From bf4896921d439b2a9a105fbf1474c9b4b96b0544 Mon Sep 17 00:00:00 2001 From: Alex Wu Date: Tue, 22 Apr 2025 19:00:30 +0000 Subject: [PATCH] Add COS 121 event log test --- testdata/eventlog_data.go | 2 + testdata/eventlogs/tpm/cos-121-amd-sev.bin | Bin 0 -> 23897 bytes tpmeventlog/replay_test.go | 55 ++++++++++++++++++++- 3 files changed, 55 insertions(+), 2 deletions(-) create mode 100755 testdata/eventlogs/tpm/cos-121-amd-sev.bin diff --git a/testdata/eventlog_data.go b/testdata/eventlog_data.go index 8dc16e9..d79a9c1 100644 --- a/testdata/eventlog_data.go +++ b/testdata/eventlog_data.go @@ -41,6 +41,8 @@ var ( Cos93AmdSevEventLog []byte //go:embed eventlogs/tpm/cos-101-amd-sev.bin Cos101AmdSevEventLog []byte + //go:embed eventlogs/tpm/cos-121-amd-sev.bin + Cos121AmdSevEventLog []byte ) // Kernel command lines from event logs. diff --git a/testdata/eventlogs/tpm/cos-121-amd-sev.bin b/testdata/eventlogs/tpm/cos-121-amd-sev.bin new file mode 100755 index 0000000000000000000000000000000000000000..e371c8744caa28c77a28f39df5e5523fa896e995 GIT binary patch literal 23897 zcmeI42UHZv_VAk^X$A$!A}}B#nVBIANKQ(Qk{M5-*>((k5e6rzPGBYe|78D?FIkh9d+hz6^k{^WurJNK8=?dy3Q@1+^(T|cqjC}}CRfdbsaN~I-`rf8Gs zL4&^2vl?_14p+p)-DR4NdtLOo!_;+?DnJ~^+g!o=M6mzDrJZF&!J2?7pbn~G2H*fZ zKmdFJ6yOH#Yi#Vh1ODJX9>9V}`~c*pq5%CrG!>$Adoze;3rA(8v~<)|hV^>%9fANZ zw|N<~Dxl`3WpaJ2*ef6J;dgnY+1$dlXk_s3Wum(Q1?Zh#2+J_;FDMO5ljyzMb|9)# z=vgekcne#;`^UEIT^9i3i(D8+)Kpa+rswIQ<>^Dv_HgtBNVc@u z&M3hR@L1Sp8;-0EF6t^NYwOM?-%jZ=RvkKUoC*T;emQcHKej}@HEw3K*;L5kc#cGZ zpI>+tLV2l{Q>k<(6cBzkaPx!l$jznGwv2PAs++Z}2z8}1QpcK+E=H9?2c+Yb%4EU_I`08j8A0U-HS zU9k+Bim2AC=aNci0{5%#TJgTl9|r-fJI7!6L6k+VF9d$=ZkJ>Ue>m^*UcYfpi7>3m zcn#421#TVP>0%$?J$ZIf`NT?LUz%qfWz&3w2K!aR_)zM{d@vFC9#icTNsCcS)s1g* zr2GQOf2%I(mb#|kIbt#ZjsV3L*UnC6lpl_{T*YK9w1D3}CkvJtS`8nHO)S;SO0%le zY+*kMk09RT?j902Ed{k;v{v*oEeQ!