This 5GMM message is required for an invalid security mode command, e.g. when the MAC integrity fails, or the wrong Security Header is set. * Add encode/decode functions for common IEs in fgmm_lib: this library provides encoding/decoding helpers for IEs shared across multiple NAS messages. The goal is to avoid the legacy approach of creating separate files per IE * add NAS Cause enc/dec lib * Adopted byte_array_t to handle the buffer Co-authored-by: Eduard Vlad <eduard.vlad@rwth-aachen.de>
311 lines
12 KiB
C
311 lines
12 KiB
C
#include <stdlib.h>
|
|
#include <stdint.h>
|
|
#include <stdio.h>
|
|
#include <arpa/inet.h>
|
|
#include "common/utils/ds/byte_array.h"
|
|
#include "RegistrationAccept.h"
|
|
#include "fgs_service_request.h"
|
|
#include "fgmm_service_accept.h"
|
|
#include "fgmm_service_reject.h"
|
|
#include "fgmm_authentication_failure.h"
|
|
#include "FGSNASSecurityModeReject.h"
|
|
#include "nr_nas_msg.h"
|
|
|
|
void exit_function(const char *file, const char *function, const int line, const char *s, const int assert)
|
|
{
|
|
printf("detected error at %s:%d:%s: %s\n", file, line, function, s);
|
|
abort();
|
|
}
|
|
|
|
/**
|
|
* @brief Equality check for NAS Service Request enc/dec
|
|
*/
|
|
static bool eq_service_request(const fgs_service_request_msg_t *a, const fgs_service_request_msg_t *b)
|
|
{
|
|
bool result = true;
|
|
result &= memcmp(&a->naskeysetidentifier, &b->naskeysetidentifier, sizeof(NasKeySetIdentifier)) == 0;
|
|
result &= a->serviceType == b->serviceType;
|
|
result &= memcmp(&a->fiveg_s_tmsi, &b->fiveg_s_tmsi, sizeof(Stmsi5GSMobileIdentity_t)) == 0;
|
|
return result;
|
|
}
|
|
|
|
/** @brief Test regression of NAS Registration Accept decoding
|
|
* This test verifies that the NAS Registration Accept message
|
|
* is correctly decoded. It decodes a message as it received from
|
|
* the OAI CN5G and compares the output with the expected Registration Accept structure.
|
|
* The purpose of this regression test is to ensure that changes
|
|
* to the NAS decoder do not break the existing decoding behavior with OAI CN5G */
|
|
static void test_regression_registration_accept(void)
|
|
{
|
|
// Registration Accept message
|
|
registration_accept_msg orig = {
|
|
.guti = malloc_or_fail(sizeof(*orig.guti)),
|
|
.result = 0x01,
|
|
.nas_allowed_nssai[0].sst = 0x01,
|
|
.nas_allowed_nssai[1].sst = 0x02,
|
|
.nas_allowed_nssai[2].sst = 0x03,
|
|
.num_allowed_slices = 3,
|
|
.config_nssai[0].sst = 0x01,
|
|
.config_nssai[1].sst = 0x02,
|
|
.config_nssai[2].sst = 0x03,
|
|
.num_configured_slices = 3,
|
|
};
|
|
|
|
orig.guti->guti.typeofidentity = FGS_MOBILE_IDENTITY_5G_GUTI;
|
|
orig.guti->guti.amfpointer = 0x01;
|
|
orig.guti->guti.amfregionid = 0x02;
|
|
orig.guti->guti.amfsetid = 0x01;
|
|
orig.guti->guti.mccdigit1 = 0x00;
|
|
orig.guti->guti.mccdigit2 = 0x00;
|
|
orig.guti->guti.mccdigit3 = 0x01;
|
|
orig.guti->guti.mncdigit1 = 0x00;
|
|
orig.guti->guti.mncdigit2 = 0x01;
|
|
orig.guti->guti.mncdigit3 = 0x0F;
|
|
orig.guti->guti.tmsi = 0xb0207806;
|
|
orig.guti->guti.spare = 0b1111;
|
|
orig.guti->guti.oddeven = 0;
|
|
|
|
// Encoded Registration Accept message from OAI CN5G
