Branch data Line data Source code
1 : : /**
2 : : * Copyright Notice:
3 : : * Copyright 2021-2026 DMTF. All rights reserved.
4 : : * License: BSD 3-Clause License. For full text see link: https://github.com/DMTF/libspdm/blob/main/LICENSE.md
5 : : **/
6 : :
7 : : #include "internal/libspdm_responder_lib.h"
8 : :
9 : : #if LIBSPDM_ENABLE_CAPABILITY_MEAS_CAP
10 : :
11 : 0 : libspdm_return_t libspdm_register_meas_log_reset_callback(
12 : : void *spdm_context, libspdm_meas_log_reset_callback_func spdm_meas_log_reset_callback)
13 : : {
14 : 0 : libspdm_context_t *context = (libspdm_context_t *)spdm_context;
15 : 0 : context->spdm_meas_log_reset_callback = spdm_meas_log_reset_callback;
16 : 0 : return LIBSPDM_STATUS_SUCCESS;
17 : : }
18 : :
19 : 18 : bool libspdm_generate_measurement_signature(libspdm_context_t *spdm_context,
20 : : libspdm_session_info_t *session_info,
21 : : uint8_t slot_id,
22 : : uint8_t *signature)
23 : : {
24 : : size_t signature_size;
25 : : bool result;
26 : : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
27 : : libspdm_l1l2_managed_buffer_t l1l2;
28 : : uint8_t *l1l2_buffer;
29 : : size_t l1l2_buffer_size;
30 : : #else
31 : : uint8_t l1l2_hash[LIBSPDM_MAX_HASH_SIZE];
32 : : size_t l1l2_hash_size;
33 : : #endif
34 : :
35 : : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
36 : : result = libspdm_calculate_l1l2(spdm_context, session_info, &l1l2);
37 : : #else
38 : 18 : l1l2_hash_size = sizeof(l1l2_hash);
39 : 18 : result = libspdm_calculate_l1l2_hash(spdm_context, session_info, &l1l2_hash_size, l1l2_hash);
40 : : #endif
41 : 18 : libspdm_reset_message_m(spdm_context, session_info);
42 [ - + ]: 18 : if (!result) {
43 : 0 : return false;
44 : : }
45 : :
46 [ - + ]: 18 : if (spdm_context->connection_info.algorithm.pqc_asym_algo != 0) {
47 : 0 : signature_size = libspdm_get_pqc_asym_signature_size(
48 : : spdm_context->connection_info.algorithm.pqc_asym_algo);
49 : : } else {
50 : 18 : signature_size = libspdm_get_asym_signature_size(
51 : : spdm_context->connection_info.algorithm.base_asym_algo);
52 : : }
53 : : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
54 : : l1l2_buffer = libspdm_get_managed_buffer(&l1l2);
55 : : l1l2_buffer_size = libspdm_get_managed_buffer_size(&l1l2);
56 : :
57 : : result = libspdm_responder_data_sign(
58 : : spdm_context,
59 : : spdm_context->connection_info.version,
60 : : libspdm_slot_id_to_key_pair_id(spdm_context, slot_id, false),
61 : : SPDM_MEASUREMENTS,
62 : : spdm_context->connection_info.algorithm.base_asym_algo,
63 : : spdm_context->connection_info.algorithm.pqc_asym_algo,
64 : : spdm_context->connection_info.algorithm.base_hash_algo,
65 : : false, l1l2_buffer, l1l2_buffer_size, signature, &signature_size);
66 : : #else
67 : 36 : result = libspdm_responder_data_sign(
68 : : spdm_context,
69 : 18 : spdm_context->connection_info.version,
70 : 18 : libspdm_slot_id_to_key_pair_id(spdm_context, slot_id, false),
71 : : SPDM_MEASUREMENTS,
72 : : spdm_context->connection_info.algorithm.base_asym_algo,
73 : : spdm_context->connection_info.algorithm.pqc_asym_algo,
74 : : spdm_context->connection_info.algorithm.base_hash_algo,
75 : : true, l1l2_hash, l1l2_hash_size, signature, &signature_size);