^2LKPx zLO|fu6lA946bz)M#s~&DJ#mMMfkqYOhI919d*DzAW;i49ASDB>uBWdD0fqB`nc=Yh z2uApB;&B=Vh^D8flN%PMqoXQ{;DU1yk3txjRXsNfWAQM3F9OaT7lg&Y^o;003Ja?LmELs0*quQbL&6dn^kz|^V;OOFze5BiDzGMYNS*rroL0C zp(MZjfVAS&Ltn{b7oVRX7da-IW=YRedV#vG*pt?k%Yio_g#0k*va`{&Yw&5&1-h(rDYyU{IN$G$@Dx;Ukdx?Lh?-Xum}48k2~vtOc`{J>57{JHVU=(M`l zN2V6|6XdzOZKH@z*Aqu?mmFixEr68wX+$d)2bN6qgkRx*kjc!38SJAyeU%EWTx&va zKbWhevc6}?`;>8p$vZ6V&ea`_UbV{Zq+}!jNr@{Q2j2zu0}cifl6CSOa56B13lI`dajTM`Bs$F0s))T#Sy(cxX+7^-Bqi-_8J^^9{KnIc$@s)NDQJ9wlkr zC^#GAp<7d85E5$gTCwYbB}A?yqCqW@>xGlK9|odP{Am_hKAEm~^}+i!-&MMShzC>e zX01l*zr<*XR6QtLO0@ZKk7*w!UNlP9bAYxU^?_rT?#!AcO;p(U{nee0{nyjeOLMG6 zV@#c)8OgVENNZDUTl^;w_o7?^Efn`S&uZC{&g)+&6#w+4%y|Eex;lC*`hdHG>8ZQ{ zVT`R87Ia$17pN}vuXGODJ@Y%9NfQqwT~E7xVPI74*`TmsFlO*xVenxpk?Yl;XPGIS z38i{_zeS#mnd`BXM~{(DZ9Xw+7?7?vr?KlnfM{KVoRZAsq&@m)_iLt6EG(NLa-O_0 zlvIOCj)A|0-u7ALA45+BgdWot^bG1^(-OyLG|juw$uCn| z_Wb&3+<;!*e;<1MaK26Gacw}4$U5}^v@^=X3H#5$CocXC_`qFw`2V!_KZD=g3Acmx zCr6H_w+pwaL-<)EnS)-PmJ+4Ye>1|@!T6j@>N4G>BvN+;TNzgkKbNlH2XJ$SI~^>; zDhso6*@kb}t}5R+$9(+NK-JNT2fh0q)6Yd>yKOn8tWI7_UV#ZZ%oR&KMj=h~3sbLO z)_M{W_{xrt&wpm<8SBC@O-_>&+DGA__#l(G%cn1;D}J|DBZHby`q4}31G1mW z51(efbfCDHyWs2nuVEQcMT#L`6p!(Qr)3WxCOxD=>dCsIcFZ(>hc0sH^!WSiyyQOw zzlbYqd_qrY^#V=KTYh*JjsAUGkl1SS0_dFw4m+{M_e8cMskmU1JS#O<@(S2(ga2B){m?Ak^L<9Z@$u)q6i_ zXXZiJ{yVvoT)~F~Ewi%vX{!WKUb2k@NFYtm7qNpAdwO#*i|@N#d(0(e*_eg==Mcif z&8BIC9TzO7AqLF1(#%xPs?G+xT<5S0NKl0ea%4bQBe+$1d_~V0YK><&W zm(%c#bwjoitOOmxBDr^v}+ zE0!)VhV`RU8*kog^L-?9EOa+^hNLa|lCtJIPYT%kBEM=WvLo}-)0R`V=gDW*I8x{; z4eig0>~Hrxeq$wFi7XFdjg3CEFy=YK*Kqe@aI?