// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chromeos/ash/components/dbus/device_management/install_attributes_client.h"
#include <optional>
#include <string>
#include <utility>
#include "base/logging.h"
#include "base/memory/raw_ptr.h"
#include "base/memory/ref_counted.h"
#include "base/task/single_thread_task_runner.h"
#include "base/test/protobuf_matchers.h"
#include "base/test/task_environment.h"
#include "dbus/mock_bus.h"
#include "dbus/mock_object_proxy.h"
#include "dbus/object_path.h"
#include "testing/gmock/include/gmock/gmock.h"
#include "testing/gtest/include/gtest/gtest.h"
#include "third_party/cros_system_api/dbus/device_management/dbus-constants.h"
using ::base::test::EqualsProto;
using ::testing::_;
using ::testing::Invoke;
using ::testing::Return;
using ::testing::SaveArg;
namespace ash {
namespace {
// Runs `callback` with `response`. Needed due to ResponseCallback expecting a
// bare pointer rather than an std::unique_ptr.
void RunResponseCallback(dbus::ObjectProxy::ResponseCallback callback,
std::unique_ptr<dbus::Response> response) {
std::move(callback).Run(response.get());
}
// FakeTaskRunner will run all tasks posted to it immediately in the PostTask()
// call. This class is a helper to ensure that BlockingMethodCaller would work
// correctly in the unit test. Note that Mock is not used because
// SingleThreadTaskRunner is refcounted and it doesn't play well with Mock.
class FakeTaskRunner : public base::SingleThreadTaskRunner {
public:
// Yes, this task runner runs everything in sequence.
bool RunsTasksInCurrentSequence() const override { return true; }
// Run all tasks immediately, no delay is allowed.
bool PostDelayedTask(const base::Location& location,
base::OnceClosure closure,
base::TimeDelta delta) override {
// Since we are running it now, we can't accept any delay.
CHECK(delta.is_zero());
std::move(closure).Run();
return true;
}
// Non nestable task not supported.
bool PostNonNestableDelayedTask(const base::Location& location,
base::OnceClosure closure,
base::TimeDelta delta) override {
// Can't run non-nested stuff.
NOTIMPLEMENTED();
return false;
}
private:
// For reference counting.
~FakeTaskRunner() override = default;
};
// Create a callback that would copy the input argument passed to it into `out`.
// This is used mostly to create a callback that would catch the reply from
// dbus.
template <typename T>
base::OnceCallback<void(T)> CreateCopyCallback(T* out) {
return base::BindOnce([](T* out, T result) { *out = result; }, out);
}
} // namespace
class InstallAttributesClientTest : public testing::Test {
public:
InstallAttributesClientTest() = default;
~InstallAttributesClientTest() override = default;
void SetUp() override {
dbus::Bus::Options options;
options.bus_type = dbus::Bus::SYSTEM;
bus_ = base::MakeRefCounted<dbus::MockBus>(options);
dbus::ObjectPath object_path =
dbus::ObjectPath(::device_management::kDeviceManagementServicePath);
proxy_ = base::MakeRefCounted<dbus::MockObjectProxy>(
bus_.get(), ::device_management::kDeviceManagementServiceName,
object_path);
// Makes sure `GetObjectProxy()` is called with the correct service name and
// path.
EXPECT_CALL(
*bus_.get(),
GetObjectProxy(::device_management::kDeviceManagementServiceName,
object_path))
.WillRepeatedly(Return(proxy_.get()));
EXPECT_CALL(*proxy_.get(), DoCallMethod(_, _, _))
.WillRepeatedly(
Invoke(this, &InstallAttributesClientTest::OnCallMethod));
EXPECT_CALL(*proxy_.get(), CallMethodAndBlock(_, _))
.WillRepeatedly(
Invoke(this, &InstallAttributesClientTest::OnBlockingCallMethod));
InstallAttributesClient::Initialize(bus_.get());
// Execute callbacks posted by `client_->Init()`.
base::RunLoop().RunUntilIdle();
client_ = InstallAttributesClient::Get();
}
void TearDown() override { InstallAttributesClient::Shutdown(); }
protected:
base::test::SingleThreadTaskEnvironment task_environment_;
// Mock bus and proxy for simulating calls.
scoped_refptr<dbus::MockBus> bus_;
scoped_refptr<dbus::MockObjectProxy> proxy_;
// Convenience pointer to the global instance.
raw_ptr<InstallAttributesClient, DanglingUntriaged> client_;
// The expected replies to the respective D-Bus calls.