76 : : #endif
77 : 18 : return result;
78 : : }
79 : 142 : libspdm_return_t libspdm_get_response_measurements(libspdm_context_t *spdm_context,
80 : : size_t request_size,
81 : : const void *request,
82 : : size_t *response_size,
83 : : void *response)
84 : : {
85 : : const spdm_get_measurements_request_t *spdm_request;
86 : : size_t spdm_request_size;
87 : : spdm_measurements_response_t *spdm_response;
88 : : size_t spdm_response_size;
89 : : libspdm_return_t status;
90 : : size_t signature_size;
91 : : uint8_t slot_id_param;
92 : : uint8_t measurements_index;
93 : : uint8_t measurements_count;
94 : : uint8_t *measurements;
95 : : size_t measurements_size;
96 : : uint8_t *opaque_data;
97 : : size_t opaque_data_size;
98 : : size_t meas_opaque_buffer_size;
99 : : bool ret;
100 : : libspdm_session_info_t *session_info;
101 : : libspdm_session_state_t session_state;
102 : : uint8_t content_changed;
103 : : uint8_t *fill_response_ptr;
104 : : size_t request_context_size;
105 : : const void *request_context;
106 : : const uint32_t *session_id;
107 : :
108 : 142 : spdm_request = request;
109 : :
110 : : /* -=[Check Parameters Phase]=- */
111 [ - + ]: 142 : LIBSPDM_ASSERT(spdm_request->header.request_response_code == SPDM_GET_MEASUREMENTS);
112 : :
113 [ + + ]: 142 : if (!spdm_context->last_spdm_request_session_id_valid) {
114 : 139 : session_info = NULL;
115 : 139 : session_id = NULL;
116 : : } else {
117 : 3 : session_id = &spdm_context->last_spdm_request_session_id;
118 : 3 : session_info = libspdm_get_session_info_via_session_id(
119 : : spdm_context,
120 : : spdm_context->last_spdm_request_session_id);
121 [ - + ]: 3 : if (session_info == NULL) {
122 : : /* do not reset message_m because it is unclear which context it should be used. */
123 : 0 : return libspdm_generate_error_response(
124 : : spdm_context,
125 : : SPDM_ERROR_CODE_UNEXPECTED_REQUEST, 0,
126 : : response_size, response);
127 : : }
128 : 3 : session_state = libspdm_secured_message_get_session_state(
129 : : session_info->secured_message_context);
130 [ - + ]: 3 : if (session_state != LIBSPDM_SESSION_STATE_ESTABLISHED) {
131 : 0 : libspdm_reset_message_m(spdm_context, session_info);
132 : 0 : return libspdm_generate_error_response(
133 : : spdm_context,
134 : : SPDM_ERROR_CODE_UNEXPECTED_REQUEST, 0,
135 : : response_size, response);
136 : : }
137 : : }
138 : :
139 [ + + ]: 142 : if (spdm_request->header.spdm_version != libspdm_get_connection_version(spdm_context)) {
140 : 1 : libspdm_reset_message_m(spdm_context, session_info);
141 : 1 : return libspdm_generate_error_response(spdm_context,
142 : : SPDM_ERROR_CODE_VERSION_MISMATCH, 0,
143 : : response_size, response);
144 : : }
145 [ + + ]: 141 : if (spdm_context->response_state != LIBSPDM_RESPONSE_STATE_NORMAL) {
146 : : #if LIBSPDM_RESPOND_IF_READY_SUPPORT
147 [ + + ]: 3 : if (spdm_context->response_state != LIBSPDM_RESPONSE_STATE_NOT_READY) {
148 : : #endif
149 : 2 : libspdm_reset_message_m(spdm_context, session_info);
150 : : #if LIBSPDM_RESPOND_IF_READY_SUPPORT
151 : : }
152 : : #endif
153 : 3 : return libspdm_responder_handle_response_state(
154 : : spdm_context,
155 : 3 : spdm_request->header.request_response_code,
