Page MenuHomePhabricator

Using test NV counters causes protected storage to be invalid after reboot
Open, WishlistPublic


Looks like the WRITE_ONCE flag can be overwritten when using SST. The SST Regression Test cases 2002 and 1002 ideally should fail when run the second time on Musca-B1 but it doesn't fail. This means that the WRITE_ONCE could be successfully updated which is a bug.

Event Timeline

This issue is also seen on Musca-A board.

soby-mathew updated the task description. (Show Details)Mar 26 2020, 9:32 AM
soby-mathew updated the task description. (Show Details)
jf549 claimed this task.Jul 7 2020, 11:16 AM
jf549 edited projects, added Restricted Project; removed Trusted Firmware M.
jf549 added a subscriber: jf549.

This is an issue with the way the tests are done:

Using test NV counters causes protected storage to be invalid after reboot

When the regression tests are built, the SST_TEST_NV_COUNTERS flag is ON by default. This replaces the platform NV counters implementation with a test one that permits setting the NV counter values to arbitrary values, which is used to test the behaviour of SST in various rollback scenarios.

One other difference with the test NV counters is that they are not persistent, so they reset to zero when the device reboots. This causes verification of the secure storage to fail during initialisation, because the NV counter values do not match the ones in storage. As the SST_CREATE_FLASH_LAYOUT flag is ON, SST deals with this by wiping the storage and creating a new empty filesystem.

Ideally, it should be possible to use the test NV counters and still be able to have the storage persist across reboots, to be able to test reboot scenarios.

jf549 triaged this task as Normal priority.Jul 7 2020, 11:16 AM
jf549 lowered the priority of this task from Normal to Wishlist.Oct 28 2020, 9:52 PM

It is not a requirement for test data to persist across reboots, and there is no impact on release code, so this would be a nice-to-have improvement to the tests rather than an issue that needs fixing with any priority.

jf549 renamed this task from PS test case 2002 and 1002 should does not fail on Musca-B1 flash when run for second time to Using test NV counters causes protected storage to be invalid after reboot.Oct 28 2020, 9:54 PM
jf549 reassigned this task from jf549 to Sherryzhang2.Jan 18 2021, 2:50 PM