commit 3eb0a6d5ed38db52f61aebafe4c2f9e7a4eebd59
author Inseob Kim <inseob@google.com> Fri Feb 25 15:31:49 2022 +0900
committer Inseob Kim <inseob@google.com> Wed Mar 02 17:11:14 2022 +0900
tree 285e84849c824a13ea3afe21ae47d9f90d0f37e6
parent 87751bba76c1a1f8aa170add757b26fb82f8d3cc

Ensure that u-boot data is missing in non-pVM

u-boot uses instance disk only when protected VM.

Bug: 218461230
Test: atest MicrodroidTests
Change-Id: I66956f3b4a5c6bf6d134662d4ede652f46e2dcc3

tests/testapk/src/java/com/android/microdroid/test/MicrodroidTests.java

diff --git a/tests/testapk/src/java/com/android/microdroid/test/MicrodroidTests.java b/tests/testapk/src/java/com/android/microdroid/test/MicrodroidTests.java
index 334f556..e22ab38 100644
--- a/tests/testapk/src/java/com/android/microdroid/test/MicrodroidTests.java
+++ b/tests/testapk/src/java/com/android/microdroid/test/MicrodroidTests.java
@@ -486,27 +486,37 @@
         return payloadStarted.getNow(false);
     }
 
-    // Flips a bit of given partition, and then see if boot fails. The partition must exist.
-    private void tryCompromisingInstanceDiskPartition(UUID partitionUuid)
+    private RandomAccessFile prepareInstanceImage(String vmName)
             throws VirtualMachineException, InterruptedException, IOException {
         VirtualMachineConfig config = mInner.newVmConfigBuilder("assets/vm_config.json")
                 .debugLevel(DebugLevel.NONE)
                 .build();
 
         // Remove any existing VM so we can start from scratch
-        VirtualMachine oldVm = mInner.mVmm.getOrCreate("test_vm_integrity", config);
+        VirtualMachine oldVm = mInner.mVmm.getOrCreate(vmName, config);
         oldVm.delete();
-        mInner.mVmm.getOrCreate("test_vm_integrity", config);
+        mInner.mVmm.getOrCreate(vmName, config);
 
-        assertThat(tryBootVm("test_vm_integrity")).isTrue();
+        assertThat(tryBootVm(vmName)).isTrue();
 
-        // Launch the same VM after flipping a bit of the instance image.
-        // Flip actual data, as flipping trivial bits like the magic string isn't interesting.
         File vmRoot = new File(mInner.mContext.getFilesDir(), "vm");
-        File vmDir = new File(vmRoot, "test_vm_integrity");
+        File vmDir = new File(vmRoot, vmName);
         File instanceImgPath = new File(vmDir, "instance.img");
-        RandomAccessFile instanceFile = new RandomAccessFile(instanceImgPath, "rw");
+        return new RandomAccessFile(instanceImgPath, "rw");
 
+    }
+
+    private void assertThatPartitionIsMissing(UUID partitionUuid)
+            throws VirtualMachineException, InterruptedException, IOException {
+        RandomAccessFile instanceFile = prepareInstanceImage("test_vm_integrity");
+        assertThat(findPartitionDataOffset(instanceFile, partitionUuid).isPresent())
+                .isFalse();
+    }
+
+    // Flips a bit of given partition, and then see if boot fails.
+    private void assertThatBootFailsAfterCompromisingPartition(UUID partitionUuid)
+            throws VirtualMachineException, InterruptedException, IOException {
+        RandomAccessFile instanceFile = prepareInstanceImage("test_vm_integrity");
         OptionalLong offset = findPartitionDataOffset(instanceFile, partitionUuid);
         assertThat(offset.isPresent()).isTrue();
 
@@ -521,11 +531,9 @@
                 .that(android.os.Build.DEVICE)
                 .isNotEqualTo("vsoc_x86_64");
 
-        tryCompromisingInstanceDiskPartition(MICRODROID_PARTITION_UUID);
+        assertThatBootFailsAfterCompromisingPartition(MICRODROID_PARTITION_UUID);
     }
 
-    /*
-    // TODO(b/218461230): uncomment these after u-boot update
     @Test
     public void bootFailsWhenUBootAvbDataIsCompromised()
             throws VirtualMachineException, InterruptedException, IOException {
@@ -533,11 +541,13 @@
                 .that(android.os.Build.DEVICE)
                 .isNotEqualTo("vsoc_x86_64");
 
-        assume().withMessage("Skip where protected VMs aren't support")
-                .that(mProtectedVm)
-                .isTrue();
-
-        tryCompromisingInstanceDiskPartition(U_BOOT_AVB_PARTITION_UUID);
+        if (mProtectedVm) {
+            // TODO(b/218461230): uncomment this after u-boot update
+            // assertThatBootFailsAfterCompromisingPartition(U_BOOT_AVB_PARTITION_UUID);
+        } else {
+            // non-protected VM shouldn't have u-boot avb data
+            assertThatPartitionIsMissing(U_BOOT_AVB_PARTITION_UUID);
+        }
     }
 
     @Test
@@ -547,11 +557,12 @@
                 .that(android.os.Build.DEVICE)
                 .isNotEqualTo("vsoc_x86_64");
 
-        assume().withMessage("Skip where protected VMs aren't support")
-                .that(mProtectedVm)
-                .isTrue();
-
-        tryCompromisingInstanceDiskPartition(U_BOOT_ENV_PARTITION_UUID);
+        if (mProtectedVm) {
+            // TODO(b/218461230): uncomment this after u-boot update
+            // assertThatBootFailsAfterCompromisingPartition(U_BOOT_ENV_PARTITION_UUID);
+        } else {
+            // non-protected VM shouldn't have u-boot env data
+            assertThatPartitionIsMissing(U_BOOT_ENV_PARTITION_UUID);
+        }
     }
-    */
 }