net/ice: update QinQ switch filter handling
[dpdk.git] / app / test / test_security.c
index 9c5e7d0..060cf1f 100644 (file)
@@ -6,6 +6,7 @@
 #include <rte_log.h>
 #include <rte_memory.h>
 #include <rte_mempool.h>
+#include <rte_ether.h>
 #include <rte_security.h>
 #include <rte_security_driver.h>
 
 #define MOCK_TEST_ASSERT_EQUAL(fail_counter, a, b, msg, ...)   \
        MOCK_TEST_ASSERT(fail_counter, (a) == (b), msg, ##__VA_ARGS__)
 
+/**
+ * Verify not null condition inside mocked up function.
+ * Mockup function cannot return a test error, so the failure
+ * of assertion increases counter and print logs.
+ * The counter can be verified later to check if test case should fail.
+ *
+ * @param   fail_counter       fail counter
+ * @param   val        value expected not to be NULL
+ * @param   msg        printf style formatting string for custom message
+ */
+#define MOCK_TEST_ASSERT_NOT_NULL(fail_counter, val, msg, ...) \
+       MOCK_TEST_ASSERT(fail_counter, (val) != NULL, msg, ##__VA_ARGS__)
+
 
 /**
  * Verify if parameter of the mocked up function matches expected value.
 #define MOCK_TEST_ASSERT_POINTER_PARAMETER(data, parameter)    \
        MOCK_TEST_ASSERT_PARAMETER(data, parameter, "%p")
 
+/**
+ * Wrap for MOCK_TEST_ASSERT_PARAMETER macro for uint64_t type parameters.
+ *
+ * @param   data       structure with expected values
+ * @param   parameter  name of the parameter (both field and parameter name)
+ */
+#define MOCK_TEST_ASSERT_U64_PARAMETER(data, parameter)        \
+       MOCK_TEST_ASSERT_PARAMETER(data, parameter, "%" PRIu64)
+
 /**
  * Verify number of calls of the mocked up function
  * and check if there were any fails during execution.
                        expected_mempool_usage, mempool_usage);         \
 } while (0)
 
+/**
+ * Verify usage of mempool by checking if number of allocated objects matches
+ * expectations. The mempool is used to manage objects for sessions priv data.
+ * A single object is acquired from mempool during session_create
+ * and put back in session_destroy.
+ *
+ * @param   expected_priv_mp_usage     expected number of used priv mp objects
+ */
+#define TEST_ASSERT_PRIV_MP_USAGE(expected_priv_mp_usage) do {         \
+       struct security_testsuite_params *ts_params = &testsuite_params;\
+       unsigned int priv_mp_usage;                                     \
+       priv_mp_usage = rte_mempool_in_use_count(                       \
+                       ts_params->session_priv_mpool);                 \
+       TEST_ASSERT_EQUAL(expected_priv_mp_usage, priv_mp_usage,        \
+                       "Expecting %u priv mempool allocations, "       \
+                       "but there are %u allocated objects",           \
+                       expected_priv_mp_usage, priv_mp_usage);         \
+} while (0)
 
 /**
  * Mockup structures and functions for rte_security_ops;
@@ -214,26 +255,37 @@ static struct mock_session_create_data {
        struct rte_security_session_conf *conf;
        struct rte_security_session *sess;
        struct rte_mempool *mp;
+       struct rte_mempool *priv_mp;
 
        int ret;
 
        int called;
        int failed;
-} mock_session_create_exp = {NULL, NULL, NULL, NULL, 0, 0, 0};
+} mock_session_create_exp = {NULL, NULL, NULL, NULL, NULL, 0, 0, 0};
 
 static int
 mock_session_create(void *device,
                struct rte_security_session_conf *conf,
                struct rte_security_session *sess,
-               struct rte_mempool *mp)
+               struct rte_mempool *priv_mp)
 {
+       void *sess_priv;
+       int ret;
+
        mock_session_create_exp.called++;
 
        MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_session_create_exp, device);
        MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_session_create_exp, conf);
-       MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_session_create_exp, mp);
+       MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_session_create_exp, priv_mp);
+
+       if (mock_session_create_exp.ret == 0) {
+               ret = rte_mempool_get(priv_mp, &sess_priv);
+               TEST_ASSERT_EQUAL(0, ret,
+                       "priv mempool does not have enough objects");
 
-       mock_session_create_exp.sess = sess;
+               set_sec_session_private_data(sess, sess_priv);
+               mock_session_create_exp.sess = sess;
+       }
 
        return mock_session_create_exp.ret;
 }
@@ -292,6 +344,36 @@ mock_session_get_size(void *device)
        return mock_session_get_size_exp.ret;
 }
 
+/**
+ * session_stats_get mockup
+ *
+ * Verified parameters: device, sess, stats.
+ */
+static struct mock_session_stats_get_data {
+       void *device;
+       struct rte_security_session *sess;
+       struct rte_security_stats *stats;
+
+       int ret;
+
+       int called;
+       int failed;
+} mock_session_stats_get_exp = {NULL, NULL, NULL, 0, 0, 0};
+
+static int
+mock_session_stats_get(void *device,
+               struct rte_security_session *sess,
+               struct rte_security_stats *stats)
+{
+       mock_session_stats_get_exp.called++;
+
+       MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_session_stats_get_exp, device);
+       MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_session_stats_get_exp, sess);
+       MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_session_stats_get_exp, stats);
+
+       return mock_session_stats_get_exp.ret;
+}
+
 /**
  * session_destroy mockup
  *
@@ -310,14 +392,113 @@ static struct mock_session_destroy_data {
 static int
 mock_session_destroy(void *device, struct rte_security_session *sess)
 {
-       mock_session_destroy_exp.called++;
+       void *sess_priv = get_sec_session_private_data(sess);
 
