This is xnu-11215.1.10. See this file in: xnu-8792.81.2 (MacOS 18, Darwin 22) xnu-8019 (MacOS 17.0, Darwin 21) xnu-6153.11.26 (MacOS 15.0, Darwin 19) xnu-4903.221.2 (MacOS 14.0, Darwin 18) xnu-4570.41.2 (MacOS 13.3, Darwin 17) xnu-3789.70.16 (MacOS 12.6, Darwin 16) xnu-3248.20.55 (MacOS 11.2, Darwin 15) xnu-2782.40.9 (MacOS 10.10.5, Darwin 14) xnu-2422.115.4 (MacOS 10.9.5, Darwin 13) xnu-2050.24.15 (MacOS 10.8.4, Darwin 12) xnu-1699.32.7 (MacOS 10.7.5, Darwin 11) xnu-1504.15.3 (MacOS 10.6.8, Darwin 10) xnu-1228.15.4 (MacOS 10.5.8, Darwin 9)

#include <darwintest.h>
#include "nvram_helper.h"

T_GLOBAL_META(T_META_NAMESPACE("xnu.nvram"),
    T_META_RADAR_COMPONENT_NAME("xnu"),
    T_META_RADAR_COMPONENT_VERSION("nvram"));

static io_registry_entry_t optionsRef = IO_OBJECT_NULL;

// xcrun -sdk macosx.internal make -C tests nvram_system && sudo ./tests/build/sym/nvram_system

// Test that writing, reading, and deleting of system variables with system entitlement should succeed
T_DECL(TestSystemEntitled, "Test system guids with entitlement")
{
#if ((TARGET_OS_OSX) && !(__x86_64__))
	const char *varToTest = SystemNVRAMGuidString ":" "varToTest2";

	optionsRef = CreateOptionsRef();

	TestVarOp(OP_SET, varToTest, DefaultSetVal, KERN_SUCCESS, optionsRef);
	TestVarOp(OP_GET, varToTest, NULL, KERN_SUCCESS, optionsRef);
	TestVarOp(OP_DEL, varToTest, NULL, KERN_SUCCESS, optionsRef);

	ReleaseOptionsRef(optionsRef);
#else
	T_PASS("Test not supported");
#endif /* ((TARGET_OS_OSX) && !(__x86_64__)) */
}


#if !(TARGET_CPU_ARM64 && TARGET_OS_OSX)
// Test that system guid is translated to common guid on devices without system namespace support
T_DECL(TestSysNonAS, "Test system guids for devices without system namespace")
{
	const char *varWithSys = SystemNVRAMGuidString ":" "varToTestSys";
	const char *varWOSys = "varToTestSys";

	optionsRef = CreateOptionsRef();

	TestVarOp(OP_SET, varWithSys, DefaultSetVal, KERN_SUCCESS, optionsRef);
	TestVarOp(OP_GET, varWOSys, NULL, KERN_SUCCESS, optionsRef);
	TestVarOp(OP_DEL, varWOSys, NULL, KERN_SUCCESS, optionsRef);

	ReleaseOptionsRef(optionsRef);
}
#endif

// Variable entitlement tests for system variables
#if ((TARGET_OS_OSX) && !(__x86_64__))
// Test that read of entitled system variables without entitlement should fail
T_DECL(TestEntRdSys, "Test read entitled system variables")
{
	char * varToTest = SystemNVRAMGuidString ":" "testEntRdSys";

	optionsRef = CreateOptionsRef();

	TestVarOp(OP_SET, varToTest, DefaultSetVal, KERN_SUCCESS, optionsRef);
	TestVarOp(OP_GET, varToTest, NULL, KERN_FAILURE, optionsRef);

	ReleaseOptionsRef(optionsRef);
}

// Test that writing of entitled system variables without entitlement should fail
T_DECL(TestEntModRstSys, "Test write entitled system variables")
{
	char * varToTest = SystemNVRAMGuidString ":" "testEntModRstSys";

	optionsRef = CreateOptionsRef();

	TestVarOp(OP_SET, varToTest, DefaultSetVal, kIOReturnNotPrivileged, optionsRef);

	ReleaseOptionsRef(optionsRef);
}

// Test that deleting of entitled system variables without entitlement should fail
T_DECL(TestEntDelSys, "Test delete entitled system variables")
{
	char * varToTest = SystemNVRAMGuidString ":" "testEntDelSys";

	optionsRef = CreateOptionsRef();

	TestVarOp(OP_SET, varToTest, DefaultSetVal, KERN_SUCCESS, optionsRef);
	TestVarOp(OP_DEL, varToTest, NULL, KERN_FAILURE, optionsRef);

