cmd/avb.c

   1
   2 /*
   3  * (C) Copyright 2018, Linaro Limited
   4  *
   5  * SPDX-License-Identifier:     GPL-2.0+
   6  */
   7
   8 #include <avb_verify.h>
   9 #include <command.h>
  10 #include <env.h>
  11 #include <image.h>
  12 #include <malloc.h>
  13 #include <mmc.h>
  14
  15 #define AVB_BOOTARGS    "avb_bootargs"
  16 static struct AvbOps *avb_ops;
  17
  18 int do_avb_init(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
  19 {
  20         unsigned long mmc_dev;
  21
  22         if (argc != 2)
  23                 return CMD_RET_USAGE;
  24
  25         mmc_dev = simple_strtoul(argv[1], NULL, 16);
  26
  27         if (avb_ops)
  28                 avb_ops_free(avb_ops);
  29
  30         avb_ops = avb_ops_alloc(mmc_dev);
  31         if (avb_ops)
  32                 return CMD_RET_SUCCESS;
  33
  34         printf("Failed to initialize avb2\n");
  35
  36         return CMD_RET_FAILURE;
  37 }
  38
  39 int do_avb_read_part(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
  40 {
  41         const char *part;
  42         s64 offset;
  43         size_t bytes, bytes_read = 0;
  44         void *buffer;
  45
  46         if (!avb_ops) {
  47                 printf("AVB 2.0 is not initialized, please run 'avb init'\n");
  48                 return CMD_RET_USAGE;
  49         }
  50
  51         if (argc != 5)
  52                 return CMD_RET_USAGE;
  53
  54         part = argv[1];
  55         offset = simple_strtoul(argv[2], NULL, 16);
  56         bytes = simple_strtoul(argv[3], NULL, 16);
  57         buffer = (void *)simple_strtoul(argv[4], NULL, 16);
  58
  59         if (avb_ops->read_from_partition(avb_ops, part, offset, bytes,
  60                                          buffer, &bytes_read) ==
  61                                          AVB_IO_RESULT_OK) {
  62                 printf("Read %zu bytes\n", bytes_read);
  63                 return CMD_RET_SUCCESS;
  64         }
  65
  66         printf("Failed to read from partition\n");
  67
  68         return CMD_RET_FAILURE;
  69 }
  70
  71 int do_avb_read_part_hex(cmd_tbl_t *cmdtp, int flag, int argc,
  72                          char *const argv[])
  73 {
  74         const char *part;
  75         s64 offset;
  76         size_t bytes, bytes_read = 0;
  77         char *buffer;
  78
  79         if (!avb_ops) {
  80                 printf("AVB 2.0 is not initialized, please run 'avb init'\n");
  81                 return CMD_RET_USAGE;
  82         }
  83
  84         if (argc != 4)
  85                 return CMD_RET_USAGE;
  86
  87         part = argv[1];
  88         offset = simple_strtoul(argv[2], NULL, 16);
  89         bytes = simple_strtoul(argv[3], NULL, 16);
  90
  91         buffer = malloc(bytes);
  92         if (!buffer) {
  93                 printf("Failed to tlb_allocate buffer for data\n");
  94                 return CMD_RET_FAILURE;
  95         }
  96         memset(buffer, 0, bytes);
  97
  98         if (avb_ops->read_from_partition(avb_ops, part, offset, bytes, buffer,
  99                                          &bytes_read) == AVB_IO_RESULT_OK) {
 100                 printf("Requested %zu, read %zu bytes\n", bytes, bytes_read);
 101                 printf("Data: ");
 102                 for (int i = 0; i < bytes_read; i++)
 103                         printf("%02X", buffer[i]);
 104
 105                 printf("\n");
 106
 107                 free(buffer);
 108                 return CMD_RET_SUCCESS;
 109         }
 110
 111         printf("Failed to read from partition\n");
 112
 113         free(buffer);
 114         return CMD_RET_FAILURE;
 115 }
 116
 117 int do_avb_write_part(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
 118 {
 119         const char *part;
 120         s64 offset;
 121         size_t bytes;
 122         void *buffer;
 123
 124         if (!avb_ops) {
 125                 printf("AVB 2.0 is not initialized, run 'avb init' first\n");
 126                 return CMD_RET_FAILURE;
 127         }
 128
 129         if (argc != 5)
 130                 return CMD_RET_USAGE;
 131
 132         part = argv[1];
 133         offset = simple_strtoul(argv[2], NULL, 16);
 134         bytes = simple_strtoul(argv[3], NULL, 16);
 135         buffer = (void *)simple_strtoul(argv[4], NULL, 16);
 136
 137         if (avb_ops->write_to_partition(avb_ops, part, offset, bytes, buffer) ==
 138             AVB_IO_RESULT_OK) {