+       mock_session_destroy_exp.called++;
+       if ((mock_session_destroy_exp.ret == 0) && (sess_priv != NULL)) {
+               rte_mempool_put(rte_mempool_from_obj(sess_priv), sess_priv);
+               set_sec_session_private_data(sess, NULL);
+       }
        MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_session_destroy_exp, device);
        MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_session_destroy_exp, sess);
 
        return mock_session_destroy_exp.ret;
 }
 
+/**
+ * set_pkt_metadata mockup
+ *
+ * Verified parameters: device, sess, m, params.
+ */
+static struct mock_set_pkt_metadata_data {
+       void *device;
+       struct rte_security_session *sess;
+       struct rte_mbuf *m;
+       void *params;
+
+       int ret;
+
+       int called;
+       int failed;
+} mock_set_pkt_metadata_exp = {NULL, NULL, NULL, NULL, 0, 0, 0};
+
+static int
+mock_set_pkt_metadata(void *device,
+               struct rte_security_session *sess,
+               struct rte_mbuf *m,
+               void *params)
+{
+       mock_set_pkt_metadata_exp.called++;
+
+       MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_set_pkt_metadata_exp, device);
+       MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_set_pkt_metadata_exp, sess);
+       MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_set_pkt_metadata_exp, m);
+       MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_set_pkt_metadata_exp, params);
+
+       return mock_set_pkt_metadata_exp.ret;
+}
+
+/**
+ * get_userdata mockup
+ *
+ * Verified parameters: device, md.
+ * The userdata parameter works as an output parameter, so a passed address
+ * is verified not to be NULL and filled with userdata stored in structure.
+ */
+static struct mock_get_userdata_data {
+       void *device;
+       uint64_t md;
+       void *userdata;
+
+       int ret;
+
+       int called;
+       int failed;
+} mock_get_userdata_exp = {NULL, 0UL, NULL, 0, 0, 0};
+
+static int
+mock_get_userdata(void *device,
+               uint64_t md,
+               void **userdata)
+{
+       mock_get_userdata_exp.called++;
+
+       MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_get_userdata_exp, device);
+       MOCK_TEST_ASSERT_U64_PARAMETER(mock_get_userdata_exp, md);
+
+       MOCK_TEST_ASSERT_NOT_NULL(mock_get_userdata_exp.failed,
+                       userdata,
+                       "Expecting parameter userdata not to be NULL but it's %p",
+                       userdata);
+       *userdata = mock_get_userdata_exp.userdata;
+
+       return mock_get_userdata_exp.ret;
+}
+
+/**
+ * capabilities_get mockup
+ *
+ * Verified parameters: device.
+ */
+static struct mock_capabilities_get_data {
+       void *device;
+
+       struct rte_security_capability *ret;
+
+       int called;
+       int failed;
+} mock_capabilities_get_exp = {NULL, NULL, 0, 0};
+
+static const struct rte_security_capability *
+mock_capabilities_get(void *device)
+{
+       mock_capabilities_get_exp.called++;
+
+       MOCK_TEST_ASSERT_POINTER_PARAMETER(mock_capabilities_get_exp, device);
+
+       return mock_capabilities_get_exp.ret;
+}
+
 /**
  * empty_ops
  *
@@ -334,7 +515,11 @@ struct rte_security_ops mock_ops = {
        .session_create = mock_session_create,
        .session_update = mock_session_update,
        .session_get_size = mock_session_get_size,
+       .session_stats_get = mock_session_stats_get,
        .session_destroy = mock_session_destroy,
+       .set_pkt_metadata = mock_set_pkt_metadata,
+       .get_userdata = mock_get_userdata,
+       .capabilities_get = mock_capabilities_get,
 };
 
 
@@ -351,6 +536,7 @@ struct rte_security_ops mock_ops = {
  */
 static struct security_testsuite_params {
        struct rte_mempool *session_mpool;
+       struct rte_mempool *session_priv_mpool;
 } testsuite_params = { NULL };
 
 /**
@@ -373,9 +559,11 @@ static struct security_unittest_params {
        .sess = NULL,
 };
 
-#define SECURITY_TEST_MEMPOOL_NAME "SecurityTestsMempoolName"
+#define SECURITY_TEST_MEMPOOL_NAME "SecurityTestMp"
+#define SECURITY_TEST_PRIV_MEMPOOL_NAME "SecurityTestPrivMp"
 #define SECURITY_TEST_MEMPOOL_SIZE 15
-#define SECURITY_TEST_SESSION_OBJECT_SIZE sizeof(struct rte_security_session)
+#define SECURITY_TEST_SESSION_OBJ_SZ sizeof(struct rte_security_session)
+#define SECURITY_TEST_SESSION_PRIV_OBJ_SZ 64
 
 /**
  * testsuite_setup initializes whole test suite parameters.
@@ -389,11 +577,27 @@ testsuite_setup(void)
        ts_params->session_mpool = rte_mempool_create(
                        SECURITY_TEST_MEMPOOL_NAME,
                        SECURITY_TEST_MEMPOOL_SIZE,
-                       SECURITY_TEST_SESSION_OBJECT_SIZE,
+                       SECURITY_TEST_SESSION_OBJ_SZ,
                        0, 0, NULL, NULL, NULL, NULL,
                        SOCKET_ID_ANY, 0);
        TEST_ASSERT_NOT_NULL(ts_params->session_mpool,
                        "Cannot create mempool %s\n", rte_strerror(rte_errno));
+
+       ts_params->session_priv_mpool = rte_mempool_create(
+                       SECURITY_TEST_PRIV_MEMPOOL_NAME,
+                       SECURITY_TEST_MEMPOOL_SIZE,
+                       SECURITY_TEST_SESSION_PRIV_OBJ_SZ,
+                       0, 0, NULL, NULL, NULL, NULL,
+                       SOCKET_ID_ANY, 0);
+       if (ts_params->session_priv_mpool == NULL) {
+               RTE_LOG(ERR, USER1, "TestCase %s() line %d failed (null): "
+                               "Cannot create priv mempool %s\n",
+                               __func__, __LINE__, rte_strerror(rte_errno));
+               rte_mempool_free(ts_params->session_mpool);
+               ts_params->session_mpool = NULL;
+               return TEST_FAILED;
+       }
+
        return TEST_SUCCESS;
 }
 
@@ -408,6 +612,10 @@ testsuite_teardown(void)
                rte_mempool_free(ts_params->session_mpool);
                ts_params->session_mpool = NULL;
        }
+       if (ts_params->session_priv_mpool) {
+               rte_mempool_free(ts_params->session_priv_mpool);
+               ts_params->session_priv_mpool = NULL;
+       }
 }
 