|
|
uint8_t cn5g_msg[] = {0x01, 0x01, // Registration Result
|
|
0x77, 0x00, 0x0B, 0xF2, 0x00, 0xF1, 0x10, // 5G-GUTI
|
|
0x02, 0x00, 0x41, 0xB0, 0x20, 0x78, 0x06, // 5G-GUTI
|
|
0x15, 0x06, 0x01, 0x01, 0x01, 0x02, 0x01, 0x03, // Allowed N-NSSAI
|
|
0x31, 0x06, 0x01, 0x01, 0x01, 0x02, 0x01, 0x03}; // Configured N-NSSAI
|
|
|
|
// Decode NAS Registration Accept
|
|
int encoded_length;
|
|
registration_accept_msg decoded = {0};
|
|
byte_array_t ba = {.buf = cn5g_msg, .len = sizeof(cn5g_msg)};
|
|
encoded_length = decode_registration_accept(&decoded, ba);
|
|
AssertFatal(encoded_length >= 0, "encode_fgs_service_request() failed\n");
|
|
|
|
// Compare the raw encoded buffer with expected encoded data
|
|
bool ret = eq_fgmm_registration_accept(&orig, &decoded);
|
|
AssertFatal(ret, "Encoding mismatch!\n");
|
|
|
|
// Free dynamic allocated memory
|
|
free_fgmm_registration_accept(&orig);
|
|
free_fgmm_registration_accept(&decoded);
|
|
}
|
|
|
|
/**
|
|
* @brief Test NAS Service Request enc/dec
|
|
*/
|
|
static void test_service_request(void)
|
|
{
|
|
// Dummy NAS Service Request message
|
|
uint16_t amf_set_id = 0x48;
|
|
uint16_t amf_pointer = 0x34;
|
|
uint32_t tmsi = 0x56789ABC;
|
|
fgs_service_request_msg_t original_msg = {
|
|
.naskeysetidentifier = {.tsc = NAS_KEY_SET_IDENTIFIER_NATIVE, .naskeysetidentifier = NAS_KEY_SET_IDENTIFIER_NOT_AVAILABLE},
|
|
.serviceType = SERVICE_TYPE_DATA,
|
|
.fiveg_s_tmsi = {.spare = 0,
|
|
.typeofidentity = FGS_MOBILE_IDENTITY_5GS_TMSI,
|
|
.amfsetid = amf_set_id,
|
|
.amfpointer = amf_pointer,
|
|
.tmsi = tmsi}};
|
|
|
|
uint8_t expected_encoded_data[] = {0x71,
|
|
0x00,
|
|
0x00,
|
|
0xF4,
|
|
(amf_set_id >> 2) & 0xFF,
|
|
(amf_set_id << 6) | (amf_pointer & 0x3F),
|
|
(tmsi >> 24) & 0xFF,
|
|
(tmsi >> 16) & 0xFF,
|
|
(tmsi >> 8) & 0xFF,
|
|
tmsi & 0xFF};
|
|
uint16_t tmp = htons(7); // length of 5GS mobile identity IE for 5G-S-TMSI (bytes)
|
|
memcpy(expected_encoded_data + 1, &tmp, sizeof(tmp));
|
|
|
|
// Buffer
|
|
uint8_t buffer[64];
|
|
memset(buffer, 0, sizeof(buffer));
|
|
|
|
// Encode NAS Service Request
|
|
int encoded_length = encode_fgs_service_request(buffer, &original_msg, sizeof(buffer));
|
|
AssertFatal(encoded_length >= 0, "encode_fgs_service_request() failed\n");
|
|
|
|
// Compare the raw encoded buffer with expected encoded data
|
|
AssertFatal(memcmp(buffer, expected_encoded_data, encoded_length) == 0, "Encoding mismatch!\n");
|
|
|
|
// Decode NAS Service Request
|
|
fgs_service_request_msg_t decoded_service_request = {0};
|
|
int decoded_length = decode_fgs_service_request(&decoded_service_request, buffer, sizeof(buffer));
|
|
AssertFatal(decoded_length >= 0, "decode_fgs_service_request() failed\n");
|
|
|
|
// Compare original and decoded messages
|
|
AssertFatal(eq_service_request(&original_msg, &decoded_service_request) == 0,
|
|
"test_service_request() failed: original and decoded messages do not match\n");
|
|
}
|
|
|
|
/**
|
|
* @brief Test NAS Service Accept enc/dec
|
|
*/
|
|
static void test_service_accept(void)
|
|
{
|
|
// Dummy NAS Service Accept message
|
|
fgs_service_accept_msg_t orig = {
