mirror of
https://github.com/openssl/openssl.git
synced 2025-01-06 13:26:43 +08:00
4574a7fd8d
Some primitives are designed to be used in a multi-threaded environment, if supported, e.g., Argon2. This patch adds support for preemptive threading and basic synchronization primitives for platforms compliant with POSIX threads or Windows CRT. Native functions are wrapped to provide a common (internal) API. Threading support can be disabled at compile time. If enabled, threading is disabled by default and needs to be explicitly enabled by the user. Thread enablement requires an explicit limit on the number of threads that OpenSSL may spawn (non-negative integer/infinity). The limit may be changed. Signed-off-by: Čestmír Kalina <ckalina@redhat.com> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/12255)
1163 lines
32 KiB
C
1163 lines
32 KiB
C
/*
|
|
* Copyright 2016-2022 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
/*
|
|
* The test_multi_downgrade_shared_pkey function tests the thread safety of a
|
|
* deprecated function.
|
|
*/
|
|
#ifndef OPENSSL_NO_DEPRECATED_3_0
|
|
# define OPENSSL_SUPPRESS_DEPRECATED
|
|
#endif
|
|
|
|
#if defined(_WIN32)
|
|
# include <windows.h>
|
|
#endif
|
|
|
|
#include <string.h>
|
|
#include <internal/cryptlib.h>
|
|
#include <internal/thread_arch.h>
|
|
#include <internal/thread.h>
|
|
#include <openssl/crypto.h>
|
|
#include <openssl/rsa.h>
|
|
#include <openssl/aes.h>
|
|
#include <openssl/err.h>
|
|
#include <openssl/rand.h>
|
|
#include <openssl/thread.h>
|
|
#include "internal/tsan_assist.h"
|
|
#include "internal/nelem.h"
|
|
#include "testutil.h"
|
|
#include "threadstest.h"
|
|
|
|
/* Limit the maximum number of threads */
|
|
#define MAXIMUM_THREADS 10
|
|
|
|
/* Limit the maximum number of providers loaded into a library context */
|
|
#define MAXIMUM_PROVIDERS 4
|
|
|
|
static int do_fips = 0;
|
|
static char *privkey;
|
|
static char *config_file = NULL;
|
|
static int multidefault_run = 0;
|
|
|
|
static const char *default_provider[] = { "default", NULL };
|
|
static const char *fips_provider[] = { "fips", NULL };
|
|
static const char *fips_and_default_providers[] = { "default", "fips", NULL };
|
|
|
|
static CRYPTO_RWLOCK *global_lock;
|
|
|
|
#ifdef TSAN_REQUIRES_LOCKING
|
|
static CRYPTO_RWLOCK *tsan_lock;
|
|
#endif
|
|
|
|
/* Grab a globally unique integer value, return 0 on failure */
|
|
static int get_new_uid(void)
|
|
{
|
|
/*
|
|
* Start with a nice large number to avoid potential conflicts when
|
|
* we generate a new OID.
|
|
*/
|
|
static TSAN_QUALIFIER int current_uid = 1 << (sizeof(int) * 8 - 2);
|
|
#ifdef TSAN_REQUIRES_LOCKING
|
|
int r;
|
|
|
|
if (!TEST_true(CRYPTO_THREAD_write_lock(tsan_lock)))
|
|
return 0;
|
|
r = ++current_uid;
|
|
if (!TEST_true(CRYPTO_THREAD_unlock(tsan_lock)))
|
|
return 0;
|
|
return r;
|
|
|
|
#else
|
|
return tsan_counter(¤t_uid);
|
|
#endif
|
|
}
|
|
|
|
static int test_lock(void)
|
|
{
|
|
CRYPTO_RWLOCK *lock = CRYPTO_THREAD_lock_new();
|
|
int res;
|
|
|
|
res = TEST_true(CRYPTO_THREAD_read_lock(lock))
|
|
&& TEST_true(CRYPTO_THREAD_unlock(lock))
|
|
&& TEST_true(CRYPTO_THREAD_write_lock(lock))
|
|
&& TEST_true(CRYPTO_THREAD_unlock(lock));
|
|
|
|
CRYPTO_THREAD_lock_free(lock);
|
|
|
|
return res;
|
|
}
|
|
|
|
static CRYPTO_ONCE once_run = CRYPTO_ONCE_STATIC_INIT;
|
|
static unsigned once_run_count = 0;
|
|
|
|
static void once_do_run(void)
|
|
{
|
|
once_run_count++;
|
|
}
|
|
|
|
static void once_run_thread_cb(void)
|
|
{
|
|
CRYPTO_THREAD_run_once(&once_run, once_do_run);
|
|
}
|
|
|
|
static int test_once(void)
|
|
{
|
|
thread_t thread;
|
|
|
|
if (!TEST_true(run_thread(&thread, once_run_thread_cb))
|
|
|| !TEST_true(wait_for_thread(thread))
|
|
|| !CRYPTO_THREAD_run_once(&once_run, once_do_run)
|
|
|| !TEST_int_eq(once_run_count, 1))
|
|
return 0;
|
|
return 1;
|
|
}
|
|
|
|
static CRYPTO_THREAD_LOCAL thread_local_key;
|
|
static unsigned destructor_run_count = 0;
|
|
static int thread_local_thread_cb_ok = 0;
|
|
|
|