 /**
@@ -427,12 +635,20 @@ ut_setup(void)
        mock_session_create_exp.called = 0;
        mock_session_update_exp.called = 0;
        mock_session_get_size_exp.called = 0;
+       mock_session_stats_get_exp.called = 0;
        mock_session_destroy_exp.called = 0;
+       mock_set_pkt_metadata_exp.called = 0;
+       mock_get_userdata_exp.called = 0;
+       mock_capabilities_get_exp.called = 0;
 
        mock_session_create_exp.failed = 0;
        mock_session_update_exp.failed = 0;
        mock_session_get_size_exp.failed = 0;
+       mock_session_stats_get_exp.failed = 0;
        mock_session_destroy_exp.failed = 0;
+       mock_set_pkt_metadata_exp.failed = 0;
+       mock_get_userdata_exp.failed = 0;
+       mock_capabilities_get_exp.failed = 0;
 
        return TEST_SUCCESS;
 }
@@ -497,10 +713,12 @@ ut_setup_with_session(void)
        mock_session_create_exp.device = NULL;
        mock_session_create_exp.conf = &ut_params->conf;
        mock_session_create_exp.mp = ts_params->session_mpool;
+       mock_session_create_exp.priv_mp = ts_params->session_priv_mpool;
        mock_session_create_exp.ret = 0;
 
        sess = rte_security_session_create(&ut_params->ctx, &ut_params->conf,
-                       ts_params->session_mpool);
+                       ts_params->session_mpool,
+                       ts_params->session_priv_mpool);
        TEST_ASSERT_MOCK_FUNCTION_CALL_NOT_NULL(rte_security_session_create,
                        sess);
        TEST_ASSERT_EQUAL(sess, mock_session_create_exp.sess,
@@ -542,11 +760,13 @@ test_session_create_inv_context(void)
        struct rte_security_session *sess;
 
        sess = rte_security_session_create(NULL, &ut_params->conf,
-                       ts_params->session_mpool);
+                       ts_params->session_mpool,
+                       ts_params->session_priv_mpool);
        TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_create,
                        sess, NULL, "%p");
        TEST_ASSERT_MOCK_CALLS(mock_session_create_exp, 0);
        TEST_ASSERT_MEMPOOL_USAGE(0);
+       TEST_ASSERT_PRIV_MP_USAGE(0);
        TEST_ASSERT_SESSION_COUNT(0);
 
        return TEST_SUCCESS;
@@ -566,11 +786,13 @@ test_session_create_inv_context_ops(void)
        ut_params->ctx.ops = NULL;
 
        sess = rte_security_session_create(&ut_params->ctx, &ut_params->conf,
-                       ts_params->session_mpool);
+                       ts_params->session_mpool,
+                       ts_params->session_priv_mpool);
        TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_create,
                        sess, NULL, "%p");
        TEST_ASSERT_MOCK_CALLS(mock_session_create_exp, 0);
        TEST_ASSERT_MEMPOOL_USAGE(0);
+       TEST_ASSERT_PRIV_MP_USAGE(0);
        TEST_ASSERT_SESSION_COUNT(0);
 
        return TEST_SUCCESS;
@@ -590,11 +812,13 @@ test_session_create_inv_context_ops_fun(void)
        ut_params->ctx.ops = &empty_ops;
 
        sess = rte_security_session_create(&ut_params->ctx, &ut_params->conf,
-                       ts_params->session_mpool);
+                       ts_params->session_mpool,
+                       ts_params->session_priv_mpool);
        TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_create,
                        sess, NULL, "%p");
        TEST_ASSERT_MOCK_CALLS(mock_session_create_exp, 0);
        TEST_ASSERT_MEMPOOL_USAGE(0);
+       TEST_ASSERT_PRIV_MP_USAGE(0);
        TEST_ASSERT_SESSION_COUNT(0);
 
        return TEST_SUCCESS;
@@ -611,31 +835,59 @@ test_session_create_inv_configuration(void)
        struct rte_security_session *sess;
 
        sess = rte_security_session_create(&ut_params->ctx, NULL,
-                       ts_params->session_mpool);
+                       ts_params->session_mpool,
+                       ts_params->session_priv_mpool);
        TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_create,
                        sess, NULL, "%p");
        TEST_ASSERT_MOCK_CALLS(mock_session_create_exp, 0);
        TEST_ASSERT_MEMPOOL_USAGE(0);
+       TEST_ASSERT_PRIV_MP_USAGE(0);
        TEST_ASSERT_SESSION_COUNT(0);
 
        return TEST_SUCCESS;
 }
 
 /**
- * Test execution of rte_security_session_create with NULL mp parameter
+ * Test execution of rte_security_session_create with NULL session
+ * mempool
  */
 static int
 test_session_create_inv_mempool(void)
 {
        struct security_unittest_params *ut_params = &unittest_params;
+       struct security_testsuite_params *ts_params = &testsuite_params;
        struct rte_security_session *sess;
 
        sess = rte_security_session_create(&ut_params->ctx, &ut_params->conf,
-                       NULL);
+                       NULL, ts_params->session_priv_mpool);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_create,
+                       sess, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_session_create_exp, 0);
+       TEST_ASSERT_MEMPOOL_USAGE(0);
+       TEST_ASSERT_PRIV_MP_USAGE(0);
+       TEST_ASSERT_SESSION_COUNT(0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_session_create with NULL session
+ * priv mempool
+ */
+static int
+test_session_create_inv_sess_priv_mempool(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct security_testsuite_params *ts_params = &testsuite_params;
+       struct rte_security_session *sess;
+
+       sess = rte_security_session_create(&ut_params->ctx, &ut_params->conf,
+                       ts_params->session_mpool, NULL);
        TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_create,
                        sess, NULL, "%p");
        TEST_ASSERT_MOCK_CALLS(mock_session_create_exp, 0);
        TEST_ASSERT_MEMPOOL_USAGE(0);
+       TEST_ASSERT_PRIV_MP_USAGE(0);
        TEST_ASSERT_SESSION_COUNT(0);
 
        return TEST_SUCCESS;
@@ -651,6 +903,7 @@ test_session_create_mempool_empty(void)
        struct security_testsuite_params *ts_params = &testsuite_params;
        struct security_unittest_params *ut_params = &unittest_params;
        struct rte_security_session *tmp[SECURITY_TEST_MEMPOOL_SIZE];
+       void *tmp1[SECURITY_TEST_MEMPOOL_SIZE];
        struct rte_security_session *sess;
 