|
|
.has_psi_status = true,
|
|
.has_psi_res = true,
|
|
.num_errors = 1,
|
|
.t3448 = malloc_or_fail(sizeof(*orig.t3448)),
|
|
};
|
|
orig.psi_status[1] = PDU_SESSION_ACTIVE;
|
|
orig.psi_status[2] = PDU_SESSION_INACTIVE;
|
|
orig.psi_status[3] = PDU_SESSION_ACTIVE;
|
|
orig.psi_res[1] = REACTIVATION_FAILED;
|
|
orig.psi_res[2] = REACTIVATION_SUCCESS;
|
|
orig.cause[0].cause = Illegal_UE;
|
|
orig.cause[0].pdu_session_id = 1;
|
|
orig.t3448->value = 16;
|
|
orig.t3448->unit = TWO_SECONDS;
|
|
|
|
// Expected encoded data
|
|
uint8_t expected_enc[] = {0x50, 0x02, 0x0a, 0x00, 0x26, 0x02, 0x02, 0x00, 0x72, 0x00, 0x00, 0x01, 0x03, 0x6B, 0x01, 0x10};
|
|
uint16_t len_status = 2;
|
|
expected_enc[9] = (len_status >> 8) & 0xFF;
|
|
expected_enc[10] = len_status & 0xFF;
|
|
|
|
// Buffer
|
|
uint8_t buf[64] = {0};
|
|
byte_array_t buffer = {.buf = &buf[0], .len = sizeof(expected_enc)};
|
|
|
|
// Encode NAS Service Accept
|
|
int encoded_length = encode_fgs_service_accept(&buffer, &orig);
|
|
AssertFatal(encoded_length == sizeofArray(expected_enc), "encode_fgs_service_accept() failed\n");
|
|
|
|
// Compare the raw encoded buffer with expected encoded data
|
|
AssertFatal(memcmp(buffer.buf, expected_enc, buffer.len) == 0, "Encoding mismatch!\n");
|
|
|
|
// Decode NAS Service Accept
|
|
fgs_service_accept_msg_t dec = {0};
|
|
int decoded_length = decode_fgs_service_accept(&dec, &buffer);
|
|
AssertFatal(decoded_length >= 0, "decode_fgs_service_accept() failed\n");
|
|
|
|
// Compare original and decoded messages
|
|
AssertFatal(eq_service_accept(&orig, &dec), "test_service_accept() failed: original and decoded messages do not match\n");
|
|
free_fgs_service_accept(&dec);
|
|
free_fgs_service_accept(&orig);
|
|
}
|
|
|
|
/** @brief Test NAS Service Reject enc/dec */
|
|
static void test_service_reject(void)
|
|
{
|
|
// Dummy NAS Service Reject message
|
|
fgs_service_reject_msg_t orig = {
|
|
.cause = Illegal_UE,
|
|
.has_psi_status = true,
|
|
.t3446 = malloc_or_fail(sizeof(*orig.t3446)),
|
|
.t3448 = malloc_or_fail(sizeof(*orig.t3448)),
|
|
};
|
|
orig.psi_status[1] = PDU_SESSION_INACTIVE; // PDU Session 1
|
|
orig.psi_status[2] = PDU_SESSION_ACTIVE; // PDU Session 2
|
|
orig.t3446->value = 10;
|
|
orig.t3446->unit = TWO_SECONDS;
|
|
orig.t3448->value = 1;
|
|
orig.t3448->unit = ONE_MINUTE;
|
|
|
|
// Expected encoded data
|
|
uint8_t expected_enc[] = {0x03, 0x50, 0x02, 0x04, 0x00, 0x5F, 0x01, 0x0A, 0x6B, 0x01, 0x21};
|
|
|
|
// Buffer
|
|
uint8_t buf[64] = {0};
|
|
byte_array_t buffer = {.buf = &buf[0], .len = sizeof(expected_enc)};
|
|
|
|
// Encode NAS Service Reject
|
|
int encoded_length = encode_fgs_service_reject(&buffer, &orig);
|
|
AssertFatal(encoded_length == sizeofArray(expected_enc), "encode_fgs_service_reject() failed: %d != %ld\n", encoded_length, sizeofArray(expected_enc));
|
|
|
|
// Compare the raw encoded buffer with expected encoded data
|
|
AssertFatal(memcmp(buffer.buf, expected_enc, buffer.len) == 0, "Encoding mismatch!\n");
|
|
|
|
// Decode NAS Service Reject
|
|
fgs_service_reject_msg_t dec = {0};
|
|
int decoded_length = decode_fgs_service_reject(&dec, &buffer);
