mirror of
https://github.com/trezor/trezor-firmware.git
synced 2025-04-26 03:59:08 +00:00
253 lines
8.2 KiB
Python
253 lines
8.2 KiB
Python
# This file is part of the Trezor project.
|
|
#
|
|
# Copyright (C) 2012-2019 SatoshiLabs and contributors
|
|
#
|
|
# This library is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Lesser General Public License version 3
|
|
# as published by the Free Software Foundation.
|
|
#
|
|
# This library is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Lesser General Public License for more details.
|
|
#
|
|
# You should have received a copy of the License along with this library.
|
|
# If not, see <https://www.gnu.org/licenses/lgpl-3.0.html>.
|
|
|
|
import pytest
|
|
|
|
from trezorlib import cardano, exceptions, messages, models
|
|
from trezorlib.client import ProtocolVersion
|
|
from trezorlib.debuglink import TrezorClientDebugLink as Client
|
|
from trezorlib.exceptions import TrezorFailure
|
|
from trezorlib.tools import Address, parse_path
|
|
from trezorlib.transport.session import Session, SessionV1
|
|
|
|
from ..common import get_test_address
|
|
|
|
ADDRESS_N = parse_path("m/44h/0h/0h")
|
|
XPUB = "xpub6BiVtCpG9fQPxnPmHXG8PhtzQdWC2Su4qWu6XW9tpWFYhxydCLJGrWBJZ5H6qTAHdPQ7pQhtpjiYZVZARo14qHiay2fvrX996oEP42u8wZy"
|
|
|
|
PIN4 = "1234"
|
|
|
|
|
|
def _get_public_node(
|
|
session: "Session",
|
|
address: "Address",
|
|
) -> messages.PublicKey:
|
|
|
|
resp = session.call_raw(
|
|
messages.GetPublicKey(address_n=address),
|
|
)
|
|
if isinstance(resp, messages.ButtonRequest):
|
|
resp = session._callback_button(resp)
|
|
if isinstance(resp, messages.PinMatrixRequest):
|
|
resp = session._callback_pin(resp)
|
|
return resp
|
|
|
|
|
|
@pytest.mark.setup_client(pin=PIN4, passphrase="")
|
|
def test_clear_session(client: Client):
|
|
is_t1 = client.model is models.T1B1
|
|
v1 = client.protocol_version == ProtocolVersion.V1
|
|
init_responses = [
|
|
(v1, messages.Features),
|
|
messages.PinMatrixRequest if is_t1 else messages.ButtonRequest,
|
|
(v1, messages.PassphraseRequest),
|
|
(v1, messages.Address),
|
|
]
|
|
|
|
lock_unlock = [
|
|
messages.Success,
|
|
messages.PinMatrixRequest if is_t1 else messages.ButtonRequest,
|
|
]
|
|
|
|
cached_responses = [messages.PublicKey]
|
|
with client:
|
|
client.use_pin_sequence([PIN4, PIN4])
|
|
client.set_expected_responses(init_responses + lock_unlock + cached_responses)
|
|
session = client.get_session()
|
|
session.lock()
|
|
assert _get_public_node(session, ADDRESS_N).xpub == XPUB
|
|
|
|
session.resume()
|
|
with client:
|
|
# pin and passphrase are cached
|
|
client.set_expected_responses(cached_responses)
|
|
assert _get_public_node(session, ADDRESS_N).xpub == XPUB
|
|
|
|
session.lock()
|
|
session.end()
|
|
|
|
# session cache is cleared
|
|
with client:
|
|
client.use_pin_sequence([PIN4, PIN4])
|
|
client.set_expected_responses(init_responses + cached_responses)
|
|
session = client.get_session()
|
|
assert _get_public_node(session, ADDRESS_N).xpub == XPUB
|
|
|
|
session.resume()
|
|
with client:
|
|
# pin and passphrase are cached
|
|
client.set_expected_responses(cached_responses)
|
|
assert _get_public_node(session, ADDRESS_N).xpub == XPUB
|
|
|
|
|
|
def test_end_session(client: Client):