        /* Get all available objects from mempool. */
@@ -661,21 +914,34 @@ test_session_create_mempool_empty(void)
                TEST_ASSERT_EQUAL(0, ret,
                                "Expect getting %d object from mempool"
                                " to succeed", i);
+               ret = rte_mempool_get(ts_params->session_priv_mpool,
+                               (void **)(&tmp1[i]));
+               TEST_ASSERT_EQUAL(0, ret,
+                               "Expect getting %d object from priv mempool"
+                               " to succeed", i);
        }
        TEST_ASSERT_MEMPOOL_USAGE(SECURITY_TEST_MEMPOOL_SIZE);
+       TEST_ASSERT_PRIV_MP_USAGE(SECURITY_TEST_MEMPOOL_SIZE);
 
        sess = rte_security_session_create(&ut_params->ctx, &ut_params->conf,
-                       ts_params->session_mpool);
+                       ts_params->session_mpool,
+                       ts_params->session_priv_mpool);
        TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_create,
                        sess, NULL, "%p");
        TEST_ASSERT_MOCK_CALLS(mock_session_create_exp, 0);
        TEST_ASSERT_MEMPOOL_USAGE(SECURITY_TEST_MEMPOOL_SIZE);
+       TEST_ASSERT_PRIV_MP_USAGE(SECURITY_TEST_MEMPOOL_SIZE);
        TEST_ASSERT_SESSION_COUNT(0);
 
        /* Put objects back to the pool. */
-       for (i = 0; i < SECURITY_TEST_MEMPOOL_SIZE; ++i)
-               rte_mempool_put(ts_params->session_mpool, (void *)(tmp[i]));
+       for (i = 0; i < SECURITY_TEST_MEMPOOL_SIZE; ++i) {
+               rte_mempool_put(ts_params->session_mpool,
+                               (void *)(tmp[i]));
+               rte_mempool_put(ts_params->session_priv_mpool,
+                               (tmp1[i]));
+       }
        TEST_ASSERT_MEMPOOL_USAGE(0);
+       TEST_ASSERT_PRIV_MP_USAGE(0);
 
        return TEST_SUCCESS;
 }
@@ -694,14 +960,17 @@ test_session_create_ops_failure(void)
        mock_session_create_exp.device = NULL;
        mock_session_create_exp.conf = &ut_params->conf;
        mock_session_create_exp.mp = ts_params->session_mpool;
+       mock_session_create_exp.priv_mp = ts_params->session_priv_mpool;
        mock_session_create_exp.ret = -1;       /* Return failure status. */
 
        sess = rte_security_session_create(&ut_params->ctx, &ut_params->conf,
-                       ts_params->session_mpool);
+                       ts_params->session_mpool,
+                       ts_params->session_priv_mpool);
        TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_create,
                        sess, NULL, "%p");
        TEST_ASSERT_MOCK_CALLS(mock_session_create_exp, 1);
        TEST_ASSERT_MEMPOOL_USAGE(0);
+       TEST_ASSERT_PRIV_MP_USAGE(0);
        TEST_ASSERT_SESSION_COUNT(0);
 
        return TEST_SUCCESS;
@@ -720,10 +989,12 @@ test_session_create_success(void)
        mock_session_create_exp.device = NULL;
        mock_session_create_exp.conf = &ut_params->conf;
        mock_session_create_exp.mp = ts_params->session_mpool;
+       mock_session_create_exp.priv_mp = ts_params->session_priv_mpool;
        mock_session_create_exp.ret = 0;        /* Return success status. */
 
        sess = rte_security_session_create(&ut_params->ctx, &ut_params->conf,
-                       ts_params->session_mpool);
+                       ts_params->session_mpool,
+                       ts_params->session_priv_mpool);
        TEST_ASSERT_MOCK_FUNCTION_CALL_NOT_NULL(rte_security_session_create,
                        sess);
        TEST_ASSERT_EQUAL(sess, mock_session_create_exp.sess,
@@ -732,6 +1003,7 @@ test_session_create_success(void)
                        sess, mock_session_create_exp.sess);
        TEST_ASSERT_MOCK_CALLS(mock_session_create_exp, 1);
        TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
        TEST_ASSERT_SESSION_COUNT(1);
 
        /*
@@ -978,55 +1250,1381 @@ test_session_get_size_success(void)
 
 
 /**
- * Declaration of testcases
+ * rte_security_session_stats_get tests
  */
-static struct unit_test_suite security_testsuite  = {
-       .suite_name = "generic security",
-       .setup = testsuite_setup,
-       .teardown = testsuite_teardown,
-       .unit_test_cases = {
-               TEST_CASE_ST(ut_setup, ut_teardown,
-                               test_session_create_inv_context),
-               TEST_CASE_ST(ut_setup, ut_teardown,
-                               test_session_create_inv_context_ops),
-               TEST_CASE_ST(ut_setup, ut_teardown,
-                               test_session_create_inv_context_ops_fun),
-               TEST_CASE_ST(ut_setup, ut_teardown,
-                               test_session_create_inv_configuration),
-               TEST_CASE_ST(ut_setup, ut_teardown,
-                               test_session_create_inv_mempool),
-               TEST_CASE_ST(ut_setup, ut_teardown,
-                               test_session_create_mempool_empty),
-               TEST_CASE_ST(ut_setup, ut_teardown,
-                               test_session_create_ops_failure),
-               TEST_CASE_ST(ut_setup, ut_teardown,
-                               test_session_create_success),
 
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_update_inv_context),
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_update_inv_context_ops),
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_update_inv_context_ops_fun),
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_update_inv_configuration),
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_update_inv_session),
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_update_ops_failure),
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_update_success),
+/**
+ * Test execution of rte_security_session_stats_get with NULL instance
+ */
+static int
+test_session_stats_get_inv_context(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_stats stats;
 
