/
githubmirror
/
fwupd
Обзор
Документация
Войти
/
githubmirror
/
fwupd
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
2.0.13
plugins/cpu/fu-cpu-device.c
496 строк
14 KB
Corentin Noël
Add icon constants shared with all the plugins
14 май 2025, 12:43
14 май 2025, 12:43
602c564
Код
Авторство
О чём код?
/* * Copyright 2019 Mario Limonciello <mario.limonciello@dell.com> * * SPDX-License-Identifier: LGPL-2.1-or-later */ #include "config.h" #ifdef HAVE_UTSNAME_H #include <sys/utsname.h> #endif #include "fu-cpu-device.h" typedef enum { FU_CPU_DEVICE_FLAG_NONE = 0, FU_CPU_DEVICE_FLAG_SHSTK = 1 << 0, FU_CPU_DEVICE_FLAG_IBT = 1 << 1, FU_CPU_DEVICE_FLAG_TME = 1 << 2, FU_CPU_DEVICE_FLAG_SMAP = 1 << 3, } FuCpuDeviceFlag; struct _FuCpuDevice { FuDevice parent_instance; FuCpuDeviceFlag flags; }; G_DEFINE_TYPE(FuCpuDevice, fu_cpu_device, FU_TYPE_DEVICE) static gboolean fu_cpu_device_has_flag(FuCpuDevice *self, FuCpuDeviceFlag flag) { return (self->flags & flag) > 0; } static void fu_cpu_device_to_string(FuDevice *device, guint idt, GString *str) { FuCpuDevice *self = FU_CPU_DEVICE(device); fwupd_codec_string_append_bool(str, idt, "HasSHSTK", fu_cpu_device_has_flag(self, FU_CPU_DEVICE_FLAG_SHSTK)); fwupd_codec_string_append_bool(str, idt, "HasIBT", fu_cpu_device_has_flag(self, FU_CPU_DEVICE_FLAG_IBT)); fwupd_codec_string_append_bool(str, idt, "HasTME", fu_cpu_device_has_flag(self, FU_CPU_DEVICE_FLAG_TME)); fwupd_codec_string_append_bool(str, idt, "HasSMAP", fu_cpu_device_has_flag(self, FU_CPU_DEVICE_FLAG_SMAP)); } static const gchar * fu_cpu_device_convert_vendor(const gchar *vendor) { if (g_strcmp0(vendor, "GenuineIntel") == 0) return "Intel"; if (g_strcmp0(vendor, "AuthenticAMD") == 0 || g_strcmp0(vendor, "AMDisbetter!") == 0) return "Advanced Micro Devices, Inc."; if (g_strcmp0(vendor, "CentaurHauls") == 0) return "IDT"; if (g_strcmp0(vendor, "CyrixInstead") == 0) return "Cyrix"; if (g_strcmp0(vendor, "TransmetaCPU") == 0 || g_strcmp0(vendor, "GenuineTMx86") == 0) return "Transmeta"; if (g_strcmp0(vendor, "Geode by NSC") == 0) return "National Semiconductor"; if (g_strcmp0(vendor, "NexGenDriven") == 0) return "NexGen"; if (g_strcmp0(vendor, "RiseRiseRise") == 0) return "Rise"; if (g_strcmp0(vendor, "SiS SiS SiS ") == 0) return "SiS"; if (g_strcmp0(vendor, "UMC UMC UMC ") == 0) return "UMC"; if (g_strcmp0(vendor, "VIA VIA VIA ") == 0) return "VIA"; if (g_strcmp0(vendor, "Vortex86 SoC") == 0) return "Vortex"; if (g_strcmp0(vendor, " Shanghai ") == 0) return "Zhaoxin"; if (g_strcmp0(vendor, "HygonGenuine") == 0) return "Hygon"; if (g_strcmp0(vendor, "E2K MACHINE") == 0) return "MCST"; if (g_strcmp0(vendor, "bhyve bhyve ") == 0) return "bhyve"; if (g_strcmp0(vendor, " KVMKVMKVM ") == 0) return "KVM"; if (g_strcmp0(vendor, "TCGTCGTCGTCG") == 0) return "QEMU"; if (g_strcmp0(vendor, "Microsoft Hv") == 0) return "Microsoft"; if (g_strcmp0(vendor, " lrpepyh vr") == 0) return "Parallels"; if (g_strcmp0(vendor, "VMwareVMware") == 0) return "VMware"; if (g_strcmp0(vendor, "XenVMMXenVMM") == 0) return "Xen"; if (g_strcmp0(vendor, "ACRNACRNACRN") == 0) return "ACRN"; if (g_strcmp0(vendor, " QNXQVMBSQG ") == 0) return "QNX"; if (g_strcmp0(vendor, "VirtualApple") == 0) return "Apple"; return vendor; } static void fu_cpu_device_init(FuCpuDevice *self) { fu_device_add_flag(FU_DEVICE(self), FWUPD_DEVICE_FLAG_INTERNAL); fu_device_add_private_flag(FU_DEVICE(self), FU_DEVICE_PRIVATE_FLAG_HOST_CPU); fu_device_add_icon(FU_DEVICE(self), FU_DEVICE_ICON_COMPUTER); fu_device_set_version_format(FU_DEVICE(self), FWUPD_VERSION_FORMAT_HEX); fu_device_set_physical_id(FU_DEVICE(self), "cpu:0"); } static gboolean fu_cpu_device_add_instance_ids(FuDevice *device, GError **error) { guint32 eax = 0; guint32 family_id; guint32 family_id_ext; guint32 model_id; guint32 model_id_ext; guint32 processor_id; guint32 stepping_id; /* decode according to https://en.wikipedia.org/wiki/CPUID */ if (!fu_cpuid(0x1, &eax, NULL, NULL, NULL, error)) return FALSE; processor_id = (eax >> 12) & 0x3; model_id = (eax >> 4) & 0xf; family_id = (eax >> 8) & 0xf; model_id_ext = (eax >> 16) & 0xf; family_id_ext = (eax >> 20) & 0xff; stepping_id = eax & 0xf; /* use extended IDs where required */ if (family_id == 6 || family_id == 15) model_id |= model_id_ext << 4; if (family_id == 15) family_id += family_id_ext; /* add GUIDs */ fu_device_add_instance_u4(device, "PRO", processor_id); fu_device_add_instance_u8(device, "FAM", family_id); fu_device_add_instance_u8(device, "MOD", model_id); fu_device_add_instance_u4(device, "STP", stepping_id); fu_device_build_instance_id_full(device, FU_DEVICE_INSTANCE_FLAG_QUIRKS, NULL, "CPUID", "PRO", "FAM", NULL); fu_device_build_instance_id(device, NULL, "CPUID", "PRO", "FAM", "MOD", NULL); fu_device_build_instance_id(device, NULL, "CPUID", "PRO", "FAM", "MOD", "STP", NULL); /* success */ return TRUE; } static gboolean fu_cpu_device_probe_manufacturer_id(FuDevice *device, GError **error) { guint32 ebx = 0; guint32 ecx = 0; guint32 edx = 0; gchar str[13] = {'\0'}; if (!fu_cpuid(0x0, NULL, &ebx, &ecx, &edx, error)) return FALSE; if (!fu_memcpy_safe((guint8 *)str, sizeof(str), 0x0, /* dst */ (const guint8 *)&ebx, sizeof(ebx), 0x0, /* src */ sizeof(guint32), error)) return FALSE; if (!fu_memcpy_safe((guint8 *)str, sizeof(str), 0x4, /* dst */ (const guint8 *)&edx, sizeof(edx), 0x0, /* src */ sizeof(guint32), error)) return FALSE; if (!fu_memcpy_safe((guint8 *)str, sizeof(str), 0x8, /* dst */ (const guint8 *)&ecx, sizeof(ecx), 0x0, /* src */ sizeof(guint32), error)) return FALSE; fu_device_set_vendor(device, fu_cpu_device_convert_vendor(str)); return TRUE; } static gboolean fu_cpu_device_probe_model(FuDevice *device, GError **error) { guint32 eax = 0; guint32 ebx = 0; guint32 ecx = 0; guint32 edx = 0; gchar str[49] = {'\0'}; for (guint32 i = 0; i < 3; i++) { if (!fu_cpuid(0x80000002 + i, &eax, &ebx, &ecx, &edx, error)) return FALSE; if (!fu_memcpy_safe((guint8 *)str, sizeof(str), (16 * i) + 0x0, /* dst */ (const guint8 *)&eax, sizeof(eax), 0x0, /* src */ sizeof(guint32), error)) return FALSE; if (!fu_memcpy_safe((guint8 *)str, sizeof(str), (16 * i) + 0x4, /* dst */ (const guint8 *)&ebx, sizeof(ebx), 0x0, /* src */ sizeof(guint32), error)) return FALSE; if (!fu_memcpy_safe((guint8 *)str, sizeof(str), (16 * i) + 0x8, /* dst */ (const guint8 *)&ecx, sizeof(ecx), 0x0, /* src */ sizeof(guint32), error)) return FALSE; if (!fu_memcpy_safe((guint8 *)str, sizeof(str), (16 * i) + 0xc, /* dst */ (const guint8 *)&edx, sizeof(edx), 0x0, /* src */ sizeof(guint32), error)) return FALSE; } fu_device_set_name(device, str); return TRUE; } static gboolean fu_cpu_device_probe_extended_features(FuDevice *device, GError **error) { FuCpuDevice *self = FU_CPU_DEVICE(device); guint32 ebx = 0; guint32 ecx = 0; guint32 edx = 0; if (!fu_cpuid(0x7, NULL, &ebx, &ecx, &edx, error)) return FALSE; if ((ebx >> 20) & 0x1) self->flags |= FU_CPU_DEVICE_FLAG_SMAP; if ((ecx >> 7) & 0x1) self->flags |= FU_CPU_DEVICE_FLAG_SHSTK; if (fu_cpu_get_vendor() == FU_CPU_VENDOR_INTEL) { if ((ecx >> 13) & 0x1) self->flags |= FU_CPU_DEVICE_FLAG_TME; if ((edx >> 20) & 0x1) self->flags |= FU_CPU_DEVICE_FLAG_IBT; } return TRUE; } static gboolean fu_cpu_device_probe(FuDevice *device, GError **error) { if (!fu_cpu_device_probe_manufacturer_id(device, error)) return FALSE; if (!fu_cpu_device_probe_model(device, error)) return FALSE; if (!fu_cpu_device_probe_extended_features(device, error)) return FALSE; if (!fu_cpu_device_add_instance_ids(device, error)) return FALSE; return TRUE; } static gboolean fu_cpu_device_set_quirk_kv(FuDevice *device, const gchar *key, const gchar *value, GError **error) { if (g_strcmp0(key, "PciBcrAddr") == 0) { guint64 tmp = 0; if (!fu_strtoull(value, &tmp, 0, G_MAXUINT32, FU_INTEGER_BASE_AUTO, error)) return FALSE; fu_device_set_metadata_integer(device, "PciBcrAddr", tmp); return TRUE; } if (g_strcmp0(key, "CpuMitigationsRequired") == 0) { fu_device_set_metadata(device, "CpuMitigationsRequired", value); return TRUE; } if (g_strcmp0(key, "CpuSinkcloseMicrocodeVersion") == 0) { guint64 tmp = 0; if (!fu_strtoull(value, &tmp, 0, G_MAXUINT32, FU_INTEGER_BASE_16, error)) return FALSE; fu_device_set_metadata_integer(device, FU_DEVICE_METADATA_CPU_SINKCLOSE_MICROCODE_VER, tmp); return TRUE; } g_set_error_literal(error, FWUPD_ERROR, FWUPD_ERROR_NOT_SUPPORTED, "no supported"); return FALSE; } static void fu_cpu_device_add_security_attrs_cet_enabled(FuCpuDevice *self, FuSecurityAttrs *attrs) { g_autoptr(FwupdSecurityAttr) attr = NULL; /* create attr */ attr = fu_device_security_attr_new(FU_DEVICE(self), FWUPD_SECURITY_ATTR_ID_CET_ENABLED); fwupd_security_attr_set_result_success(attr, FWUPD_SECURITY_ATTR_RESULT_SUPPORTED); fu_security_attrs_append(attrs, attr); switch (fu_cpu_get_vendor()) { case FU_CPU_VENDOR_INTEL: if (fu_cpu_device_has_flag(self, FU_CPU_DEVICE_FLAG_SHSTK) && fu_cpu_device_has_flag(self, FU_CPU_DEVICE_FLAG_IBT)) { fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_SUCCESS); return; } break; case FU_CPU_VENDOR_AMD: if (fu_cpu_device_has_flag(self, FU_CPU_DEVICE_FLAG_SHSTK)) { fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_SUCCESS); return; } break; default: break; } fwupd_security_attr_set_result(attr, FWUPD_SECURITY_ATTR_RESULT_NOT_SUPPORTED); } static void fu_cpu_device_add_security_attrs_cet_active(FuCpuDevice *self, FuSecurityAttrs *attrs) { gint exit_status = 0xff; g_autofree gchar *toolfn = NULL; g_autofree gchar *dir = NULL; g_autoptr(FwupdSecurityAttr) attr = NULL; g_autoptr(FwupdSecurityAttr) cet_plat_attr = NULL; g_autoptr(GError) error_local = NULL; /* check for CET */ cet_plat_attr = fu_security_attrs_get_by_appstream_id(attrs, FWUPD_SECURITY_ATTR_ID_CET_ENABLED, NULL); if (cet_plat_attr == NULL) return; if (!fwupd_security_attr_has_flag(cet_plat_attr, FWUPD_SECURITY_ATTR_FLAG_SUCCESS)) return; /* create attr */ attr = fu_device_security_attr_new(FU_DEVICE(self), FWUPD_SECURITY_ATTR_ID_CET_ACTIVE); fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_RUNTIME_ISSUE); fwupd_security_attr_set_result_success(attr, FWUPD_SECURITY_ATTR_RESULT_SUPPORTED); fu_security_attrs_append(attrs, attr); /* check that userspace has been compiled for CET