LDFLAGS=-lcheck -lm -pthread UNAME_S := $(shell uname -s) ifneq ($(UNAME_S),Darwin) LDFLAGS+=-lrt -lsubunit endif # Default library paths (can be overridden) WOLFBOOT_LIB_WOLFSSL?=../../lib/wolfssl WOLFBOOT_LIB_WOLFPKCS11?=../../lib/wolfPKCS11 WOLFBOOT_LIB_WOLFPSA?=../../lib/wolfPSA WOLFBOOT_LIB_WOLFTPM?=../../lib/wolfTPM WOLFBOOT_LIB_WOLFHSM?=../../lib/wolfHSM WOLFBOOT_LIB_WOLFCOSE?=../../lib/wolfCOSE ifeq ($(wildcard $(WOLFBOOT_LIB_WOLFPSA)),) WOLFBOOT_LIB_WOLFPSA=../../../external-libs/wolfPSA endif ifeq ($(wildcard $(WOLFBOOT_LIB_WOLFTPM)),) WOLFBOOT_LIB_WOLFTPM=../../../external-libs/wolfTPM endif ifeq ($(wildcard $(WOLFBOOT_LIB_WOLFHSM)),) WOLFBOOT_LIB_WOLFHSM=../../../external-libs/wolfHSM endif ifeq ($(wildcard $(WOLFBOOT_LIB_WOLFCOSE)),) WOLFBOOT_LIB_WOLFCOSE=../../../external-libs/wolfCOSE endif # Convert to absolute paths for standalone usage WOLFBOOT_LIB_WOLFSSL:=$(abspath $(WOLFBOOT_LIB_WOLFSSL)) WOLFBOOT_LIB_WOLFPKCS11:=$(abspath $(WOLFBOOT_LIB_WOLFPKCS11)) WOLFBOOT_LIB_WOLFPSA:=$(abspath $(WOLFBOOT_LIB_WOLFPSA)) WOLFBOOT_LIB_WOLFTPM:=$(abspath $(WOLFBOOT_LIB_WOLFTPM)) WOLFBOOT_LIB_WOLFHSM:=$(abspath $(WOLFBOOT_LIB_WOLFHSM)) WOLFBOOT_LIB_WOLFCOSE:=$(abspath $(WOLFBOOT_LIB_WOLFCOSE)) CFLAGS=-I. -I../../src -I../../include -I$(WOLFBOOT_LIB_WOLFSSL) CFLAGS+=-g -ggdb CFLAGS+=-fprofile-arcs CFLAGS+=-ftest-coverage CFLAGS+=--coverage CFLAGS+=-DUNIT_TEST_COVERAGE CFLAGS+=-DUNIT_TEST -DWOLFSSL_USER_SETTINGS LDFLAGS+=-fprofile-arcs LDFLAGS+=-ftest-coverage ASAN?=0 ifeq ($(ASAN),1) CFLAGS+=-fsanitize=address -fno-omit-frame-pointer -O1 LDFLAGS+=-fsanitize=address endif TESTS:=unit-parser unit-parser-large-header unit-fdt unit-extflash unit-string \ unit-spi-flash unit-aes128 \ unit-uart-flash \ unit-aes256 unit-chacha20 unit-pci unit-mock-state unit-sectorflags \ unit-max-space \ unit-image unit-image-hybrid unit-image-rsa unit-nvm unit-nvm-flagshome unit-enc-nvm \ unit-enc-nvm-flagshome unit-delta unit-gzip unit-update-flash unit-update-flash-delta \ unit-update-flash-hook \ unit-update-flash-self-update \ unit-update-flash-enc unit-update-flash-enc-full unit-update-ram unit-update-ram-uboot unit-update-ram-enc unit-update-ram-enc-nopart unit-update-ram-nofixed unit-update-ram-noramboot unit-update-flash-hwswap unit-pkcs11_store unit-psa_store unit-wolfhsm_flash_hal unit-disk \ unit-update-disk unit-update-disk-oob unit-update-disk-fit unit-multiboot unit-boot-x86-fsp unit-loader-tpm-init unit-qspi-flash unit-fwtpm-stub unit-tpm-rsa-exp \ unit-image-nopart unit-image-sha384 unit-image-sha3-384 unit-image-dts \ unit-image-dts-sha384 unit-image-dts-sha3-384 unit-store-sbrk \ unit-tpm-blob unit-policy-create unit-policy-sign unit-rot-auth unit-sdhci-response-bits \ unit-sdhci-disk-unaligned unit-sdhci-dma-error unit-cm4-sdhci unit-cm4-rauc-slot \ unit-sign-encrypted-output \ unit-sign-hybrid-keyload \ unit-sign-header-failure \ unit-keygen-xmss-params TESTS+=unit-tpm-check-rot-auth TESTS+=unit-tpm-api-names TESTS+=unit-tpm-nsc-cert TESTS+=unit-tpm-advio-zeroize TESTS+=unit-tpm-mfgid-eh-zeroize TESTS+=unit-pkcs11-nsc-zeroize TESTS+=unit-ubootenv TESTS+=unit-diagnostics TESTS+=unit-diagnostics-256 TESTS+=unit-fit-gzip unit-fit-nogzip TESTS+=unit-fit-fpga TESTS+=unit-mpusize TESTS+=unit-flash-erase-h7 TESTS+=unit-flash-erase-wb TESTS+=unit-flash-erase-l0 TESTS+=unit-flash-erase-g0 TESTS+=unit-flash-erase-c0 TESTS+=unit-flash-erase-u3 TESTS+=unit-flash-erase-mcxw TESTS+=unit-otp-keystore TESTS+=unit-otp-keystore-gen-zeroize TESTS+=unit-x86-paging-oob TESTS+=unit-ahci-unlock-panic TESTS+=unit-ata-security-passphrase-zeroize TESTS+=unit-fwtpm-nv-oob TESTS+=unit-elf-bss-guard TESTS+=unit-elf-entry-inplace TESTS+=unit-elf-mmu-fail TESTS+=unit-image-elf-scatter TESTS+=unit-arm-tee-psa-ipc TESTS+=unit-dice-token-size TESTS+=unit-dice-token-nosign TESTS+=unit-va416x0-fram TESTS+=unit-flash-write-cc26x2 TESTS+=unit-p1021-fcm-bytes TESTS+=unit-ls1028a-xspi-write TESTS+=unit-zynq-erase-loop TESTS+=unit-zynq-ext-write TESTS+=unit-versal-qspi-dma TESTS+=unit-versal-ext-write TESTS+=unit-t10xx-qe-firmware TESTS+=unit-aurix-erased-fill TESTS+=unit-aurix-erased-fill-invert TESTS+=unit-t2080-fman-loader TESTS+=unit-ecc-raw-der TESTS+=unit-stm32g4-write TESTS+=unit-stm32l5-write TESTS+=unit-stm32u5-write TESTS+=unit-nvm-cache-scrub TESTS+=unit-sdhci-uhs-recover TESTS+=unit-sdhci-wait-busy TESTS+=unit-ti-hercules-write TESTS+=unit-p1021-qe-firmware TESTS+=unit-t10xx-dts-memac # The x86-64 EFI unit test needs the gnu-efi development headers (same # dependency as the CMake x86_64_efi target). Probe and only add the test # when they are installed, so a default "make" stays portable on hosts # without them. HAVE_GNU_EFI := $(wildcard /usr/include/efi/efi.h) ENABLE_EFI_TESTS ?= $(if $(HAVE_GNU_EFI),1,0) ifeq ($(ENABLE_EFI_TESTS),1) TESTS+=unit-efi-x86-open-image else $(info Skipping x86-64 EFI unit test: gnu-efi headers not found (set ENABLE_EFI_TESTS=1 to force)) endif TESTS+=unit-flash-write-mcxa TESTS+=unit-flash-write-nrf52 TESTS+=unit-flash-write-samr21 TESTS+=unit-flash-write-same51 TESTS+=unit-imx-rt-cache-align TESTS+=unit-xspi-tfd-index TESTS+=unit-pic32-pfswap # linux_loader.c is x86 32-bit only, so its unit tests need a working 32-bit # (multilib) toolchain. Probe whether "gcc -m32" can link, and only add the # tests when it can, so a default "make" stays portable on hosts without 32-bit # support. Set ENABLE_32BIT_TESTS=1 to force them on (e.g. to fail loudly if the # toolchain is unexpectedly missing multilib). HAVE_M32 := $(shell printf 'int main(void){return 0;}' | gcc -m32 -x c - -o /dev/null >/dev/null 2>&1 && echo 1 || echo 0) ENABLE_32BIT_TESTS ?= $(HAVE_M32) ifeq ($(ENABLE_32BIT_TESTS),1) TESTS+=unit-linux-loader-e820 TESTS+=unit-linux-loader-syssize TESTS+=unit-sama5d3-ext-read else $(info Skipping 32-bit x86 unit tests (linux-loader, sama5d3-ext-read): 'gcc -m32' unavailable (set ENABLE_32BIT_TESTS=1 to force)) endif include unit-sign-encrypted-output.mkfrag all: $(TESTS) cov: rm -f unit-sign-encrypted-output-* gcovr -f "^\.\.\/\.\.\/src.*\.c" -r ../.. --verbose \ --exclude-directories 'tools/keytools$$' \ --gcov-exclude '.*tools/keytools/.*' \ --gcov-exclude '.*unit-sign-encrypted-output-.*' \ --merge-mode-functions merge-use-line-0 \ --html-medium-threshold 60 \ --html-high-threshold 80 \ --html-details coverage.html firefox coverage.html run: $(TESTS) for unit in $(TESTS); do \ WOLFBOOT_SECTOR_SIZE=0x400 ./$$unit || exit 1; \ done python3 unit-sign-delta-tlv.py || exit 1 python3 unit-sign-delta-cert-inv-off.py || exit 1 python3 unit-sign-delta-basehash-cleanup.py || exit 1 python3 unit-sign-custom-tlv-le.py || exit 1 python3 unit-sign-custom-tlv-large.py || exit 1 python3 unit-sign-custom-tlv-pubkey-der.py || exit 1 python3 unit-sign-dts.py || exit 1 WOLFCRYPT_SRC:=$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sp_int.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sp_c64.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/random.