::device_management::InstallAttributesGetReply
expected_install_attributes_get_reply_;
::device_management::InstallAttributesSetReply
expected_install_attributes_set_reply_;
::device_management::InstallAttributesFinalizeReply
expected_install_attributes_finalize_reply_;
::device_management::InstallAttributesGetStatusReply
expected_install_attributes_get_status_reply_;
::device_management::RemoveFirmwareManagementParametersReply
expected_remove_firmware_management_parameters_reply_;
::device_management::SetFirmwareManagementParametersReply
expected_set_firmware_management_parameters_reply_;
::device_management::GetFirmwareManagementParametersReply
expected_get_firmware_management_parameters_reply_;
// The expected replies to the respective blocking D-Bus calls.
::device_management::InstallAttributesGetReply
expected_blocking_install_attributes_get_reply_;
::device_management::InstallAttributesSetReply
expected_blocking_install_attributes_set_reply_;
::device_management::InstallAttributesFinalizeReply
expected_blocking_install_attributes_finalize_reply_;
::device_management::InstallAttributesGetStatusReply
expected_blocking_install_attributes_get_status_reply_;
// When it is set `true`, an invalid array of bytes that cannot be parsed will
// be the response.
bool shall_message_parsing_fail_ = false;
private:
// Handles calls to `proxy_`'s `CallMethod()`.
void OnCallMethod(dbus::MethodCall* method_call,
int timeout_ms,
dbus::ObjectProxy::ResponseCallback* callback) {
std::unique_ptr<dbus::Response> response(dbus::Response::CreateEmpty());
dbus::MessageWriter writer(response.get());
if (shall_message_parsing_fail_) {
// 0x02 => Field 0, Type String
// (0xFF)*6 => Varint, the size of the string, it is not terminated and is
// a very large value so the parsing will fail.
constexpr uint8_t kInvalidProtobuf[] = {0x02, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF};
writer.AppendArrayOfBytes(kInvalidProtobuf);
} else if (method_call->GetMember() ==
::device_management::kInstallAttributesGet) {
writer.AppendProtoAsArrayOfBytes(expected_install_attributes_get_reply_);
} else if (method_call->GetMember() ==
::device_management::kInstallAttributesFinalize) {
writer.AppendProtoAsArrayOfBytes(
expected_install_attributes_finalize_reply_);
} else if (method_call->GetMember() ==
::device_management::kInstallAttributesGetStatus) {
writer.AppendProtoAsArrayOfBytes(
expected_install_attributes_get_status_reply_);
} else if (method_call->GetMember() ==
::device_management::kRemoveFirmwareManagementParameters) {
writer.AppendProtoAsArrayOfBytes(
expected_remove_firmware_management_parameters_reply_);
} else if (method_call->GetMember() ==
::device_management::kSetFirmwareManagementParameters) {
writer.AppendProtoAsArrayOfBytes(
expected_set_firmware_management_parameters_reply_);
} else if (method_call->GetMember() ==
::device_management::kGetFirmwareManagementParameters) {
writer.AppendProtoAsArrayOfBytes(
expected_get_firmware_management_parameters_reply_);
} else {
LOG(FATAL) << "Unrecognized member: " << method_call->GetMember();
}
task_environment_.GetMainThreadTaskRunner()->PostTask(
FROM_HERE, base::BindOnce(RunResponseCallback, std::move(*callback),
std::move(response)));
}
// Handles blocking call to `proxy_`'s `CallMethodAndBlock`.
base::expected<std::unique_ptr<dbus::Response>, dbus::Error>
OnBlockingCallMethod(dbus::MethodCall* method_call, int timeout_ms) {
std::unique_ptr<dbus::Response> response(dbus::Response::CreateEmpty());
dbus::MessageWriter writer(response.get());
if (shall_message_parsing_fail_) {
// 0x02 => Field 0, Type String
// (0xFF)*6 => Varint, the size of the string, it is not terminated and is
// a very large value so the parsing will fail.