+Lj5EGmCP8_RIvNk2fH-;ArF0#d z?S9(bDRo3N^Fxr-{wvYU&{|*>w^Sr{fPYx`t)rH(K7&sD@VHH8_5syakuNHP0|Axv zF7_+YZ;RsM?Q?E(zB2R=)ez2q{CJPK%%xVk&*%GJ=}>#IanZz(bJgEDbn5PYHmQt+ zQSAad!zT-=rj<4Mc~sXu-6OFJ#}~u&IrVs|`KO+db}arO%z5N~+M#RvHc#Jh{`HgL zbwcO6xJBMUD_QSTx1Jbvkjj38xt|vP0p_S(o9!Rt`;`w-1-mADa8uqNe4e#hruEu+ z`LgVo5tkS`B;jkIzE!SeAA^3vc?!R>wS2OIGKG=!&_{mf4O_g8(7i05&5GodTWxpk zKDL&a=kJ#in=nO=g~*(sO>dEJA%z3)s+!PWE-VC!-PASx#JzOvGk?n&vB3!DsPUcw z`%j*qxJZ=~`kVnZ%+Ah0(c<%qWcmR#>(&$b6-A*%pTYE^UH;HrRQ;!&06 zQ_#C9A;~NT*Avo%3a?&zt>UmikBbP@KQjTy-vJCi1IIblc+u}_maBZ5DFGqO=;8d zUlpL#D&EzQRgx2_xg#k?b?zPJF!J%>0lrrgq);GLA74=5)eBGG6)qrW@C<$bb;;_U z!RHcIuQOqNdG40H6!^Fm#p$afyH5wO(q}ZKgD#2hF}H2wxf9(LU?O5J;5VSl-h$w< zAA`;r1f9Vq=%|6p!us0$WLU-bgbV%C0k<{Hg)l%=o$;RTIA3?-ES3e%v`Mv{-%t%f zoVX%n5JQ6d&M^r2PFKxOVzHh+pG_8Eb$2AfTHQ!@Tak&!3-E?9Po5Fy(_@jO!x$H8=HGCA_OfYpJeFfY9B7WHrnN6 zPG9QXq;Nvg+1D|#^Qte-vw?;4ED{P+1#D^KH`x{b3LgGq!<7L}NSVnQ?>)|S!ia0c z*1kv5#eba4u#{Oi1P{NsISUQ1f`?ax{jf}Ncw}jK_+Nh4BYyS7K#58-Y|puWz|8}$ zkEI2|1SHutzBrM_YL-ZvPzv7JD|or&=2y4M@vF7PgCRVZ7h8=XZ-(hxs1IVl$i7}i zi(eIDY)ac6lI5_c}!xR3!Aq1!PW!OtH<-p#w!YLTszfhfE+m30L0t*K|&FwHu<|%Y5%} zyRyZl{2y}(bh?pwZ*ytx)!5$8_pF+~=Ti8|{}PzE;arH0HTUEhgnGh98E5iTXua>omMk5}BHJAQKQZC0r@znyn?;aIs1MxAn+bV159NdK<- z#OpUhCr^G>J~h_Tagm;Nbuaysc@_$2-J;w)n!(AOcRb$CMfv_mda*;d9Wa57J`u0? zW?OU{J0KpZ;_@gq#;mM`p z3I9tS00h@R9;u&#%d*=)x0(Zx=zJsZcO`}_Ad7nM8^rQay~mY)__Mo9IN^sVW!Bkb z?+DoX2)EC$eKcLF+~Y zmotvNr`)Nf_9(9%iOr4FM>A`pn!WPPt19(u55Hc>eQrAb{xM@cd|DTlT{JOUX>8j} zEB#uDHvOg##hP49V~xecD{FITC>Pn>+zY#UV29~xB9?+q##(V&7$Af*wKa4B(VOV(XTBzQm^0pB|CdxPtLPsN`> z>heYAUHqOxG}io6Zj95wT@JWGL#glQJ*UaF2HTk;sUF+0j?hS!r?