mirror of
https://github.com/intel/linux-sgx
synced 2026-06-08 14:49:32 +00:00
111a916b5d
Fix sgx_create_enclave retry mechanism when load_enclave just return SGX_ERROR_MEMORY_MAP_FAILURE. Deprecated the SGX_ERROR_MEMORY_MAP_CONFLICT. Make the retry mechanism compatible with new driver and urts. Signed-off-by: gaoyusong <a869920004@163.com>
269 lines
7.5 KiB
C++
269 lines
7.5 KiB
C++
/*
|
|
* Copyright (C) 2011-2021 Intel Corporation. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* * Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* * Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in
|
|
* the documentation and/or other materials provided with the
|
|
* distribution.
|
|
* * Neither the name of Intel Corporation nor the names of its
|
|
* contributors may be used to endorse or promote products derived
|
|
* from this software without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
|
* A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
|
* OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
|
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
|
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
|
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
|
* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*
|
|
*/
|
|
|
|
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <assert.h>
|
|
#include <sys/time.h>
|
|
|
|
# include <unistd.h>
|
|
# include <pwd.h>
|
|
# define MAX_PATH FILENAME_MAX
|
|
|
|
#include <sgx_urts.h>
|
|
#include <sgx_uswitchless.h>
|
|
#include "App.h"
|
|
#include "Enclave_u.h"
|
|
|
|
/* Global EID shared by multiple threads */
|
|
sgx_enclave_id_t global_eid = 0;
|
|
|
|
typedef struct _sgx_errlist_t {
|
|
sgx_status_t err;
|
|
const char *msg;
|
|
const char *sug; /* Suggestion */
|
|
} sgx_errlist_t;
|
|
|
|
#define REPEATS 500000
|
|
|
|
/* Error code returned by sgx_create_enclave */
|
|
static sgx_errlist_t sgx_errlist[] = {
|
|
{
|
|
SGX_ERROR_UNEXPECTED,
|
|
"Unexpected error occurred.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_INVALID_PARAMETER,
|
|
"Invalid parameter.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_OUT_OF_MEMORY,
|
|
"Out of memory.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_ENCLAVE_LOST,
|
|
"Power transition occurred.",
|
|
"Please refer to the sample \"PowerTransition\" for details."
|
|
},
|
|
{
|
|
SGX_ERROR_INVALID_ENCLAVE,
|
|
"Invalid enclave image.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_INVALID_ENCLAVE_ID,
|
|
"Invalid enclave identification.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_INVALID_SIGNATURE,
|
|
"Invalid enclave signature.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_OUT_OF_EPC,
|
|
"Out of EPC memory.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_NO_DEVICE,
|
|
"Invalid SGX device.",
|
|
"Please make sure SGX module is enabled in the BIOS, and install SGX driver afterwards."
|
|
},
|
|
{
|
|
SGX_ERROR_MEMORY_MAP_CONFLICT,
|
|
"Memory map conflicted.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_INVALID_METADATA,
|
|
"Invalid enclave metadata.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_DEVICE_BUSY,
|
|
"SGX device was busy.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_INVALID_VERSION,
|
|
"Enclave version was invalid.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_INVALID_ATTRIBUTE,
|
|
"Enclave was not authorized.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_ENCLAVE_FILE_ACCESS,
|
|
"Can't open enclave file.",
|
|
NULL
|
|
},
|
|
{
|
|
SGX_ERROR_MEMORY_MAP_FAILURE,
|
|
"Failed to reserve memory for the enclave.",
|
|
NULL
|
|
},
|
|
};
|
|
|
|
/* Check error conditions for loading enclave */
|
|
void print_error_message(sgx_status_t ret)
|
|
{
|
|
size_t idx = 0;
|
|
size_t ttl = sizeof sgx_errlist/sizeof sgx_errlist[0];
|
|
|
|
for (idx = 0; idx < ttl; idx++) {
|
|
if(ret == sgx_errlist[idx].err) {
|
|
if(NULL != sgx_errlist[idx].sug)
|
|
printf("Info: %s\n", sgx_errlist[idx].sug);
|
|
printf("Error: %s\n", sgx_errlist[idx].msg);
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (idx == ttl)
|
|
printf("Error: Unexpected error occurred.\n");
|
|
}
|
|
|
|
/* Initialize the enclave:
|
|
* Call sgx_create_enclave to initialize an enclave instance
|
|
*/
|
|
int initialize_enclave(const sgx_uswitchless_config_t* us_config)
|
|
{
|
|
sgx_status_t ret = SGX_ERROR_UNEXPECTED;
|
|
|
|
/* Call sgx_create_enclave to initialize an enclave instance */
|
|
/* Debug Support: set 2nd parameter to 1 */
|
|
|
|
const void* enclave_ex_p[32] = { 0 };
|
|
|
|
enclave_ex_p[SGX_CREATE_ENCLAVE_EX_SWITCHLESS_BIT_IDX] = (const void*)us_config;
|
|
|
|
ret = sgx_create_enclave_ex(ENCLAVE_FILENAME, SGX_DEBUG_FLAG, NULL, NULL, &global_eid, NULL, SGX_CREATE_ENCLAVE_EX_SWITCHLESS, enclave_ex_p);
|
|
if (ret != SGX_SUCCESS) {
|
|
print_error_message(ret);
|
|
return -1;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
/* OCall functions */
|
|
void ocall_print_string(const char *str)
|
|
{
|
|
/* Proxy/Bridge will check the length and null-terminate
|
|
* the input string to prevent buffer overflow.
