| Index: src/platform/vboot_reference/tests/verify_kernel_fuzz_driver.c
|
| diff --git a/src/platform/vboot_reference/tests/verify_kernel_fuzz_driver.c b/src/platform/vboot_reference/tests/verify_kernel_fuzz_driver.c
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..102726388e0855905839deac3c39e9378adb0b40
|
| --- /dev/null
|
| +++ b/src/platform/vboot_reference/tests/verify_kernel_fuzz_driver.c
|
| @@ -0,0 +1,56 @@
|
| +/* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
|
| + * Use of this source code is governed by a BSD-style license that can be
|
| + * found in the LICENSE file.
|
| + *
|
| + * Utility for aiding fuzz testing of kernel image verification code.
|
| + */
|
| +
|
| +#include <stdio.h>
|
| +
|
| +#include "file_keys.h"
|
| +#include "kernel_image.h"
|
| +#include "utility.h"
|
| +
|
| +int VerifySignedKernel(const char* image_file,
|
| + const char* firmware_key_file) {
|
| + int error, error_code = 0;
|
| + uint64_t len;
|
| + uint8_t* kernel_blob = BufferFromFile(image_file, &len);
|
| + uint8_t* firmware_key_blob = BufferFromFile(firmware_key_file, &len);
|
| +
|
| + if (!firmware_key_blob) {
|
| + fprintf(stderr, "Couldn't read pre-processed public firmware key.\n");
|
| + error_code = 1;
|
| + }
|
| +
|
| + if (!error_code && !kernel_blob) {
|
| + fprintf(stderr, "Couldn't read kernel image or malformed image.\n");
|
| + error_code = 1;
|
| + }
|
| +
|
| + if (!error_code && (error = VerifyKernel(firmware_key_blob, kernel_blob,
|
| + 0))) { /* Trusted Mode. */
|
| + fprintf(stderr, "%s\n", VerifyKernelErrorString(error));
|
| + error_code = 1;
|
| + }
|
| + Free(firmware_key_blob);
|
| + Free(kernel_blob);
|
| + if (error_code)
|
| + return 0;
|
| + return 1;
|
| +}
|
| +
|
| +int main(int argc, char* argv[]) {
|
| + if (argc != 3) {
|
| + fprintf(stderr, "Usage: %s <image_to_verify> <firmware_keyb>\n", argv[0]);
|
| + return -1;
|
| + }
|
| + if (VerifySignedKernel(argv[1], argv[2])) {
|
| + fprintf(stderr, "Verification SUCCESS!\n");
|
| + return 0;
|
| + }
|
| + else {
|
| + fprintf(stderr, "Verification FAILURE!\n");
|
| + return -1;
|
| + }
|
| +}
|
|
|