linux-stable.git/tools/testing/selftests/wireguard, branch v5.6

wireguard: noise: error out precomputed DH during handshake rather than config

2020-03-19T01:51:43+00:00

We precompute the static-static ECDH during configuration time, in order
to save an expensive computation later when receiving network packets.
However, not all ECDH computations yield a contributory result. Prior,
we were just not letting those peers be added to the interface. However,
this creates a strange inconsistency, since it was still possible to add
other weird points, like a valid public key plus a low-order point, and,
like points that result in zeros, a handshake would not complete. In
order to make the behavior more uniform and less surprising, simply
allow all peers to be added. Then, we'll error out later when doing the
crypto if there's an issue. This also adds more separation between the
crypto layer and the configuration layer.

Discussed-with: Mathias Hall-Andersen 
Signed-off-by: Jason A. Donenfeld 
Signed-off-by: David S. Miller

wireguard: selftests: test using new 64-bit time_t

2020-03-19T01:51:43+00:00

In case this helps expose bugs with the newer 64-bit time_t types, we do
our testing with the newer musl that supports this as well as
CONFIG_COMPAT_32BIT_TIME=n. This matters to us, since wireguard does in
fact deal with timestamps.

Signed-off-by: Jason A. Donenfeld 
Signed-off-by: David S. Miller

wireguard: selftests: remove duplicated include

2020-03-19T01:51:43+00:00

This commit removes a duplicated include.

Signed-off-by: YueHaibing 
Signed-off-by: Jason A. Donenfeld 
Signed-off-by: David S. Miller

wireguard: selftests: reduce complexity and fix make races

2020-02-17T03:21:56+00:00

This gives us fewer dependencies and shortens build time, fixes up some
hash checking race conditions, and also fixes missing directory creation
that caused issues on massively parallel builds.

Signed-off-by: Jason A. Donenfeld 
Signed-off-by: David S. Miller

wireguard: device: use icmp_ndo_send helper

2020-02-13T22:19:00+00:00

Because wireguard is calling icmp from network device context, it should
use the ndo helper so that the rate limiting applies correctly.  This
commit adds a small test to the wireguard test suite to ensure that the
new functions continue doing the right thing in the context of
wireguard. It does this by setting up a condition that will definately
evoke an icmp error message from the driver, but along a nat'd path.

Signed-off-by: Jason A. Donenfeld 
Signed-off-by: David S. Miller

wireguard: selftests: tie socket waiting to target pid

2020-02-05T13:14:18+00:00

Without this, we wind up proceeding too early sometimes when the
previous process has just used the same listening port. So, we tie the
listening socket query to the specific pid we're interested in.

Signed-off-by: Jason A. Donenfeld 
Signed-off-by: David S. Miller

wireguard: selftests: cleanup CONFIG_ENABLE_WARN_DEPRECATED

2020-02-05T13:14:18+00:00

CONFIG_ENABLE_WARN_DEPRECATED is gone since commit 771c035372a0
("deprecate the '__deprecated' attribute warnings entirely and for
good").

Signed-off-by: Krzysztof Kozlowski 
Signed-off-by: Jason A. Donenfeld 
Signed-off-by: David S. Miller

wireguard: selftests: ensure non-addition of peers with failed precomputation

2020-02-05T13:14:18+00:00

Ensure that peers with low order points are ignored, both in the case
where we already have a device private key and in the case where we do
not. This adds points that naturally give a zero output.

Signed-off-by: Jason A. Donenfeld 
Signed-off-by: David S. Miller

wireguard: selftests: remove ancient kernel compatibility code

2020-01-05T22:08:32+00:00

Quite a bit of the test suite was designed to work with ancient kernels.
Thankfully we no longer have to deal with this. This commit updates
things that we can finally update and removes things that we can finally
remove, to avoid the build-up of the last several years as a result of
having to support ancient kernels. We can finally rely on suppress_
prefixlength being available. On the build side of things, the no-PIE
hack is no longer required, and we can bump some of the tools, repair
our m68k and i686-kvm support, and get better coverage of the static
branches used in the crypto lib and in udp_tunnel.

Signed-off-by: Jason A. Donenfeld 
Signed-off-by: David S. Miller

wireguard: selftests: import harness makefile for test suite

2019-12-17T03:22:22+00:00

WireGuard has been using this on build.wireguard.com for the last
several years with considerable success. It allows for very quick and
iterative development cycles, and supports several platforms.

To run the test suite on your current platform in QEMU:

  $ make -C tools/testing/selftests/wireguard/qemu -j$(nproc)

To run it with KASAN and such turned on:

  $ DEBUG_KERNEL=yes make -C tools/testing/selftests/wireguard/qemu -j$(nproc)

To run it emulated for another platform in QEMU:

  $ ARCH=arm make -C tools/testing/selftests/wireguard/qemu -j$(nproc)

At the moment, we support aarch64_be, aarch64, arm, armeb, i686, m68k,
mips64, mips64el, mips, mipsel, powerpc64le, powerpc, and x86_64.

The system supports incremental rebuilding, so it should be very fast to
change a single file and then test it out and have immediate feedback.

This requires for the right toolchain and qemu to be installed prior.
I've had success with those from musl.cc.

This is tailored for WireGuard at the moment, though later projects
might generalize it for other network testing.

Signed-off-by: Jason A. Donenfeld 
Signed-off-by: David S. Miller