Files
openairinterface5g/openair3/NAS/NR_UE/5GS/tests/nas_lib_test.c
T
Guido CasatiandEduard Vlad 4262203e2d Add NAS Security Mode Reject enc/dec lib and unit test
This 5GMM message is required for an invalid security mode command,
e.g. when the MAC integrity fails, or the wrong Security Header is set.

* Add encode/decode functions for common IEs in fgmm_lib: this library
  provides encoding/decoding helpers for IEs shared across multiple
  NAS messages. The goal is to avoid the legacy approach of creating
  separate files per IE
* add NAS Cause enc/dec lib
* Adopted byte_array_t to handle the buffer

Co-authored-by: Eduard Vlad <eduard.vlad@rwth-aachen.de>
2025-06-12 09:49:32 +02:00

311 lines
12 KiB
C

#include <stdlib.h>
#include <stdint.h>
#include <stdio.h>
#include <arpa/inet.h>
#include "common/utils/ds/byte_array.h"
#include "RegistrationAccept.h"
#include "fgs_service_request.h"
#include "fgmm_service_accept.h"
#include "fgmm_service_reject.h"
#include "fgmm_authentication_failure.h"
#include "FGSNASSecurityModeReject.h"
#include "nr_nas_msg.h"
void exit_function(const char *file, const char *function, const int line, const char *s, const int assert)
{
printf("detected error at %s:%d:%s: %s\n", file, line, function, s);
abort();
}
/**
* @brief Equality check for NAS Service Request enc/dec
*/
static bool eq_service_request(const fgs_service_request_msg_t *a, const fgs_service_request_msg_t *b)
{
bool result = true;
result &= memcmp(&a->naskeysetidentifier, &b->naskeysetidentifier, sizeof(NasKeySetIdentifier)) == 0;
result &= a->serviceType == b->serviceType;
result &= memcmp(&a->fiveg_s_tmsi, &b->fiveg_s_tmsi, sizeof(Stmsi5GSMobileIdentity_t)) == 0;
return result;
}
/** @brief Test regression of NAS Registration Accept decoding
* This test verifies that the NAS Registration Accept message
* is correctly decoded. It decodes a message as it received from
* the OAI CN5G and compares the output with the expected Registration Accept structure.
* The purpose of this regression test is to ensure that changes
* to the NAS decoder do not break the existing decoding behavior with OAI CN5G */
static void test_regression_registration_accept(void)
{
// Registration Accept message
registration_accept_msg orig = {
.guti = malloc_or_fail(sizeof(*orig.guti)),
.result = 0x01,
.nas_allowed_nssai[0].sst = 0x01,
.nas_allowed_nssai[1].sst = 0x02,
.nas_allowed_nssai[2].sst = 0x03,
.num_allowed_slices = 3,
.config_nssai[0].sst = 0x01,
.config_nssai[1].sst = 0x02,
.config_nssai[2].sst = 0x03,
.num_configured_slices = 3,
};
orig.guti->guti.typeofidentity = FGS_MOBILE_IDENTITY_5G_GUTI;
orig.guti->guti.amfpointer = 0x01;
orig.guti->guti.amfregionid = 0x02;
orig.guti->guti.amfsetid = 0x01;
orig.guti->guti.mccdigit1 = 0x00;
orig.guti->guti.mccdigit2 = 0x00;
orig.guti->guti.mccdigit3 = 0x01;
orig.guti->guti.mncdigit1 = 0x00;
orig.guti->guti.mncdigit2 = 0x01;
orig.guti->guti.mncdigit3 = 0x0F;
orig.guti->guti.tmsi = 0xb0207806;
orig.guti->guti.spare = 0b1111;
orig.guti->guti.oddeven = 0;
// Encoded Registration Accept message from OAI CN5G
uint8_t cn5g_msg[] = {0x01, 0x01, // Registration Result
0x77, 0x00, 0x0B, 0xF2, 0x00, 0xF1, 0x10, // 5G-GUTI
0x02, 0x00, 0x41, 0xB0, 0x20, 0x78, 0x06, // 5G-GUTI
0x15, 0x06, 0x01, 0x01, 0x01, 0x02, 0x01, 0x03, // Allowed N-NSSAI
0x31, 0x06, 0x01, 0x01, 0x01, 0x02, 0x01, 0x03}; // Configured N-NSSAI
// Decode NAS Registration Accept
int encoded_length;
registration_accept_msg decoded = {0};
byte_array_t ba = {.buf = cn5g_msg, .len = sizeof(cn5g_msg)};
encoded_length = decode_registration_accept(&decoded, ba);
AssertFatal(encoded_length >= 0, "encode_fgs_service_request() failed\n");
// Compare the raw encoded buffer with expected encoded data
bool ret = eq_fgmm_registration_accept(&orig, &decoded);
AssertFatal(ret, "Encoding mismatch!\n");