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_get_size_inv_context),
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_get_size_inv_context_ops),
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_get_size_inv_context_ops_fun),
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_get_size_ops_failure),
-               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
-                               test_session_get_size_success),
+       int ret = rte_security_session_stats_get(NULL, ut_params->sess, &stats);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_stats_get,
+                       ret, -EINVAL, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_stats_get_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_session_stats_get with invalid
+ * security operations structure (NULL)
+ */
+static int
+test_session_stats_get_inv_context_ops(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_stats stats;
+       ut_params->ctx.ops = NULL;
+
+       int ret = rte_security_session_stats_get(&ut_params->ctx,
+                       ut_params->sess, &stats);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_stats_get,
+                       ret, -EINVAL, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_stats_get_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_session_stats_get with empty
+ * security operations
+ */
+static int
+test_session_stats_get_inv_context_ops_fun(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_stats stats;
+       ut_params->ctx.ops = &empty_ops;
+
+       int ret = rte_security_session_stats_get(&ut_params->ctx,
+                       ut_params->sess, &stats);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_stats_get,
+                       ret, -ENOTSUP, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_stats_get_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_session_stats_get with NULL stats parameter
+ */
+static int
+test_session_stats_get_inv_stats(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+
+       int ret = rte_security_session_stats_get(&ut_params->ctx,
+                       ut_params->sess, NULL);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_stats_get,
+                       ret, -EINVAL, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_stats_get_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_session_stats_get when session_stats_get
+ * security operation fails
+ */
+static int
+test_session_stats_get_ops_failure(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_stats stats;
+
+       mock_session_stats_get_exp.device = NULL;
+       mock_session_stats_get_exp.sess = ut_params->sess;
+       mock_session_stats_get_exp.stats = &stats;
+       mock_session_stats_get_exp.ret = -1;
+
+       int ret = rte_security_session_stats_get(&ut_params->ctx,
+                       ut_params->sess, &stats);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_stats_get,
+                       ret, -1, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_stats_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_session_stats_get in successful execution
+ * path
+ */
+static int
+test_session_stats_get_success(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_stats stats;
+
+       mock_session_stats_get_exp.device = NULL;
+       mock_session_stats_get_exp.sess = ut_params->sess;
+       mock_session_stats_get_exp.stats = &stats;
+       mock_session_stats_get_exp.ret = 0;
+
+       int ret = rte_security_session_stats_get(&ut_params->ctx,
+                       ut_params->sess, &stats);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_stats_get,
+                       ret, 0, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_stats_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+
+/**
+ * rte_security_session_destroy tests
+ */
+
+/**
+ * Test execution of rte_security_session_destroy with NULL instance
+ */
+static int
+test_session_destroy_inv_context(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+
+       TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
+       TEST_ASSERT_SESSION_COUNT(1);
+
+       int ret = rte_security_session_destroy(NULL, ut_params->sess);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_destroy,
+                       ret, -EINVAL, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_destroy_exp, 0);
+       TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
+       TEST_ASSERT_SESSION_COUNT(1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_session_destroy with invalid
+ * security operations structure (NULL)
+ */
+static int
+test_session_destroy_inv_context_ops(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       ut_params->ctx.ops = NULL;
+
+       TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
+       TEST_ASSERT_SESSION_COUNT(1);
+
+       int ret = rte_security_session_destroy(&ut_params->ctx,
+                       ut_params->sess);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_destroy,
+                       ret, -EINVAL, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_destroy_exp, 0);
+       TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
+       TEST_ASSERT_SESSION_COUNT(1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_session_destroy with empty
+ * security operations
+ */
+static int
+test_session_destroy_inv_context_ops_fun(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       ut_params->ctx.ops = &empty_ops;
+
+       TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
+       TEST_ASSERT_SESSION_COUNT(1);
+
+       int ret = rte_security_session_destroy(&ut_params->ctx,
+                       ut_params->sess);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_destroy,
+                       ret, -ENOTSUP, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_destroy_exp, 0);
+       TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
+       TEST_ASSERT_SESSION_COUNT(1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_session_destroy with NULL sess parameter
+ */
+static int
+test_session_destroy_inv_session(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+
+       TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
+       TEST_ASSERT_SESSION_COUNT(1);
+
+       int ret = rte_security_session_destroy(&ut_params->ctx, NULL);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_destroy,
+                       ret, -EINVAL, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_destroy_exp, 0);
+       TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
+       TEST_ASSERT_SESSION_COUNT(1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_session_destroy when session_destroy
+ * security operation fails
+ */
+static int
+test_session_destroy_ops_failure(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+
+       mock_session_destroy_exp.device = NULL;
+       mock_session_destroy_exp.sess = ut_params->sess;
+       mock_session_destroy_exp.ret = -1;
+
+       TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
+       TEST_ASSERT_SESSION_COUNT(1);
+
+       int ret = rte_security_session_destroy(&ut_params->ctx,
+                       ut_params->sess);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_destroy,
+                       ret, -1, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_destroy_exp, 1);
+       TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
+       TEST_ASSERT_SESSION_COUNT(1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_session_destroy in successful execution path
+ */
+static int
+test_session_destroy_success(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+
+       mock_session_destroy_exp.device = NULL;
+       mock_session_destroy_exp.sess = ut_params->sess;
+       mock_session_destroy_exp.ret = 0;
+       TEST_ASSERT_MEMPOOL_USAGE(1);
+       TEST_ASSERT_PRIV_MP_USAGE(1);
+       TEST_ASSERT_SESSION_COUNT(1);
+
+       int ret = rte_security_session_destroy(&ut_params->ctx,
+                       ut_params->sess);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_session_destroy,
+                       ret, 0, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_session_destroy_exp, 1);
+       TEST_ASSERT_MEMPOOL_USAGE(0);
+       TEST_ASSERT_PRIV_MP_USAGE(0);
+       TEST_ASSERT_SESSION_COUNT(0);
+
+       /*
+        * Remove session from test case parameters, so it won't be destroyed
+        * during test case teardown.
+        */
+       ut_params->sess = NULL;
+
+       return TEST_SUCCESS;
+}
+
+
+/**
+ * rte_security_set_pkt_metadata tests
+ */
+
+/**
+ * Test execution of rte_security_set_pkt_metadata with NULL instance
+ */
+static int
