Handle TPM device error and avoid deadloop in BDS.

If TPM error happens, set TPM flag to NOT present, so that trusted boot patch is disabled.
Also report status code for failure, so that platform may register handler to apply policy like force system reset, or disable TPM permanently.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: "Yao, Jiewen" <jiewen.yao@intel.com>
Reviewed-by: "Dong, Guo" <guo.dong@intel.com>




git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@16598 6f19259b-4bc3-4df7-8a09-765794883524

1 files changed, 6 insertions, 11 deletions

diff --git a/SecurityPkg/Library/Tpm12DeviceLibDTpm/Tpm12Tis.c b/SecurityPkg/Library/Tpm12DeviceLibDTpm/Tpm12Tis.c
index 2ad5345927..2fb360fa12 100644
--- a/SecurityPkg/Library/Tpm12DeviceLibDTpm/Tpm12Tis.c
+++ b/SecurityPkg/Library/Tpm12DeviceLibDTpm/Tpm12Tis.c
@@ -1,7 +1,7 @@
 /** @file

   TIS (TPM Interface Specification) functions used by TPM1.2.

   

-Copyright (c) 2013, Intel Corporation. All rights reserved.<BR>

+Copyright (c) 2013 - 2015, Intel Corporation. All rights reserved.<BR>

 This program and the accompanying materials 

 are licensed and made available under the terms and conditions of the BSD License 

 which accompanies this distribution.  The full text of the license may be found at 

@@ -217,7 +217,6 @@ Tpm12TisPcPresenceCheck (
   @retval     EFI_TIMEOUT  The register can't run into the expected status in time.

 **/

 EFI_STATUS

-EFIAPI

 Tpm12TisPcWaitRegisterBits (

   IN      UINT8                     *Register,

   IN      UINT8                     BitSet,

@@ -249,7 +248,6 @@ Tpm12TisPcWaitRegisterBits (
   @retval     EFI_TIMEOUT           BurstCount can't be got in time.

 **/

 EFI_STATUS

-EFIAPI

 Tpm12TisPcReadBurstCount (

   IN      TIS_PC_REGISTERS_PTR      TisReg,

      OUT  UINT16                    *BurstCount

@@ -293,7 +291,6 @@ Tpm12TisPcReadBurstCount (
   @retval    EFI_TIMEOUT           TPM chip can't be set to ready state in time.

 **/

 EFI_STATUS

-EFIAPI

 Tpm12TisPcPrepareCommand (

   IN      TIS_PC_REGISTERS_PTR      TisReg

   )

@@ -326,7 +323,6 @@ Tpm12TisPcPrepareCommand (
   @retval    EFI_TIMEOUT           Can't get the TPM control in time.

 **/

 EFI_STATUS

-EFIAPI

 Tpm12TisPcRequestUseTpm (

   IN      TIS_PC_REGISTERS_PTR      TisReg

   )

@@ -361,7 +357,6 @@ Tpm12TisPcRequestUseTpm (
   @param[in, out] SizeOut       Size of response data.  

  

   @retval EFI_SUCCESS           Operation completed successfully.

-  @retval EFI_TIMEOUT           The register can't run into the expected status in time.

   @retval EFI_BUFFER_TOO_SMALL  Response data buffer is too small.

   @retval EFI_DEVICE_ERROR      Unexpected device behavior.

   @retval EFI_UNSUPPORTED       Unsupported TPM version

@@ -408,7 +403,7 @@ Tpm12TisTpmCommand (
   Status = Tpm12TisPcPrepareCommand (TisReg);

   if (EFI_ERROR (Status)){

     DEBUG ((DEBUG_ERROR, "Tpm12 is not ready for command!\n"));

-    return Status;

+    return EFI_DEVICE_ERROR;

   }

   //

   // Send the command data to Tpm

@@ -417,7 +412,7 @@ Tpm12TisTpmCommand (
   while (Index < SizeIn) {

     Status = Tpm12TisPcReadBurstCount (TisReg, &BurstCount);

     if (EFI_ERROR (Status)) {

-      Status = EFI_TIMEOUT;

+      Status = EFI_DEVICE_ERROR;

       goto Exit;

     }

     for (; BurstCount > 0 && Index < SizeIn; BurstCount--) {

@@ -451,7 +446,7 @@ Tpm12TisTpmCommand (
              );

   if (EFI_ERROR (Status)) {

     DEBUG ((DEBUG_ERROR, "Wait for Tpm12 response data time out!!\n"));

-    Status = EFI_TIMEOUT;

+    Status = EFI_DEVICE_ERROR;

     goto Exit;

   }

   //

@@ -462,7 +457,7 @@ Tpm12TisTpmCommand (
   while (Index < sizeof (TPM_RSP_COMMAND_HDR)) {

     Status = Tpm12TisPcReadBurstCount (TisReg, &BurstCount);

     if (EFI_ERROR (Status)) {

-      Status = EFI_TIMEOUT;

+      Status = EFI_DEVICE_ERROR;

       goto Exit;

     }

     for (; BurstCount > 0; BurstCount--) {

@@ -509,7 +504,7 @@ Tpm12TisTpmCommand (
     }

     Status = Tpm12TisPcReadBurstCount (TisReg, &BurstCount);

     if (EFI_ERROR (Status)) {

-      Status = EFI_TIMEOUT;

+      Status = EFI_DEVICE_ERROR;

       goto Exit;

     }

   }