessing " << file << " failed with errno " << err;
        }
    }
}

TEST_F(BpfExistenceTest, TestPrograms) {
    // Pre-flight check to ensure test has been updated.
    uint64_t buildVersionSdk = android_get_device_api_level();
    ASSERT_NE(0, buildVersionSdk) << "Unable to determine device SDK version";
    if (buildVersionSdk > __ANDROID_API_T__ && buildVersionSdk != __ANDROID_API_FUTURE__) {
            FAIL() << "Unknown OS version " << buildVersionSdk << ", please update this test";
    }

    // Only unconfined root is guaranteed to be able to access everything in /sys/fs/bpf.
    ASSERT_EQ(0, getuid()) << "This test must run as root.";

    checkFiles();
}