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/memory.c unit-aes128:CFLAGS+=-DEXT_ENCRYPTED -DENCRYPT_WITH_AES128 unit-aes256:CFLAGS+=-DEXT_ENCRYPTED -DENCRYPT_WITH_AES256 unit-chacha20:CFLAGS+=-DEXT_ENCRYPTED -DENCRYPT_WITH_CHACHA unit-parser:CFLAGS+=-DNVM_FLASH_WRITEONCE unit-parser-large-header:CFLAGS+=-DNVM_FLASH_WRITEONCE unit-fdt:CFLAGS+=-DWOLFBOOT_FDT unit-nvm:CFLAGS+=-DNVM_FLASH_WRITEONCE -DMOCK_PARTITIONS unit-nvm-flagshome:CFLAGS+=-DNVM_FLASH_WRITEONCE -DMOCK_PARTITIONS -DFLAGS_HOME unit-diagnostics:CFLAGS+=-DMOCK_PARTITIONS unit-diagnostics-256:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_DIAGNOSTICS_RECORD_SIZE=32 unit-enc-nvm:CFLAGS+=-DNVM_FLASH_WRITEONCE -DMOCK_PARTITIONS -DEXT_ENCRYPTED \ -DENCRYPT_WITH_CHACHA -DEXT_FLASH -DHAVE_CHACHA unit-enc-nvm:WOLFCRYPT_SRC+=$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/chacha.c unit-enc-nvm-flagshome:CFLAGS+=-DNVM_FLASH_WRITEONCE -DMOCK_PARTITIONS \ -DEXT_ENCRYPTED -DENCRYPT_WITH_CHACHA -DEXT_FLASH -DHAVE_CHACHA -DFLAGS_HOME unit-enc-nvm-flagshome:WOLFCRYPT_SRC+=$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/chacha.c unit-delta:CFLAGS+=-DNVM_FLASH_WRITEONCE -DMOCK_PARTITIONS -DDELTA_UPDATES -DDELTA_BLOCK_SIZE=512 unit-pkcs11_store:CFLAGS+=-I$(WOLFBOOT_LIB_WOLFPKCS11) -DMOCK_PARTITIONS -DMOCK_KEYVAULT -DSECURE_PKCS11 -DWOLFPKCS11_USER_SETTINGS unit-psa_store:CFLAGS+=-I$(WOLFBOOT_LIB_WOLFPSA) -DMOCK_PARTITIONS -DMOCK_KEYVAULT -DWOLFCRYPT_TZ_PSA unit-update-flash:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT -DPART_SWAP_EXT \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE unit-update-flash-hook:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT -DPART_SWAP_EXT \ -DWOLFBOOT_HOOK_BOOT -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT \ -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE unit-update-flash-delta:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT -DPART_SWAP_EXT \ -DDELTA_UPDATES -DDELTA_BLOCK_SIZE=512 -D__WOLFBOOT \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE unit-update-flash-self-update:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT -DPART_SWAP_EXT \ -DRAM_CODE -DARCH_SIM -DUNIT_TEST_SELF_UPDATE_ONLY \ -DARCH_FLASH_OFFSET=MOCK_ADDRESS_BOOT -DWOLFBOOT_VERSION=7 \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE unit-update-ram:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT \ -DPART_SWAP_EXT -DPART_BOOT_EXT -DWOLFBOOT_DUALBOOT -DNO_XIP \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE # Same RAMBOOT config as unit-update-ram, plus WOLFBOOT_UBOOT_LEGACY to exercise # the uImage ih_load payload relocation in wolfBoot_start(). unit-update-ram-uboot:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT \ -DPART_SWAP_EXT -DPART_BOOT_EXT -DWOLFBOOT_DUALBOOT -DNO_XIP -DWOLFBOOT_UBOOT_LEGACY \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE unit-update-flash-hwswap:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT \ -DPART_SWAP_EXT -DPART_BOOT_EXT -DWOLFBOOT_DUALBOOT -DNO_XIP \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE unit-update-ram-noramboot:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT \ -DPART_SWAP_EXT -DPART_BOOT_EXT -DWOLFBOOT_DUALBOOT -DNO_XIP -DWOLFBOOT_NO_RAMBOOT \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE unit-update-ram-enc:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT \ -DPART_SWAP_EXT -DPART_BOOT_EXT -DWOLFBOOT_DUALBOOT -DNO_XIP -DMMU \ -DEXT_ENCRYPTED -DENCRYPT_WITH_CHACHA -DHAVE_CHACHA \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE # Same source as unit-update-ram-enc, but with a WOLFBOOT_RAMBOOT_MAX_SIZE that # is tighter than the partition cap (NO_PARTITIONS / RAM-load-region flavour), # so the bound check is exercised through its RAMBOOT_MAX_SIZE branch. unit-update-ram-enc-nopart:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT \ -DPART_SWAP_EXT -DPART_BOOT_EXT -DWOLFBOOT_DUALBOOT -DNO_XIP -DMMU \ -DEXT_ENCRYPTED -DENCRYPT_WITH_CHACHA -DHAVE_CHACHA \ -DWOLFBOOT_NO_PARTITIONS -DWOLFBOOT_RAMBOOT_MAX_SIZE=0x1000 \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE unit-update-ram-nofixed:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN \ -DUNIT_TEST_AUTH -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH \ -DPART_UPDATE_EXT -DPART_SWAP_EXT -DPART_BOOT_EXT -DWOLFBOOT_DUALBOOT \ -DNO_XIP -DWOLFBOOT_NO_PARTITIONS -DUNIT_TEST_NO_FIXED_PARTITIONS \ -DWOLFBOOT_RAMBOOT_MAX_SIZE=WOLFBOOT_PARTITION_SIZE \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT \ -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE # Bound the non-FSP disk load to this test's 64-byte load_buffer (TEST_PAYLOAD_SIZE), # the cap update_disk.c now requires; all images here are exactly that size. unit-update-disk:CFLAGS+=-DMOCK_PARTITIONS -DPRINTF_ENABLED -DWOLFBOOT_RAMBOOT_MAX_SIZE=0x40 \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE # Non-FSP disk-boot OOB regression (CRIT-03). WOLFBOOT_RAMBOOT_MAX_SIZE is the # cap the loader applies to the unauthenticated header fw_size before loading to # RAM, the same bound update_disk.c and update_ram.c enforce. unit-update-disk-oob:CFLAGS+=-DMOCK_PARTITIONS -DPRINTF_ENABLED \ -DWOLFBOOT_RAMBOOT_MAX_SIZE=0x1000 \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE # FIT (flattened uImage tree) exits of the encrypted disk loader. The panic hook # is what lets the test observe the key material at the instant wolfBoot_panic() # is entered, since on target that call never returns. unit-update-disk-fit:CFLAGS+=-DMOCK_PARTITIONS -DPRINTF_ENABLED -DWOLFBOOT_FDT \ -DWOLFBOOT_HOOK_PANIC -DWOLFBOOT_RAMBOOT_MAX_SIZE=0x40 \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE # Regression coverage for wolfBoot_check_flash_image_elf() (scattered-ELF # integrity check). WOLFBOOT_NO_SIGN keeps this to the hashing path only (no # signature verification is exercised by that function). unit-image-elf-scatter:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DWOLFBOOT_ELF_FLASH_SCATTER -DWOLFBOOT_ELF \ -DIMAGE_HEADER_SIZE=256 unit-string:CFLAGS+=-fno-builtin WOLFCRYPT_CFLAGS+=-DWOLFBOOT_SIGN_ECC256 -DWOLFBOOT_SIGN_ECC256 -DHAVE_ECC_KEY_IMPORT -D__WOLFBOOT ../../include/target.h: FORCE cp -f target.h $@ unit-extflash.o: FORCE rm -f $@ gcc -c -o $@ unit-extflash.c $(CFLAGS) unit-parser: ../../include/target.h unit-parser.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) unit-parser-large-header: ../../include/target.h unit-parser-large-header.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) unit-fdt: ../../include/target.h unit-fdt.c ../../src/fdt.c gcc -o $@ $^ $(CFLAGS) -ffunction-sections -fdata-sections $(LDFLAGS) \ -Wl,--gc-sections unit-extflash: ../../include/target.h unit-extflash.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) unit-spi-flash: ../../include/target.h unit-spi-flash.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) unit-qspi-flash: ../../include/target.h unit-qspi-flash.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) unit-uart-flash: ../../include/target.h unit-uart-flash.c ../../src/uart_flash.c gcc -o $@ unit-uart-flash.c $(CFLAGS) $(LDFLAGS) unit-tpm-rsa-exp: ../../include/target.h unit-tpm-rsa-exp.c ../../src/string.c gcc -o $@ $^ $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) -DWOLFBOOT_TPM \ -DWOLFTPM_USER_SETTINGS -DWOLFBOOT_TPM_VERIFY -DWOLFBOOT_SIGN_RSA2048 \ -DWOLFBOOT_HASH_SHA256 \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-tpm-check-rot-auth: ../../include/target.h unit-tpm-check-rot-auth.c ../../src/string.c gcc -o $@ $^ $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) -DWOLFBOOT_TPM \ -DWOLFTPM_USER_SETTINGS -DWOLFBOOT_TPM_VERIFY -DWOLFBOOT_SIGN_RSA2048 \ -DWOLFBOOT_HASH_SHA256 \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-tpm-api-names: ../../include/target.h unit-tpm-api-names.c ../../src/string.c gcc -o $@ $^ $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) -DWOLFBOOT_TPM \ -DWOLFTPM_USER_SETTINGS -DWOLFBOOT_SIGN_RSA2048 \ -DWOLFBOOT_HASH_SHA256 \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-tpm-nsc-cert: ../../include/target.h unit-tpm-nsc-cert.c ../../src/string.c gcc -o $@ $^ $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) -DWOLFBOOT_TPM \ -DWOLFTPM_USER_SETTINGS -DWOLFBOOT_SIGN_RSA2048 \ -DWOLFBOOT_HASH_SHA256 -D__ARM_FEATURE_CMSE=3U -DCSME_NSE_API= \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections # The PKCS#11 NSC veneers are exercised here through C_CreateObject_nsc_call # and C_DeriveKey_nsc_call only; --gc-sections drops the remaining veneers so # just those two wolfPKCS11 entry points need a stub. unit-pkcs11-nsc-zeroize: ../../include/target.h unit-pkcs11-nsc-zeroize.c gcc -o $@ unit-pkcs11-nsc-zeroize.