static void thread_local_destructor(void *arg)
|
|
{
|
|
unsigned *count;
|
|
|
|
if (arg == NULL)
|
|
return;
|
|
|
|
count = arg;
|
|
|
|
(*count)++;
|
|
}
|
|
|
|
static void thread_local_thread_cb(void)
|
|
{
|
|
void *ptr;
|
|
|
|
ptr = CRYPTO_THREAD_get_local(&thread_local_key);
|
|
if (!TEST_ptr_null(ptr)
|
|
|| !TEST_true(CRYPTO_THREAD_set_local(&thread_local_key,
|
|
&destructor_run_count)))
|
|
return;
|
|
|
|
ptr = CRYPTO_THREAD_get_local(&thread_local_key);
|
|
if (!TEST_ptr_eq(ptr, &destructor_run_count))
|
|
return;
|
|
|
|
thread_local_thread_cb_ok = 1;
|
|
}
|
|
|
|
static int test_thread_local(void)
|
|
{
|
|
thread_t thread;
|
|
void *ptr = NULL;
|
|
|
|
if (!TEST_true(CRYPTO_THREAD_init_local(&thread_local_key,
|
|
thread_local_destructor)))
|
|
return 0;
|
|
|
|
ptr = CRYPTO_THREAD_get_local(&thread_local_key);
|
|
if (!TEST_ptr_null(ptr)
|
|
|| !TEST_true(run_thread(&thread, thread_local_thread_cb))
|
|
|| !TEST_true(wait_for_thread(thread))
|
|
|| !TEST_int_eq(thread_local_thread_cb_ok, 1))
|
|
return 0;
|
|
|
|
#if defined(OPENSSL_THREADS) && !defined(CRYPTO_TDEBUG)
|
|
|
|
ptr = CRYPTO_THREAD_get_local(&thread_local_key);
|
|
if (!TEST_ptr_null(ptr))
|
|
return 0;
|
|
|
|
# if !defined(OPENSSL_SYS_WINDOWS)
|
|
if (!TEST_int_eq(destructor_run_count, 1))
|
|
return 0;
|
|
# endif
|
|
#endif
|
|
|
|
if (!TEST_true(CRYPTO_THREAD_cleanup_local(&thread_local_key)))
|
|
return 0;
|
|
return 1;
|
|
}
|
|
|
|
static int test_atomic(void)
|
|
{
|
|
int val = 0, ret = 0, testresult = 0;
|
|
uint64_t val64 = 1, ret64 = 0;
|
|
CRYPTO_RWLOCK *lock = CRYPTO_THREAD_lock_new();
|
|
|
|
if (!TEST_ptr(lock))
|
|
return 0;
|
|
|
|
if (CRYPTO_atomic_add(&val, 1, &ret, NULL)) {
|
|
/* This succeeds therefore we're on a platform with lockless atomics */
|
|
if (!TEST_int_eq(val, 1) || !TEST_int_eq(val, ret))
|
|
goto err;
|
|
} else {
|
|
/* This failed therefore we're on a platform without lockless atomics */
|
|
if (!TEST_int_eq(val, 0) || !TEST_int_eq(val, ret))
|
|
goto err;
|
|
}
|
|
val = 0;
|
|
ret = 0;
|
|
|
|
if (!TEST_true(CRYPTO_atomic_add(&val, 1, &ret, lock)))
|
|
goto err;
|
|
if (!TEST_int_eq(val, 1) || !TEST_int_eq(val, ret))
|
|
goto err;
|
|
|
|
if (CRYPTO_atomic_or(&val64, 2, &ret64, NULL)) {
|
|
/* This succeeds therefore we're on a platform with lockless atomics */
|
|
if (!TEST_uint_eq((unsigned int)val64, 3)
|
|
|| !TEST_uint_eq((unsigned int)val64, (unsigned int)ret64))
|
|
goto err;
|
|
} else {
|
|
/* This failed therefore we're on a platform without lockless atomics */
|
|
if (!TEST_uint_eq((unsigned int)val64, 1)
|
|
|| !TEST_int_eq((unsigned int)ret64, 0))
|
|
goto err;
|
|
}
|
|
val64 = 1;
|
|
ret64 = 0;
|
|
|
|
if (!TEST_true(CRYPTO_atomic_or(&val64, 2, &ret64, lock)))
|
|
goto err;
|
|
|
|
if (!TEST_uint_eq((unsigned int)val64, 3)
|
|
|| !TEST_uint_eq((unsigned int)val64, (unsigned int)ret64))
|
|
goto err;
|
|
|
|
ret64 = 0;
|
|
if (CRYPTO_atomic_load(&val64, &ret64, NULL)) {
|
|
/* This succeeds therefore we're on a platform with lockless atomics */
|
|
if (!TEST_uint_eq((unsigned int)val64, 3)
|
|
|| !TEST_uint_eq((unsigned int)val64, (unsigned int)ret64))
|
|
goto err;
|
|
} else {
|
|
/* This failed therefore we're on a platform without lockless atomics */
|
|
if (!TEST_uint_eq((unsigned int)val64, 3)
|
|
|| !TEST_int_eq((unsigned int)ret64, 0))
|
|
goto err;
|
|
}
|
|
|
|
ret64 = 0;
|
|
if (!TEST_true(CRYPTO_atomic_load(&val64, &ret64, lock)))
|
|
goto err;
|
|
|
|
if (!TEST_uint_eq((unsigned int)val64, 3)
|
|
|| !TEST_uint_eq((unsigned int)val64, (unsigned int)ret64))
|
|
goto err;
|
|
|
|
testresult = 1;
|
|
err:
|
|
CRYPTO_THREAD_lock_free(lock);
|
|
return testresult;
|
|
}
|
|
|
|
static OSSL_LIB_CTX *multi_libctx = NULL;
|
|
static int multi_success;
|
|
static OSSL_PROVIDER *multi_provider[MAXIMUM_PROVIDERS + 1];
|
|
static size_t multi_num_threads;
|
|
static thread_t multi_threads[MAXIMUM_THREADS];
|
|
|
|
static void multi_intialise(void)
|
|
{
|
|
multi_success = 1;
|
|
multi_libctx = NULL;
|
|
multi_num_threads = 0;