+test_set_pkt_metadata_inv_context(void)
+{
+#ifdef RTE_DEBUG
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_mbuf m;
+       int params;
+
+       int ret = rte_security_set_pkt_metadata(NULL, ut_params->sess, &m,
+                       &params);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_set_pkt_metadata,
+                       ret, -EINVAL, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_set_pkt_metadata_exp, 0);
+
+       return TEST_SUCCESS;
+#else
+       return TEST_SKIPPED;
+#endif
+}
+
+/**
+ * Test execution of rte_security_set_pkt_metadata with invalid
+ * security operations structure (NULL)
+ */
+static int
+test_set_pkt_metadata_inv_context_ops(void)
+{
+#ifdef RTE_DEBUG
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_mbuf m;
+       int params;
+       ut_params->ctx.ops = NULL;
+
+       int ret = rte_security_set_pkt_metadata(&ut_params->ctx,
+                       ut_params->sess, &m, &params);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_set_pkt_metadata,
+                       ret, -EINVAL, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_set_pkt_metadata_exp, 0);
+
+       return TEST_SUCCESS;
+#else
+       return TEST_SKIPPED;
+#endif
+}
+
+/**
+ * Test execution of rte_security_set_pkt_metadata with empty
+ * security operations
+ */
+static int
+test_set_pkt_metadata_inv_context_ops_fun(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_mbuf m;
+       int params;
+       ut_params->ctx.ops = &empty_ops;
+
+       int ret = rte_security_set_pkt_metadata(&ut_params->ctx,
+                       ut_params->sess, &m, &params);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_set_pkt_metadata,
+                       ret, -ENOTSUP, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_set_pkt_metadata_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_set_pkt_metadata with NULL sess parameter
+ */
+static int
+test_set_pkt_metadata_inv_session(void)
+{
+#ifdef RTE_DEBUG
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_mbuf m;
+       int params;
+
+       int ret = rte_security_set_pkt_metadata(&ut_params->ctx, NULL,
+                       &m, &params);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_set_pkt_metadata,
+                       ret, -EINVAL, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_set_pkt_metadata_exp, 0);
+
+       return TEST_SUCCESS;
+#else
+       return TEST_SKIPPED;
+#endif
+}
+
+/**
+ * Test execution of rte_security_set_pkt_metadata when set_pkt_metadata
+ * security operation fails
+ */
+static int
+test_set_pkt_metadata_ops_failure(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_mbuf m;
+       int params;
+
+       mock_set_pkt_metadata_exp.device = NULL;
+       mock_set_pkt_metadata_exp.sess = ut_params->sess;
+       mock_set_pkt_metadata_exp.m = &m;
+       mock_set_pkt_metadata_exp.params = &params;
+       mock_set_pkt_metadata_exp.ret = -1;
+
+       int ret = rte_security_set_pkt_metadata(&ut_params->ctx,
+                       ut_params->sess, &m, &params);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_set_pkt_metadata,
+                       ret, -1, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_set_pkt_metadata_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_set_pkt_metadata in successful execution path
+ */
+static int
+test_set_pkt_metadata_success(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_mbuf m;
+       int params;
+
+       mock_set_pkt_metadata_exp.device = NULL;
+       mock_set_pkt_metadata_exp.sess = ut_params->sess;
+       mock_set_pkt_metadata_exp.m = &m;
+       mock_set_pkt_metadata_exp.params = &params;
+       mock_set_pkt_metadata_exp.ret = 0;
+
+       int ret = rte_security_set_pkt_metadata(&ut_params->ctx,
+                       ut_params->sess, &m, &params);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_set_pkt_metadata,
+                       ret, 0, "%d");
+       TEST_ASSERT_MOCK_CALLS(mock_set_pkt_metadata_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+
+/**
+ * rte_security_get_userdata tests
+ */
+
+/**
+ * Test execution of rte_security_get_userdata with NULL instance
+ */
+static int
+test_get_userdata_inv_context(void)
+{
+#ifdef RTE_DEBUG
+       uint64_t md = 0xDEADBEEF;
+
+       void *ret = rte_security_get_userdata(NULL, md);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_get_userdata,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_get_userdata_exp, 0);
+
+       return TEST_SUCCESS;
+#else
+       return TEST_SKIPPED;
+#endif
+}
+
+/**
+ * Test execution of rte_security_get_userdata with invalid
+ * security operations structure (NULL)
+ */
+static int
+test_get_userdata_inv_context_ops(void)
+{
+#ifdef RTE_DEBUG
+       struct security_unittest_params *ut_params = &unittest_params;
+       uint64_t md = 0xDEADBEEF;
+       ut_params->ctx.ops = NULL;
+
+       void *ret = rte_security_get_userdata(&ut_params->ctx, md);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_get_userdata,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_get_userdata_exp, 0);
+
+       return TEST_SUCCESS;
+#else
+       return TEST_SKIPPED;
+#endif
+}
+
+/**
+ * Test execution of rte_security_get_userdata with empty
+ * security operations
+ */
+static int
+test_get_userdata_inv_context_ops_fun(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       uint64_t md = 0xDEADBEEF;
+       ut_params->ctx.ops = &empty_ops;
+
+       void *ret = rte_security_get_userdata(&ut_params->ctx, md);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_get_userdata,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_get_userdata_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_get_userdata when get_userdata
+ * security operation fails
+ */
+static int
+test_get_userdata_ops_failure(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       uint64_t md = 0xDEADBEEF;
+       void *userdata = (void *)0x7E577E57;
+
+       mock_get_userdata_exp.device = NULL;
+       mock_get_userdata_exp.md = md;
+       mock_get_userdata_exp.userdata = userdata;
+       mock_get_userdata_exp.ret = -1;
+
+       void *ret = rte_security_get_userdata(&ut_params->ctx, md);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_get_userdata,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_get_userdata_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_get_userdata in successful execution path
+ */
+static int
+test_get_userdata_success(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       uint64_t md = 0xDEADBEEF;
+       void *userdata = (void *)0x7E577E57;
+
+       mock_get_userdata_exp.device = NULL;
+       mock_get_userdata_exp.md = md;
+       mock_get_userdata_exp.userdata = userdata;
+       mock_get_userdata_exp.ret = 0;
+
+       void *ret = rte_security_get_userdata(&ut_params->ctx, md);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_get_userdata,
+                       ret, userdata, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_get_userdata_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+
+/**
+ * rte_security_capabilities_get tests
+ */
+
+/**
+ * Test execution of rte_security_capabilities_get with NULL instance
+ */
+static int
+test_capabilities_get_inv_context(void)
+{
+       const struct rte_security_capability *ret;
+       ret = rte_security_capabilities_get(NULL);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capabilities_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capabilities_get with invalid
+ * security operations structure (NULL)
+ */
+static int
+test_capabilities_get_inv_context_ops(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       ut_params->ctx.ops = NULL;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capabilities_get(&ut_params->ctx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capabilities_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capabilities_get with empty
+ * security operations
+ */
+static int
+test_capabilities_get_inv_context_ops_fun(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       ut_params->ctx.ops = &empty_ops;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capabilities_get(&ut_params->ctx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capabilities_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capabilities_get when capabilities_get
+ * security operation fails
+ */
+static int
+test_capabilities_get_ops_failure(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = NULL;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capabilities_get(&ut_params->ctx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capabilities_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capabilities_get in successful execution path