_8oNiNpIvOdT* zJZ9e&S14@<2zxILk*lb$=0OU$oR=gs?tBQ=nvcJ5GtBMHtt$bU12CbwZk@ntCn|3H zk)~H^7r)eL$#H;zU!sRM8@rmx7*(yDJ^?pX&`Q6x@4_>4Bbi zjF%8u{O4W90;X`P6LJF%>-MwwYqY^R)Z}@piSwgKRZYvCW`qJ@5z=b{BhRj5)IX@b z2`K}(-meg4+>D5&_#pJKyfUmZ^mg70K*GgyW9S0C`mAu~FvcGi_$dOy>t(o>i!2X@ z`c^PED)$TIty9LlV=1}B4?BDP>!Oow_dUa`bei}zjSR<$pkcE5Hp?tZOBaf=CFa7W zNP)~)V=cCUYW)i<4R16IqCSXRVU>^@6rszaqsx6Jsog)RWpX#KNYmxHzvlOm%Vga#2kZ}9TYF`p~V}imQ#(79oY9f^b&h6E&Ew~j{vqU1g!lS z0n;D?2DcGV!QovXdmc^pJpz8u9{AHAux;A~`un!a&uQ?#r0vhZkjFiE7eQfRT(fUq zj`*u9we86#lryzoo=ZKw;{ZiEHj}}CvUF5L?dq zz`OeXQfu_P(@&Y3j9!i$^z-VHhU^}a4^2_v!?QiBn4V)a9`f;s!!=7zrzdtPg;?GGWx zg^KqAyGS__SgqcC1BM?K_$e5U?_j(;)>Jxy@S||hu1^PE4-UO`)50sO*q;m0nHOg@ z_s=yr=;sZ8>3Ha}CW%C@lCzJt`RaQYlH{{!suHnsk~2exbKXU&Khz_L^}T+m!Qc1f zDbvSC2}2c3u|CS@&Y zu6X3MXg?Ef<={5pk;q0K{!lx2JKA-M)6!xhy+Zy;BH2Li%5EmC*wQ*TF07VfV!^2ua~(}zG|OUHx+^-q{SCB!ZJw7{|)b%fFmS-q2kdiR*?0r&IIQ-Ua56LqV_&8l=m z6%9P^Yfv|Hk^U1E4!MNZ@s!X5W42ZaP}AuQ%r3wdcHZ zARJm5K<)y(nKV2~xT2td&wLBb2$lTJ%-7fB&}aKAmYA*MS({tV*-#Z85NZlg?+fUY zIh65HWjY6U{i%1CNY9+4OrL z^p)%g40i12g0I;Y8d4kdwVk`29s>b{rb;bdPlttE|!YM{m5k2 z$mfO>Q0n*k5@W)M$$sM(_(${*91I$R1BeZ6`2bUJ^;!ea24H{(7^US7*24~rHzLMu zVE_@p3;YG^LjnZ`l*u+ilSoJ?z$PGLq1*WTtxE%;>*Rpmd8%;wLJQrfofCVEge~g7 zZ3&*zk8g87J}%;rrF(v*%!^-(Zyvd6RyUM%ewjSz)wI)%9-vCU*Aj<**b;Dn8dOynYzZ8o4A$5SEJaSq2;6RKIySo^p_$4 zCJ`JB&!@@G4htB5p!89~^(#&DIhi{!)!amHeo!hH^W=u}aDoxTl9au?+;C_V0q5xf za|GSKFcnWv!bTvIC$UL3wEXK(N^GOQMmqQ`{)Khltn*)0cVesmbuGW+FO?2b>MyK2 z(RdjLwwZt^8kWDDwD2WZX$aoVRb6$X;Y$q$Yvn-MkF#$p-c?WSI!ab%+k4XlXg+WKIYH=j zqH9Jw>3tt6L-1yQzmi4l|HMRGj3*}IO4e^(E98GK%K!O+qdyBI_}OIZ??w4P5P131 zb@pEeUjDT34;GjHe_xa*VjP6&mU)x)r04p`+|3=TEu4q0-}RQjU)3yw0Mp&8H*I4^ z0@fm}YAlu&GbAe(?%OL#or#$r+8Z*>9SjA;%N~_G>L$P%M9e_E4pf>)iq7hvCsr8Fc7&>4t%X)L)OL)_+t#1fX1Q;XgvRC$wu(tSEPQq za^wEbARRsgxqJpGs|6|S8-C#idMq0o7YdPyA#Gq3nKo2z0m4AKWU*0C2 zXp#?+d#V{HANsCX{>xlt_U>C}ALx0M^0~z{>L}>~18Q6HH``%bfDxb%{xkWH<$qs) zg($_b9id7kMd#jXrw*QR1O_%GuIqo({9wTCcKubhRr zp?