|
|
memset(multi_threads, 0, sizeof(multi_threads));
|
|
memset(multi_provider, 0, sizeof(multi_provider));
|
|
}
|
|
|
|
static void multi_set_success(int ok)
|
|
{
|
|
if (CRYPTO_THREAD_write_lock(global_lock) == 0) {
|
|
/* not synchronized, but better than not reporting failure */
|
|
multi_success = ok;
|
|
return;
|
|
}
|
|
|
|
multi_success = ok;
|
|
|
|
CRYPTO_THREAD_unlock(global_lock);
|
|
}
|
|
|
|
static void thead_teardown_libctx(void)
|
|
{
|
|
OSSL_PROVIDER **p;
|
|
|
|
for (p = multi_provider; *p != NULL; p++)
|
|
OSSL_PROVIDER_unload(*p);
|
|
OSSL_LIB_CTX_free(multi_libctx);
|
|
multi_intialise();
|
|
}
|
|
|
|
static int thread_setup_libctx(int libctx, const char *providers[])
|
|
{
|
|
size_t n;
|
|
|
|
if (libctx && !TEST_true(test_get_libctx(&multi_libctx, NULL, config_file,
|
|
NULL, NULL)))
|
|
return 0;
|
|
|
|
if (providers != NULL)
|
|
for (n = 0; providers[n] != NULL; n++)
|
|
if (!TEST_size_t_lt(n, MAXIMUM_PROVIDERS)
|
|
|| !TEST_ptr(multi_provider[n] = OSSL_PROVIDER_load(multi_libctx,
|
|
providers[n]))) {
|
|
thead_teardown_libctx();
|
|
return 0;
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
static int teardown_threads(void)
|
|
{
|
|
size_t i;
|
|
|
|
for (i = 0; i < multi_num_threads; i++)
|
|
if (!TEST_true(wait_for_thread(multi_threads[i])))
|
|
return 0;
|
|
return 1;
|
|
}
|
|
|
|
static int start_threads(size_t n, void (*thread_func)(void))
|
|
{
|
|
size_t i;
|
|
|
|
if (!TEST_size_t_le(multi_num_threads + n, MAXIMUM_THREADS))
|
|
return 0;
|
|
|
|
for (i = 0 ; i < n; i++)
|
|
if (!TEST_true(run_thread(multi_threads + multi_num_threads++, thread_func)))
|
|
return 0;
|
|
return 1;
|
|
}
|
|
|
|
/* Template multi-threaded test function */
|
|
static int thread_run_test(void (*main_func)(void),
|
|
size_t num_threads, void (*thread_func)(void),
|
|
int libctx, const char *providers[])
|
|
{
|
|
int testresult = 0;
|
|
|
|
multi_intialise();
|
|
if (!thread_setup_libctx(libctx, providers)
|
|
|| !start_threads(num_threads, thread_func))
|
|
goto err;
|
|
|
|
if (main_func != NULL)
|
|
main_func();
|
|
|
|
if (!teardown_threads()
|
|
|| !TEST_true(multi_success))
|
|
goto err;
|
|
testresult = 1;
|
|
err:
|
|
thead_teardown_libctx();
|
|
return testresult;
|
|
}
|
|
|
|
static void thread_general_worker(void)
|
|
{
|
|
EVP_MD_CTX *mdctx = EVP_MD_CTX_new();
|
|
EVP_MD *md = EVP_MD_fetch(multi_libctx, "SHA2-256", NULL);
|
|
EVP_CIPHER_CTX *cipherctx = EVP_CIPHER_CTX_new();
|
|
EVP_CIPHER *ciph = EVP_CIPHER_fetch(multi_libctx, "AES-128-CBC", NULL);
|
|
const char *message = "Hello World";
|
|
size_t messlen = strlen(message);
|
|
/* Should be big enough for encryption output too */
|
|
unsigned char out[EVP_MAX_MD_SIZE];
|
|
const unsigned char key[AES_BLOCK_SIZE] = {
|
|
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b,
|
|
0x0c, 0x0d, 0x0e, 0x0f
|
|
};
|
|
const unsigned char iv[AES_BLOCK_SIZE] = {
|
|
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b,
|
|
0x0c, 0x0d, 0x0e, 0x0f
|
|
};
|
|
unsigned int mdoutl;
|
|
int ciphoutl;
|
|
EVP_PKEY *pkey = NULL;
|
|
int testresult = 0;
|
|
int i, isfips;
|
|
|
|
isfips = OSSL_PROVIDER_available(multi_libctx, "fips");
|
|
|
|
if (!TEST_ptr(mdctx)
|
|
|| !TEST_ptr(md)
|
|
|| !TEST_ptr(cipherctx)
|
|
|| !TEST_ptr(ciph))
|
|
goto err;
|
|
|
|
/* Do some work */
|
|
for (i = 0; i < 5; i++) {
|
|
if (!TEST_true(EVP_DigestInit_ex(mdctx, md, NULL))
|
|
|| !TEST_true(EVP_DigestUpdate(mdctx, message, messlen))
|
|
|| !TEST_true(EVP_DigestFinal(mdctx, out, &mdoutl)))
|
|
goto err;
|
|
}
|
|
for (i = 0; i < 5; i++) {
|
|
if (!TEST_true(EVP_EncryptInit_ex(cipherctx, ciph, NULL, key, iv))
|
|
|| !TEST_true(EVP_EncryptUpdate(cipherctx, out, &ciphoutl,
|
|
(unsigned char *)message,
|
|
messlen))
|
|
|| !TEST_true(EVP_EncryptFinal(cipherctx, out, &ciphoutl)))
|
|
goto err;
|
|
}
|
|
|
|
/*
|
|
* We want the test to run quickly - not securely.
|
|
* Therefore we use an insecure bit length where we can (512).
|
|
* In the FIPS module though we must use a longer length.