156 : : response_size, response);
157 : : }
158 : : /* check local context here, because meas_cap is reserved for requester.*/
159 [ + + ]: 138 : if (!libspdm_is_capabilities_flag_supported(
160 : : spdm_context, false, 0,
161 : : SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEAS_CAP)) {
162 : 1 : libspdm_reset_message_m(spdm_context, session_info);
163 : 1 : return libspdm_generate_error_response(
164 : : spdm_context, SPDM_ERROR_CODE_UNSUPPORTED_REQUEST,
165 : : SPDM_GET_MEASUREMENTS, response_size, response);
166 : : }
167 [ + - ]: 137 : if ((spdm_context->connection_info.algorithm.measurement_spec == 0) ||
168 [ - + ]: 137 : (spdm_context->connection_info.algorithm.measurement_hash_algo == 0) ) {
169 : 0 : libspdm_reset_message_m(spdm_context, session_info);
170 : 0 : return libspdm_generate_error_response(
171 : : spdm_context, SPDM_ERROR_CODE_UNEXPECTED_REQUEST,
172 : : 0, response_size, response);
173 : : }
174 [ + + ]: 137 : if (spdm_context->connection_info.connection_state <
175 : : LIBSPDM_CONNECTION_STATE_NEGOTIATED) {
176 : 1 : libspdm_reset_message_m(spdm_context, session_info);
177 : 1 : return libspdm_generate_error_response(
178 : : spdm_context,
179 : : SPDM_ERROR_CODE_UNEXPECTED_REQUEST, 0,
180 : : response_size, response);
181 : : }
182 : :
183 [ + + ]: 136 : if ((spdm_request->header.param1 &
184 : : SPDM_GET_MEASUREMENTS_REQUEST_ATTRIBUTES_GENERATE_SIGNATURE) != 0) {
185 [ + + ]: 28 : if (spdm_request->header.spdm_version >= SPDM_MESSAGE_VERSION_11) {
186 [ + + ]: 17 : if (request_size < sizeof(spdm_get_measurements_request_t)) {
187 : 4 : libspdm_reset_message_m(spdm_context, session_info);
188 : 4 : return libspdm_generate_error_response(
189 : : spdm_context,
190 : : SPDM_ERROR_CODE_INVALID_REQUEST, 0,
191 : : response_size, response);
192 : : }
193 : 13 : spdm_request_size = sizeof(spdm_get_measurements_request_t);
194 : : } else {
195 [ + + ]: 11 : if (request_size <
196 : : sizeof(spdm_get_measurements_request_t) -
197 : : sizeof(spdm_request->slot_id_param)) {
198 : 1 : libspdm_reset_message_m(spdm_context, session_info);
199 : 1 : return libspdm_generate_error_response(
200 : : spdm_context,
201 : : SPDM_ERROR_CODE_INVALID_REQUEST, 0,
202 : : response_size, response);
203 : : }
204 : 10 : spdm_request_size = sizeof(spdm_get_measurements_request_t) -
205 : : sizeof(spdm_request->slot_id_param);
206 : : }
207 : : } else {
208 [ - + ]: 108 : if (request_size < sizeof(spdm_message_header_t)) {
209 : 0 : libspdm_reset_message_m(spdm_context, session_info);
210 : 0 : return libspdm_generate_error_response(
211 : : spdm_context, SPDM_ERROR_CODE_INVALID_REQUEST,
212 : : 0, response_size, response);
213 : : }
214 : 108 : spdm_request_size = sizeof(spdm_message_header_t);
215 : : }
216 [ + + ]: 131 : if (spdm_request->header.spdm_version >= SPDM_MESSAGE_VERSION_13) {
217 [ - + ]: 2 : if (request_size < spdm_request_size + SPDM_REQ_CONTEXT_SIZE) {
218 : 0 : libspdm_reset_message_m(spdm_context, session_info);
219 : 0 : return libspdm_generate_error_response(
220 : : spdm_context, SPDM_ERROR_CODE_INVALID_REQUEST,
221 : : 0, response_size, response);
222 : : }
223 : 2 : spdm_request_size += SPDM_REQ_CONTEXT_SIZE;