 139                 printf("Wrote %zu bytes\n", bytes);
 140                 return CMD_RET_SUCCESS;
 141         }
 142
 143         printf("Failed to write in partition\n");
 144
 145         return CMD_RET_FAILURE;
 146 }
 147
 148 int do_avb_read_rb(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
 149 {
 150         size_t index;
 151         u64 rb_idx;
 152
 153         if (!avb_ops) {
 154                 printf("AVB 2.0 is not initialized, run 'avb init' first\n");
 155                 return CMD_RET_FAILURE;
 156         }
 157
 158         if (argc != 2)
 159                 return CMD_RET_USAGE;
 160
 161         index = (size_t)simple_strtoul(argv[1], NULL, 16);
 162
 163         if (avb_ops->read_rollback_index(avb_ops, index, &rb_idx) ==
 164             AVB_IO_RESULT_OK) {
 165                 printf("Rollback index: %llx\n", rb_idx);
 166                 return CMD_RET_SUCCESS;
 167         }
 168
 169         printf("Failed to read rollback index\n");
 170
 171         return CMD_RET_FAILURE;
 172 }
 173
 174 int do_avb_write_rb(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
 175 {
 176         size_t index;
 177         u64 rb_idx;
 178
 179         if (!avb_ops) {
 180                 printf("AVB 2.0 is not initialized, run 'avb init' first\n");
 181                 return CMD_RET_FAILURE;
 182         }
 183
 184         if (argc != 3)
 185                 return CMD_RET_USAGE;
 186
 187         index = (size_t)simple_strtoul(argv[1], NULL, 16);
 188         rb_idx = simple_strtoul(argv[2], NULL, 16);
 189
 190         if (avb_ops->write_rollback_index(avb_ops, index, rb_idx) ==
 191             AVB_IO_RESULT_OK)
 192                 return CMD_RET_SUCCESS;
 193
 194         printf("Failed to write rollback index\n");
 195
 196         return CMD_RET_FAILURE;
 197 }
 198
 199 int do_avb_get_uuid(cmd_tbl_t *cmdtp, int flag,
 200                     int argc, char * const argv[])
 201 {
 202         const char *part;
 203         char buffer[UUID_STR_LEN + 1];
 204
 205         if (!avb_ops) {
 206                 printf("AVB 2.0 is not initialized, run 'avb init' first\n");
 207                 return CMD_RET_FAILURE;
 208         }
 209
 210         if (argc != 2)
 211                 return CMD_RET_USAGE;
 212
 213         part = argv[1];
 214
 215         if (avb_ops->get_unique_guid_for_partition(avb_ops, part, buffer,
 216                                                    UUID_STR_LEN + 1) ==
 217                                                    AVB_IO_RESULT_OK) {
 218                 printf("'%s' UUID: %s\n", part, buffer);
 219                 return CMD_RET_SUCCESS;
 220         }
 221
 222         printf("Failed to read UUID\n");
 223
 224         return CMD_RET_FAILURE;
 225 }
 226
 227 int do_avb_verify_part(cmd_tbl_t *cmdtp, int flag,
 228                        int argc, char *const argv[])
 229 {
 230         const char * const requested_partitions[] = {"boot", NULL};
 231         AvbSlotVerifyResult slot_result;
 232         AvbSlotVerifyData *out_data;
 233         char *cmdline;
 234         char *extra_args;
 235
 236         bool unlocked = false;
 237         int res = CMD_RET_FAILURE;
 238
 239         if (!avb_ops) {
 240                 printf("AVB 2.0 is not initialized, run 'avb init' first\n");
 241                 return CMD_RET_FAILURE;
 242         }
 243
 244         if (argc != 1)
 245                 return CMD_RET_USAGE;
 246
 247         printf("## Android Verified Boot 2.0 version %s\n",
 248                avb_version_string());
 249
 250         if (avb_ops->read_is_device_unlocked(avb_ops, &unlocked) !=
 251             AVB_IO_RESULT_OK) {
 252                 printf("Can't determine device lock state.\n");
 253                 return CMD_RET_FAILURE;
 254         }
 255
 256         slot_result =
 257                 avb_slot_verify(avb_ops,
 258                                 requested_partitions,
 259                                 "",
 260                                 unlocked,
 261                                 AVB_HASHTREE_ERROR_MODE_RESTART_AND_INVALIDATE,
 262                                 &out_data);
 263
 264         switch (slot_result) {
 265         case AVB_SLOT_VERIFY_RESULT_OK:
 266                 /* Until we don't have support of changing unlock states, we
 267                  * assume that we are by default in locked state.