|
|
*/
|
|
pkey = EVP_PKEY_Q_keygen(multi_libctx, NULL, "RSA", isfips ? 2048 : 512);
|
|
if (!TEST_ptr(pkey))
|
|
goto err;
|
|
|
|
testresult = 1;
|
|
err:
|
|
EVP_MD_CTX_free(mdctx);
|
|
EVP_MD_free(md);
|
|
EVP_CIPHER_CTX_free(cipherctx);
|
|
EVP_CIPHER_free(ciph);
|
|
EVP_PKEY_free(pkey);
|
|
if (!testresult)
|
|
multi_set_success(0);
|
|
}
|
|
|
|
static void thread_multi_simple_fetch(void)
|
|
{
|
|
EVP_MD *md = EVP_MD_fetch(multi_libctx, "SHA2-256", NULL);
|
|
|
|
if (md != NULL)
|
|
EVP_MD_free(md);
|
|
else
|
|
multi_set_success(0);
|
|
}
|
|
|
|
static EVP_PKEY *shared_evp_pkey = NULL;
|
|
|
|
static void thread_shared_evp_pkey(void)
|
|
{
|
|
char *msg = "Hello World";
|
|
unsigned char ctbuf[256];
|
|
unsigned char ptbuf[256];
|
|
size_t ptlen, ctlen = sizeof(ctbuf);
|
|
EVP_PKEY_CTX *ctx = NULL;
|
|
int success = 0;
|
|
int i;
|
|
|
|
for (i = 0; i < 1 + do_fips; i++) {
|
|
if (i > 0)
|
|
EVP_PKEY_CTX_free(ctx);
|
|
ctx = EVP_PKEY_CTX_new_from_pkey(multi_libctx, shared_evp_pkey,
|
|
i == 0 ? "provider=default"
|
|
: "provider=fips");
|
|
if (!TEST_ptr(ctx))
|
|
goto err;
|
|
|
|
if (!TEST_int_ge(EVP_PKEY_encrypt_init(ctx), 0)
|
|
|| !TEST_int_ge(EVP_PKEY_encrypt(ctx, ctbuf, &ctlen,
|
|
(unsigned char *)msg, strlen(msg)),
|
|
0))
|
|
goto err;
|
|
|
|
EVP_PKEY_CTX_free(ctx);
|
|
ctx = EVP_PKEY_CTX_new_from_pkey(multi_libctx, shared_evp_pkey, NULL);
|
|
|
|
if (!TEST_ptr(ctx))
|
|
goto err;
|
|
|
|
ptlen = sizeof(ptbuf);
|
|
if (!TEST_int_ge(EVP_PKEY_decrypt_init(ctx), 0)
|
|
|| !TEST_int_gt(EVP_PKEY_decrypt(ctx, ptbuf, &ptlen, ctbuf, ctlen),
|
|
0)
|
|
|| !TEST_mem_eq(msg, strlen(msg), ptbuf, ptlen))
|
|
goto err;
|
|
}
|
|
|
|
success = 1;
|
|
|
|
err:
|
|
EVP_PKEY_CTX_free(ctx);
|
|
if (!success)
|
|
multi_set_success(0);
|
|
}
|
|
|
|
static void thread_provider_load_unload(void)
|
|
{
|
|
OSSL_PROVIDER *deflt = OSSL_PROVIDER_load(multi_libctx, "default");
|
|
|
|
if (!TEST_ptr(deflt)
|
|
|| !TEST_true(OSSL_PROVIDER_available(multi_libctx, "default")))
|
|
multi_set_success(0);
|
|
|
|
OSSL_PROVIDER_unload(deflt);
|
|
}
|
|
|
|
static int test_multi_general_worker_default_provider(void)
|
|
{
|
|
return thread_run_test(&thread_general_worker, 2, &thread_general_worker,
|
|
1, default_provider);
|
|
}
|
|
|
|
static int test_multi_general_worker_fips_provider(void)
|
|
{
|
|
if (!do_fips)
|
|
return TEST_skip("FIPS not supported");
|
|
return thread_run_test(&thread_general_worker, 2, &thread_general_worker,
|
|
1, fips_provider);
|
|
}
|
|
|
|
static int test_multi_fetch_worker(void)
|
|
{
|
|
return thread_run_test(&thread_multi_simple_fetch,
|
|
2, &thread_multi_simple_fetch, 1, default_provider);
|
|
}
|
|
|
|
static int test_multi_shared_pkey_common(void (*worker)(void))
|
|
{
|
|
int testresult = 0;
|
|
|
|
multi_intialise();
|
|
if (!thread_setup_libctx(1, do_fips ? fips_and_default_providers
|
|
: default_provider)
|
|
|| !TEST_ptr(shared_evp_pkey = load_pkey_pem(privkey, multi_libctx))
|
|
|| !start_threads(1, &thread_shared_evp_pkey)
|
|
|| !start_threads(1, worker))
|
|
goto err;
|
|
|
|
thread_shared_evp_pkey();
|
|
|
|
if (!teardown_threads()
|
|
|| !TEST_true(multi_success))
|
|
goto err;
|
|
testresult = 1;
|
|
err:
|
|
EVP_PKEY_free(shared_evp_pkey);
|
|
thead_teardown_libctx();
|
|
return testresult;
|
|
}
|
|
|
|
#ifndef OPENSSL_NO_DEPRECATED_3_0
|
|
static void thread_downgrade_shared_evp_pkey(void)
|
|
{
|
|
/*
|
|
* This test is only relevant for deprecated functions that perform
|
|
* downgrading
|
|
*/
|
|
if (EVP_PKEY_get0_RSA(shared_evp_pkey) == NULL)
|
|
multi_set_success(0);
|
|
}
|
|
|
|
static int test_multi_downgrade_shared_pkey(void)
|
|
{
|
|
return test_multi_shared_pkey_common(&thread_downgrade_shared_evp_pkey);
|
|
}
|
|
#endif
|
|
|
|
static int test_multi_shared_pkey(void)
|
|
{
|
|
return test_multi_shared_pkey_common(&thread_shared_evp_pkey);
|
|
}
|
|
|
|
static int test_multi_load_unload_provider(void)
|
|
{
|
|
EVP_MD *sha256 = NULL;
|
|
OSSL_PROVIDER *prov = NULL;
|
|
int testresult = 0;
|
|
|
|
multi_intialise();
|
|
if (!thread_setup_libctx(1, NULL)
|
|
|| !TEST_ptr(prov = OSSL_PROVIDER_load(multi_libctx, "default"))
|
|
|| !TEST_ptr(sha256 = EVP_MD_fetch(multi_libctx, "SHA2-256", NULL))
|
|
|| !TEST_true(OSSL_PROVIDER_unload(prov)))
|
|
goto err;
|
|
prov = NULL;
|
|
|
|
if (!start_threads(2, &thread_provider_load_unload))
|
|
goto err;
|
|
|
|
thread_provider_load_unload();
|
|
|
|
if (!teardown_threads()
|
|
|| !TEST_true(multi_success))
|
|
goto err;
|
|
testresult = 1;
|
|
err:
|
|
OSSL_PROVIDER_unload(prov);
|
|
EVP_MD_free(sha256);
|
|
thead_teardown_libctx();
|
|
return testresult;
|
|
}
|
|
|
|
static char *multi_load_provider = "legacy";
|
|
/*
|
|
* This test attempts to load several providers at the same time, and if
|
|
* run with a thread sanitizer, should crash if the core provider code
|
|
* doesn't synchronize well enough.