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/memory.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/misc.c \ $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFPKCS11) -DSECURE_PKCS11 \ -DWOLFPKCS11_USER_SETTINGS -DWOLFCRYPT_SECURE_MODE \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-fwtpm-stub: ../../include/target.h unit-fwtpm-stub.c gcc -o $@ $^ $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) \ -DWOLFTPM_USER_SETTINGS -ffunction-sections -fdata-sections \ $(LDFLAGS) -Wl,--gc-sections unit-fwtpm-nv-oob: ../../include/target.h unit-fwtpm-nv-oob.c gcc -o $@ $^ $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) \ -DWOLFTPM_USER_SETTINGS $(LDFLAGS) unit-tpm-blob: ../../include/target.h unit-tpm-blob.c gcc -o $@ $^ $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) -DWOLFBOOT_TPM \ -DWOLFTPM_USER_SETTINGS -DWOLFBOOT_TPM_SEAL -DWOLFBOOT_SIGN_RSA2048 \ -DWOLFBOOT_HASH_SHA256 \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-tpm-advio-zeroize: ../../include/target.h unit-tpm-advio-zeroize.c gcc -o $@ $^ $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) -DWOLFBOOT_TPM \ -DWOLFTPM_USER_SETTINGS -DWOLFTPM_ADV_IO \ -DWOLFTPM_CHECK_WAIT_STATE -DWOLFBOOT_SIGN_RSA2048 \ -DWOLFBOOT_HASH_SHA256 \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-tpm-mfgid-eh-zeroize: ../../include/target.h unit-tpm-mfgid-eh-zeroize.c gcc -o $@ $^ $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) -DWOLFBOOT_TPM \ -DWOLFTPM_USER_SETTINGS -DWOLFTPM_MFG_IDENTITY \ -DWOLFBOOT_TPM_MFG_AUTH_DERIVE -DWOLFBOOT_SIGN_RSA2048 \ -DWOLFBOOT_HASH_SHA256 -D__ARM_FEATURE_CMSE=3U -DCSME_NSE_API= \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-policy-create: ../../include/target.h unit-policy-create.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/memory.c gcc -o $@ $^ -I../tpm $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) -DWOLFBOOT_TPM \ -DWOLFTPM_USER_SETTINGS -DWOLFBOOT_SIGN_ECC256 -DWOLFBOOT_HASH_SHA256 \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-policy-sign: ../../include/target.h unit-policy-sign.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/memory.c gcc -o $@ $^ -I../tpm $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) -DWOLFBOOT_TPM \ -DWOLFTPM_USER_SETTINGS -DWOLFBOOT_SIGN_ECC256 -DWOLFBOOT_HASH_SHA256 \ -DHAVE_ECC_KEY_IMPORT \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-sign-encrypted-output: ../../include/target.h unit-sign-encrypted-output.c \ $(KEYTOOLS_SIGN_SRCS) gcc -o $@ $^ -I../keytools $(CFLAGS) -DML_DSA_LEVEL=2 \ -D"LMS_LEVELS=1" -D"LMS_HEIGHT=10" -D"LMS_WINTERNITZ=8" \ -DWOLFBOOT_XMSS_PARAMS=\"XMSS-SHA2_10_256\" \ -ffunction-sections -fdata-sections \ $(LDFLAGS) -Wl,--gc-sections unit-sign-hybrid-keyload: ../../include/target.h unit-sign-hybrid-keyload.c \ $(KEYTOOLS_SIGN_SRCS) gcc -o $@ $^ -I../keytools $(CFLAGS) -DML_DSA_LEVEL=2 -DDELTA_UPDATES \ -D"LMS_LEVELS=1" -D"LMS_HEIGHT=10" -D"LMS_WINTERNITZ=8" \ -DWOLFBOOT_XMSS_PARAMS=\"XMSS-SHA2_10_256\" \ -ffunction-sections -fdata-sections \ $(LDFLAGS) -Wl,--gc-sections unit-sign-header-failure: ../../include/target.h unit-sign-header-failure.c \ $(KEYTOOLS_SIGN_SRCS) gcc -o $@ $^ -I../keytools $(CFLAGS) -DML_DSA_LEVEL=2 -DDELTA_UPDATES \ -D"LMS_LEVELS=1" -D"LMS_HEIGHT=10" -D"LMS_WINTERNITZ=8" \ -DWOLFBOOT_XMSS_PARAMS=\"XMSS-SHA2_10_256\" \ -ffunction-sections -fdata-sections \ $(LDFLAGS) -Wl,--gc-sections unit-keygen-xmss-params: ../../include/target.h unit-keygen-xmss-params.c gcc -o $@ $^ -I../keytools $(CFLAGS) -DML_DSA_LEVEL=2 \ -D"LMS_LEVELS=1" -D"LMS_HEIGHT=10" -D"LMS_WINTERNITZ=8" \ -DWOLFBOOT_XMSS_PARAMS=\"XMSS-SHA2_10_256\" \ -ffunction-sections -fdata-sections \ $(LDFLAGS) -Wl,--gc-sections unit-rot-auth: ../../include/target.h unit-rot-auth.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/memory.c gcc -o $@ $^ -I../tpm $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) -DWOLFBOOT_TPM \ -DWOLFTPM_USER_SETTINGS -DWOLFBOOT_SIGN_ECC256 -DWOLFBOOT_HASH_SHA256 \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-store-sbrk: unit-store-sbrk.c ../../src/store_sbrk.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) unit-string: ../../include/target.h unit-string.c gcc -o $@ $^ $(CFLAGS) -DDEBUG_UART -DPRINTF_ENABLED $(LDFLAGS) unit-arm-tee-psa-ipc: ../../include/target.h unit-arm-tee-psa-ipc.c ../../src/arm_tee_psa_ipc.c gcc -o $@ unit-arm-tee-psa-ipc.c $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFPSA)/wolfpsa \ -ffunction-sections -fdata-sections \ $(LDFLAGS) -Wl,--gc-sections DICE_TOKEN_TEST_CFLAGS=-I$(WOLFBOOT_LIB_WOLFCOSE)/include \ -I$(WOLFBOOT_LIB_WOLFSSL) -DUNIT_TEST_AUTH -DWOLFBOOT_SIGN_ECC256 \ -DWOLFCRYPT_SECURE_MODE -DHAVE_HKDF -DWOLFBOOT_NO_PARTITIONS \ -DWOLFCOSE_LEAN -DWOLFCOSE_ENABLE_EXT_SIGN \ -ffunction-sections -fdata-sections unit-dice-token-size:CFLAGS+=$(DICE_TOKEN_TEST_CFLAGS) unit-dice-token-nosign:CFLAGS+=$(DICE_TOKEN_TEST_CFLAGS) -DWOLFBOOT_NO_SIGN DICE_TOKEN_TEST_SRC=unit-dice-token-size.c \ $(WOLFBOOT_LIB_WOLFCOSE)/src/wolfcose.c \ $(WOLFBOOT_LIB_WOLFCOSE)/src/wolfcose_cbor.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/hash.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/memory.c unit-dice-token-size unit-dice-token-nosign: ../../include/target.h \ $(DICE_TOKEN_TEST_SRC) gcc -o $@ $(DICE_TOKEN_TEST_SRC) $(CFLAGS) $(LDFLAGS) \ -Wl,--gc-sections unit-va416x0-fram: unit-va416x0-fram.c ../../hal/va416x0.c gcc -o $@ unit-va416x0-fram.c $(CFLAGS) $(LDFLAGS) unit-xspi-tfd-index: unit-xspi-tfd-index.c gcc -o $@ unit-xspi-tfd-index.c $(CFLAGS) -I../../hal $(LDFLAGS) unit-pic32-pfswap: unit-pic32-pfswap.c gcc -o $@ unit-pic32-pfswap.c $(CFLAGS) $(LDFLAGS) unit-max-space: ../../include/target.h unit-max-space.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) # unit-mpusize includes src/boot_arm.c directly (guarded to its host-portable # MPU helpers via WOLFBOOT_UNIT_TEST_MPU), so boot_arm.c is not a separate input. unit-mpusize: ../../include/target.h unit-mpusize.c gcc -o $@ unit-mpusize.c $(CFLAGS) $(LDFLAGS) # unit-flash-erase-h7 includes hal/stm32h7.c directly (guarded to hal_flash_erase # via WOLFBOOT_UNIT_TEST_FLASH_ERASE), so stm32h7.c is not a separate input. unit-flash-erase-h7: unit-flash-erase-h7.c ../../hal/stm32h7.c gcc -o $@ unit-flash-erase-h7.c $(CFLAGS) $(LDFLAGS) # unit-flash-erase-wb includes hal/stm32wb.c directly (guarded to hal_flash_erase # via WOLFBOOT_UNIT_TEST_FLASH_ERASE), so stm32wb.c is not a separate input. unit-flash-erase-wb: unit-flash-erase-wb.c ../../hal/stm32wb.c gcc -o $@ unit-flash-erase-wb.c $(CFLAGS) $(LDFLAGS) # unit-flash-erase-l0 includes hal/stm32l0.c directly (guarded to hal_flash_erase # via WOLFBOOT_UNIT_TEST_FLASH_ERASE), so stm32l0.c is not a separate input. unit-flash-erase-l0: unit-flash-erase-l0.c ../../hal/stm32l0.c gcc -o $@ unit-flash-erase-l0.c $(CFLAGS) $(LDFLAGS) # unit-flash-erase-g0 includes hal/stm32g0.c directly (guarded to hal_flash_erase # via WOLFBOOT_UNIT_TEST_FLASH_ERASE), so stm32g0.c is not a separate input. unit-flash-erase-g0: unit-flash-erase-g0.c ../../hal/stm32g0.c gcc -o $@ unit-flash-erase-g0.c $(CFLAGS) $(LDFLAGS) # unit-flash-erase-c0 includes hal/stm32c0.c directly (guarded to hal_flash_erase # via WOLFBOOT_UNIT_TEST_FLASH_ERASE), so stm32c0.c is not a separate input. unit-flash-erase-c0: unit-flash-erase-c0.c ../../hal/stm32c0.c gcc -o $@ unit-flash-erase-c0.c $(CFLAGS) $(LDFLAGS) # unit-flash-erase-u3 includes hal/stm32u3.c directly (guarded to hal_flash_erase # via WOLFBOOT_UNIT_TEST_FLASH_ERASE), so stm32u3.c is not a separate input. # -I../../ so that #include "hal/stm32u3.h" resolves from the repo root. unit-flash-erase-u3: unit-flash-erase-u3.c ../../hal/stm32u3.c ../../hal/stm32u3.h gcc -o $@ unit-flash-erase-u3.c -I../../ $(CFLAGS) $(LDFLAGS) # unit-flash-erase-mcxw includes hal/mcxw.c directly (guarded to hal_flash_erase # via WOLFBOOT_UNIT_TEST_FLASH_ERASE), so mcxw.c is not a separate input and the # (not vendored) NXP MCUXpresso SDK headers are not needed. The erase command # takes a uint32_t flash address as a pointer, which is only a narrowing cast on # the 64-bit host. unit-flash-erase-mcxw: unit-flash-erase-mcxw.c ../../hal/mcxw.c gcc -o $@ unit-flash-erase-mcxw.c -Wno-int-to-pointer-cast \ $(CFLAGS) $(LDFLAGS) # unit-otp-keystore includes src/flash_otp_keystore.c directly (guarded to its # host-portable code via WOLFBOOT_UNIT_TEST_OTP_KEYSTORE), so it is not a # separate input. unit-otp-keystore: unit-otp-keystore.c ../../src/flash_otp_keystore.c gcc -o $@ unit-otp-keystore.c $(CFLAGS) $(LDFLAGS) # unit-otp-keystore-gen-zeroize includes the host tool # tools/keytools/otp/otp-keystore-gen.c directly (via #define main) and # interposes read()/malloc()/free() (dlsym RTLD_NEXT, hence -ldl) to observe # the OTP buffer and UDS stack array at free() time. unit-otp-keystore-gen-zeroize: unit-otp-keystore-gen-zeroize.c \ ../keytools/otp/otp-keystore-gen.c unit-keystore.c gcc -o $@ unit-otp-keystore-gen-zeroize.c unit-keystore.c \ -DFLASH_OTP_KEYSTORE $(CFLAGS) $(LDFLAGS) -ldl unit-update-flash-self-update: ../../include/target.h unit-update-flash.c gcc -o $@ unit-update-flash.c ../../src/image.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c \ $(CFLAGS) $(LDFLAGS) unit-sdhci-response-bits: ../../include/target.h unit-sdhci-response-bits.c gcc -o $@ $^ $(CFLAGS) -ffunction-sections -fdata-sections $(LDFLAGS) \ -Wl,--gc-sections unit-sdhci-disk-unaligned: ../../include/target.h unit-sdhci-disk-unaligned.c gcc -o $@ $^ $(CFLAGS) -ffunction-sections -fdata-sections $(LDFLAGS) \ -Wl,--gc-sections unit-sdhci-dma-error: ../../include/target.h unit-sdhci-dma-error.c gcc -o $@ $^ $(CFLAGS) -ffunction-sections -fdata-sections $(LDFLAGS) \ -Wl,--gc-sections unit-cm4-sdhci: ../../include/target.h unit-cm4-sdhci.c gcc -o $@ $^ $(CFLAGS) -I../.. -ffunction-sections -fdata-sections $(LDFLAGS) \ -Wl,--gc-sections unit-cm4-rauc-slot: ../../include/target.h unit-cm4-rauc-slot.c ../../src/ubootenv.c gcc -o $@ unit-cm4-rauc-slot.c ../../src/ubootenv.c $(CFLAGS) -I../.. \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-ubootenv: unit-ubootenv.c ../../src/ubootenv.c gcc -o $@ $< $(CFLAGS) -I../.. $(LDFLAGS) unit-aes128: ../../include/target.h unit-extflash.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) unit-aes256: ../../include/target.h unit-extflash.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) unit-chacha20: ../../include/target.h unit-extflash.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) unit-pci: unit-pci.c ../../src/pci.c gcc -o $@ $< $(CFLAGS) -DWOLFBOOT_USE_PCI $(LDFLAGS) # linux_loader.c is x86 32bit only and pulls in inline asm guarded on 32bit; # build standalone with -m32 and without coverage (no 32bit gcov/check libs). unit-linux-loader-e820: ../../include/target.h unit-linux-loader-e820.c gcc -m32 -o $@ unit-linux-loader-e820.c -I. -I../../src -I../../include \ -g -DUNIT_TEST -DWOLFBOOT_FSP -DUCODE0_ADDRESS=0 \ -DWOLFBOOT_LOAD_BASE=0x100000 unit-linux-loader-syssize: ../../include/target.h unit-linux-loader-syssize.c gcc -m32 -o $@ unit-linux-loader-syssize.c -I. -I../../src -I../../include \ -g -DUNIT_TEST -DWOLFBOOT_FSP -DUCODE0_ADDRESS=0 \ -DWOLFBOOT_LOAD_BASE=0x100000 unit-boot-x86-fsp: ../../include/target.h unit-boot-x86_fsp.c gcc -o $@ $^ $(CFLAGS) -DWOLFBOOT_LOAD_BASE=0x100000 -DWOLFBOOT_FSP \ -DUCODE0_ADDRESS=0 -ffunction-sections -fdata-sections $(LDFLAGS) \ -Wl,--gc-sections unit-loader-tpm-init: ../../include/target.h unit-loader-tpm-init.c gcc -o $@ $^ $(CFLAGS) -I$(WOLFBOOT_LIB_WOLFTPM) -DWOLFBOOT_LOADER_MAIN -DWOLFBOOT_TPM \ -DWOLFTPM_USER_SETTINGS \ -DWOLFBOOT_HOOK_PANIC -DWOLFBOOT_SIGN_ECC256 \ -DWOLFBOOT_HASH_SHA256 -ffunction-sections -fdata-sections \ $(LDFLAGS) -Wl,--gc-sections unit-mock-state: ../../include/target.h unit-mock-state.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) unit-sectorflags: ../../include/target.h unit-sectorflags.c gcc -o $@ $^ $(CFLAGS) $(LDFLAGS) unit-image: unit-image.c unit-common.c $(WOLFCRYPT_SRC) gcc -o $@ $^ $(CFLAGS) $(WOLFCRYPT_CFLAGS) $(LDFLAGS) unit-image-hybrid: ../../include/target.h unit-image.c unit-common.c $(WOLFCRYPT_SRC) gcc -o $@ unit-image.c unit-common.c $(WOLFCRYPT_SRC) \ $(CFLAGS) $(WOLFCRYPT_CFLAGS) -DUNIT_IMAGE_HYBRID_ONLY \ -DSIGN_HYBRID -DWOLFBOOT_SIGN_SECONDARY_ECC256 \ -DIMAGE_HEADER_SIZE=512 $(LDFLAGS) unit-image-nopart: ../../include/target.h unit-image.c unit-common.c $(WOLFCRYPT_SRC) gcc -o $@ unit-image.c unit-common.c $(WOLFCRYPT_SRC) \ $(CFLAGS) $(WOLFCRYPT_CFLAGS) -DWOLFBOOT_NO_PARTITIONS -DMOCK_PARTITIONS \ -DWOLFBOOT_RAMBOOT_MAX_SIZE=0x1000 $(LDFLAGS) unit-image-sha384: ../../include/target.h unit-image.c unit-common.c gcc -o $@ unit-image.c unit-common.c $(WOLFCRYPT_SRC) \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha512.c \ $(CFLAGS) $(WOLFCRYPT_CFLAGS) -DUNIT_IMAGE_KEYHASH_ONLY \ -DWOLFBOOT_HASH_SHA384 $(LDFLAGS) unit-image-sha3-384: ../../include/target.h unit-image.c unit-common.c gcc -o $@ unit-image.c unit-common.c $(WOLFCRYPT_SRC) \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha3.c \ $(CFLAGS) $(WOLFCRYPT_CFLAGS) -DUNIT_IMAGE_KEYHASH_ONLY \ -DWOLFBOOT_HASH_SHA3_384 $(LDFLAGS) # Exercises the raw-DTB authentication helper wolfBoot_verify_dts_digest() # (Fenrir #7998). WOLFBOOT_FDT compiles the DTS helpers in image.c, which pull # in fdt.c for wolfBoot_get_dts_size(). The sha384/sha3-384 variants cover the # corresponding wolfBoot_hash_buffer() branches used by real MMU targets. unit-image-dts: ../../include/target.h unit-image.c unit-common.c $(WOLFCRYPT_SRC) gcc -o $@ unit-image.c unit-common.c $(WOLFCRYPT_SRC) ../../src/fdt.c \ $(CFLAGS) $(WOLFCRYPT_CFLAGS) -DWOLFBOOT_FDT $(LDFLAGS) unit-image-dts-sha384: ../../include/target.h unit-image.c unit-common.c $(WOLFCRYPT_SRC) gcc -o $@ unit-image.c unit-common.c $(WOLFCRYPT_SRC) ../../src/fdt.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha512.c \ $(CFLAGS) $(WOLFCRYPT_CFLAGS) -DWOLFBOOT_FDT -DUNIT_IMAGE_DTS_ONLY \ -DWOLFBOOT_HASH_SHA384 $(LDFLAGS) unit-image-dts-sha3-384: ../../include/target.h unit-image.c unit-common.c $(WOLFCRYPT_SRC) gcc -o $@ unit-image.c unit-common.c $(WOLFCRYPT_SRC) ../../src/fdt.