224 : : }
225 : :
226 [ + + ]: 131 : if ((spdm_request->header.param1 &
227 : : SPDM_GET_MEASUREMENTS_REQUEST_ATTRIBUTES_GENERATE_SIGNATURE) != 0) {
228 [ + + ]: 23 : if (!libspdm_is_capabilities_flag_supported(
229 : : spdm_context, false, 0,
230 : : SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEAS_CAP_SIG)) {
231 : 1 : libspdm_reset_message_m(spdm_context, session_info);
232 : 1 : return libspdm_generate_error_response(
233 : : spdm_context, SPDM_ERROR_CODE_INVALID_REQUEST,
234 : : 0, response_size, response);
235 : : }
236 : : }
237 : :
238 [ + + ]: 130 : if ((spdm_request->header.param1 &
239 : : SPDM_GET_MEASUREMENTS_REQUEST_ATTRIBUTES_GENERATE_SIGNATURE) == 0) {
240 : 108 : signature_size = 0;
241 : : } else {
242 [ - + ]: 22 : if (spdm_context->connection_info.algorithm.pqc_asym_algo != 0) {
243 : 0 : signature_size = libspdm_get_pqc_asym_signature_size(
244 : : spdm_context->connection_info.algorithm.pqc_asym_algo);
245 : : } else {
246 : 22 : signature_size = libspdm_get_asym_signature_size(
247 : : spdm_context->connection_info.algorithm.base_asym_algo);
248 : : }
249 : : }
250 : :
251 [ + + ]: 130 : if (spdm_request->header.spdm_version >= SPDM_MESSAGE_VERSION_13) {
252 : 2 : request_context_size = SPDM_REQ_CONTEXT_SIZE;
253 : :
254 [ + + ]: 2 : if ((spdm_request->header.param1 &
255 : : SPDM_GET_MEASUREMENTS_REQUEST_ATTRIBUTES_GENERATE_SIGNATURE) == 0) {
256 : 1 : request_context = (const uint8_t *)spdm_request + sizeof(spdm_message_header_t);
257 : : } else {
258 : 1 : request_context = spdm_request + 1;
259 : : }
260 : : } else {
261 : 128 : request_context_size = 0;
262 : 128 : request_context = NULL;
263 : : }
264 : :
265 : : /* response_size should be large enough to hold a MEASUREMENTS response without
266 : : * measurements or opaque data. */
267 [ - + ]: 130 : LIBSPDM_ASSERT(*response_size >= (sizeof(spdm_measurements_response_t) +
268 : : SPDM_NONCE_SIZE + sizeof(uint16_t) + signature_size));
269 : :
270 : 130 : meas_opaque_buffer_size = *response_size - (sizeof(spdm_measurements_response_t) +
271 : : SPDM_NONCE_SIZE + sizeof(uint16_t) +
272 : : signature_size);
273 : :
274 : 130 : libspdm_zero_mem(response, *response_size);
275 : :
276 : 130 : measurements_index = spdm_request->header.param2;
277 : 130 : measurements_count = 0;
278 : 130 : measurements = (uint8_t*)response + sizeof(spdm_measurements_response_t);
279 : 130 : measurements_size = meas_opaque_buffer_size;
280 : :
281 : 248 : status = libspdm_measurement_collection(
282 : : spdm_context,
283 : : session_id,
284 : 130 : spdm_context->connection_info.version,
285 : 130 : spdm_context->connection_info.algorithm.measurement_spec,
286 : : spdm_context->connection_info.algorithm.measurement_hash_algo,
287 : : measurements_index,
288 : 130 : spdm_request->header.param1,
289 [ + + ]: 130 : ((spdm_request->header.param1 &
290 : : SPDM_GET_MEASUREMENTS_REQUEST_ATTRIBUTES_GENERATE_SIGNATURE) != 0) ?
291 : : spdm_request->nonce : NULL,
292 [ + + ]: 130 : ((spdm_request->header.param1 &
293 : 22 : SPDM_GET_MEASUREMENTS_REQUEST_ATTRIBUTES_GENERATE_SIGNATURE) != 0 &&
294 [ + + ]: 22 : spdm_request->header.spdm_version >= SPDM_MESSAGE_VERSION_11) ?
