[PATCH RFC 12/15] tools/testing/cxl: Add "Unlock" security opcode support

[Dave Jiang]

Add support to emulate a CXL mem device support the "Unlock" operation.

Signed-off-by: Dave Jiang <dave.ji...@intel.com>
---
 tools/testing/cxl/test/mem.c |   49 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)

diff --git a/tools/testing/cxl/test/mem.c b/tools/testing/cxl/test/mem.c
index d8d08a89ec0c..55a83896ccb8 100644
--- a/tools/testing/cxl/test/mem.c
+++ b/tools/testing/cxl/test/mem.c
@@ -340,6 +340,52 @@ static int mock_freeze_security(struct cxl_dev_state 
*cxlds, struct cxl_mbox_cmd
        return 0;
 }
 
+static int mock_unlock_security(struct cxl_dev_state *cxlds, struct 
cxl_mbox_cmd *cmd)
+{
+       struct mock_mdev_data *mdata = dev_get_drvdata(cxlds->dev);
+
+       if (cmd->size_in != NVDIMM_PASSPHRASE_LEN) {
+               cmd->return_code = CXL_MBOX_CMD_RC_INPUT;
+               return -EINVAL;
+       }
+
+       if (cmd->size_out != 0) {
+               cmd->return_code = CXL_MBOX_CMD_RC_INPUT;
+               return -EINVAL;
+       }
+
+       if (mdata->security_state & CXL_PMEM_SEC_STATE_FROZEN) {
+               cmd->return_code = CXL_MBOX_CMD_RC_SECURITY;
+               return -ENXIO;
+       }
+
+       if (!(mdata->security_state & CXL_PMEM_SEC_STATE_USER_PASS_SET)) {
+               cmd->return_code = CXL_MBOX_CMD_RC_SECURITY;
+               return -ENXIO;
+       }
+
+       if (mdata->security_state & CXL_PMEM_SEC_STATE_USER_PLIMIT) {
+               cmd->return_code = CXL_MBOX_CMD_RC_SECURITY;
+               return -ENXIO;
+       }
+
+       if (!(mdata->security_state & CXL_PMEM_SEC_STATE_LOCKED)) {
+               cmd->return_code = CXL_MBOX_CMD_RC_SECURITY;
+               return -ENXIO;
+       }
+
+       if (memcmp(cmd->payload_in, mdata->user_pass, NVDIMM_PASSPHRASE_LEN)) {
+               if (++mdata->user_limit == PASS_TRY_LIMIT)
+                       mdata->security_state |= CXL_PMEM_SEC_STATE_USER_PLIMIT;
+               cmd->return_code = CXL_MBOX_CMD_RC_PASSPHRASE;
+               return -ENXIO;
+       }
+
+       mdata->user_limit = 0;
+       mdata->security_state &= ~CXL_PMEM_SEC_STATE_LOCKED;
+       return 0;
+}
+
 static int mock_get_lsa(struct cxl_dev_state *cxlds, struct cxl_mbox_cmd *cmd)
 {
        struct cxl_mbox_get_lsa *get_lsa = cmd->payload_in;
@@ -444,6 +490,9 @@ static int cxl_mock_mbox_send(struct cxl_dev_state *cxlds, 
struct cxl_mbox_cmd *
        case CXL_MBOX_OP_FREEZE_SECURITY:
                rc = mock_freeze_security(cxlds, cmd);
                break;
+       case CXL_MBOX_OP_UNLOCK:
+               rc = mock_unlock_security(cxlds, cmd);
+               break;
        default:
                break;
        }