support */ dir = fu_path_from_kind(FU_PATH_KIND_LIBEXECDIR_PKG); toolfn = g_build_filename(dir, "fwupd-detect-cet", NULL); if (!g_spawn_command_line_sync(toolfn, NULL, NULL, &exit_status, &error_local)) { g_warning("failed to test CET: %s", error_local->message); return; } if (!g_spawn_check_wait_status(exit_status, &error_local)) { g_debug("CET does not function, not supported: %s", error_local->message); fwupd_security_attr_set_result(attr, FWUPD_SECURITY_ATTR_RESULT_NOT_SUPPORTED); return; } /* success */ fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_SUCCESS); } static void fu_cpu_device_add_security_attrs_intel_tme(FuCpuDevice *self, FuSecurityAttrs *attrs) { g_autoptr(FwupdSecurityAttr) attr = NULL; /* create attr */ attr = fu_device_security_attr_new(FU_DEVICE(self), FWUPD_SECURITY_ATTR_ID_ENCRYPTED_RAM); fwupd_security_attr_set_result_success(attr, FWUPD_SECURITY_ATTR_RESULT_ENABLED); fu_security_attrs_append(attrs, attr); /* check for TME */ if (!fu_cpu_device_has_flag(self, FU_CPU_DEVICE_FLAG_TME)) { fwupd_security_attr_set_result(attr, FWUPD_SECURITY_ATTR_RESULT_NOT_SUPPORTED); return; } /* success */ fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_SUCCESS); } static void fu_cpu_device_add_security_attrs_smap(FuCpuDevice *self, FuSecurityAttrs *attrs) { g_autoptr(FwupdSecurityAttr) attr = NULL; /* create attr */ attr = fu_device_security_attr_new(FU_DEVICE(self), FWUPD_SECURITY_ATTR_ID_SMAP); fwupd_security_attr_set_result_success(attr, FWUPD_SECURITY_ATTR_RESULT_ENABLED); fu_security_attrs_append(attrs, attr); /* check for SMEP and SMAP */ if (!fu_cpu_device_has_flag(self, FU_CPU_DEVICE_FLAG_SMAP)) { fwupd_security_attr_set_result(attr, FWUPD_SECURITY_ATTR_RESULT_NOT_SUPPORTED); return; } /* success */ fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_SUCCESS); } #ifdef HAVE_UTSNAME_H static void fu_cpu_device_add_x86_64_security_attrs(FuDevice *device, FuSecurityAttrs *attrs) { FuCpuDevice *self = FU_CPU_DEVICE(device); /* only Intel */ if (fu_cpu_get_vendor() == FU_CPU_VENDOR_INTEL) fu_cpu_device_add_security_attrs_intel_tme(self, attrs); fu_cpu_device_add_security_attrs_cet_enabled(self, attrs); fu_cpu_device_add_security_attrs_cet_active(self, attrs); fu_cpu_device_add_security_attrs_smap(self, attrs); } #endif static void fu_cpu_device_add_security_attrs(FuDevice *device, FuSecurityAttrs *attrs) { #ifdef HAVE_UTSNAME_H struct utsname name_tmp; memset(&name_tmp, 0, sizeof(struct utsname)); if (uname(&name_tmp) < 0) { g_warning("failed to read CPU architecture"); return; } if (g_strcmp0(name_tmp.machine, "x86_64") == 0) fu_cpu_device_add_x86_64_security_attrs(device, attrs); #endif } static gchar * fu_cpu_device_convert_version(FuDevice *device, guint64 version_raw) { return fu_version_from_uint32(version_raw, fu_device_get_version_format(device)); } static void fu_cpu_device_class_init(FuCpuDeviceClass *klass) { FuDeviceClass *device_class = FU_DEVICE_CLASS(klass); device_class->to_string = fu_cpu_device_to_string; device_class->probe = fu_cpu_device_probe; device_class->set_quirk_kv = fu_cpu_device_set_quirk_kv; device_class->add_security_attrs = fu_cpu_device_add_security_attrs; device_class->convert_version = fu_cpu_device_convert_version; } FuCpuDevice * fu_cpu_device_new(FuContext *ctx) { FuCpuDevice *device = NULL; device = g_object_new(FU_TYPE_CPU_DEVICE, "context", ctx, NULL); return device; }