|
|
AssertFatal(decoded_length >= 0, "decode_fgs_service_reject() failed\n");
|
|
|
|
// Compare original and decoded messages
|
|
AssertFatal(eq_service_reject(&orig, &dec), "test_service_reject() failed: original and decoded messages do not match\n");
|
|
free_fgs_service_reject(&dec);
|
|
free_fgs_service_reject(&orig);
|
|
}
|
|
|
|
/** @brief Test NAS Authentication Failure enc/dec */
|
|
static void test_auth_failure(void)
|
|
{
|
|
// Dummy NAS Authentication Failure message
|
|
uint8_t afp[] = {0x01, 0x02, 0x03, 0x04, 0x05, 0x06};
|
|
const fgmm_auth_failure_t orig = {
|
|
.cause = Synch_failure,
|
|
.authentication_failure_param.len = 6,
|
|
.authentication_failure_param.buf = afp,
|
|
};
|
|
|
|
// Expected encoded data
|
|
uint8_t expected_enc[] = {0x15, 0x30, 0x06, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06};
|
|
|
|
// Buffer
|
|
uint8_t buf[16] = {0};
|
|
byte_array_t buffer = {.buf = buf, .len = sizeof(buf)};
|
|
|
|
// Encode
|
|
int encoded_length = encode_fgmm_auth_failure(&buffer, &orig);
|
|
AssertFatal(encoded_length == sizeofArray(expected_enc), "encode_fgmm_auth_failure() failed\n");
|
|
|
|
// Compare the raw encoded buffer with expected encoded data
|
|
AssertFatal(memcmp(buffer.buf, expected_enc, encoded_length) == 0, "Encoding mismatch!\n");
|
|
|
|
// Decode
|
|
fgmm_auth_failure_t dec = {0};
|
|
int decoded_length = decode_fgmm_auth_failure(&dec, &buffer);
|
|
AssertFatal(decoded_length >= 0, "decode_fgmm_auth_failure() failed\n");
|
|
|
|
// Compare original and decoded messages
|
|
AssertFatal(eq_fgmm_auth_failure(&orig, &dec), "test_auth_failure() failed: original and decoded messages do not match\n");
|
|
free_fgmm_auth_failure(&dec);
|
|
}
|
|
|
|
/** @brief Test NAS Security Mode Reject enc/dec */
|
|
static void test_security_mode_reject(void)
|
|
{
|
|
// Dummy NAS Security Mode Reject message
|
|
const fgs_security_mode_reject_msg orig = {
|
|
.cause = Illegal_UE,
|
|
};
|
|
|
|
// Expected encoded data
|
|
uint8_t expected_enc[] = {0x03};
|
|
|
|
// Buffer
|
|
uint8_t buf[8] = {0};
|
|
byte_array_t buffer = {.buf = buf, .len = sizeof(buf)};
|
|
|
|
// Encode
|
|
int encoded_length = encode_fgs_security_mode_reject(&buffer, &orig);
|
|
AssertFatal(encoded_length == sizeofArray(expected_enc), "encode_fgs_security_mode_reject() failed\n");
|
|
|
|
// Compare the raw encoded buffer with expected encoded data
|
|
AssertFatal(memcmp(buffer.buf, expected_enc, encoded_length) == 0, "Encoding mismatch!\n");
|
|
|
|
// Decode
|
|
fgs_security_mode_reject_msg dec = {0};
|
|
int decoded_length = decode_fgs_security_mode_reject(&dec, &buffer);
|
|
AssertFatal(decoded_length >= 0, "decode_fgs_security_mode_reject() failed\n");
|
|
|
|
// Compare original and decoded messages
|
|
AssertFatal(eq_sec_mode_reject(&orig, &dec), "test_sec_mode_reject() failed: original and decoded messages do not match\n");
|
|
}
|
|
|
|
int main()
|
|
{
|
|
test_regression_registration_accept();
|
|
test_service_request();
|
|
test_service_accept();
|
|
test_service_reject();
|
|
test_auth_failure();
|
|
test_security_mode_reject();
|
|
return 0;
|
|
}
|