summaryrefslogtreecommitdiffstats
path: root/OvmfPkg/Include/Library
diff options
context:
space:
mode:
authorJacob Xu <jacobhxu@google.com>2025-03-28 18:49:58 +0000
committermergify[bot] <37929162+mergify[bot]@users.noreply.github.com>2025-04-17 06:32:18 +0000
commitc2d8e9236787270384bab6af9d9db0071468e9e5 (patch)
tree27ef670d255be32a1a51cb5acdc0be07ef501379 /OvmfPkg/Include/Library
parenteefd4fdb788f1b126719bd621449acc976b8e795 (diff)
downloadedk2-master.tar.gz
edk2-master.tar.bz2
edk2-master.zip
SecurityPkg-Tpm2DeviceLibDTpm: Check SNP enabled prior to using AmdSvsmLibHEADmaster
AmdSvsmLib currently doesn't check if SNP enabled, thus using AmdSvsmLib may errantly cause the caller code to believe SVSM is present. This leads to boot failure on non-SNP enabled VMs. We use the PcdConfidentialComputingGuestAttr since it remains valid after MpInitLib runs which invalidates PcdSevEsWorkArea's cached sev-status msr which we use to check for SNP enabled in other places. The added functions ConfidentialComputingGuestHas() and AmdMemEncryptionAttrCheck() are copied from MpLib.c, which is intended to be replaced later on with a more minimal library perhaps in MdePkg to cleanup some of the circular dependencies currently surrounding SvsmLib. Signed-off-by: Jacob Xu <jacobhxu@google.com> Signed-off-by: Oliver Steffen <osteffen@redhat.com> Suggested-by: Tom Lendacky <thomas.lendacky@amd.com>
Diffstat (limited to 'OvmfPkg/Include/Library')
0 files changed, 0 insertions, 0 deletions