 268                  * So in this case we can boot only when verification is
 269                  * successful; we also supply in cmdline GREEN boot state
 270                  */
 271                 printf("Verification passed successfully\n");
 272
 273                 /* export additional bootargs to AVB_BOOTARGS env var */
 274
 275                 extra_args = avb_set_state(avb_ops, AVB_GREEN);
 276                 if (extra_args)
 277                         cmdline = append_cmd_line(out_data->cmdline,
 278                                                   extra_args);
 279                 else
 280                         cmdline = out_data->cmdline;
 281
 282                 env_set(AVB_BOOTARGS, cmdline);
 283
 284                 res = CMD_RET_SUCCESS;
 285                 break;
 286         case AVB_SLOT_VERIFY_RESULT_ERROR_VERIFICATION:
 287                 printf("Verification failed\n");
 288                 break;
 289         case AVB_SLOT_VERIFY_RESULT_ERROR_IO:
 290                 printf("I/O error occurred during verification\n");
 291                 break;
 292         case AVB_SLOT_VERIFY_RESULT_ERROR_OOM:
 293                 printf("OOM error occurred during verification\n");
 294                 break;
 295         case AVB_SLOT_VERIFY_RESULT_ERROR_INVALID_METADATA:
 296                 printf("Corrupted dm-verity metadata detected\n");
 297                 break;
 298         case AVB_SLOT_VERIFY_RESULT_ERROR_UNSUPPORTED_VERSION:
 299                 printf("Unsupported version avbtool was used\n");
 300                 break;
 301         case AVB_SLOT_VERIFY_RESULT_ERROR_ROLLBACK_INDEX:
 302                 printf("Checking rollback index failed\n");
 303                 break;
 304         case AVB_SLOT_VERIFY_RESULT_ERROR_PUBLIC_KEY_REJECTED:
 305                 printf("Public key was rejected\n");
 306                 break;
 307         default:
 308                 printf("Unknown error occurred\n");
 309         }
 310
 311         return res;
 312 }
 313
 314 int do_avb_is_unlocked(cmd_tbl_t *cmdtp, int flag,
 315                        int argc, char * const argv[])
 316 {
 317         bool unlock;
 318
 319         if (!avb_ops) {
 320                 printf("AVB not initialized, run 'avb init' first\n");
 321                 return CMD_RET_FAILURE;
 322         }
 323
 324         if (argc != 1) {
 325                 printf("--%s(-1)\n", __func__);
 326                 return CMD_RET_USAGE;
 327         }
 328
 329         if (avb_ops->read_is_device_unlocked(avb_ops, &unlock) ==
 330             AVB_IO_RESULT_OK) {
 331                 printf("Unlocked = %d\n", unlock);
 332                 return CMD_RET_SUCCESS;
 333         }
 334
 335         printf("Can't determine device lock state.\n");
 336
 337         return CMD_RET_FAILURE;
 338 }
 339
 340 int do_avb_read_pvalue(cmd_tbl_t *cmdtp, int flag, int argc,
 341                        char * const argv[])
 342 {
 343         const char *name;
 344         size_t bytes;
 345         size_t bytes_read;
 346         void *buffer;
 347         char *endp;
 348
 349         if (!avb_ops) {
 350                 printf("AVB 2.0 is not initialized, run 'avb init' first\n");
 351                 return CMD_RET_FAILURE;
 352         }
 353
 354         if (argc != 3)
 355                 return CMD_RET_USAGE;
 356
 357         name = argv[1];
 358         bytes = simple_strtoul(argv[2], &endp, 10);
 359         if (*endp && *endp != '\n')
 360                 return CMD_RET_USAGE;
 361
 362         buffer = malloc(bytes);
 363         if (!buffer)
 364                 return CMD_RET_FAILURE;
 365
 366         if (avb_ops->read_persistent_value(avb_ops, name, bytes, buffer,
 367                                            &bytes_read) == AVB_IO_RESULT_OK) {
 368                 printf("Read %zu bytes, value = %s\n", bytes_read,
