chipsec-chipsec/chipsec/modules/common/cpu/cpu_info.py

# CHIPSEC: Platform Security Assessment Framework
# Copyright (c) 2018 - 2021, Intel Corporation
# Copyright (c) 2024, Amd Corporation
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; Version 2.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
#
# Contact information:
# chipsec@intel.com
# AMD:
# chipsec@amd.com
#

"""
Displays CPU information

Reference:
    - Intel 64 and IA-32 Architectures Software Developer Manual (SDM)
        - https://www.intel.com/content/www/us/en/developer/articles/technical/intel-sdm.html

Usage:
    ``chipsec_main -m common.cpu.cpu_info``

Examples:
    >>> chipsec_main.py -m common.cpu.cpu_info

Registers used:
    - IA32_BIOS_SIGN_ID.MICROCODE

.. note:
    No PASS/FAIL returned, INFORMATION only.

"""

import struct
from chipsec.module_common import BaseModule, CPU
from chipsec.library.returncode import ModuleResult
from chipsec.library.defines import bytestostring
from typing import List

TAGS = [CPU]
METADATA_TAGS = ['OPENSOURCE', 'IA', 'COMMON', 'CPU', 'CPU_INFO']

class cpu_info(BaseModule):
    def __init__(self):
        super(cpu_info, self).__init__()
        self.cs.set_scope({
            "IA32_BIOS_SIGN_ID": "8086.MSR",
        })
        self.result.url = 'https://chipsec.github.io/modules/chipsec.modules.common.cpu.cpu_info.html'

    def is_supported(self) -> bool:
        if self.cs.is_intel():
            if self.cs.register.has_field('IA32_BIOS_SIGN_ID', 'MICROCODE'):
                return True
            self.logger.log_important('IA32_BIOS_SIGN_ID.MICROCODE not defined for platform.  Skipping module.')
        else:
            return self.cs.is_amd()
        return False

    def run_intel(self, module_argv: List[str]) -> int:
        signId = self.cs.register.get_list_by_name('IA32_BIOS_SIGN_ID')

        # thread_count = 1
        # if not self.cs.os_helper.is_efi():
        #     thread_count = self.cs.hals.msr.get_cpu_thread_count()

        # for thread in range(thread_count):
        for reg in signId:
            # Handle processor binding so we are always checking processor 0
            # for this example.  No need to do this in UEFI Shell.
            if not self.cs.os_helper.is_efi():
                self.cs.helper.set_affinity(reg.instance)
            regdata = reg.read_field('MICROCODE')

            self.logger.log(f'[*] Thread {reg.instance:04d}')

            brand = ''
            for eax_val in [0x80000002, 0x80000003, 0x80000004]:
                regs = self.cs.hals.cpu.cpuid(eax_val, 0)
                for i in range(4):
                    brand += bytestostring(struct.pack('<I', regs[i]))
            brand = brand.rstrip('\x00')
            self.logger.log(f'[*] Processor: {brand}')

            (eax, _, _, _) = self.cs.hals.cpu.cpuid(0x01, 0x00)
            stepping = eax & 0xF
            model = (eax >> 4) & 0xF
            family = (eax >> 8) & 0xF
            if (family == 0x0F) or (family == 0x06):
                model = ((eax >> 12) & 0xF0) | model
            if family == 0x0F:
                family = ((eax >> 20) & 0xFF) | family
            self.logger.log(f'[*]            Family: {family:02X} Model: {model:02X} Stepping: {stepping:01X}')

            self.logger.log(f'[*]            Microcode: {regdata:08X}')
            self.logger.log('[*]')

        self.logger.log_information('Processor information displayed')

        self.result.setStatusBit(self.result.status.INFORMATION)
        return self.result.getReturnCode(ModuleResult.INFORMATION)

    def run_amd(self) -> int:
        # Determine number of threads to check
        thread_count = 1
        if not self.cs.os_helper.is_efi():
            (_, _, r_rcx, _) = self.cs.hals.cpu.cpuid(0x80000008,0)
            thread_count = r_rcx & 0xff

        for thread in range(thread_count):
            # Handle processor binding so we are always checking processor 0
            # for this example.  No need to do this in UEFI Shell.
            if not self.cs.os_helper.is_efi():
                self.cs.helper.set_affinity(thread)

            # Display thread
            self.logger.log(f'[*] Thread {thread:04d}')

            # Get processor brand string
            brand = ''
            brand = brand.rstrip('\x00')
            self.logger.log(f'[*] Processor: {brand}')

            # "Authentic AMD"
            e_rbx = int("htuA".encode('utf-8').hex(),16)    #0x68747541
            e_rcx = int("DMAc".encode('utf-8').hex(),16)    #0x444D4163
            e_rdx = int("itne".encode('utf-8').hex(),16)    #0x69746E65
            (_, r_rbx, r_rcx, r_rdx) = self.cs.hals.cpu.cpuid(0x00, 0x00)

            if not(e_rbx == r_rbx and e_rcx == r_rcx and e_rdx == r_rdx):
                self.logger.log_failed("Not Authentic AMD")
                self.res = ModuleResult.FAILED
                return self.res

            # Get processor version information
            (r_rax, _, _, _) = self.cs.hals.cpu.cpuid(0x01, 0x00)
            baseModel = (r_rax >> 4) & 0xF
            baseFamily = (r_rax >> 8) & 0xF
            extModel = (r_rax >> 16) & 0xF
            extFamily = (r_rax >> 20) & 0xF
            stepping = (r_rax) & 0xF
            family = baseFamily + extFamily
            model = (extModel << 4) & baseModel
            self.logger.log(f'[*]            Family: {family:02X} Model: {model:02X} Stepping: {stepping:01X}')


            # Get microcode revision
            microcode_rev = self.cs.register.read_field('PATCH_LEVEL', 'PatchLevel', cpu_thread=thread)
            self.logger.log(f'[*]            Microcode: {microcode_rev:08X}')
            self.logger.log('[*]')
        self.logger.log_information('Processor information displayed')

        self.res = ModuleResult.INFORMATION
        return self.res

    def run(self, module_argv: List[str]) -> int:
        # Log the start of the test
        self.logger.start_test('Current Processor Information:')

        if self.cs.is_intel():
            return self.run_intel(module_argv)
        else:
            return self.run_amd()