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha3.c \ $(CFLAGS) $(WOLFCRYPT_CFLAGS) -DWOLFBOOT_FDT -DUNIT_IMAGE_DTS_ONLY \ -DWOLFBOOT_HASH_SHA3_384 $(LDFLAGS) unit-image-rsa: CFLAGS += -DWOLFBOOT_SIGN_RSA2048 unit-image-rsa: ../../include/target.h unit-image.c unit-common.c gcc -o $@ unit-image.c unit-common.c $(WOLFCRYPT_SRC) \ $(CFLAGS) -D__WOLFBOOT $(LDFLAGS) unit-nvm: ../../include/target.h unit-nvm.c gcc -o $@ unit-nvm.c $(CFLAGS) $(LDFLAGS) unit-nvm-flagshome: ../../include/target.h unit-nvm.c gcc -o $@ unit-nvm.c $(CFLAGS) $(LDFLAGS) unit-diagnostics: ../../include/target.h unit-diagnostics.c gcc -o $@ unit-diagnostics.c $(CFLAGS) $(LDFLAGS) unit-diagnostics-256: ../../include/target.h unit-diagnostics.c gcc -o $@ unit-diagnostics.c $(CFLAGS) $(LDFLAGS) unit-enc-nvm: ../../include/target.h unit-enc-nvm.c gcc -o $@ $(WOLFCRYPT_SRC) unit-enc-nvm.c $(CFLAGS) $(WOLFCRYPT_CFLAGS) $(LDFLAGS) unit-enc-nvm-flagshome: ../../include/target.h unit-enc-nvm.c gcc -o $@ $(WOLFCRYPT_SRC) unit-enc-nvm.c $(CFLAGS) $(WOLFCRYPT_CFLAGS) $(LDFLAGS) unit-delta: ../../include/target.h unit-delta.c gcc -o $@ unit-delta.c $(CFLAGS) $(LDFLAGS) unit-gzip: ../../include/target.h unit-gzip.c gcc -o $@ unit-gzip.c $(CFLAGS) -DWOLFBOOT_GZIP $(LDFLAGS) # FIT-loader gzip / unsupported-compression branch coverage. Built twice # from the same source: once with WOLFBOOT_GZIP (success + decompress # failure paths) and once without (compile-time fail-closed path). unit-fit-gzip: ../../include/target.h unit-fit-gzip.c gcc -o $@ unit-fit-gzip.c $(CFLAGS) -DWOLFBOOT_FDT -DWOLFBOOT_GZIP \ -DWOLFBOOT_NO_PRINTF \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-fit-nogzip: ../../include/target.h unit-fit-gzip.c gcc -o $@ unit-fit-gzip.c $(CFLAGS) -DWOLFBOOT_FDT \ -DWOLFBOOT_NO_PRINTF \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections # FIT fpga-subimage discovery (fit_find_images / fit_get_compatible). unit-fit-fpga: ../../include/target.h unit-fit-fpga.c gcc -o $@ unit-fit-fpga.c $(CFLAGS) -DWOLFBOOT_FDT \ -DWOLFBOOT_NO_PRINTF \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-update-flash: ../../include/target.h unit-update-flash.c gcc -o $@ unit-update-flash.c ../../src/image.c $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c $(CFLAGS) $(LDFLAGS) unit-update-flash-hook: ../../include/target.h unit-update-flash.c gcc -o $@ unit-update-flash.c ../../src/image.c $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c $(CFLAGS) $(LDFLAGS) unit-update-flash-delta: ../../include/target.h unit-update-flash.c gcc -o $@ unit-update-flash.c ../../src/image.c ../../src/delta.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c $(CFLAGS) $(LDFLAGS) unit-update-flash-enc:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT \ -DPART_SWAP_EXT -DEXT_ENCRYPTED -DENCRYPT_WITH_CHACHA -DHAVE_CHACHA \ -DCUSTOM_ENCRYPT_KEY -DUNIT_TEST_FALLBACK_ONLY \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE unit-update-flash-enc: ../../include/target.h unit-update-flash.c gcc -o $@ unit-update-flash.c ../../src/image.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/chacha.c \ $(CFLAGS) $(LDFLAGS) # Same encrypted target without UNIT_TEST_FALLBACK_ONLY, so the full # end-to-end suite (forward updates, rollback, ...) runs against the # encrypted swap and its IV derivation. unit-update-flash-enc-full:CFLAGS+=-DMOCK_PARTITIONS -DWOLFBOOT_NO_SIGN -DUNIT_TEST_AUTH \ -DWOLFBOOT_HASH_SHA256 -DPRINTF_ENABLED -DEXT_FLASH -DPART_UPDATE_EXT \ -DPART_SWAP_EXT -DEXT_ENCRYPTED -DENCRYPT_WITH_CHACHA -DHAVE_CHACHA \ -DCUSTOM_ENCRYPT_KEY \ -DWOLFBOOT_ORIGIN=MOCK_ADDRESS_BOOT -DBOOTLOADER_PARTITION_SIZE=WOLFBOOT_PARTITION_SIZE unit-update-flash-enc-full: ../../include/target.h unit-update-flash.c gcc -o $@ unit-update-flash.c ../../src/image.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/chacha.c \ $(CFLAGS) $(LDFLAGS) unit-update-ram: ../../include/target.h unit-update-ram.c gcc -o $@ unit-update-ram.c ../../src/image.c $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c $(CFLAGS) $(LDFLAGS) unit-update-ram-uboot: ../../include/target.h unit-update-ram-uboot.c gcc -o $@ unit-update-ram-uboot.c ../../src/image.c ../../src/gpt.c $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c $(CFLAGS) $(LDFLAGS) unit-update-ram-enc: ../../include/target.h unit-update-ram-enc.c gcc -o $@ unit-update-ram-enc.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/chacha.c \ $(CFLAGS) $(LDFLAGS) unit-update-ram-enc-nopart: ../../include/target.h unit-update-ram-enc.c gcc -o $@ unit-update-ram-enc.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/chacha.c \ $(CFLAGS) $(LDFLAGS) unit-update-ram-nofixed: ../../include/target.h unit-update-ram-nofixed.c gcc -o $@ unit-update-ram-nofixed.c ../../src/image.c $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c $(CFLAGS) $(LDFLAGS) unit-update-ram-noramboot: ../../include/target.h unit-update-ram-noramboot.c gcc -o $@ unit-update-ram-noramboot.c ../../src/image.c $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c $(CFLAGS) $(LDFLAGS) unit-update-flash-hwswap: ../../include/target.h unit-update-flash-hwswap.c gcc -o $@ unit-update-flash-hwswap.c ../../src/image.c $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c $(CFLAGS) $(LDFLAGS) unit-update-disk: ../../include/target.h unit-update-disk.c gcc -o $@ unit-update-disk.c $(CFLAGS) $(LDFLAGS) unit-update-disk-oob: ../../include/target.h unit-update-disk-oob.c gcc -o $@ unit-update-disk-oob.c $(CFLAGS) $(LDFLAGS) unit-update-disk-fit: ../../include/target.h unit-update-disk-fit.c gcc -o $@ unit-update-disk-fit.c $(CFLAGS) $(LDFLAGS) unit-pkcs11_store: ../../include/target.h unit-pkcs11_store.c gcc -o $@ $(WOLFCRYPT_SRC) unit-pkcs11_store.c $(CFLAGS) $(WOLFCRYPT_CFLAGS) $(LDFLAGS) unit-psa_store: ../../include/target.h unit-psa_store.c gcc -o $@ $(WOLFCRYPT_SRC) unit-psa_store.c $(CFLAGS) $(WOLFCRYPT_CFLAGS) $(LDFLAGS) unit-wolfhsm_flash_hal:CFLAGS+=-I$(WOLFBOOT_LIB_WOLFHSM) -DWOLFCRYPT_TZ_WOLFHSM -DWOLFHSM_CFG_NO_SYS_TIME -DMOCK_PARTITIONS unit-wolfhsm_flash_hal:WOLFCRYPT_SRC:=$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/memory.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/misc.c unit-wolfhsm_flash_hal: ../../include/target.h unit-wolfhsm_flash_hal.c gcc -o $@ $(WOLFCRYPT_SRC) unit-wolfhsm_flash_hal.c $(CFLAGS) $(WOLFCRYPT_CFLAGS) $(LDFLAGS) gpt-sfdisk-test.h: truncate -s 131072 .gpt-tmp.img printf 'label: gpt\nfirst-lba: 34\nstart=34, size=67, name="boot"\nstart=101, size=100, name="rootfs"\n' \ | sfdisk --no-reread --no-tell-kernel .gpt-tmp.img >/dev/null 2>&1 dd if=.gpt-tmp.img bs=512 count=3 of=gpt_sfdisk_data 2>/dev/null (echo '/* Generated — do not edit. Regenerate: make gpt-sfdisk-test.h */'; \ xxd -i gpt_sfdisk_data | sed 's/^unsigned/static const unsigned/') > $@ rm -f .gpt-tmp.img gpt_sfdisk_data unit-disk: unit-disk.c gpt-sfdisk-test.h gcc -o $@ $< $(CFLAGS) $(LDFLAGS) unit-multiboot: unit-multiboot.c gcc -o $@ unit-multiboot.c $(CFLAGS) $(LDFLAGS) unit-x86-paging-oob: ../../include/target.h unit-x86-paging-oob.c gcc -o $@ unit-x86-paging-oob.c $(CFLAGS) \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-ahci-unlock-panic: ../../include/target.h unit-ahci-unlock-panic.c gcc -o $@ unit-ahci-unlock-panic.c $(CFLAGS) \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections unit-ata-security-passphrase-zeroize: ../../include/target.h unit-ata-security-passphrase-zeroize.c gcc -o $@ unit-ata-security-passphrase-zeroize.c $(CFLAGS) \ -ffunction-sections -fdata-sections $(LDFLAGS) -Wl,--gc-sections # unit-flash-write-cc26x2 includes hal/cc26x2.c directly, with cc26x2_ti_stub/ # standing in for the (not vendored) TI CC26x2 SDK