// Free dynamic allocated memory
free_fgmm_registration_accept(&orig);
free_fgmm_registration_accept(&decoded);
}
/**
* @brief Test NAS Service Request enc/dec
*/
static void test_service_request(void)
{
// Dummy NAS Service Request message
uint16_t amf_set_id = 0x48;
uint16_t amf_pointer = 0x34;
uint32_t tmsi = 0x56789ABC;
fgs_service_request_msg_t original_msg = {
.naskeysetidentifier = {.tsc = NAS_KEY_SET_IDENTIFIER_NATIVE, .naskeysetidentifier = NAS_KEY_SET_IDENTIFIER_NOT_AVAILABLE},
.serviceType = SERVICE_TYPE_DATA,
.fiveg_s_tmsi = {.spare = 0,
.typeofidentity = FGS_MOBILE_IDENTITY_5GS_TMSI,
.amfsetid = amf_set_id,
.amfpointer = amf_pointer,
.tmsi = tmsi}};
uint8_t expected_encoded_data[] = {0x71,
0x00,
0x00,
0xF4,
(amf_set_id >> 2) & 0xFF,
(amf_set_id << 6) | (amf_pointer & 0x3F),
(tmsi >> 24) & 0xFF,
(tmsi >> 16) & 0xFF,
(tmsi >> 8) & 0xFF,
tmsi & 0xFF};
uint16_t tmp = htons(7); // length of 5GS mobile identity IE for 5G-S-TMSI (bytes)
memcpy(expected_encoded_data + 1, &tmp, sizeof(tmp));
// Buffer
uint8_t buffer[64];
memset(buffer, 0, sizeof(buffer));
// Encode NAS Service Request
int encoded_length = encode_fgs_service_request(buffer, &original_msg, sizeof(buffer));
AssertFatal(encoded_length >= 0, "encode_fgs_service_request() failed\n");
// Compare the raw encoded buffer with expected encoded data
AssertFatal(memcmp(buffer, expected_encoded_data, encoded_length) == 0, "Encoding mismatch!\n");
// Decode NAS Service Request
fgs_service_request_msg_t decoded_service_request = {0};
int decoded_length = decode_fgs_service_request(&decoded_service_request, buffer, sizeof(buffer));
AssertFatal(decoded_length >= 0, "decode_fgs_service_request() failed\n");
// Compare original and decoded messages
AssertFatal(eq_service_request(&original_msg, &decoded_service_request) == 0,
"test_service_request() failed: original and decoded messages do not match\n");
}
/**
* @brief Test NAS Service Accept enc/dec
*/
static void test_service_accept(void)
{
// Dummy NAS Service Accept message
fgs_service_accept_msg_t orig = {
.has_psi_status = true,
.has_psi_res = true,
.num_errors = 1,
.t3448 = malloc_or_fail(sizeof(*orig.t3448)),
};
orig.psi_status[1] = PDU_SESSION_ACTIVE;
orig.psi_status[2] = PDU_SESSION_INACTIVE;
orig.psi_status[3] = PDU_SESSION_ACTIVE;
orig.psi_res[1] = REACTIVATION_FAILED;
orig.psi_res[2] = REACTIVATION_SUCCESS;
orig.cause[0].cause = Illegal_UE;
orig.cause[0].pdu_session_id = 1;
orig.t3448->value = 16;
orig.t3448->unit = TWO_SECONDS;
// Expected encoded data
uint8_t expected_enc[] = {0x50, 0x02, 0x0a, 0x00, 0x26, 0x02, 0x02, 0x00, 0x72, 0x00, 0x00, 0x01, 0x03, 0x6B, 0x01, 0x10};
uint16_t len_status = 2;
expected_enc[9] = (len_status >> 8) & 0xFF;
expected_enc[10] = len_status & 0xFF;
// Buffer
uint8_t buf[64] = {0};
byte_array_t buffer = {.buf = &buf[0], .len = sizeof(expected_enc)};
// Encode NAS Service Accept
int encoded_length = encode_fgs_service_accept(&buffer, &orig);
AssertFatal(encoded_length == sizeofArray(expected_enc), "encode_fgs_service_accept() failed\n");
// Compare the raw encoded buffer with expected encoded data
AssertFatal(memcmp(buffer.buf, expected_enc, buffer.len) == 0, "Encoding mismatch!\n");
// Decode NAS Service Accept
fgs_service_accept_msg_t dec = {0};
int decoded_length = decode_fgs_service_accept(&dec, &buffer);
AssertFatal(decoded_length >= 0, "decode_fgs_service_accept() failed\n");
// Compare original and decoded messages
AssertFatal(eq_service_accept(&orig, &dec), "test_service_accept() failed: original and decoded messages do not match\n");
free_fgs_service_accept(&dec);
free_fgs_service_accept(&orig);
}
/** @brief Test NAS Service Reject enc/dec */
static void test_service_reject(void)
{
// Dummy NAS Service Reject message
fgs_service_reject_msg_t orig = {
.cause = Illegal_UE,
.has_psi_status = true,