|
|
# client instance starts out not initialized
|
|
# XXX do we want to change this?
|
|
session = client.get_session()
|
|
assert session.id is not None
|
|
|
|
# get_address will succeed
|
|
with client:
|
|
client.set_expected_responses([messages.Address])
|
|
get_test_address(session)
|
|
|
|
session.end()
|
|
# assert client.session_id is None
|
|
with pytest.raises(TrezorFailure) as exc:
|
|
get_test_address(session)
|
|
assert exc.value.code == messages.FailureType.InvalidSession
|
|
assert exc.value.message.endswith("Invalid session")
|
|
|
|
session = client.get_session()
|
|
assert session.id is not None
|
|
with client:
|
|
client.set_expected_responses([messages.Address])
|
|
get_test_address(session)
|
|
|
|
with client:
|
|
# end_session should succeed on empty session too
|
|
client.set_expected_responses([messages.Success] * 2)
|
|
session.end()
|
|
session.end()
|
|
|
|
|
|
def test_cannot_resume_ended_session(client: Client):
|
|
session = client.get_session()
|
|
session_id = session.id
|
|
|
|
session.resume()
|
|
|
|
assert session.id == session_id
|
|
|
|
session.end()
|
|
with pytest.raises(exceptions.FailedSessionResumption) as e:
|
|
session.resume()
|
|
|
|
assert e.value.received_session_id != session_id
|
|
|
|
|
|
def test_end_session_only_current(client: Client):
|
|
"""test that EndSession only destroys the current session"""
|
|
session_a = client.get_session()
|
|
session_b = client.get_session()
|
|
session_b_id = session_b.id
|
|
|
|
session_b.end()
|
|
# assert client.session_id is None
|
|
|
|
# resume ended session
|
|
with pytest.raises(exceptions.FailedSessionResumption) as e:
|
|
session_b.resume()
|
|
|
|
assert e.value.received_session_id != session_b_id
|
|
|
|
# resume first session that was not ended
|
|
session_a.resume()
|
|
assert session_a.id == session_a.id
|
|
|
|
|
|
@pytest.mark.setup_client(passphrase=True)
|
|
def test_session_recycling(client: Client):
|
|
session = client.get_session(passphrase="TREZOR")
|
|
with client:
|
|
client.set_expected_responses([messages.Address])
|
|
address = get_test_address(session)
|
|
|
|
# create and close 100 sessions - more than the session limit
|
|
for _ in range(100):
|
|
session_x = client.get_seedless_session()
|
|
session_x.end()
|
|
|
|
# it should still be possible to resume the original session
|
|
with client:
|
|
# passphrase should still be cached
|
|
expected_responses = [messages.Address] * 3
|
|
if client.protocol_version == ProtocolVersion.V1:
|
|
expected_responses = [messages.Features] + expected_responses
|
|
client.set_expected_responses(expected_responses)
|
|
session.resume()
|
|
get_test_address(session)
|
|
get_test_address(session)
|
|
assert address == get_test_address(session)
|
|
|
|
|
|
@pytest.mark.altcoin
|
|
@pytest.mark.cardano
|
|
@pytest.mark.models("core")
|
|
def test_derive_cardano_empty_session(client: Client):
|
|
# start new session
|
|
session = SessionV1.new(client)
|
|
session.init_session(derive_cardano=True)
|
|
session_id = session.id
|
|
|
|
# restarting same session should go well
|
|
session.resume()
|
|
assert session.id == session_id
|
|
|
|
# restarting same session should go well with any setting
|
|
session.init_session(derive_cardano=False)
|
|
assert session_id == session.id
|
|
session.init_session(derive_cardano=True)
|
|
assert session_id == session.id
|
|
|
|
|
|
@pytest.mark.altcoin
|
|
@pytest.mark.cardano
|
|
@pytest.mark.models("core")
|
|
def test_derive_cardano_running_session(client: Client):
|
|
# start new session
|
|
session = client.get_session(derive_cardano=False)
|
|
session_id = session.id
|
|
# force derivation of seed
|
|
get_test_address(session)
|
|
|
|
# session should not have Cardano capability
|
|
with pytest.raises(TrezorFailure, match="not enabled"):
|
|
cardano.get_public_key(session, parse_path("m/44h/1815h/0h"))
|
|
|
|
# restarting same session should go well
|
|
session.resume()
|
|
assert session.id == session_id
|
|
|
|
# restarting same session should go well if we _don't_ want to derive cardano
|
|
session.init_session(derive_cardano=False)
|
|
assert session.id == session_id
|
|
|
|
# restarting with derive_cardano=True should kill old session and create new one
|
|
with pytest.raises(exceptions.FailedSessionResumption) as e:
|
|
session.init_session(derive_cardano=True)
|
|
session_2 = SessionV1(client, e.value.received_session_id)
|
|
session_2.derive_cardano = True
|
|
session_2_id = session_2.id
|
|
assert session_2_id != session.id
|
|
|
|
# new session should have Cardano capability
|
|
cardano.get_public_key(session_2, parse_path("m/44h/1815h/0h"))
|
|
|
|
# restarting with derive_cardano=True should keep same session
|
|
session_2.resume()
|
|
assert session_2.id == session_2_id
|
|
|
|
# restarting with derive_cardano=False should kill old session and create new one
|
|
with pytest.raises(exceptions.FailedSessionResumption) as e:
|
|
session_2.init_session(derive_cardano=False)
|
|
session_3 = SessionV1(client, e.value.received_session_id)
|
|
|
|
assert session_2.id != session_3.id
|
|
|
|
with pytest.raises(TrezorFailure, match="not enabled"):
|
|
cardano.get_public_key(session_3, parse_path("m/44h/1815h/0h"))
|