43 lines
3.0 KiB
Python
43 lines
3.0 KiB
Python
#!/usr/bin/env python3
|
|
"""Require real architectural timer boot without the BCM-specific early write."""
|
|
import hashlib
|
|
import json
|
|
from pathlib import Path
|
|
import runpy
|
|
|
|
ROOT = Path(__file__).resolve().parents[1]
|
|
base = runpy.run_path(str(ROOT / 'scripts/check-original-launchd-main-checkpoints.py'))
|
|
require = base['require']
|
|
expected = base['candidate']('native-owner-arch-timer-candidate',
|
|
'8bd4387f7a1b83ceb76ed9d8d7ab4c32c497a48de00eb32e8d080d6c80582a90',
|
|
'655825844686147147aba8e76ca02c2871a1b95df170e332e92a49e2df604d47')
|
|
directory = ROOT / 'build/native-arch-timer'
|
|
r = json.loads((directory / 'qualification.json').read_text())
|
|
sequence = bytes.fromhex('af0038d5ef1d4092000088d200bc70d30000019100080f8b011e8052010000b9df3f03d5')
|
|
for mode, stem, count in (('legacy', 'legacy-start', 1), ('architectural', 'architectural-start', 0)):
|
|
obj = (directory / (stem + '.o')).read_bytes()
|
|
args = json.loads((directory / (stem + '.o.json')).read_text().rstrip(',\n'))['arguments']
|
|
require(hashlib.sha256(obj).hexdigest() == r[mode + '_object_sha256'] and obj.count(sequence) == count and
|
|
'XNU_NATIVE_ARCH_TIMER=' + str(1 - count) in args,
|
|
'Actual assembly command/object must retain legacy or remove the complete specific MMIO sequence')
|
|
image = (ROOT / 'build/xnu-prelink/native-owner-arch-timer-candidate.macho').read_bytes()
|
|
require(image.count(sequence) == 0 and r['linked_sequence_count'] == 0, 'Linked candidate contains no legacy routing sequence')
|
|
d = base['report']('owner-hvf-arch-timer-launchd-main')
|
|
require(d['kernel_sha256'] == expected and d['native_4k_mmu_observed'] and not d['bounded_timeout_interrupted'] and
|
|
d['stop_symbol'] == 'original-launchd-main' and d['original_launchd_main_executed'] and
|
|
d['followed_main_entry']['first_instruction_completed'] and int(d['pstate'], 16) & 31 == 0 and
|
|
d['direct_user_commpage_shifts'] == {'fffff4025:1': 12, 'fffff4037:1': 12},
|
|
'Actual original launchd must still execute at native-4K EL0')
|
|
a = d['armcpu_globals']
|
|
require(a['_armcpu_registered'] == a['_armcpu_gic_ready'] == a['_gCPUsRunning'] == 1 and
|
|
a['_armcpu_timer_interrupts'] == 243286 and a['_armcpu_ipi_interrupts'] == 0,
|
|
'Real architectural GIC/timer must interrupt; no observed IPI or SMP claim')
|
|
require('owner_cache_carrier' not in d and d['actual_root_composition']['_native_owner_cache_native_union'] == 1 and
|
|
d['owner_root_binding_audit']['boot_root_accepted'] and d['owner_boot_manifest']['status'] == 0 and
|
|
d['original_amfi_table_owner_observed'] and d['actual_signature_failures'] ==
|
|
dict(_cs_validate_page_bad_hash=0, _cs_validate_page_no_hash=0) and
|
|
not d['functional_ipados_boot_demonstrated'] and not d['sheng_hardware_tested'],
|
|
'Preserve owner authentication, original policy and honest offline scope')
|
|
print('PASS: legacy BCM pre-MMU write absent from actual architectural entry object and linked candidate')
|
|
print('PASS: 243286 actual timer interrupts, original launchd LC_MAIN at EL0, native hardware 4K and user shifts 12/12')
|