.t3446 = malloc_or_fail(sizeof(*orig.t3446)),
.t3448 = malloc_or_fail(sizeof(*orig.t3448)),
};
orig.psi_status[1] = PDU_SESSION_INACTIVE; // PDU Session 1
orig.psi_status[2] = PDU_SESSION_ACTIVE; // PDU Session 2
orig.t3446->value = 10;
orig.t3446->unit = TWO_SECONDS;
orig.t3448->value = 1;
orig.t3448->unit = ONE_MINUTE;
// Expected encoded data
uint8_t expected_enc[] = {0x03, 0x50, 0x02, 0x04, 0x00, 0x5F, 0x01, 0x0A, 0x6B, 0x01, 0x21};
// Buffer
uint8_t buf[64] = {0};
byte_array_t buffer = {.buf = &buf[0], .len = sizeof(expected_enc)};
// Encode NAS Service Reject
int encoded_length = encode_fgs_service_reject(&buffer, &orig);
AssertFatal(encoded_length == sizeofArray(expected_enc), "encode_fgs_service_reject() failed: %d != %ld\n", encoded_length, sizeofArray(expected_enc));
// Compare the raw encoded buffer with expected encoded data
AssertFatal(memcmp(buffer.buf, expected_enc, buffer.len) == 0, "Encoding mismatch!\n");
// Decode NAS Service Reject
fgs_service_reject_msg_t dec = {0};
int decoded_length = decode_fgs_service_reject(&dec, &buffer);
AssertFatal(decoded_length >= 0, "decode_fgs_service_reject() failed\n");
// Compare original and decoded messages
AssertFatal(eq_service_reject(&orig, &dec), "test_service_reject() failed: original and decoded messages do not match\n");
free_fgs_service_reject(&dec);
free_fgs_service_reject(&orig);
}
/** @brief Test NAS Authentication Failure enc/dec */
static void test_auth_failure(void)
{
// Dummy NAS Authentication Failure message
uint8_t afp[] = {0x01, 0x02, 0x03, 0x04, 0x05, 0x06};
const fgmm_auth_failure_t orig = {
.cause = Synch_failure,
.authentication_failure_param.len = 6,
.authentication_failure_param.buf = afp,
};
// Expected encoded data
uint8_t expected_enc[] = {0x15, 0x30, 0x06, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06};
// Buffer
uint8_t buf[16] = {0};
byte_array_t buffer = {.buf = buf, .len = sizeof(buf)};
// Encode
int encoded_length = encode_fgmm_auth_failure(&buffer, &orig);
AssertFatal(encoded_length == sizeofArray(expected_enc), "encode_fgmm_auth_failure() failed\n");
// Compare the raw encoded buffer with expected encoded data
AssertFatal(memcmp(buffer.buf, expected_enc, encoded_length) == 0, "Encoding mismatch!\n");
// Decode
fgmm_auth_failure_t dec = {0};
int decoded_length = decode_fgmm_auth_failure(&dec, &buffer);
AssertFatal(decoded_length >= 0, "decode_fgmm_auth_failure() failed\n");
// Compare original and decoded messages
AssertFatal(eq_fgmm_auth_failure(&orig, &dec), "test_auth_failure() failed: original and decoded messages do not match\n");
free_fgmm_auth_failure(&dec);
}
/** @brief Test NAS Security Mode Reject enc/dec */
static void test_security_mode_reject(void)
{
// Dummy NAS Security Mode Reject message
const fgs_security_mode_reject_msg orig = {
.cause = Illegal_UE,
};
// Expected encoded data
uint8_t expected_enc[] = {0x03};
// Buffer
uint8_t buf[8] = {0};
byte_array_t buffer = {.buf = buf, .len = sizeof(buf)};
// Encode
int encoded_length = encode_fgs_security_mode_reject(&buffer, &orig);
AssertFatal(encoded_length == sizeofArray(expected_enc), "encode_fgs_security_mode_reject() failed\n");
// Compare the raw encoded buffer with expected encoded data
AssertFatal(memcmp(buffer.buf, expected_enc, encoded_length) == 0, "Encoding mismatch!\n");
// Decode
fgs_security_mode_reject_msg dec = {0};
int decoded_length = decode_fgs_security_mode_reject(&dec, &buffer);
AssertFatal(decoded_length >= 0, "decode_fgs_security_mode_reject() failed\n");
// Compare original and decoded messages
AssertFatal(eq_sec_mode_reject(&orig, &dec), "test_sec_mode_reject() failed: original and decoded messages do not match\n");
}
int main()
{
test_regression_registration_accept();
test_service_request();
test_service_accept();
test_service_reject();
test_auth_failure();
test_security_mode_reject();
return 0;
}