295 : 12 : (spdm_request->slot_id_param & SPDM_GET_MEASUREMENTS_REQUEST_SLOT_ID_MASK) : 0,
296 : : request_context_size,
297 : : request_context,
298 : : &content_changed,
299 : : &measurements_count,
300 : : measurements,
301 : : &measurements_size);
302 : :
303 [ + + ]: 130 : if (LIBSPDM_STATUS_IS_ERROR(status)) {
304 [ + - ]: 1 : if (status == LIBSPDM_STATUS_MEAS_INVALID_INDEX) {
305 : 1 : libspdm_reset_message_m(spdm_context, session_info);
306 : 1 : return libspdm_generate_error_response(
307 : : spdm_context, SPDM_ERROR_CODE_INVALID_REQUEST,
308 : : 0, response_size, response);
309 : : } else {
310 : 0 : libspdm_reset_message_m(spdm_context, session_info);
311 : 0 : return libspdm_generate_error_response(
312 : : spdm_context, SPDM_ERROR_CODE_UNSPECIFIED,
313 : : 0, response_size, response);
314 : : }
315 : : }
316 : :
317 [ - + ]: 129 : LIBSPDM_ASSERT(measurements_count != 0);
318 [ + + - + ]: 129 : LIBSPDM_ASSERT((measurements_index == 0) || (measurements_size > 0));
319 [ - + ]: 129 : LIBSPDM_ASSERT(measurements_size <= SPDM_MAX_MEASUREMENT_RECORD_LENGTH);
320 [ - + ]: 129 : LIBSPDM_ASSERT(measurements_size <= meas_opaque_buffer_size);
321 : :
322 [ + + ]: 129 : if (measurements_index == 0) {
323 : 11 : measurements_size = 0;
324 : : }
325 : :
326 : 129 : opaque_data =
327 : : (uint8_t*)response + sizeof(spdm_measurements_response_t) + measurements_size +
328 : 129 : SPDM_NONCE_SIZE + sizeof(uint16_t);
329 : :
330 [ + + ]: 129 : if ((libspdm_get_connection_version(spdm_context) >= SPDM_MESSAGE_VERSION_12) &&
331 [ + + ]: 8 : ((spdm_context->connection_info.algorithm.other_params_support &
332 : : SPDM_ALGORITHMS_OPAQUE_DATA_FORMAT_MASK) == SPDM_ALGORITHMS_OPAQUE_DATA_FORMAT_NONE)) {
333 : 4 : opaque_data_size = 0;
334 : : } else {
335 : 125 : opaque_data_size = meas_opaque_buffer_size - measurements_size;
336 : :
337 : 125 : ret = libspdm_measurement_opaque_data(
338 : : spdm_context,
339 : : session_id,
340 : 125 : spdm_context->connection_info.version,
341 : 125 : spdm_context->connection_info.algorithm.measurement_spec,
342 : : spdm_context->connection_info.algorithm.measurement_hash_algo,
343 : : measurements_index,
344 : 125 : spdm_request->header.param1,
345 : : request_context_size,
346 : : request_context,
347 : : opaque_data,
348 : : &opaque_data_size);
349 : :
350 [ - + ]: 125 : if (!ret) {
351 : 0 : libspdm_reset_message_m(spdm_context, session_info);
352 : 0 : return libspdm_generate_error_response(
353 : : spdm_context, SPDM_ERROR_CODE_UNSPECIFIED,
354 : : 0, response_size, response);
355 : : }
356 : : }
357 : :
358 [ - + ]: 129 : LIBSPDM_ASSERT(opaque_data_size <= (meas_opaque_buffer_size - measurements_size));
359 : :
360 : 129 : spdm_response_size =
361 : : sizeof(spdm_measurements_response_t) + measurements_size + SPDM_NONCE_SIZE +
362 : 129 : sizeof(uint16_t) + opaque_data_size + signature_size;
363 [ + + ]: 129 : if (spdm_request->header.spdm_version >= SPDM_MESSAGE_VERSION_13) {
364 : 2 : spdm_response_size += SPDM_REQ_CONTEXT_SIZE;
365 : : }
366 : :
367 [ - + ]: 129 : LIBSPDM_ASSERT(*response_size >= spdm_response_size);
368 : :
369 : 129 : *response_size = spdm_response_size;
370 : 129 : spdm_response = response;
371 : :
372 [ + + + ]: 129 : switch (spdm_request->header.param2) {
373 : 11 : case SPDM_GET_MEASUREMENTS_REQUEST_MEASUREMENT_OPERATION_TOTAL_NUMBER_OF_MEASUREMENTS:
374 : 11 : spdm_response->header.spdm_version = spdm_request->header.spdm_version;
375 : 11 : spdm_response->header.request_response_code = SPDM_MEASUREMENTS;
376 : 11 : spdm_response->header.param1 = measurements_count;