headers it includes. This # is also the only build coverage hal/cc26x2.c has. unit-flash-write-cc26x2: ../../include/target.h unit-flash-write-cc26x2.c ../../hal/cc26x2.c gcc -o $@ unit-flash-write-cc26x2.c -Icc26x2_ti_stub $(CFLAGS) $(LDFLAGS) # unit-p1021-fcm-bytes drives the real FCM byte-copy helpers from # hal/nxp_p1021.c (PowerPC). The P1021 FCM helpers are plain memory # copies, so the HAL is compiled on the host: the PowerPC-asm accessors # from nxp_ppc.h are shadowed inside the test, and nxp_p1021_host.c # (generated below) is identical to hal/nxp_p1021.c except that the three # bare __asm__ cache-barrier statements (DDR init / multi-core boot) are # blanked out, as they cannot assemble on x86. nxp_p1021_host.c: ../../hal/nxp_p1021.c sed -e 's/^[[:space:]]*__asm__[[:space:]]*__volatile__("[^"]*");[[:space:]]*$$//' $< > $@ unit-p1021-fcm-bytes: unit-p1021-fcm-bytes.c nxp_p1021_host.c gcc -o $@ unit-p1021-fcm-bytes.c -DTARGET_nxp_p1021 -I../../hal $(CFLAGS) $(LDFLAGS) # unit-ls1028a-xspi-write drives the real XSPI write/erase path from # hal/nxp_ls1028a.c. The driver is plain C register access apart from a # few bare `asm volatile("...")` barrier statements (DDR init, delay), so # nxp_ls1028a_host.c (generated below) is identical to the HAL file # except those statements are blanked out: they cannot assemble on x86. # The test rebases XSPI_BASE onto host memory and emulates the FlexSPI # controller (including the NOR write-enable latch) at the # XSPI_IPCMD_START() boundary. nxp_ls1028a_host.c: ../../hal/nxp_ls1028a.c sed -e 's/^[[:space:]]*asm volatile("[^"]*");[[:space:]]*$$//' \ -e 's/\*(volatile uint32_t \*)(addr) = val;/xspi_emu_tfd_write(addr, val);/' \ $< > $@ unit-ls1028a-xspi-write: unit-ls1028a-xspi-write.c nxp_ls1028a_host.c gcc -o $@ unit-ls1028a-xspi-write.c -DTARGET_nxp_ls1028a -I../../hal $(CFLAGS) $(LDFLAGS) # unit-zynq-erase-loop runs the real ext_flash_erase() from hal/zynq.c # against emulated qspi_* functions. zynq.c needs the Xilinx SDK headers # (board build tree) and cannot be compiled on the host, but the bug # under test is entirely in this one function, so it is extracted # verbatim by sed into zynq_erase_extract.h. zynq_erase_extract.h: ../../hal/zynq.c sed -n '/^int RAMFUNCTION ext_flash_erase(/,/^}/p' $< > $@ unit-zynq-erase-loop: unit-zynq-erase-loop.c zynq_erase_extract.h gcc -o $@ unit-zynq-erase-loop.c $(CFLAGS) $(LDFLAGS) # unit-zynq-ext-write runs the real ext_flash_write() from hal/zynq.c # (page chunks crossed physical NOR page boundaries and the # wrap clobbered the page start). Same extraction approach as the # erase test; the emulated NOR models the wrap. zynq_write_extract.h: ../../hal/zynq.c sed -n '/^int RAMFUNCTION ext_flash_write(/,/^}/p' $< > $@ unit-zynq-ext-write: unit-zynq-ext-write.c zynq_write_extract.h gcc -o $@ unit-zynq-ext-write.c $(CFLAGS) $(LDFLAGS) # unit-sama5d3-ext-read runs the real ext_flash_read() from hal/sama5d3.c # (the intra-page offset of the start address was never applied, sub-page # reads were copied in 32-bit words, and a multi-page read ending # mid-page wrote a full page past the caller's buffer). The function and # the nand_flash geometry struct are extracted verbatim; the test provides # host div_u()/mod() and emulated nand_read_page()/nand_check_bad_block() # backed by a byte array. sama5d3_read_extract.h: ../../hal/sama5d3.c sed -n '/^struct nand_flash {/,/^} nand_flash = { 0 };/p' $< > $@ sed -n '/^int ext_flash_read(/,/^}/p' $< >> $@ unit-sama5d3-ext-read: unit-sama5d3-ext-read.c sama5d3_read_extract.h gcc -o $@ unit-sama5d3-ext-read.c $(CFLAGS) $(LDFLAGS) # unit-versal-qspi-dma drives the real DMA RX path of qspi_transfer() in # hal/versal.c (an unaligned read larger than the 4096-byte # temp buffer copied the full requested length out of the buffer). The # generated host copies differ from the real files only in: # - ARM asm statements blanked (cannot assemble on x86; the cache # maintenance helpers become no-ops, which is harmless because the # test emulates the DMA); # - VERSAL_QSPI_BASE rebased onto host memory (register offsets kept); # - the real qspi_dma_wait() renamed to qspi_dma_wait_hw() so the test # can provide a qspi_dma_wait() that performs the DMA move; # The test is built with -DTARGET_versal -DEXT_FLASH -DARCH_AARCH64 # -DARCH_64BIT (the file is guarded by TARGET_versal, the QSPI section by # EXT_FLASH, and the architecture check / hal.h prototypes by the ARCH # defines). # Only operand-less asm (barriers) may be deleted outright. An asm with # an output operand must be replaced by an assignment, or the generated # copy reads an uninitialised automatic -- undefined behaviour, and at # -O0 a guaranteed infinite loop in the timer helpers. versal_host.h: ../../hal/versal.h sed -E -e 's/0xF1030000UL/((uintptr_t)g_vqspi_regs)/' \ -e 's/__asm__ volatile\("mrs %0, CurrentEL" : "=r" \(el\)\);/el = 3UL << 2; \/* host stands in at EL3 *\//' \ -e 's/^[[:space:]]*__asm__[[:space:]]+(__)?(volatile__|volatile)\("[^"]*"\);[[:space:]]*//' \ -e 's/^[[:space:]]*__asm__[[:space:]]+(__)?(volatile__|volatile)\("[^"]*"[[:space:]]*:[[:space:]]*:[^;]*\);[[:space:]]*//' $< > $@ test -s $@ @! grep -q '__asm__' $@ || { echo "$@: un-handled asm (an output operand needs an explicit rewrite above)"; grep -n '__asm__' $@; false; } # See versal_host.h above for why the two "mrs" reads are rewritten # rather than deleted. The host counter advances one tick per read at a # nominal 1 MHz, so hal_delay_us() terminates instead of spinning. versal_host.c: ../../hal/versal.c versal_host.h sed -E -e 's|#include "hal/versal.h"|#include "versal_host.h"\nstatic uint64_t versal_host_ticks;|' \ -e 's/__asm__ volatile\("mrs %0, cntpct_el0" : "=r" \(cntpct\)\);/cntpct = ++versal_host_ticks;/' \ -e 's/__asm__ volatile\("mrs %0, cntfrq_el0" : "=r" \(cntfrq\)\);/cntfrq = 1000000ULL;/' \ -e 's/^static int qspi_dma_wait\(void\)$$/static int qspi_dma_wait_hw(void)/' \ -e 's/^[[:space:]]*__asm__[[:space:]]+(__)?(volatile__|volatile)\("[^"]*"\);[[:space:]]*//' \ -e 's/^[[:space:]]*__asm__[[:space:]]+(__)?(volatile__|volatile)\("[^"]*"[[:space:]]*:[[:space:]]*:[^;]*\);[[:space:]]*//' $< > $@ test -s $@ @! grep -q '__asm__' $@ || { echo "$@: un-handled asm (an output operand needs an explicit rewrite above)"; grep -n '__asm__' $@; false; } unit-versal-qspi-dma: unit-versal-qspi-dma.c versal_host.c gcc -o $@ unit-versal-qspi-dma.c -DTARGET_versal -DEXT_FLASH -DARCH_AARCH64 -DARCH_64BIT $(CFLAGS) $(LDFLAGS) # unit-versal-ext-write runs the real ext_flash_write() from # hal/versal.c (page chunks crossed physical NOR page # boundaries and the wrap clobbered the page start). The QspiDev_t # struct and the function are extracted verbatim (the qspi_* helpers # are file-static, so the test provides emulated ones); the emulated # NOR models the wrap. versal_qspidev_extract.h: ../../hal/versal.c sed -n '/^\/\* QSPI device structure \*\//,/^} QspiDev_t;/p' $< > $@ versal_ext_write_extract.h: ../../hal/versal.c sed -n '/^int ext_flash_write(/,/^}/p' $< > $@ unit-versal-ext-write: unit-versal-ext-write.c versal_qspidev_extract.h versal_ext_write_extract.h versal_host.h gcc -o $@ unit-versal-ext-write.c -DEXT_FLASH -DARCH_AARCH64 -DARCH_64BIT $(CFLAGS) $(LDFLAGS) # unit-t10xx-qe-firmware runs the real qe_check_firmware() from # hal/nxp_t10xx.c (the per-microcode code_offset was never # bounded against the declared image, so a self-consistent blob could # make the upload copy arbitrary memory into QE IRAM). The qe_* # structures