|
|
*/
|
|
static void test_multi_load_worker(void)
|
|
{
|
|
OSSL_PROVIDER *prov;
|
|
|
|
if (!TEST_ptr(prov = OSSL_PROVIDER_load(multi_libctx, multi_load_provider))
|
|
|| !TEST_true(OSSL_PROVIDER_unload(prov)))
|
|
multi_set_success(0);
|
|
}
|
|
|
|
static int test_multi_default(void)
|
|
{
|
|
/* Avoid running this test twice */
|
|
if (multidefault_run) {
|
|
TEST_skip("multi default test already run");
|
|
return 1;
|
|
}
|
|
multidefault_run = 1;
|
|
|
|
return thread_run_test(&thread_multi_simple_fetch,
|
|
2, &thread_multi_simple_fetch, 0, default_provider);
|
|
}
|
|
|
|
static int test_multi_load(void)
|
|
{
|
|
int res = 1;
|
|
OSSL_PROVIDER *prov;
|
|
|
|
/* The multidefault test must run prior to this test */
|
|
if (!multidefault_run) {
|
|
TEST_info("Running multi default test first");
|
|
res = test_multi_default();
|
|
}
|
|
|
|
/*
|
|
* We use the legacy provider in test_multi_load_worker because it uses a
|
|
* child libctx that might hit more codepaths that might be sensitive to
|
|
* threading issues. But in a no-legacy build that won't be loadable so
|
|
* we use the default provider instead.
|
|
*/
|
|
prov = OSSL_PROVIDER_load(NULL, "legacy");
|
|
if (prov == NULL) {
|
|
TEST_info("Cannot load legacy provider - assuming this is a no-legacy build");
|
|
multi_load_provider = "default";
|
|
}
|
|
OSSL_PROVIDER_unload(prov);
|
|
|
|
return thread_run_test(NULL, MAXIMUM_THREADS, &test_multi_load_worker, 0,
|
|
NULL) && res;
|
|
}
|
|
|
|
static void test_obj_create_one(void)
|
|
{
|
|
char tids[12], oid[40], sn[30], ln[30];
|
|
int id = get_new_uid();
|
|
|
|
BIO_snprintf(tids, sizeof(tids), "%d", id);
|
|
BIO_snprintf(oid, sizeof(oid), "1.3.6.1.4.1.16604.%s", tids);
|
|
BIO_snprintf(sn, sizeof(sn), "short-name-%s", tids);
|
|
BIO_snprintf(ln, sizeof(ln), "long-name-%s", tids);
|
|
if (!TEST_int_ne(id, 0)
|
|
|| !TEST_true(id = OBJ_create(oid, sn, ln))
|
|
|| !TEST_true(OBJ_add_sigid(id, NID_sha3_256, NID_rsa)))
|
|
multi_set_success(0);
|
|
}
|
|
|
|
static int test_obj_add(void)
|
|
{
|
|
return thread_run_test(&test_obj_create_one,
|
|
MAXIMUM_THREADS, &test_obj_create_one,
|
|
1, default_provider);
|
|
}
|
|
|
|
static void test_lib_ctx_load_config_worker(void)
|
|
{
|
|
if (!TEST_int_eq(OSSL_LIB_CTX_load_config(multi_libctx, config_file), 1))
|
|
multi_set_success(0);
|
|
}
|
|
|
|
static int test_lib_ctx_load_config(void)
|
|
{
|
|
return thread_run_test(&test_lib_ctx_load_config_worker,
|
|
MAXIMUM_THREADS, &test_lib_ctx_load_config_worker,
|
|
1, default_provider);
|
|
}
|
|
|
|
#if !defined(OPENSSL_NO_DGRAM) && !defined(OPENSSL_NO_SOCK)
|
|
static BIO *multi_bio1, *multi_bio2;
|
|
|
|
static void test_bio_dgram_pair_worker(void)
|
|
{
|
|
ossl_unused int r;
|
|
int ok = 0;
|
|
uint8_t ch = 0;
|
|
uint8_t scratch[64];
|
|
BIO_MSG msg = {0};
|
|
size_t num_processed = 0;
|
|
|
|
if (!TEST_int_eq(RAND_bytes_ex(multi_libctx, &ch, 1, 64), 1))
|
|
goto err;
|
|
|
|
msg.data = scratch;
|
|
msg.data_len = sizeof(scratch);
|
|
|
|
/*
|
|
* We do not test for failure here as recvmmsg may fail if no sendmmsg
|
|
* has been called yet. The purpose of this code is to exercise tsan.