	ReleaseOptionsRef(optionsRef);
}

// Test resetting of nvram with entitlement should not erase testEntRstSys
// To reset nvram, call the test with -r argument:
// sudo ./tests/build/sym/nvram_system -n xnu.nvram.TestEntRstSys -- -r
T_DECL(TestEntRstSys, "Test reset entitled system variables")
{
	opterr = 0;
	optind = 0;
	char * varToTest = SystemNVRAMGuidString ":" "testEntRstSys";

	optionsRef = CreateOptionsRef();

	TestVarOp(OP_SET, varToTest, DefaultSetVal, KERN_SUCCESS, optionsRef);

	if (getopt(argc, argv, "r") == 'r') {
		TestVarOp(OP_RES, NULL, NULL, KERN_SUCCESS, optionsRef);
		TestVarOp(OP_GET, varToTest, NULL, KERN_SUCCESS, optionsRef);
	} else {
		TestVarOp(OP_DEL, varToTest, NULL, KERN_SUCCESS, optionsRef);
		T_PASS("NVram reset not invoked");
	}

	ReleaseOptionsRef(optionsRef);
}

// Test NVRAM Reset
// To reset nvram, call the test with -r argument:
// sudo ./tests/build/sym/nvram_system -n xnu.nvram.TestNVRAMResetSys -- -r
T_DECL(TestNVRAMResetSys, "Test NVRAM Reset for system region variables")
{
	opterr = 0;
	optind = 0;
	const char * varToTest = "testVar1";
	const char * varToTestWSys = SystemNVRAMGuidString ":" "testVar2";

	optionsRef = CreateOptionsRef();

	if (getopt(argc, argv, "r") == 'r') {
		TestVarOp(OP_SET, varToTest, DefaultSetVal, KERN_SUCCESS, optionsRef);
		TestVarOp(OP_SET, varToTestWSys, DefaultSetVal, KERN_SUCCESS, optionsRef);

		TestVarOp(OP_RES, NULL, NULL, KERN_SUCCESS, optionsRef);
		TestVarOp(OP_GET, varToTest, NULL, KERN_FAILURE, optionsRef);

		TestVarOp(OP_GET, varToTestWSys, NULL, KERN_FAILURE, optionsRef);
	} else {
		T_PASS("NVram reset not invoked");
	}

	ReleaseOptionsRef(optionsRef);
}

// Test NVRAM Obliterate
// To obliterate nvram, call the test with -r argument:
// sudo ./tests/build/sym/nvram_system -n xnu.nvram.TestNVRAMOblitSys -- -r
T_DECL(TestNVRAMOblitSys, "Test NVRAM Obliterate for system region")
{
	opterr = 0;
	optind = 0;
	const char * varToTest = "testVar1";
	const char * varToTestWSys = SystemNVRAMGuidString ":" "testVar2";
	const char * varToTestWRand = RandomNVRAMGuidString ":" "testVar3";
	const char * oblitSys = SystemNVRAMGuidString ":" "ObliterateNVRam";
	const char * oblitNonSys = CommonNVRAMGuidString ":" "ObliterateNVRam";

	optionsRef = CreateOptionsRef();

	if (getopt(argc, argv, "r") == 'r') {
		// Set variables with common namespace, random namespace and system namespace
		TestVarOp(OP_SET, varToTest, DefaultSetVal, KERN_SUCCESS, optionsRef);
		TestVarOp(OP_SET, varToTestWSys, DefaultSetVal, KERN_SUCCESS, optionsRef);
		TestVarOp(OP_SET, varToTestWRand, DefaultSetVal, KERN_SUCCESS, optionsRef);

		// Obliterate sys first and make sure non-sys variables aren't deleted
		TestVarOp(OP_OBL, oblitSys, NULL, KERN_SUCCESS, optionsRef);

		TestVarOp(OP_GET, varToTestWSys, NULL, KERN_FAILURE, optionsRef);
		TestVarOp(OP_GET, varToTest, NULL, KERN_SUCCESS, optionsRef);
		TestVarOp(OP_GET, varToTestWRand, NULL, KERN_SUCCESS, optionsRef);

		// Now, obliterate common region and make sure all non-sys variables are deleted
		TestVarOp(OP_SET, varToTestWSys, DefaultSetVal, KERN_SUCCESS, optionsRef);

		TestVarOp(OP_OBL, oblitNonSys, NULL, KERN_SUCCESS, optionsRef);

		TestVarOp(OP_GET, varToTestWSys, NULL, KERN_SUCCESS, optionsRef);
		TestVarOp(OP_GET, varToTest, NULL, KERN_FAILURE, optionsRef);
		TestVarOp(OP_GET, varToTestWRand, NULL, KERN_FAILURE, optionsRef);
		TestVarOp(OP_DEL, varToTestWSys, NULL, KERN_SUCCESS, optionsRef);
	} else {
		T_PASS("NVram obliterate not invoked");
	}

	ReleaseOptionsRef(optionsRef);
}
#endif /* ((TARGET_OS_OSX) && !(__x86_64__)) */