gaojiaqi7/td-partitioning-svsm

td-partitioning-svsm's Issues

Run keylime_agent will raise "out of memory" issue

Description:
Run keylime_agent will raise "out of memory" issue during keylime test.
Version: commit 590b9eb

Step:

1. Launch tdp-svsm with TPM
2. Execute keylime command

keylime_create_policy -b -m /sys/kernel/security/ima/ascii_runtime_measurements -o runtime_policy.json
keylime_verifier > keylime_verifier.log 2>&1 &
keylime_registrar > keylime_registrar.log 2>&1 &
keylime_agent > keylime_agent.log 2>&1 &

Expected:
keylime_agent can startup successfully

Actual:

WARNING:esys:src/tss2-esys/api/Esys_NV_ReadPublic.c:309:Esys_NV_ReadPublic_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/esys_tr.c:209:Esys_TR_FromTPMPublic_Finish() Error NV_ReadPublic ErrorCode (0x0000018b) 
ERROR:esys:src/tss2-esys/esys_tr.c:320:Esys_TR_FromTPMPublic() Error TR FromTPMPublic ErrorCode (0x0000018b) 
 ERROR tss_esapi::context::general_esys_tr > Error when getting ESYS handle from TPM handle: the handle is not correct for the use (associated with handle number 1)
WARNING:esys:src/tss2-esys/api/Esys_Create.c:398:Esys_Create_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_Create.c:134:Esys_Create() Esys Finish ErrorCode (0x00000902) 
 ERROR tss_esapi::context::tpm_commands::object_commands > Error in creating derived key: out of memory for object contexts
Error: Tpm(Tss2 { err: Tss2Error(FormatZero(FormatZeroResponseCode { .0: 2306, error_number: 2, format_selector: false, version: true, tcg_vendor_indicator: false, severity: true })), kind: Some(ObjectMemory), message: "out of memory for object contexts" })

svsm will panic with one tpm2_createek command

Description:
svsm will panic with tpm2_createek command "tpm2_createek --ek-context ecc_ek.ctx --key-algorithm ecc --public ecc_ek.pub"
version: commit 4700e32

Step:

1. Launch tdp-svsm with TPM
2. Execute command "tpm2_createek --ek-context ecc_ek.ctx --key-algorithm ecc --public ecc_ek.pub"

Expected:
EK can be successfully created.

Actual:

tpm2_createek \tpm2_createek \
                --ek-context ecc_ek.ctx \
                --key-algorithm ecc \
                --public ecc_ek.pub
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 1
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 2
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 1
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 2
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 1
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 2
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 1
[SVSM] ERROR: Panic: CPU[1] panicked at kernel/src/cpu/idt/svsm.rs:154:9:
Unhandled Page-Fault at RIP 0xffffff800004720c CR2: 0xffffff8010000000 error code: 0x0000000000000000
[SVSM] ---BACKTRACE---:
[SVSM]   [0xffffff8000003a9e]
[SVSM]   [0xffffff8000046f52]
[SVSM]   [0xffffff8000046fce]
[SVSM]   [0xffffff8000008bf2]
[SVSM]   [0xffffff8000049760]
[SVSM]   [0xffffff80000a1e9b]
[SVSM]   [0xffffff8000052af7]
[SVSM]   [0xffffff800000e665]
[SVSM]   [0xffffff8000004924]
[SVSM]   [0xffffff80001c24ca]
[SVSM]   [0xffffff8000214511]
[SVSM]   [0xffffff80001c4e73]
[SVSM]   [0xffffff800023e4b7]
[SVSM]   [0xffffff80002418d8]
[SVSM]   [0xffffff8000234cbc]
[SVSM]   [0xffffff8000237223]
[SVSM]   [0xffffff8000200ac1]
[SVSM]   [0xffffff80001b2e61]
[SVSM]   [0xffffff80001b3307]
[SVSM]   [0xffffff80001b37e9]
[SVSM]   [0xffffff8000130bc1]
[SVSM]   [0xffffff800016bef1]
[SVSM]   [0xffffff800016bec1]
[SVSM]   Invalid frame
[SVSM] ---END---