|
|
*/
|
|
if (ch & 2)
|
|
r = BIO_sendmmsg(ch & 1 ? multi_bio2 : multi_bio1, &msg,
|
|
sizeof(BIO_MSG), 1, 0, &num_processed);
|
|
else
|
|
r = BIO_recvmmsg(ch & 1 ? multi_bio2 : multi_bio1, &msg,
|
|
sizeof(BIO_MSG), 1, 0, &num_processed);
|
|
|
|
ok = 1;
|
|
err:
|
|
if (ok == 0)
|
|
multi_set_success(0);
|
|
}
|
|
|
|
static int test_bio_dgram_pair(void)
|
|
{
|
|
int r;
|
|
BIO *bio1 = NULL, *bio2 = NULL;
|
|
|
|
r = BIO_new_bio_dgram_pair(&bio1, 0, &bio2, 0);
|
|
if (!TEST_int_eq(r, 1))
|
|
goto err;
|
|
|
|
multi_bio1 = bio1;
|
|
multi_bio2 = bio2;
|
|
|
|
r = thread_run_test(&test_bio_dgram_pair_worker,
|
|
MAXIMUM_THREADS, &test_bio_dgram_pair_worker,
|
|
1, default_provider);
|
|
|
|
err:
|
|
BIO_free(bio1);
|
|
BIO_free(bio2);
|
|
return r;
|
|
}
|
|
#endif
|
|
|
|
static int test_thread_reported_flags(void)
|
|
{
|
|
uint32_t flags = OSSL_get_thread_support_flags();
|
|
|
|
#if !defined(OPENSSL_THREADS)
|
|
if (!TEST_int_eq(flags, 0))
|
|
return 0;
|
|
#endif
|
|
|
|
#if defined(OPENSSL_NO_THREAD_POOL)
|
|
if (!TEST_int_eq(flags & OSSL_THREAD_SUPPORT_FLAG_THREAD_POOL, 0))
|
|
return 0;
|
|
#else
|
|
if (!TEST_int_eq(flags & OSSL_THREAD_SUPPORT_FLAG_THREAD_POOL,
|
|
OSSL_THREAD_SUPPORT_FLAG_THREAD_POOL))
|
|
return 0;
|
|
#endif
|
|
|
|
#if defined(OPENSSL_NO_DEFAULT_THREAD_POOL)
|
|
if (!TEST_int_eq(flags & OSSL_THREAD_SUPPORT_FLAG_DEFAULT_SPAWN, 0))
|
|
return 0;
|
|
#else
|
|
if (!TEST_int_eq(flags & OSSL_THREAD_SUPPORT_FLAG_DEFAULT_SPAWN,
|
|
OSSL_THREAD_SUPPORT_FLAG_DEFAULT_SPAWN))
|
|
return 0;
|
|
#endif
|
|
|
|
return 1;
|
|
}
|
|
|
|
#if defined(OPENSSL_THREADS)
|
|
|
|
# define TEST_THREAD_NATIVE_FN_SET_VALUE 1
|
|
static uint32_t test_thread_native_fn(void *data)
|
|
{
|
|
uint32_t *ldata = (uint32_t*) data;
|
|
*ldata = *ldata + 1;
|
|
return *ldata - 1;
|
|
}
|
|
|
|
static uint32_t test_thread_noreturn(void *data)
|
|
{
|
|
CRYPTO_MUTEX *lock = (uint32_t*) data;
|
|
|
|
/* lock is assumed to be locked */
|
|
ossl_crypto_mutex_lock(lock);
|
|
|
|
/* unreachable */
|
|
OPENSSL_die("test_thread_noreturn", __FILE__, __LINE__);
|
|
return 0;
|
|
}
|
|
|
|
/* Tests of native threads */
|
|
|
|
static int test_thread_native(void)
|
|
{
|
|
int testval = 0;
|
|
uint32_t retval;
|
|
uint32_t local;
|
|
CRYPTO_THREAD *t;
|
|
CRYPTO_MUTEX *lock;
|
|
|
|
/* thread spawn, join and termination */
|
|
|
|
local = 1;
|
|
t = ossl_crypto_thread_native_start(test_thread_native_fn, &local, 1);
|
|
if (!TEST_ptr(t))
|
|
return 0;
|
|
|
|
/*
|
|
* pthread_join results in undefined behaviour if called on a joined
|
|
* thread. We do not impose such restrictions, so it's up to us to
|
|
* ensure that this does not happen (thread sanitizer will warn us
|
|
* if we do).
|
|
*/
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_join(t, &retval), 1))
|
|
return 0;
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_join(t, &retval), 1))
|
|
return 0;
|
|
|
|
if (!TEST_int_eq(retval, 1) || !TEST_int_eq(local, 2))
|
|
return 0;
|
|
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_terminate(t), 1))
|
|
return 0;
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_terminate(t), 1))
|
|
return 0;
|
|
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_join(t, &retval), 1))
|
|
return 0;
|
|
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_clean(t), 1))
|
|
return 0;
|
|
t = NULL;
|
|
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_clean(t), 0))
|
|
return 0;
|
|
|
|
/* termination of a long running thread */
|
|
|
|
lock = ossl_crypto_mutex_new();
|
|
if (!TEST_ptr(lock))
|
|
return 0;
|
|
ossl_crypto_mutex_lock(lock);
|
|
|
|
t = ossl_crypto_thread_native_start(test_thread_noreturn, lock, 1);
|
|
if (!TEST_ptr(t))
|
|
goto fail;
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_terminate(t), 1))
|
|
goto fail;
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_clean(t), 1))
|
|
goto fail;
|
|
|
|
testval = 1;
|
|
|
|
fail:
|
|
ossl_crypto_mutex_unlock(lock);
|
|
ossl_crypto_mutex_free(&lock);
|
|
if (!TEST_ptr_null(lock))
|
|
return 0;
|
|
|
|
return testval;
|
|
}
|
|
|
|