constexpr uint8_t kInvalidProtobuf[] = {0x02, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF};
writer.AppendArrayOfBytes(kInvalidProtobuf);
} else if (method_call->GetMember() ==
::device_management::kInstallAttributesGet) {
writer.AppendProtoAsArrayOfBytes(
expected_blocking_install_attributes_get_reply_);
} else if (method_call->GetMember() ==
::device_management::kInstallAttributesSet) {
writer.AppendProtoAsArrayOfBytes(
expected_blocking_install_attributes_set_reply_);
} else if (method_call->GetMember() ==
::device_management::kInstallAttributesFinalize) {
writer.AppendProtoAsArrayOfBytes(
expected_blocking_install_attributes_finalize_reply_);
} else if (method_call->GetMember() ==
::device_management::kInstallAttributesGetStatus) {
writer.AppendProtoAsArrayOfBytes(
expected_blocking_install_attributes_get_status_reply_);
} else {
LOG(FATAL) << "Unrecognized member: " << method_call->GetMember();
}
return base::ok(std::move(response));
}
};
TEST_F(InstallAttributesClientTest, InstallAttributesGet) {
expected_install_attributes_get_reply_.set_error(
device_management::DeviceManagementErrorCode::
DEVICE_MANAGEMENT_ERROR_TPM_DEFEND_LOCK);
std::optional<::device_management::InstallAttributesGetReply> result_reply;
client_->InstallAttributesGet(
::device_management::InstallAttributesGetRequest(),
CreateCopyCallback(&result_reply));
base::RunLoop().RunUntilIdle();
ASSERT_NE(result_reply, std::nullopt);
EXPECT_THAT(result_reply.value(),
EqualsProto(expected_install_attributes_get_reply_));
}
TEST_F(InstallAttributesClientTest, InstallAttributesGetInvalidProtobuf) {
shall_message_parsing_fail_ = true;
std::optional<::device_management::InstallAttributesGetReply> result_reply =
::device_management::InstallAttributesGetReply();
client_->InstallAttributesGet(
::device_management::InstallAttributesGetRequest(),
CreateCopyCallback(&result_reply));
base::RunLoop().RunUntilIdle();
ASSERT_EQ(result_reply, std::nullopt);
}
TEST_F(InstallAttributesClientTest, InstallAttributesFinalize) {
expected_install_attributes_finalize_reply_.set_error(
device_management::DeviceManagementErrorCode::
DEVICE_MANAGEMENT_ERROR_TPM_DEFEND_LOCK);
std::optional<::device_management::InstallAttributesFinalizeReply>
result_reply;
client_->InstallAttributesFinalize(
::device_management::InstallAttributesFinalizeRequest(),
CreateCopyCallback(&result_reply));
base::RunLoop().RunUntilIdle();
ASSERT_NE(result_reply, std::nullopt);
EXPECT_THAT(result_reply.value(),
EqualsProto(expected_install_attributes_finalize_reply_));
}
TEST_F(InstallAttributesClientTest, InstallAttributesGetStatus) {
expected_install_attributes_get_status_reply_.set_error(
device_management::DeviceManagementErrorCode::
DEVICE_MANAGEMENT_ERROR_TPM_DEFEND_LOCK);
std::optional<::device_management::InstallAttributesGetStatusReply>
result_reply;
client_->InstallAttributesGetStatus(
::device_management::InstallAttributesGetStatusRequest(),
CreateCopyCallback(&result_reply));
base::RunLoop().RunUntilIdle();
ASSERT_NE(result_reply, std::nullopt);
EXPECT_THAT(result_reply.value(),
EqualsProto(expected_install_attributes_get_status_reply_));
}
TEST_F(InstallAttributesClientTest, RemoveFirmwareManagementParameters) {
expected_remove_firmware_management_parameters_reply_.set_error(
device_management::DeviceManagementErrorCode::
DEVICE_MANAGEMENT_ERROR_TPM_DEFEND_LOCK);
std::optional<::device_management::RemoveFirmwareManagementParametersReply>
result_reply;
client_->RemoveFirmwareManagementParameters(
::device_management::RemoveFirmwareManagementParametersRequest(),
CreateCopyCallback(&result_reply));
base::RunLoop().RunUntilIdle();
ASSERT_NE(result_reply, std::nullopt);
EXPECT_THAT(
result_reply.value(),
EqualsProto(expected_remove_firmware_management_parameters_reply_));
}
TEST_F(InstallAttributesClientTest, SetFirmwareManagementParameters) {
expected_set_firmware_management_parameters_reply_.set_error(
device_management::DeviceManagementErrorCode::
DEVICE_MANAGEMENT_ERROR_TPM_DEFEND_LOCK);
std::optional<::device_management::SetFirmwareManagementParametersReply>
result_reply;
client_->SetFirmwareManagementParameters(
::device_management::SetFirmwareManagementParametersRequest(),