@p?zW$nb)pz40^wTr)o?d;cR?wrYw0YU>d|Svb_5aW0fB*bNy(>P)*r!I{68h~u2lc88%w|(=4oD4ErOiuj z=i37QEcsd}XKrl__~MHm7K;IayV#!}z~7}hkvR7LjSb0x=)cGLL#*WDhioR$+QBCm0+B0o2*o$hzW#$_1W0 zyr39YSx_L@aE*hmXO8d78`AeDO|qcCwa^F$$COZ-E1B5L0?0?%hdT04n3h?bUzH#j zrSnA0ZJ%1mAR000Gb`)Ym$fW7ia@EX2J@}NsYFxQ0&sC%t{v;eg^>(;|^XhxHoiE=C(E2;p+ZilZ4z;qK#>`QXZqm$1FN)p+MN% z{odk-&9A2HOXSW}(|oBynXk2DH6}KI<=pWeJT-;$LF&5mXdS<6*V^g*mr-;?rU`IFCbt z?*i(8_#q<54e)V55rh%K;2UWO@O?CJ$(iO`?GJrz3i=Rt`NGtfHc7_jMz%N6)_Wm< zox>Tr(Bi%0T6RN5L$7X<^&}1WMsuBFxcY{M@2barAt(^ZF0cfHramtc#gw73G0iuc zOft(t+~wt$c$vzp@UFT%77V(P(^TB4=aZgW1*9l|+I_G6b{F4w-g5|k1a!hBTKu*B-BlA$UPHnNf>H; zF=$V7AJG|g_CfE2ynmE>E)+->HSHOs*DA~zIW`jl&G1}T=L*k# z%Da!yZpu!JW_{y!T>0THQ0=YzZi4sqAz(4z-Tl93@&ECwls}shfAbQh_}`)Re}~rp z9a{hAgw}s+=d`m>UkuMGq;`D8x<}N*&)#}mDgpukhuJu*zHsOXai+eQa*bP`VUKM$ zqq&kJk>1Xx!N+Hq0?bUbV`mx$?*05@Oy_E($6p?#Q z3l&>Xa?sSB;L0J++F9w|ZP+ZC+ZCWoUim%-mpAA*U*(&Q&{<- z@{_Ms-A-5>D$`Oc;ZSaFBotgOBB(v|pTc~~&V2x-KXgh!{hSWXB)Y>H`RRkqYoS=2 zpa~nT;`Iym4Og|i6K3 zqo&oReeXlVMEoJZOR)k&|SPU@x4UiJO#kre6O#<9a!pnw#ks8@TI zz!($uvb4$C-lw}gvQ`%}Tgg2jX+Qxjvt0d%_xh*cu$Cu;SS*i&<0&RkDp3VHv^(Y? z41;w<`MMF56_DSlQ!(RBkTyD{z19bwIj~}op_sYLUzae1A_=cj(l$f@*qGa>R}CXO~jqD z`>H+T$pyl!xG2ZVM?OXk3^%OH`tDRhfljYX?Ms%o4!(D^)=7#NEGs?mM7dInx~B1y zX~c`@vlkjjlI=w^tR_D;1lISTNiF30rgfaW2wr%cCmu%#ggIm2FeHq)tNfjAV;8SL zloNZVPM&&V%Zv7!cYLV)3IcR=?_p|4d=efcHPGtIb&b6JW8RYk#|d|22IlzH>T49C zKz;97)!suEdcF_ro$C`N2Q(;nYg!#oUs?BkM?hctP(gR!cqUc#WL&&Isu&hY50Ad`eIV;Q8>``HmA5To$mg{nqOSNruzU_Ot zCv-Xiqm`4PEZ?-76$~K>6LBNJ;4qu-6v`KHJpiM6{uN_*xJ-f7dxul(^GFDwy|#MZ zCW)6+Mi6zJrs!I~<>lAnCTVMLR2_KCECw)BYHwyV+3EN%$H$7cnt+c${=n&eUX(n?x zUW&2Bjprc*7%or$;N5Wb^@9^juLKY})tcy$lhGA@y6;SU#g8a`0N;)@IpHpW70<6t z=DOA0%Lh-5({d|S3srW%cgE?3G(4HIDf{Nrp#9M$5$BasL-$O$GC%Brub?tuNw~ER_*a{ ziq&U7>I?p(CCFbW& z%!5RgVK@&QK|##d2QTJ^b08KVVBIm>ISda1&mV;&fEzFmPdwJg*BuL99{iSuAJ$Dl z8iw}t@bPrRDi8>Ph+pp*!