diff options
| author | Tobin Feldman-Fitzthum <tobin@linux.ibm.com> | 2024-04-29 20:07:19 +0000 |
|---|---|---|
| committer | mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> | 2024-06-25 15:27:42 +0000 |
| commit | 10b4bb8d6d0c515ed9663691aea3684be8f7b0fc (patch) | |
| tree | 257b4d0f0f94c467b75401852a700406aa814a62 /OvmfPkg/Include | |
| parent | 56059941ec8c2f4d8fb126227b1154f8a869ac2b (diff) | |
| download | edk2-10b4bb8d6d0c515ed9663691aea3684be8f7b0fc.tar.gz edk2-10b4bb8d6d0c515ed9663691aea3684be8f7b0fc.tar.bz2 edk2-10b4bb8d6d0c515ed9663691aea3684be8f7b0fc.zip | |
AmdSev: Halt on failed blob allocation
A malicious host may be able to undermine the fw_cfg
interface such that loading a blob fails.
In this case rather than continuing to the next boot
option, the blob verifier should halt.
For non-confidential guests, the error should be non-fatal.
Signed-off-by: Tobin Feldman-Fitzthum <tobin@linux.ibm.com>
Diffstat (limited to 'OvmfPkg/Include')
| -rw-r--r-- | OvmfPkg/Include/Library/BlobVerifierLib.h | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/OvmfPkg/Include/Library/BlobVerifierLib.h b/OvmfPkg/Include/Library/BlobVerifierLib.h index 7e1af27574..09af1b77de 100644 --- a/OvmfPkg/Include/Library/BlobVerifierLib.h +++ b/OvmfPkg/Include/Library/BlobVerifierLib.h @@ -22,17 +22,20 @@ @param[in] BlobName The name of the blob
@param[in] Buf The data of the blob
@param[in] BufSize The size of the blob in bytes
+ @param[in] FetchStatus The status of fetching this blob
- @retval EFI_SUCCESS The blob was verified successfully.
- @retval EFI_ACCESS_DENIED The blob could not be verified, and therefore
- should be considered non-secure.
+ @retval EFI_SUCCESS The blob was verified successfully or was not
+ found in the hash table.
+ @retval EFI_ACCESS_DENIED Kernel hashes not supported but the boot can
+ continue safely.
**/
EFI_STATUS
EFIAPI
VerifyBlob (
IN CONST CHAR16 *BlobName,
IN CONST VOID *Buf,
- IN UINT32 BufSize
+ IN UINT32 BufSize,
+ IN EFI_STATUS FetchStatus
);
#endif
|