From: Jarkko Sakkinen jarkko@kernel.org
Add a variation of the unclobbered_vdso test.
In the new test, create a heap for the test enclave, which has the same size as all available Enclave Page Cache (EPC) pages in the system. This will guarantee that all test_encl.elf pages *and* SGX Enclave Control Structure (SECS) have been swapped out by the page reclaimer during the load time.
This test will trigger both the page reclaimer and the page fault handler. The page reclaimer triggered, while the heap is being created during the load time. The page fault handler is triggered for all the required pages, while the test case is executing.
Signed-off-by: Jarkko Sakkinen jarkko@kernel.org Acked-by: Dave Hansen dave.hansen@linux.intel.com [reinette: rework code obtaining SGX physical memory based on most recent upstream solution] Signed-off-by: Reinette Chatre reinette.chatre@intel.com --- Changes since V1: - Add signature from Dave. - Add support to obtain SGX physical memory from v8 of Jarkko's patches.
tools/testing/selftests/sgx/main.c | 114 +++++++++++++++++++++++++++++ tools/testing/selftests/sgx/main.h | 1 + 2 files changed, 115 insertions(+)
diff --git a/tools/testing/selftests/sgx/main.c b/tools/testing/selftests/sgx/main.c index f41fba919d06..541862c15901 100644 --- a/tools/testing/selftests/sgx/main.c +++ b/tools/testing/selftests/sgx/main.c @@ -1,6 +1,8 @@ // SPDX-License-Identifier: GPL-2.0 /* Copyright(c) 2016-20 Intel Corporation. */
+#define _GNU_SOURCE +#include <dirent.h> #include <elf.h> #include <errno.h> #include <fcntl.h> @@ -245,6 +247,118 @@ TEST_F(enclave, unclobbered_vdso) EXPECT_EQ(self->run.user_data, 0); }
+static bool sysfs_get_ulong(const char *path, unsigned long *value) +{ + struct stat sbuf; + char buf[128]; + ssize_t ret; + int fd; + + ret = stat(path, &sbuf); + if (ret) + return false; + + fd = open(path, O_RDONLY); + if (fd < 0) + return false; + + ret = read(fd, buf, sizeof(buf)); + if (ret < 0) { + close(fd); + return false; + } + + errno = 0; + *value = strtoul(buf, NULL, 0); + + close(fd); + + return errno ? false : true; +} + +/* + * Sum total available physical SGX memory across all NUMA nodes + * + * Return: total available physical SGX memory available on system or 0 if a + * failure is encountered. + */ +static unsigned long get_total_epc_mem(void) +{ + char *node, *path = NULL; + unsigned long total = 0; + unsigned long size = 0; + struct dirent *entry; + struct stat statbuf; + DIR *dp; + int ret; + + dp = opendir(SGX_TOTAL_MEM_PATH); + if (!dp) + return 0; + + while ((entry = readdir(dp))) { + node = strstr(entry->d_name, "node"); + if (!node) + continue; + + ret = asprintf(&path, "%s/%s/sgx/size", + SGX_TOTAL_MEM_PATH, entry->d_name); + if (ret == -1) { + total = 0; + goto out; + } + + ret = stat(path, &statbuf); + if (ret == -1) { + free(path); + continue; + } + + if (S_ISREG(statbuf.st_mode) && statbuf.st_size > 0) { + if (sysfs_get_ulong(path, &size)) + total += size; + } + + free(path); + } + +out: + closedir(dp); + + return total; +} + +TEST_F(enclave, unclobbered_vdso_oversubscribed) +{ + unsigned long total_mem; + struct encl_op op; + + total_mem = get_total_epc_mem(); + ASSERT_NE(total_mem, 0); + ASSERT_TRUE(setup_test_encl(total_mem, &self->encl, _metadata)); + + memset(&self->run, 0, sizeof(self->run)); + self->run.tcs = self->encl.encl_base; + + op.type = ENCL_OP_PUT; + op.buffer = MAGIC; + + EXPECT_EQ(ENCL_CALL(&op, &self->run, false), 0); + + EXPECT_EEXIT(&self->run); + EXPECT_EQ(self->run.user_data, 0); + + op.type = ENCL_OP_GET; + op.buffer = 0; + + EXPECT_EQ(ENCL_CALL(&op, &self->run, false), 0); + + EXPECT_EQ(op.buffer, MAGIC); + EXPECT_EEXIT(&self->run); + EXPECT_EQ(self->run.user_data, 0); + +} + TEST_F(enclave, clobbered_vdso) { struct encl_op op; diff --git a/tools/testing/selftests/sgx/main.h b/tools/testing/selftests/sgx/main.h index b45c52ec7ab3..59027df32a6a 100644 --- a/tools/testing/selftests/sgx/main.h +++ b/tools/testing/selftests/sgx/main.h @@ -7,6 +7,7 @@ #define MAIN_H
#define ENCL_HEAP_SIZE_DEFAULT 4096 +#define SGX_TOTAL_MEM_PATH "/sys/devices/system/node"
struct encl_segment { void *src;