+ */
+static int
+test_capabilities_get_success(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability capabilities;
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = &capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capabilities_get(&ut_params->ctx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capabilities_get,
+                       ret, &capabilities, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+
+/**
+ * rte_security_capability_get tests
+ */
+
+/**
+ * Test execution of rte_security_capability_get with NULL instance
+ */
+static int
+test_capability_get_inv_context(void)
+{
+       struct rte_security_capability_idx idx;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(NULL, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get with invalid
+ * security operations structure (NULL)
+ */
+static int
+test_capability_get_inv_context_ops(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx;
+       ut_params->ctx.ops = NULL;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get with empty
+ * security operations
+ */
+static int
+test_capability_get_inv_context_ops_fun(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx;
+       ut_params->ctx.ops = &empty_ops;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get with NULL idx parameter
+ */
+static int
+test_capability_get_inv_idx(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, NULL);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 0);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities_get
+ * security operation fails
+ */
+static int
+test_capability_get_ops_failure(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx;
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = NULL;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities table
+ * is empty (contains only RTE_SECURITY_ACTION_TYPE_NONE ending entry)
+ */
+static int
+test_capability_get_empty_table(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx;
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities table
+ * does not contain entry with matching action
+ */
+static int
+test_capability_get_no_matching_action(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx = {
+               .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+       };
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_INLINE_CRYPTO,
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_INLINE_PROTOCOL,
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities table
+ * does not contain entry with matching protocol
+ */
+static int
+test_capability_get_no_matching_protocol(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx = {
+               .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+               .protocol = RTE_SECURITY_PROTOCOL_IPSEC,
+       };
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+                       .protocol = RTE_SECURITY_PROTOCOL_MACSEC,
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+                       .protocol = RTE_SECURITY_PROTOCOL_PDCP,
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when macsec protocol
+ * is searched and capabilities table contain proper entry.
+ * However macsec records search is not supported in rte_security.
+ */
+static int
+test_capability_get_no_support_for_macsec(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx = {
+               .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+               .protocol = RTE_SECURITY_PROTOCOL_MACSEC,
+       };
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+                       .protocol = RTE_SECURITY_PROTOCOL_MACSEC,
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities table
+ * does not contain entry with matching ipsec proto field
+ */
+static int
+test_capability_get_ipsec_mismatch_proto(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx = {
+               .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+               .protocol = RTE_SECURITY_PROTOCOL_IPSEC,
+               .ipsec = {
+                       .proto = RTE_SECURITY_IPSEC_SA_PROTO_ESP,
+               },
+       };
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+                       .protocol = RTE_SECURITY_PROTOCOL_IPSEC,
+                       .ipsec = {
+                               .proto = RTE_SECURITY_IPSEC_SA_PROTO_AH,
+                       },
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities table
+ * does not contain entry with matching ipsec mode field
+ */
+static int
+test_capability_get_ipsec_mismatch_mode(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx = {
+               .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+               .protocol = RTE_SECURITY_PROTOCOL_IPSEC,
+               .ipsec = {
+                       .proto = RTE_SECURITY_IPSEC_SA_PROTO_ESP,
+                       .mode = RTE_SECURITY_IPSEC_SA_MODE_TRANSPORT,
+               },
+       };
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+                       .protocol = RTE_SECURITY_PROTOCOL_IPSEC,
+                       .ipsec = {
+                               .proto = RTE_SECURITY_IPSEC_SA_PROTO_ESP,
+                               .mode = RTE_SECURITY_IPSEC_SA_MODE_TUNNEL,
+                       },
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities table
+ * does not contain entry with matching ipsec direction field
+ */
+static int
+test_capability_get_ipsec_mismatch_dir(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx = {
+               .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+               .protocol = RTE_SECURITY_PROTOCOL_IPSEC,
+               .ipsec = {
+                       .proto = RTE_SECURITY_IPSEC_SA_PROTO_ESP,
+                       .mode = RTE_SECURITY_IPSEC_SA_MODE_TUNNEL,
+                       .direction = RTE_SECURITY_IPSEC_SA_DIR_EGRESS,
+               },
+       };
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+                       .protocol = RTE_SECURITY_PROTOCOL_IPSEC,
+                       .ipsec = {
+                               .proto = RTE_SECURITY_IPSEC_SA_PROTO_ESP,
+                               .mode = RTE_SECURITY_IPSEC_SA_MODE_TUNNEL,
+                               .direction = RTE_SECURITY_IPSEC_SA_DIR_INGRESS,
+                       },
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities table
+ * contains matching ipsec entry
+ */
+static int
+test_capability_get_ipsec_match(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx = {
+               .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+               .protocol = RTE_SECURITY_PROTOCOL_IPSEC,
+               .ipsec = {
+                       .proto = RTE_SECURITY_IPSEC_SA_PROTO_ESP,
+                       .mode = RTE_SECURITY_IPSEC_SA_MODE_TUNNEL,
+                       .direction = RTE_SECURITY_IPSEC_SA_DIR_INGRESS,
+               },
+       };
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_INLINE_CRYPTO,
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+                       .protocol = RTE_SECURITY_PROTOCOL_IPSEC,
+                       .ipsec = {
+                               .proto = RTE_SECURITY_IPSEC_SA_PROTO_ESP,
+                               .mode = RTE_SECURITY_IPSEC_SA_MODE_TUNNEL,
+                               .direction = RTE_SECURITY_IPSEC_SA_DIR_INGRESS,
+                       },
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, &capabilities[1], "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities table
+ * does not contain entry with matching pdcp domain field
+ */
+static int
+test_capability_get_pdcp_mismatch_domain(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx = {
+               .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+               .protocol = RTE_SECURITY_PROTOCOL_PDCP,
+               .pdcp = {
+                       .domain = RTE_SECURITY_PDCP_MODE_CONTROL,
+               },
+       };
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+                       .protocol = RTE_SECURITY_PROTOCOL_PDCP,
+                       .pdcp = {
+                               .domain = RTE_SECURITY_PDCP_MODE_DATA,
+                       },
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities table
+ * contains matching pdcp entry
+ */
+static int
+test_capability_get_pdcp_match(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx = {
+               .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+               .protocol = RTE_SECURITY_PROTOCOL_PDCP,
+               .pdcp = {
+                       .domain = RTE_SECURITY_PDCP_MODE_CONTROL,
+               },
+       };