377 : 11 : spdm_response->header.param2 = 0;
378 : 11 : spdm_response->number_of_blocks = 0;
379 : 11 : libspdm_write_uint24(spdm_response->measurement_record_length, 0);
380 : 11 : break;
381 : 5 : case SPDM_GET_MEASUREMENTS_REQUEST_MEASUREMENT_OPERATION_ALL_MEASUREMENTS:
382 [ + + - + ]: 45 : LIBSPDM_DEBUG_CODE(
383 : : uint8_t index;
384 : : size_t debug_measurements_record_size;
385 : : size_t debug_measurements_block_size;
386 : : spdm_measurement_block_dmtf_t *debug_measurement_block;
387 : :
388 : : debug_measurements_record_size = 0;
389 : : debug_measurement_block = (void *)measurements;
390 : : for (index = 0; index < measurements_count; index++) {
391 : : debug_measurements_block_size =
392 : : sizeof(spdm_measurement_block_dmtf_t) +
393 : : debug_measurement_block->measurement_block_dmtf_header
394 : : .dmtf_spec_measurement_value_size;
395 : : debug_measurements_record_size += debug_measurements_block_size;
396 : : debug_measurement_block =
397 : : (void *)((size_t)debug_measurement_block + debug_measurements_block_size);
398 : : }
399 : : LIBSPDM_ASSERT(debug_measurements_record_size == measurements_size);
400 : : );
401 : :
402 : 5 : spdm_response->header.spdm_version = spdm_request->header.spdm_version;
403 : 5 : spdm_response->header.request_response_code = SPDM_MEASUREMENTS;
404 : 5 : spdm_response->header.param1 = 0;
405 : 5 : spdm_response->header.param2 = 0;
406 : 5 : spdm_response->number_of_blocks = measurements_count;
407 : 5 : libspdm_write_uint24(spdm_response->measurement_record_length, (uint32_t)measurements_size);
408 : 5 : break;
409 : 113 : default:
410 [ - + ]: 113 : LIBSPDM_ASSERT(measurements_count == 1);
411 : :
412 : 113 : spdm_response->header.spdm_version = spdm_request->header.spdm_version;
413 : 113 : spdm_response->header.request_response_code = SPDM_MEASUREMENTS;
414 : 113 : spdm_response->header.param1 = 0;
415 : 113 : spdm_response->header.param2 = 0;
416 : 113 : spdm_response->number_of_blocks = 1;
417 : 113 : libspdm_write_uint24(spdm_response->measurement_record_length, (uint32_t)measurements_size);
418 : 113 : break;
419 : : }
420 : :
421 : 129 : slot_id_param = 0;
422 [ + + ]: 129 : if ((spdm_request->header.param1 &
423 : : SPDM_GET_MEASUREMENTS_REQUEST_ATTRIBUTES_GENERATE_SIGNATURE) != 0) {
424 [ + + ]: 22 : if (spdm_response->header.spdm_version >= SPDM_MESSAGE_VERSION_11) {
425 : 12 : slot_id_param = spdm_request->slot_id_param &
426 : : SPDM_GET_MEASUREMENTS_REQUEST_SLOT_ID_MASK;
427 [ + + + + ]: 12 : if ((slot_id_param != 0xF) && (slot_id_param >= SPDM_MAX_SLOT_COUNT)) {
428 : 1 : libspdm_reset_message_m(spdm_context, session_info);
429 : 1 : return libspdm_generate_error_response(
430 : : spdm_context,
431 : : SPDM_ERROR_CODE_INVALID_REQUEST, 0,
432 : : response_size, response);
433 : : }
434 [ + + ]: 11 : if (slot_id_param != 0xF) {
435 : 10 : if (spdm_context->local_context
436 [ + + ]: 10 : .local_cert_chain_provision[slot_id_param] == NULL) {
437 : 2 : libspdm_reset_message_m(spdm_context, session_info);
438 : 2 : return libspdm_generate_error_response(
439 : : spdm_context, SPDM_ERROR_CODE_INVALID_REQUEST,
440 : : 0, response_size, response);
441 : : }
442 : : } else {
443 : 1 : if (spdm_context->local_context
444 [ - + ]: 1 : .local_public_key_provision == NULL) {
445 : 0 : libspdm_reset_message_m(spdm_context, session_info);
446 : 0 : return libspdm_generate_error_response(
447 : : spdm_context, SPDM_ERROR_CODE_INVALID_REQUEST,
448 : : 0, response_size, response);
449 : : }
450 : : }
451 : :
452 [ + + ]: 9 : if ((spdm_request->header.spdm_version >= SPDM_MESSAGE_VERSION_13) &&