CreateCopyCallback(&result_reply));
base::RunLoop().RunUntilIdle();
ASSERT_NE(result_reply, std::nullopt);
EXPECT_THAT(result_reply.value(),
EqualsProto(expected_set_firmware_management_parameters_reply_));
}
TEST_F(InstallAttributesClientTest, GetFirmwareManagementParameters) {
expected_set_firmware_management_parameters_reply_.set_error(
device_management::DeviceManagementErrorCode::
DEVICE_MANAGEMENT_ERROR_TPM_DEFEND_LOCK);
std::optional<::device_management::GetFirmwareManagementParametersReply>
result_reply;
client_->GetFirmwareManagementParameters(
::device_management::GetFirmwareManagementParametersRequest(),
CreateCopyCallback(&result_reply));
base::RunLoop().RunUntilIdle();
ASSERT_NE(result_reply, std::nullopt);
EXPECT_THAT(result_reply.value(),
EqualsProto(expected_get_firmware_management_parameters_reply_));
}
TEST_F(InstallAttributesClientTest, BlockingInstallAttributesGet) {
expected_blocking_install_attributes_get_reply_.set_error(
device_management::DeviceManagementErrorCode::
DEVICE_MANAGEMENT_ERROR_TPM_DEFEND_LOCK);
std::optional<::device_management::InstallAttributesGetReply> result_reply;
auto runner = base::MakeRefCounted<FakeTaskRunner>();
EXPECT_CALL(*bus_.get(), GetDBusTaskRunner())
.WillRepeatedly(Return(runner.get()));
result_reply = client_->BlockingInstallAttributesGet(
::device_management::InstallAttributesGetRequest());
ASSERT_NE(result_reply, std::nullopt);
EXPECT_THAT(result_reply.value(),
EqualsProto(expected_blocking_install_attributes_get_reply_));
}
TEST_F(InstallAttributesClientTest,
BlockingInstallAttributesGetInvalidProtobuf) {
shall_message_parsing_fail_ = true;
std::optional<::device_management::InstallAttributesGetReply> result_reply =
::device_management::InstallAttributesGetReply();
auto runner = base::MakeRefCounted<FakeTaskRunner>();
EXPECT_CALL(*bus_.get(), GetDBusTaskRunner())
.WillRepeatedly(Return(runner.get()));
result_reply = client_->BlockingInstallAttributesGet(
::device_management::InstallAttributesGetRequest());
EXPECT_EQ(result_reply, std::nullopt);
}
TEST_F(InstallAttributesClientTest, BlockingInstallAttributesSet) {
expected_blocking_install_attributes_set_reply_.set_error(
device_management::DeviceManagementErrorCode::
DEVICE_MANAGEMENT_ERROR_TPM_DEFEND_LOCK);
std::optional<::device_management::InstallAttributesSetReply> result_reply;
auto runner = base::MakeRefCounted<FakeTaskRunner>();
EXPECT_CALL(*bus_.get(), GetDBusTaskRunner())
.WillRepeatedly(Return(runner.get()));
result_reply = client_->BlockingInstallAttributesSet(
::device_management::InstallAttributesSetRequest());
ASSERT_NE(result_reply, std::nullopt);
EXPECT_THAT(result_reply.value(),
EqualsProto(expected_blocking_install_attributes_set_reply_));
}
TEST_F(InstallAttributesClientTest, BlockingInstallAttributesFinalize) {
expected_blocking_install_attributes_finalize_reply_.set_error(
device_management::DeviceManagementErrorCode::
DEVICE_MANAGEMENT_ERROR_TPM_DEFEND_LOCK);
std::optional<::device_management::InstallAttributesFinalizeReply>
result_reply;
auto runner = base::MakeRefCounted<FakeTaskRunner>();
EXPECT_CALL(*bus_.get(), GetDBusTaskRunner())
.WillRepeatedly(Return(runner.get()));
result_reply = client_->BlockingInstallAttributesFinalize(
::device_management::InstallAttributesFinalizeRequest());
ASSERT_NE(result_reply, std::nullopt);
EXPECT_THAT(
result_reply.value(),
EqualsProto(expected_blocking_install_attributes_finalize_reply_));
}
TEST_F(InstallAttributesClientTest, BlockingInstallAttributesGetStatus) {
expected_blocking_install_attributes_get_status_reply_.set_error(
device_management::DeviceManagementErrorCode::
DEVICE_MANAGEMENT_ERROR_TPM_DEFEND_LOCK);
std::optional<::device_management::InstallAttributesGetStatusReply>
result_reply;
auto runner = base::MakeRefCounted<FakeTaskRunner>();
EXPECT_CALL(*bus_.get(), GetDBusTaskRunner())
.WillRepeatedly(Return(runner.get()));
result_reply = client_->BlockingInstallAttributesGetStatus(
::device_management::InstallAttributesGetStatusRequest());
ASSERT_NE(result_reply, std::nullopt);
EXPECT_THAT(
result_reply.value(),
EqualsProto(expected_blocking_install_attributes_get_status_reply_));
}
} // namespace ash