and the check function are extracted verbatim; the check # path needs no register access. The four qe_* structs end where the # check function's comment begins (a range cannot stop at the 4th # '} QE_PACKED;'). t10xx_qe_firmware_extract.h: ../../hal/nxp_t10xx.c sed -n '/^\/\* Structure packing \*\//,/^\/\* Checks for valid QE firmware \*\//p' $< > $@ sed -n '/^static int qe_check_firmware(/,/^}/p' $< >> $@ unit-t10xx-qe-firmware: unit-t10xx-qe-firmware.c t10xx_qe_firmware_extract.h gcc -o $@ unit-t10xx-qe-firmware.c -DWOLFBOOT_NO_PRINTF $(CFLAGS) $(LDFLAGS) # unit-aurix-erased-fill runs the real cacheSector() and # programBytesToErasedFlash() from hal/aurix_tc3xx.c (the # uint32_t page buffers were filled with the byte-valued # FLASH_BYTE_ERASED, so default-polarity builds got 0x000000FF words # instead of the erased 0xFFFFFFFF). The tc3_flash_* API is emulated # on a host flash array; the same source is built for both flag # polarities and the assertions key off FLASH_BYTE_ERASED. aurix_erased_extract.h: ../../hal/aurix_tc3xx.c sed -n '/^static void RAMFUNCTION cacheSector(uint32_t sectorAddress)/,/^}/p' $< > $@ sed -n '/^static int RAMFUNCTION programBytesToErasedFlash/,/^}/p' $< >> $@ unit-aurix-erased-fill: unit-aurix-erased-fill.c aurix_erased_extract.h gcc -o $@ unit-aurix-erased-fill.c $(CFLAGS) $(LDFLAGS) unit-aurix-erased-fill-invert: unit-aurix-erased-fill.c aurix_erased_extract.h gcc -o $@ unit-aurix-erased-fill.c -DWOLFBOOT_FLAGS_INVERT $(CFLAGS) $(LDFLAGS) # unit-t2080-fman-loader runs the real hal_fman_init() from # hal/nxp_t2080.c (the loader checked only the QEF magic and # then copied attacker-shaped offsets/counts into FMan IRAM). The qe_* # structures and the function are extracted verbatim; the test owns the # NOR image (FMAN slot at a nonzero bank offset so the remaining-extent # check is exercised) and the FMan IRAM registers. The four qe_* # structs end where hal_fman_init() begins (a range cannot stop at # the 4th '} QE_PACKED;'); sed '$d' trims the function signature. t2080_fman_extract.h: ../../hal/nxp_t2080.c sed -n '/^\/\* Reuse QE firmware structures/,/^static int hal_fman_init(/p' $< | sed '$$d' > $@ sed -n '/^static int hal_fman_init(void)/,/^}/p' $< >> $@ unit-t2080-fman-loader: unit-t2080-fman-loader.c t2080_fman_extract.h gcc -o $@ unit-t2080-fman-loader.c $(CFLAGS) $(LDFLAGS) # unit-stm32g4-write runs the real hal_flash_write() from hal/stm32g4.c # (F-11023: the double-word fast path was selected on "len - i > 3" but # consumed eight bytes, so an aligned 4-7 byte tail over-read the # caller's buffer and over-programmed flash). Same harness as the # STM32L5/STM32U5 twins; the g4 helpers are static and un-prefixed. stm32g4_write_extract.h: ../../hal/stm32g4.c sed -n '/^static RAMFUNCTION void flash_wait_complete/,/^}/p' $< > $@ sed -n '/^static void RAMFUNCTION flash_clear_errors/,/^}/p' $< >> $@ sed -n '/^int RAMFUNCTION hal_flash_write/,/^}/p' $< >> $@ unit-stm32g4-write: unit-stm32g4-write.c stm32g4_write_extract.h gcc -o $@ unit-stm32g4-write.c $(CFLAGS) $(LDFLAGS) # unit-ecc-raw-der runs the real wolfCrypt raw-to-DER conversion and # verification (F-11024: the wolfHSM verify path in src/image.c passed # minimal field sizes with field-start pointers to # wc_ecc_rs_raw_to_sig, corrupting signatures with leading zeros). It # links the same wolfSSL sources the sign tool uses. unit-ecc-raw-der: unit-ecc-raw-der.c # WOLFSSL_NO_DER_TO_PEM: the test config's NO_CODING drops base64, which # DER-to-PEM (pulled in by WOLFSSL_KEY_GEN) needs; the test uses no PEM. gcc -o $@ unit-ecc-raw-der.c $(CFLAGS) -DWOLFCRYPT_TEST -DWOLFSSL_NO_DER_TO_PEM \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/aes.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/asn.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/chacha.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/coding.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/ecc.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/ed25519.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/ed448.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/fe_448.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/fe_operations.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/ge_448.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/ge_operations.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/hash.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/logging.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/memory.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/random.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/rsa.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha3.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha512.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sp_c32.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sp_c64.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sp_int.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/tfm.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/wc_port.c \ $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/wolfmath.c $(LDFLAGS) # unit-stm32l5-write runs the real hal_flash_write() from hal/stm32l5.c # (an 8-byte program unit was read whole even when len left a # partial unit, over-reading the caller's buffer and writing the excess # bytes to flash). The function and its wait/clear helpers are # extracted verbatim; FLASH_SR/CR live on a host register file and the # destination flash is a pre-filled host array, so the over-read is # observable through a canary after the source buffer. stm32l5_write_extract.h: ../../hal/stm32l5.c sed -n '/^void RAMFUNCTION hal_flash_wait_complete/,/^}/p' $< > $@ sed -n '/^void RAMFUNCTION hal_flash_clear_errors/,/^}/p' $< >> $@ sed -n '/^int RAMFUNCTION hal_flash_write/,/^}/p' $< >> $@ unit-stm32l5-write: unit-stm32l5-write.c stm32l5_write_extract.h gcc -o $@ unit-stm32l5-write.c $(CFLAGS) $(LDFLAGS) # unit-stm32u5-write is the 16-byte-unit twin of the STM32L5 test: # the real hal_flash_write() and its wait/clear helpers from # hal/stm32u5.c, FLASH_NS_SR/CR on a host register file, destination # flash at a 32-bit host address, canary after the source buffer. stm32u5_write_extract.h: ../../hal/stm32u5.c sed -n '/^void RAMFUNCTION hal_flash_wait_complete/,/^}/p' $< > $@ sed -n '/^void RAMFUNCTION hal_flash_clear_errors/,/^}/p' $< >> $@ sed -n '/^int RAMFUNCTION hal_flash_write/,/^}/p' $< >> $@ unit-stm32u5-write: unit-stm32u5-write.c stm32u5_write_extract.h gcc -o $@ unit-stm32u5-write.c $(CFLAGS) $(LDFLAGS) # unit-nvm-cache-scrub runs the real trailer_write() and # partition_magic_write() from src/libwolfboot.c (under # NVM_FLASH_WRITEONCE the staged sector can hold the firmware # key/nonce, and the buffer was never scrubbed on return). The test # owns NVM_CACHE, stages a key-bearing sector image, and stubs the # flash layer; after each call the whole buffer must be zeroed. nvm_cache_scrub_extract.h: ../../src/libwolfboot.c sed -n '/^static void RAMFUNCTION nvm_cache_scrub(/,/^}/p' $< > $@ sed -n '/^static int RAMFUNCTION trailer_write(/,/^}/p' $< >> $@ sed -n '/^static int RAMFUNCTION partition_magic_write(/,/^}/p' $< >> $@ unit-nvm-cache-scrub: unit-nvm-cache-scrub.c nvm_cache_scrub_extract.h gcc -o $@ unit-nvm-cache-scrub.c $(CFLAGS) $(LDFLAGS) # unit-sdhci-uhs-recover drives disk_read()'s UHS recovery path from the # real src/sdhci.c (any read error permanently switched the host # to 1.8V signaling with no rollback). sdhci_host.c (generated below) is # identical to the real file except the three `asm volatile` statements # are blanked (they cannot assemble on x86) and the real sdhci_read() is # renamed to sdhci_read_hw() so the test can provide a scripted one. The # platform-provided sdhci_reg_read()/sdhci_reg_write() are backed by a # host register array; hal_get_timer_us() and wolfBoot_printf() are # stubbed in the test. sdhci_host.c: ../../src/sdhci.c sed -E -e 's/^[[:space:]]*asm volatile\("[^"]*"[^;]*\);[[:space:]]*//' \ -e 's/^int sdhci_read\(/int sdhci_read_hw(/' \ -e 's/^void __attribute__\(\(weak\)\) sdhci_platform_wdt_pet\(void\)$$/void sdhci_platform_wdt_pet_unused(void)/' $< > $@ unit-sdhci-uhs-recover: unit-sdhci-uhs-recover.c sdhci_host.c gcc -o $@ unit-sdhci-uhs-recover.c -DDISK_SDCARD $(CFLAGS) $(LDFLAGS) # unit-sdhci-wait-busy drives sdhci_wait_busy()'s DATA0/CMD13 loops # from the real src/sdhci.c (neither loop had a timeout, so a # stuck/removed card spun forever). The controller is scripted through # the host register file. SDHCI_WAIT_BUSY_TIMEOUT_MS is deliberately # NOT overridden: the test's timer stub steps 1ms per read so the # shipped default is the value under test. unit-sdhci-wait-busy: unit-sdhci-wait-busy.c sdhci_host.c gcc -o $@ unit-sdhci-wait-busy.c -DDISK_SDCARD -DWOLFBOOT_NO_PRINTF $(CFLAGS) $(LDFLAGS) # unit-ti-hercules-write runs the real hal_flash_write() staging logic # from hal/ti_hercules.c (a short write crossing a block # boundary overran the staging buffer and lost the next block's bytes). # ti_hercules.c needs the TI FAPI vendor headers (board build tree) and # cannot be compiled on the host, but the bug is entirely in this # function, so the Makefile extracts hal_flash_unlock_helper(), the # WRITE_BLOCK_SIZE define, and hal_flash_write() verbatim into # ti_hercules_write_extract.h; the FAPI calls are emulated in the test, # with Fapi_issueProgrammingCommand() performing the program into a host # flash array. ti_hercules_write_extract.h: ../../hal/ti_hercules.c sed -n '/^static inline int RAMFUNCTION hal_flash_unlock_helper/,/^}/p' $< > $@ grep '^#define WRITE_BLOCK_SIZE' $< >> $@ sed -n '/^int RAMFUNCTION hal_flash_write(/,/^}/p' $< >> $@ unit-ti-hercules-write: unit-ti-hercules-write.c ti_hercules_write_extract.h gcc -o $@ unit-ti-hercules-write.c $(CFLAGS) $(LDFLAGS) # unit-p1021-qe-firmware drives the real qe_upload_firmware() from # hal/nxp_p1021.c (microcode offsets/counts were # never bounded to the 64 KiB buffer read from the update partition). # Reuses the nxp_p1021_host.c generated for the FCM tests, with the # PowerPC accessors shadowed the same way. unit-p1021-qe-firmware: unit-p1021-qe-firmware.c nxp_p1021_host.c gcc -o $@ unit-p1021-qe-firmware.c -DTARGET_nxp_p1021 -I../../hal $(CFLAGS) $(LDFLAGS) # unit-t10xx-dts-memac drives the real hal_dts_fixup() FDT memac loop # (unvalidated cell-index into phydevs[5]) with hand-built # DTBs. Extracts the function plus its liodn/qman static tables from # hal/nxp_t10xx.c. nxp_t10xx_fixup_extract.h: ../../hal/nxp_t10xx.c sed -n '/^struct liodn_id_table {/,/^};/p' $< > $@ sed -n '/#define SET_LIODN(/,/reg_offset = (void\*)reg/p' $< >> $@ sed -n '/^static const struct liodn_id_table liodn_tbl\[\] = {/,/^};/p' $< >> $@ sed -n '/^struct qportal_info {/,/^};/p' $< >> $@ sed -n '/#define SET_QP_INFO(/,/sdest = dest/p' $< >> $@ sed -n '/^static const struct qportal_info qp_info\[QMAN_NUM_PORTALS\] = {/,/^};/p' $< >> $@ grep -E '^#define FM1_(DTSEC[0-9]|10GEC1) ' $< >> $@ sed -n '/^int hal_dts_fixup(/,/^}/p' $< >> $@ unit-t10xx-dts-memac: unit-t10xx-dts-memac.c nxp_t10xx_fixup_extract.h ../../src/fdt.c gcc -o $@ unit-t10xx-dts-memac.c $(CFLAGS) $(LDFLAGS) # unit-efi-x86-open-image includes hal/x86_64_efi.c directly, with in-test # host mocks standing in for the gnu-efi runtime (BS, LibFileInfo, the # x86-64 efi_callN() trampolines). This is the only host build coverage # hal/x86_64_efi.c has. # # -fshort-wchar matches the real x86_64_efi build (arch.mk), where the # 16-bit wchar_t is what makes efi_main's L"..." literals valid CHAR16 # strings under gnu-efi 4.x (CHAR16 = uint16_t). unit-efi-x86-open-image: unit-efi-x86-open-image.c ../../hal/x86_64_efi.c gcc -o $@ unit-efi-x86-open-image.c -I/usr/include/efi -I/usr/include/efi/x86_64 -DTARGET_X86_64_EFI -fshort-wchar $(CFLAGS) $(LDFLAGS) # unit-flash-write-mcxa includes hal/mcxa.c directly, with mcxa_fsl_stub/ # standing in for the (not vendored) NXP MCUXpresso SDK headers it includes. unit-flash-write-mcxa: unit-flash-write-mcxa.c ../../hal/mcxa.c gcc -o $@ unit-flash-write-mcxa.c -Imcxa_fsl_stub $(CFLAGS) $(LDFLAGS) unit-flash-write-nrf52: unit-flash-write-nrf52.c ../../hal/nrf52.c gcc -o $@ unit-flash-write-nrf52.c -DTARGET_nrf52 -I../../hal $(CFLAGS) $(LDFLAGS) unit-flash-write-samr21: unit-flash-write-samr21.c ../../hal/samr21.c gcc -o $@ unit-flash-write-samr21.c $(CFLAGS) $(LDFLAGS) unit-flash-write-same51: unit-flash-write-same51.c ../../hal/same51.c gcc -o $@ unit-flash-write-same51.c $(CFLAGS) $(LDFLAGS) # unit-imx-rt-cache-align only pulls in hal/imx_rt.h, which is dependency-free # by design, avoiding the (not vendored) NXP MCUXpresso SDK headers that # hal/imx_rt.c itself requires. unit-imx-rt-cache-align: unit-imx-rt-cache-align.c ../../hal/imx_rt.h gcc -o $@ unit-imx-rt-cache-align.c $(CFLAGS) $(LDFLAGS) unit-elf-bss-guard: unit-elf-bss-guard.c gcc -o $@ $< -I../../include -DWOLFBOOT_ELF -DARCH_FLASH_OFFSET=0 \ -DWOLFBOOT_NO_PRINTF -g $(LDFLAGS) unit-elf-entry-inplace: unit-elf-entry-inplace.c gcc -o $@ $< -I../../include -DWOLFBOOT_ELF -DARCH_FLASH_OFFSET=0 \ -DWOLFBOOT_NO_PRINTF -g $(LDFLAGS) # unit-elf-mmu-fail: a failing mmu_cb must abort the whole ELF load # (F-11027: the failed mapping used to be skipped with continue, and # the entry point was published for a partially loaded image). unit-elf-mmu-fail: unit-elf-mmu-fail.c ../../src/elf.c gcc -o $@ unit-elf-mmu-fail.c -I../../include -DWOLFBOOT_ELF \ -DARCH_FLASH_OFFSET=0 -DWOLFBOOT_NO_PRINTF -g $(LDFLAGS) unit-image-elf-scatter: ../../include/target.h unit-image-elf-scatter.c gcc -o $@ unit-image-elf-scatter.c $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.c \ $(CFLAGS) $(LDFLAGS) %.o:%.c gcc -c -o $@ $^ $(CFLAGS) covclean: rm -f *.gcov *.gcno *.gcda coverage.* rm -f unit-sign-encrypted-output-* # Sources the extraction rules generate into this directory. Listed here # so "clean" removes them and so there is one place that names them. GENERATED_SRC:=aurix_erased_extract.h nvm_cache_scrub_extract.h \ nxp_ls1028a_host.c nxp_p1021_host.c nxp_t10xx_fixup_extract.h \ sdhci_host.c stm32g4_write_extract.h stm32l5_write_extract.h \ stm32u5_write_extract.h \ t10xx_qe_firmware_extract.h t2080_fman_extract.h \ ti_hercules_write_extract.h versal_ext_write_extract.h versal_host.c \ versal_host.h versal_qspidev_extract.h zynq_erase_extract.h \ zynq_write_extract.h # Tests that are only in $(TESTS) when their toolchain/headers are # present; clean must remove them regardless, or a host that has since # lost gnu-efi/multilib keeps a stale binary forever. CONDITIONAL_TESTS:=unit-efi-x86-open-image unit-linux-loader-e820 \ unit-linux-loader-syssize clean: covclean rm -f $(TESTS) $(CONDITIONAL_TESTS) $(GENERATED_SRC) *.o *.gcno *.gcda \ coverage.* # The extraction rules below build one header with several appending # commands. Without this, a failure partway through leaves a truncated # file with a fresh mtime that the next make treats as up to date. .DELETE_ON_ERROR: .PHONY: FORCE