 369                        (char *)buffer);
 370                 free(buffer);
 371                 return CMD_RET_SUCCESS;
 372         }
 373
 374         printf("Failed to read persistent value\n");
 375
 376         free(buffer);
 377
 378         return CMD_RET_FAILURE;
 379 }
 380
 381 int do_avb_write_pvalue(cmd_tbl_t *cmdtp, int flag, int argc,
 382                         char * const argv[])
 383 {
 384         const char *name;
 385         const char *value;
 386
 387         if (!avb_ops) {
 388                 printf("AVB 2.0 is not initialized, run 'avb init' first\n");
 389                 return CMD_RET_FAILURE;
 390         }
 391
 392         if (argc != 3)
 393                 return CMD_RET_USAGE;
 394
 395         name = argv[1];
 396         value = argv[2];
 397
 398         if (avb_ops->write_persistent_value(avb_ops, name, strlen(value) + 1,
 399                                             (const uint8_t *)value) ==
 400             AVB_IO_RESULT_OK) {
 401                 printf("Wrote %zu bytes\n", strlen(value) + 1);
 402                 return CMD_RET_SUCCESS;
 403         }
 404
 405         printf("Failed to write persistent value\n");
 406
 407         return CMD_RET_FAILURE;
 408 }
 409
 410 static cmd_tbl_t cmd_avb[] = {
 411         U_BOOT_CMD_MKENT(init, 2, 0, do_avb_init, "", ""),
 412         U_BOOT_CMD_MKENT(read_rb, 2, 0, do_avb_read_rb, "", ""),
 413         U_BOOT_CMD_MKENT(write_rb, 3, 0, do_avb_write_rb, "", ""),
 414         U_BOOT_CMD_MKENT(is_unlocked, 1, 0, do_avb_is_unlocked, "", ""),
 415         U_BOOT_CMD_MKENT(get_uuid, 2, 0, do_avb_get_uuid, "", ""),
 416         U_BOOT_CMD_MKENT(read_part, 5, 0, do_avb_read_part, "", ""),
 417         U_BOOT_CMD_MKENT(read_part_hex, 4, 0, do_avb_read_part_hex, "", ""),
 418         U_BOOT_CMD_MKENT(write_part, 5, 0, do_avb_write_part, "", ""),
 419         U_BOOT_CMD_MKENT(verify, 1, 0, do_avb_verify_part, "", ""),
 420 #ifdef CONFIG_OPTEE_TA_AVB
 421         U_BOOT_CMD_MKENT(read_pvalue, 3, 0, do_avb_read_pvalue, "", ""),
 422         U_BOOT_CMD_MKENT(write_pvalue, 3, 0, do_avb_write_pvalue, "", ""),
 423 #endif
 424 };
 425
 426 static int do_avb(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
 427 {
 428         cmd_tbl_t *cp;
 429
 430         cp = find_cmd_tbl(argv[1], cmd_avb, ARRAY_SIZE(cmd_avb));
 431
 432         argc--;
 433         argv++;
 434
 435         if (!cp || argc > cp->maxargs)
 436                 return CMD_RET_USAGE;
 437
 438         if (flag == CMD_FLAG_REPEAT)
 439                 return CMD_RET_FAILURE;
 440
 441         return cp->cmd(cmdtp, flag, argc, argv);
 442 }
 443
 444 U_BOOT_CMD(
 445         avb, 29, 0, do_avb,
 446         "Provides commands for testing Android Verified Boot 2.0 functionality",
 447         "init <dev> - initialize avb2 for <dev>\n"
 448         "avb read_rb <num> - read rollback index at location <num>\n"
 449         "avb write_rb <num> <rb> - write rollback index <rb> to <num>\n"
 450         "avb is_unlocked - returns unlock status of the device\n"
 451         "avb get_uuid <partname> - read and print uuid of partition <part>\n"
 452         "avb read_part <partname> <offset> <num> <addr> - read <num> bytes from\n"
 453         "    partition <partname> to buffer <addr>\n"
 454         "avb read_part_hex <partname> <offset> <num> - read <num> bytes from\n"
 455         "    partition <partname> and print to stdout\n"
 456         "avb write_part <partname> <offset> <num> <addr> - write <num> bytes to\n"
 457         "    <partname> by <offset> using data from <addr>\n"
 458 #ifdef CONFIG_OPTEE_TA_AVB
 459         "avb read_pvalue <name> <bytes> - read a persistent value <name>\n"
 460         "avb write_pvalue <name> <value> - write a persistent value <name>\n"
 461 #endif
 462         "avb verify - run verification process using hash data\n"
 463         "    from vbmeta structure\n"
 464         );