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_INLINE_CRYPTO,
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+                       .protocol = RTE_SECURITY_PROTOCOL_PDCP,
+                       .pdcp = {
+                               .domain = RTE_SECURITY_PDCP_MODE_CONTROL,
+                       },
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, &capabilities[1], "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities table
+ * does not contain entry with matching DOCSIS direction field
+ */
+static int
+test_capability_get_docsis_mismatch_direction(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx = {
+               .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+               .protocol = RTE_SECURITY_PROTOCOL_DOCSIS,
+               .docsis = {
+                       .direction = RTE_SECURITY_DOCSIS_DOWNLINK
+               },
+       };
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+                       .protocol = RTE_SECURITY_PROTOCOL_DOCSIS,
+                       .docsis = {
+                               .direction = RTE_SECURITY_DOCSIS_UPLINK
+                       },
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, NULL, "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Test execution of rte_security_capability_get when capabilities table
+ * contains matching DOCSIS entry
+ */
+static int
+test_capability_get_docsis_match(void)
+{
+       struct security_unittest_params *ut_params = &unittest_params;
+       struct rte_security_capability_idx idx = {
+               .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+               .protocol = RTE_SECURITY_PROTOCOL_DOCSIS,
+               .docsis = {
+                       .direction = RTE_SECURITY_DOCSIS_UPLINK
+               },
+       };
+       struct rte_security_capability capabilities[] = {
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_INLINE_CRYPTO,
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
+                       .protocol = RTE_SECURITY_PROTOCOL_DOCSIS,
+                       .docsis = {
+                               .direction = RTE_SECURITY_DOCSIS_UPLINK
+                       },
+               },
+               {
+                       .action = RTE_SECURITY_ACTION_TYPE_NONE,
+               },
+       };
+
+       mock_capabilities_get_exp.device = NULL;
+       mock_capabilities_get_exp.ret = capabilities;
+
+       const struct rte_security_capability *ret;
+       ret = rte_security_capability_get(&ut_params->ctx, &idx);
+       TEST_ASSERT_MOCK_FUNCTION_CALL_RET(rte_security_capability_get,
+                       ret, &capabilities[1], "%p");
+       TEST_ASSERT_MOCK_CALLS(mock_capabilities_get_exp, 1);
+
+       return TEST_SUCCESS;
+}
+
+/**
+ * Declaration of testcases
+ */
+static struct unit_test_suite security_testsuite  = {
+       .suite_name = "generic security",
+       .setup = testsuite_setup,
+       .teardown = testsuite_teardown,
+       .unit_test_cases = {
+               TEST_CASE_ST(ut_setup, ut_teardown,
+                               test_session_create_inv_context),
+               TEST_CASE_ST(ut_setup, ut_teardown,
+                               test_session_create_inv_context_ops),
+               TEST_CASE_ST(ut_setup, ut_teardown,
+                               test_session_create_inv_context_ops_fun),
+               TEST_CASE_ST(ut_setup, ut_teardown,
+                               test_session_create_inv_configuration),
+               TEST_CASE_ST(ut_setup, ut_teardown,
+                               test_session_create_inv_mempool),
+               TEST_CASE_ST(ut_setup, ut_teardown,
+                               test_session_create_inv_sess_priv_mempool),
+               TEST_CASE_ST(ut_setup, ut_teardown,
+                               test_session_create_mempool_empty),
+               TEST_CASE_ST(ut_setup, ut_teardown,
+                               test_session_create_ops_failure),
+               TEST_CASE_ST(ut_setup, ut_teardown,
+                               test_session_create_success),
+
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_update_inv_context),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_update_inv_context_ops),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_update_inv_context_ops_fun),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_update_inv_configuration),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_update_inv_session),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_update_ops_failure),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_update_success),
+
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_get_size_inv_context),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_get_size_inv_context_ops),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_get_size_inv_context_ops_fun),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_get_size_ops_failure),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_get_size_success),
+
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_stats_get_inv_context),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_stats_get_inv_context_ops),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_stats_get_inv_context_ops_fun),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_stats_get_inv_stats),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_stats_get_ops_failure),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_stats_get_success),
+
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_destroy_inv_context),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_destroy_inv_context_ops),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_destroy_inv_context_ops_fun),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_destroy_inv_session),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_destroy_ops_failure),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_session_destroy_success),
+
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_set_pkt_metadata_inv_context),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_set_pkt_metadata_inv_context_ops),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_set_pkt_metadata_inv_context_ops_fun),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_set_pkt_metadata_inv_session),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_set_pkt_metadata_ops_failure),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_set_pkt_metadata_success),
+
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_get_userdata_inv_context),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_get_userdata_inv_context_ops),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_get_userdata_inv_context_ops_fun),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_get_userdata_ops_failure),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_get_userdata_success),
+
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capabilities_get_inv_context),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capabilities_get_inv_context_ops),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capabilities_get_inv_context_ops_fun),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capabilities_get_ops_failure),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capabilities_get_success),
+
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_inv_context),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_inv_context_ops),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_inv_context_ops_fun),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_inv_idx),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_ops_failure),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_empty_table),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_no_matching_action),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_no_matching_protocol),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_no_support_for_macsec),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_ipsec_mismatch_proto),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_ipsec_mismatch_mode),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_ipsec_mismatch_dir),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_ipsec_match),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_pdcp_mismatch_domain),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_pdcp_match),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_docsis_mismatch_direction),
+               TEST_CASE_ST(ut_setup_with_session, ut_teardown,
+                               test_capability_get_docsis_match),
 
                TEST_CASES_END() /**< NULL terminate unit test array */
        }