|
|
*/
|
|
printf("%s", str);
|
|
}
|
|
|
|
void ocall_empty(void) {}
|
|
void ocall_empty_switchless(void) {}
|
|
|
|
void benchmark_empty_ocall(int is_switchless)
|
|
{
|
|
unsigned long nrepeats = REPEATS;
|
|
printf("Repeating an **%s** OCall that does nothing for %lu times...\n",
|
|
is_switchless ? "switchless" : "ordinary", nrepeats);
|
|
|
|
struct timeval tval_before, tval_after, tval_result;
|
|
gettimeofday(&tval_before, NULL);
|
|
|
|
sgx_status_t status = ecall_repeat_ocalls(global_eid, nrepeats, is_switchless);
|
|
if (status != SGX_SUCCESS) {
|
|
printf("ERROR: ECall failed\n");
|
|
print_error_message(status);
|
|
exit(-1);
|
|
}
|
|
|
|
gettimeofday(&tval_after, NULL);
|
|
timersub(&tval_after, &tval_before, &tval_result);
|
|
printf("Time elapsed: %ld.%06ld seconds\n", (long int)tval_result.tv_sec, (long int)tval_result.tv_usec);
|
|
}
|
|
|
|
void benchmark_empty_ecall(int is_switchless)
|
|
{
|
|
unsigned long nrepeats = REPEATS;
|
|
printf("Repeating an **%s** ECall that does nothing for %lu times...\n",
|
|
is_switchless ? "switchless" : "ordinary", nrepeats);
|
|
|
|
struct timeval tval_before, tval_after, tval_result;
|
|
gettimeofday(&tval_before, NULL);
|
|
|
|
sgx_status_t(*ecall_fn)(sgx_enclave_id_t) = is_switchless ? ecall_empty_switchless : ecall_empty;
|
|
while (nrepeats--) {
|
|
ecall_fn(global_eid);
|
|
}
|
|
|
|
gettimeofday(&tval_after, NULL);
|
|
timersub(&tval_after, &tval_before, &tval_result);
|
|
printf("Time elapsed: %ld.%06ld seconds\n", (long int)tval_result.tv_sec, (long int)tval_result.tv_usec);
|
|
}
|
|
|
|
/* Application entry */
|
|
int SGX_CDECL main(int argc, char *argv[])
|
|
{
|
|
(void) argc;
|
|
(void) argv;
|
|
|
|
/* Configuration for Switchless SGX */
|
|
sgx_uswitchless_config_t us_config = SGX_USWITCHLESS_CONFIG_INITIALIZER;
|
|
us_config.num_uworkers = 2;
|
|
us_config.num_tworkers = 2;
|
|
|
|
/* Initialize the enclave */
|
|
if(initialize_enclave(&us_config) < 0)
|
|
{
|
|
printf("Error: enclave initialization failed\n");
|
|
return -1;
|
|
}
|
|
|
|
|
|
printf("Running a benchmark that compares **ordinary** and **switchless** OCalls...\n");
|
|
benchmark_empty_ocall(1);
|
|
benchmark_empty_ocall(0);
|
|
printf("Done.\n");
|
|
|
|
|
|
printf("Running a benchmark that compares **ordinary** and **switchless** ECalls...\n");
|
|
benchmark_empty_ecall(1);
|
|
benchmark_empty_ecall(0);
|
|
printf("Done.\n");
|
|
|
|
sgx_destroy_enclave(global_eid);
|
|
return 0;
|
|
}
|