summaryrefslogtreecommitdiff
path: root/tests
diff options
context:
space:
mode:
author Wei Li <weiwli@google.com> 2023-08-01 15:20:38 -0700
committer Wei Li <weiwli@google.com> 2023-08-02 19:10:23 +0000
commit8ea2ffc8251d54fedc13bbb78d8e0d3fd5726c59 (patch)
tree66d1a469d42cd5eac43b8320cd68580a222e7095 /tests
parent2d8b555f2e3dfacb39b92f4015249e1b3564d7db (diff)
Add integration test for verifying package verification code in SBOM.
The test case calculates package verification code of package product according to the SPDX spec and compare it to the one in SBOM file which should have the same SHA1 hash value. This helps verify the python logic of generating it in SBOM files. Bug: 293304694 Test: build/soong/tests/sbom_test.sh Change-Id: I37c96d90a1990fbeb786f1bd4e8dc87102e0f0cd
Diffstat (limited to 'tests')
-rwxr-xr-xtests/sbom_test.sh35
1 files changed, 35 insertions, 0 deletions
diff --git a/tests/sbom_test.sh b/tests/sbom_test.sh
index afec6b1ce..2534b205b 100755
--- a/tests/sbom_test.sh
+++ b/tests/sbom_test.sh
@@ -238,10 +238,45 @@ function test_sbom_aosp_cf_x86_64_phone {
diff_files "$file_list_file" "$files_in_spdx_file" "$partition_name"
done
+ verify_package_verification_code "$product_out/sbom.spdx"
+
# Teardown
cleanup "${out_dir}"
}
+function verify_package_verification_code {
+ local sbom_file="$1"; shift
+
+ local -a file_checksums
+ local package_product_found=
+ while read -r line;
+ do
+ if grep -q 'PackageVerificationCode' <<<"$line"
+ then
+ package_product_found=true
+ fi
+ if [ -n "$package_product_found" ]
+ then
+ if grep -q 'FileChecksum' <<< "$line"
+ then
+ checksum=$(echo $line | sed 's/^.*: //')
+ file_checksums+=("$checksum")
+ fi
+ fi
+ done <<< "$(grep -E 'PackageVerificationCode|FileChecksum' $sbom_file)"
+ IFS=$'\n' file_checksums=($(sort <<<"${file_checksums[*]}")); unset IFS
+ IFS= expected_package_verification_code=$(printf "${file_checksums[*]}" | sha1sum | sed 's/[[:space:]]*-//'); unset IFS
+
+ actual_package_verification_code=$(grep PackageVerificationCode $sbom_file | sed 's/PackageVerificationCode: //g')
+ if [ $actual_package_verification_code = $expected_package_verification_code ]
+ then
+ echo "Package verification code is correct."
+ else
+ echo "Unexpected package verification code."
+ exit 1
+ fi
+}
+
function test_sbom_unbundled_apex {
# Setup
out_dir="$(setup)"