-WwDNhBN&^TDEhiO-(`%F7FdclX4@{BU@1(b~=fOAz%y zdEx8`0SXA1hda*BA4NbrV?3P{;4rk0yC??dgK}`gV!*R*o+ykL&O;O%fOhl6U=>`k zcn_?bh`T4o*9|M|h{L=4qwrYR=Dv>zvADw4-`ElGI439Y6Cc~9?9gr~A0JUK6v0_R z%n!9$Zx25l28R;cF0*wdQ6HR>9Txn23?7XIwSeJd5t5>y5G>do!F@E|)5i`R7GRr+ z*j5S#p!?d?R9j6!6?~^kRz_J_L`_;*QbbB!LR~~z0x2aTr79z>A}ygR0hdstIsRS8 zp&O{-K&?bMSa4tI2uxaFFiK1qhXCe!rzs|fk>P?b`3T+aL(yMP52QOdcyyavj&pNf z>jnq3uNJm#d?=V!$-_DIy6b9} z@kct2%0KNmDt~vJjR)q>?>G_~8fpj)aj?(85n!KDlTZ?sh&X;&JkAjZem>`K=nz5mXF><#ZbxigLZB!XkN3peIbfYpexOaGAP)QG zlshWG&H?A?qacF#)lm%A4}>bncaU8h>GuG(fi5wyxERJ=1P)$-h*nWF9*ZJi6?puJ zr-g-u@t(qPm;_u}T2e{|wy6_nApA?j`xi?~z-6UCiQtbU`14EVl8y*RNofhR1R5=l zc0kC$km52(B-R1xAnE9UK}t%(;nFB6xGYKnjl`m)rI1)DX}AnZ(m_TBB`qT>js?H% zM7#_}3N3-fARHWce)Aw2Cck$SY7rDFymN6Co}GZ7@>cDI030PA)s*K3f@)sR_nhKV zQJRdzs=+RHn5om0y}X?KdIkzSq?xpsrD31MCw?}IY;lci!c6;&1!P_ENz7#)6};!p zDnArrW&bSvz}>bs3!h^efAB&48{&W7=>N;p_CNk0{*e*nmk03=mHvP4L9`IJj1+ix z_#Uea+dgvYvUuHv3^0BiZ7!POf-Q{hu{1ONa8lu(-TUmS^n9O2%XwVRC+lt`6wvE` zc)mw?XwU7*zkdt^Iq(`)>%I#S)&@??7Vl zWr0?#Y>rCn`Dkbn1W?L+i{d<^F!}gqparwcp6TI)N)l9>PmOY5yAkugAn;3LJdK0) z>Jk)p?&;Bvbx%)CE4N`%M^&7uXL>}@6(Q?aDypAX#Ws;Np1CG>-3!eVxBvSIE;v0x zx%+GktiLv;zMCR&-dlM+cK_%^JiW|L#dIAZLnp2Y2w*V-A87NB?VO2@D|q*nSA*_0 zN!=~V3mw$y#|EZF^}r=5_Dc~)C2l7gSn`QJ5fbwW{gejP_q(`RQnY>f+ZTisIK4kf z9*z_}@DO*)b2&)yCF!p%y}##=f5QCn&ly1eEgSA{6Ylp+IN)2C@+8xJQ#T=oRmF6fe{*=<@OZMOh zhfWy`lxjc57z$n`+Vn1UGEelIxHYS)%BTVWIHu` zQKw)#vqFB+GA2`GsBejjM;VA;3d&1=rxHYRROF4HsNu z4mQs3JA*d5@kGDU^6ltd+e_@=XT6U=<{1Kg?dc`7{0WLr1dSt_Z%&ap+~@6m|ItM0 z82gdx<%gdHY=%eM=CSpD{^J~=RP_MR!@KeNkTDkTheKn1VA>vjpc9$+a?!VHX_~4( zy&dr2>VVX0Z-{7is1|D>Ed;o%@2k@D5MQw;KY!*#o=_s;SV)^~8OmDegP2;`gu#fv71mfFH aKTyjEOYj9