#if !defined(OPENSSL_NO_DEFAULT_THREAD_POOL)
|
|
static int test_thread_internal(void)
|
|
{
|
|
uint32_t retval[3];
|
|
uint32_t local[3] = { 0 };
|
|
uint32_t threads_supported;
|
|
size_t i;
|
|
void *t[3];
|
|
OSSL_LIB_CTX *cust_ctx = OSSL_LIB_CTX_new();
|
|
|
|
threads_supported = OSSL_get_thread_support_flags();
|
|
threads_supported &= OSSL_THREAD_SUPPORT_FLAG_DEFAULT_SPAWN;
|
|
|
|
if (threads_supported == 0) {
|
|
if (!TEST_uint64_t_eq(OSSL_get_max_threads(NULL), 0))
|
|
return 0;
|
|
if (!TEST_uint64_t_eq(OSSL_get_max_threads(cust_ctx), 0))
|
|
return 0;
|
|
|
|
if (!TEST_int_eq(OSSL_set_max_threads(NULL, 1), 0))
|
|
return 0;
|
|
if (!TEST_int_eq(OSSL_set_max_threads(cust_ctx, 1), 0))
|
|
return 0;
|
|
|
|
if (!TEST_uint64_t_eq(OSSL_get_max_threads(NULL), 0))
|
|
return 0;
|
|
if (!TEST_uint64_t_eq(OSSL_get_max_threads(cust_ctx), 0))
|
|
return 0;
|
|
|
|
t[0] = ossl_crypto_thread_start(NULL, test_thread_native_fn, &local[0]);
|
|
if (!TEST_ptr_null(t[0]))
|
|
return 0;
|
|
|
|
return 1;
|
|
}
|
|
|
|
/* fail when not allowed to use threads */
|
|
|
|
if (!TEST_uint64_t_eq(OSSL_get_max_threads(NULL), 0))
|
|
return 0;
|
|
t[0] = ossl_crypto_thread_start(NULL, test_thread_native_fn, &local[0]);
|
|
if (!TEST_ptr_null(t[0]))
|
|
return 0;
|
|
|
|
/* fail when enabled on a different context */
|
|
if (!TEST_uint64_t_eq(OSSL_get_max_threads(cust_ctx), 0))
|
|
return 0;
|
|
if (!TEST_int_eq(OSSL_set_max_threads(cust_ctx, 1), 1))
|
|
return 0;
|
|
if (!TEST_uint64_t_eq(OSSL_get_max_threads(NULL), 0))
|
|
return 0;
|
|
if (!TEST_uint64_t_eq(OSSL_get_max_threads(cust_ctx), 1))
|
|
return 0;
|
|
t[0] = ossl_crypto_thread_start(NULL, test_thread_native_fn, &local[0]);
|
|
if (!TEST_ptr_null(t[0]))
|
|
return 0;
|
|
if (!TEST_int_eq(OSSL_set_max_threads(cust_ctx, 0), 1))
|
|
return 0;
|
|
|
|
/* sequential startup */
|
|
|
|
if (!TEST_int_eq(OSSL_set_max_threads(NULL, 1), 1))
|
|
return 0;
|
|
if (!TEST_uint64_t_eq(OSSL_get_max_threads(NULL), 1))
|
|
return 0;
|
|
if (!TEST_uint64_t_eq(OSSL_get_max_threads(cust_ctx), 0))
|
|
return 0;
|
|
|
|
for (i = 0; i < OSSL_NELEM(t); ++i) {
|
|
local[0] = i + 1;
|
|
|
|
t[i] = ossl_crypto_thread_start(NULL, test_thread_native_fn, &local[0]);
|
|
if (!TEST_ptr(t[i]))
|
|
return 0;
|
|
|
|
/*
|
|
* pthread_join results in undefined behaviour if called on a joined
|
|
* thread. We do not impose such restrictions, so it's up to us to
|
|
* ensure that this does not happen (thread sanitizer will warn us
|
|
* if we do).
|
|
*/
|
|
if (!TEST_int_eq(ossl_crypto_thread_join(t[i], &retval[0]), 1))
|
|
return 0;
|
|
if (!TEST_int_eq(ossl_crypto_thread_join(t[i], &retval[0]), 1))
|
|
return 0;
|
|
|
|
if (!TEST_int_eq(retval[0], i + 1) || !TEST_int_eq(local[0], i + 2))
|
|
return 0;
|
|
|
|
if (!TEST_int_eq(ossl_crypto_thread_clean(t[i]), 1))
|
|
return 0;
|
|
t[i] = NULL;
|
|
|
|
if (!TEST_int_eq(ossl_crypto_thread_clean(t[i]), 0))
|
|
return 0;
|
|
}
|
|
|
|
/* parallel startup */
|
|
|
|
if (!TEST_int_eq(OSSL_set_max_threads(NULL, OSSL_NELEM(t)), 1))
|
|
return 0;
|
|
|
|
for (i = 0; i < OSSL_NELEM(t); ++i) {
|
|
local[i] = i + 1;
|
|
t[i] = ossl_crypto_thread_start(NULL, test_thread_native_fn, &local[i]);
|
|
if (!TEST_ptr(t[i]))
|
|
return 0;
|
|
}
|
|
for (i = 0; i < OSSL_NELEM(t); ++i) {
|
|
if (!TEST_int_eq(ossl_crypto_thread_join(t[i], &retval[i]), 1))
|
|
return 0;
|
|
}
|
|
for (i = 0; i < OSSL_NELEM(t); ++i) {
|
|
if (!TEST_int_eq(retval[i], i + 1) || !TEST_int_eq(local[i], i + 2))
|
|
return 0;
|
|
if (!TEST_int_eq(ossl_crypto_thread_clean(t[i]), 1))
|
|
return 0;
|
|
}
|
|
|
|
/* parallel startup, bottleneck */
|
|
|
|
if (!TEST_int_eq(OSSL_set_max_threads(NULL, OSSL_NELEM(t) - 1), 1))
|
|
return 0;
|
|
|
|
for (i = 0; i < OSSL_NELEM(t); ++i) {
|
|
local[i] = i + 1;
|
|
t[i] = ossl_crypto_thread_start(NULL, test_thread_native_fn, &local[i]);
|
|
if (!TEST_ptr(t[i]))
|
|
return 0;
|
|
}
|
|
for (i = 0; i < OSSL_NELEM(t); ++i) {
|
|
if (!TEST_int_eq(ossl_crypto_thread_join(t[i], &retval[i]), 1))
|
|
return 0;
|
|
}
|
|
for (i = 0; i < OSSL_NELEM(t); ++i) {
|
|