453 [ + - + - ]: 1 : spdm_context->connection_info.multi_key_conn_rsp &&
454 : : (slot_id_param != 0xF)) {
455 [ + - ]: 1 : if ((spdm_context->local_context.local_key_usage_bit_mask[slot_id_param] &
456 : : SPDM_KEY_USAGE_BIT_MASK_MEASUREMENT_USE) == 0) {
457 : 1 : libspdm_reset_message_m(spdm_context, session_info);
458 : 1 : return libspdm_generate_error_response(
459 : : spdm_context, SPDM_ERROR_CODE_INVALID_REQUEST,
460 : : 0, response_size, response);
461 : : }
462 : : }
463 : :
464 : 8 : spdm_response->header.param2 = slot_id_param;
465 [ + + ]: 8 : if (spdm_response->header.spdm_version >= SPDM_MESSAGE_VERSION_12) {
466 : 5 : spdm_response->header.param2 = slot_id_param |
467 : 5 : (content_changed &
468 : : SPDM_MEASUREMENTS_RESPONSE_CONTENT_CHANGE_MASK);
469 : : }
470 : : }
471 : : }
472 : :
473 : 125 : fill_response_ptr =
474 : 125 : (uint8_t*)response + sizeof(spdm_measurements_response_t) + measurements_size;
475 : :
476 [ - + ]: 125 : if (!libspdm_get_random_number(SPDM_NONCE_SIZE, fill_response_ptr)) {
477 : 0 : libspdm_reset_message_m(spdm_context, session_info);
478 : 0 : return libspdm_generate_error_response(spdm_context,
479 : : SPDM_ERROR_CODE_UNSPECIFIED, 0,
480 : : response_size, response);
481 : : }
482 : 125 : fill_response_ptr += SPDM_NONCE_SIZE;
483 : :
484 : 125 : libspdm_write_uint16(fill_response_ptr, (uint16_t)opaque_data_size);
485 : 125 : fill_response_ptr += sizeof(uint16_t);
486 : :
487 : 125 : fill_response_ptr += opaque_data_size;
488 : :
489 [ + + ]: 125 : if (spdm_request->header.spdm_version >= SPDM_MESSAGE_VERSION_13) {
490 : 1 : libspdm_copy_mem(fill_response_ptr, SPDM_REQ_CONTEXT_SIZE,
491 : 1 : (const uint8_t *)spdm_request + spdm_request_size - SPDM_REQ_CONTEXT_SIZE,
492 : : SPDM_REQ_CONTEXT_SIZE);
493 : 1 : fill_response_ptr += SPDM_REQ_CONTEXT_SIZE;
494 : : }
495 : :
496 : 125 : libspdm_reset_message_buffer_via_request_code(spdm_context, session_info,
497 : 125 : spdm_request->header.request_response_code);
498 : :
499 : 125 : status = libspdm_append_message_m(spdm_context, session_info, spdm_request, spdm_request_size);
500 [ - + ]: 125 : if (LIBSPDM_STATUS_IS_ERROR(status)) {
501 : 0 : libspdm_reset_message_m(spdm_context, session_info);
502 : 0 : return libspdm_generate_error_response(spdm_context,
503 : : SPDM_ERROR_CODE_UNSPECIFIED, 0,
504 : : response_size, response);
505 : : }
506 : :
507 : 125 : status = libspdm_append_message_m(spdm_context, session_info,
508 : 125 : spdm_response, *response_size - signature_size);
509 [ - + ]: 125 : if (LIBSPDM_STATUS_IS_ERROR(status)) {
510 : 0 : libspdm_reset_message_m(spdm_context, session_info);
511 : 0 : return libspdm_generate_error_response(spdm_context,
512 : : SPDM_ERROR_CODE_UNSPECIFIED, 0,
513 : : response_size, response);
514 : : }
515 : :
516 [ + + ]: 125 : if ((spdm_request->header.param1 &
517 : : SPDM_GET_MEASUREMENTS_REQUEST_ATTRIBUTES_GENERATE_SIGNATURE) != 0) {
518 : :
519 : 18 : ret = libspdm_generate_measurement_signature(
520 : : spdm_context, session_info, slot_id_param, fill_response_ptr);
521 : :
522 [ - + ]: 18 : if (!ret) {
523 : 0 : libspdm_reset_message_m(spdm_context, session_info);
524 : 0 : return libspdm_generate_error_response(
525 : : spdm_context,
526 : : SPDM_ERROR_CODE_UNSPECIFIED,
527 : : 0,
528 : : response_size, response);
529 : : }
530 : : /*reset*/
531 : 18 : libspdm_reset_message_m(spdm_context, session_info);
532 : : }
533 : :
534 : 125 : return LIBSPDM_STATUS_SUCCESS;
535 : : }
536 : :
537 : : #endif /* LIBSPDM_ENABLE_CAPABILITY_MEAS_CAP*/
|