if (!TEST_int_eq(retval[i], i + 1) || !TEST_int_eq(local[i], i + 2))
|
|
return 0;
|
|
if (!TEST_int_eq(ossl_crypto_thread_clean(t[i]), 1))
|
|
return 0;
|
|
}
|
|
|
|
if (!TEST_int_eq(OSSL_set_max_threads(NULL, 0), 1))
|
|
return 0;
|
|
|
|
OSSL_LIB_CTX_free(cust_ctx);
|
|
return 1;
|
|
}
|
|
#endif
|
|
|
|
static uint32_t test_thread_native_multiple_joins_fn1(void *data)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
static uint32_t test_thread_native_multiple_joins_fn2(void *data)
|
|
{
|
|
ossl_crypto_thread_native_join((CRYPTO_THREAD *)data, NULL);
|
|
return 0;
|
|
}
|
|
|
|
static uint32_t test_thread_native_multiple_joins_fn3(void *data)
|
|
{
|
|
ossl_crypto_thread_native_join((CRYPTO_THREAD *)data, NULL);
|
|
return 0;
|
|
}
|
|
|
|
static int test_thread_native_multiple_joins(void)
|
|
{
|
|
CRYPTO_THREAD *t, *t1, *t2;
|
|
|
|
t = ossl_crypto_thread_native_start(test_thread_native_multiple_joins_fn1, NULL, 1);
|
|
t1 = ossl_crypto_thread_native_start(test_thread_native_multiple_joins_fn2, t, 1);
|
|
t2 = ossl_crypto_thread_native_start(test_thread_native_multiple_joins_fn3, t, 1);
|
|
|
|
if (!TEST_ptr(t) || !TEST_ptr(t1) || !TEST_ptr(t2))
|
|
return 0;
|
|
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_join(t2, NULL), 1))
|
|
return 0;
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_join(t1, NULL), 1))
|
|
return 0;
|
|
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_clean(t2), 1))
|
|
return 0;
|
|
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_clean(t1), 1))
|
|
return 0;
|
|
|
|
if (!TEST_int_eq(ossl_crypto_thread_native_clean(t), 1))
|
|
return 0;
|
|
|
|
return 1;
|
|
}
|
|
|
|
#endif
|
|
|
|
typedef enum OPTION_choice {
|
|
OPT_ERR = -1,
|
|
OPT_EOF = 0,
|
|
OPT_FIPS, OPT_CONFIG_FILE,
|
|
OPT_TEST_ENUM
|
|
} OPTION_CHOICE;
|
|
|
|
const OPTIONS *test_get_options(void)
|
|
{
|
|
static const OPTIONS options[] = {
|
|
OPT_TEST_OPTIONS_DEFAULT_USAGE,
|
|
{ "fips", OPT_FIPS, '-', "Test the FIPS provider" },
|
|
{ "config", OPT_CONFIG_FILE, '<',
|
|
"The configuration file to use for the libctx" },
|
|
{ NULL }
|
|
};
|
|
return options;
|
|
}
|
|
|
|
int setup_tests(void)
|
|
{
|
|
OPTION_CHOICE o;
|
|
char *datadir;
|
|
|
|
while ((o = opt_next()) != OPT_EOF) {
|
|
switch (o) {
|
|
case OPT_FIPS:
|
|
do_fips = 1;
|
|
break;
|
|
case OPT_CONFIG_FILE:
|
|
config_file = opt_arg();
|
|
break;
|
|
case OPT_TEST_CASES:
|
|
break;
|
|
default:
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
if (!TEST_ptr(datadir = test_get_argument(0)))
|
|
return 0;
|
|
|
|
privkey = test_mk_file_path(datadir, "rsakey.pem");
|
|
if (!TEST_ptr(privkey))
|
|
return 0;
|
|
|
|
if (!TEST_ptr(global_lock = CRYPTO_THREAD_lock_new()))
|
|
return 0;
|
|
|
|
#ifdef TSAN_REQUIRES_LOCKING
|
|
if (!TEST_ptr(tsan_lock = CRYPTO_THREAD_lock_new()))
|
|
return 0;
|
|
#endif
|
|
|
|
/* Keep first to validate auto creation of default library context */
|
|
ADD_TEST(test_multi_default);
|
|
|
|
ADD_TEST(test_lock);
|
|
ADD_TEST(test_once);
|
|
ADD_TEST(test_thread_local);
|
|
ADD_TEST(test_atomic);
|
|
ADD_TEST(test_multi_load);
|
|
ADD_TEST(test_multi_general_worker_default_provider);
|
|
ADD_TEST(test_multi_general_worker_fips_provider);
|
|
ADD_TEST(test_multi_fetch_worker);
|
|
ADD_TEST(test_multi_shared_pkey);
|
|
#ifndef OPENSSL_NO_DEPRECATED_3_0
|
|
ADD_TEST(test_multi_downgrade_shared_pkey);
|
|
#endif
|
|
ADD_TEST(test_multi_load_unload_provider);
|
|
ADD_TEST(test_obj_add);
|
|
ADD_TEST(test_lib_ctx_load_config);
|
|
#if !defined(OPENSSL_NO_DGRAM) && !defined(OPENSSL_NO_SOCK)
|
|
ADD_TEST(test_bio_dgram_pair);
|
|
#endif
|
|
ADD_TEST(test_thread_reported_flags);
|
|
#if defined(OPENSSL_THREADS)
|
|
ADD_TEST(test_thread_native);
|
|
ADD_TEST(test_thread_native_multiple_joins);
|
|
#if !defined(OPENSSL_NO_DEFAULT_THREAD_POOL)
|
|
ADD_TEST(test_thread_internal);
|
|
#endif
|
|
#endif
|
|
|
|
return 1;
|
|
}
|
|
|
|
void cleanup_tests(void)
|
|
{
|
|
OPENSSL_free(privkey);
|
|
#ifdef TSAN_REQUIRES_LOCKING
|
|
CRYPTO_THREAD_lock_free(tsan_lock);
|
|
#endif
|
|
CRYPTO_THREAD_lock_free(global_lock);
|
|
}
|