mirror of https://github.com/acidanthera/audk.git
243 lines
7.6 KiB
C
243 lines
7.6 KiB
C
|
/** @file
|
||
|
Execute pending TPM2 requests from OS or BIOS.
|
||
|
|
||
|
Caution: This module requires additional review when modified.
|
||
|
This driver will have external input - variable.
|
||
|
This external input must be validated carefully to avoid security issue.
|
||
|
|
||
|
TrEEExecutePendingTpmRequest() will receive untrusted input and do validation.
|
||
|
|
||
|
Copyright (c) 2013 - 2015, Intel Corporation. All rights reserved.<BR>
|
||
|
This program and the accompanying materials
|
||
|
are licensed and made available under the terms and conditions of the BSD License
|
||
|
which accompanies this distribution. The full text of the license may be found at
|
||
|
http://opensource.org/licenses/bsd-license.php
|
||
|
|
||
|
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
||
|
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
||
|
|
||
|
**/
|
||
|
|
||
|
#include <PiDxe.h>
|
||
|
|
||
|
#include <Protocol/TrEEProtocol.h>
|
||
|
#include <Protocol/VariableLock.h>
|
||
|
#include <Library/DebugLib.h>
|
||
|
#include <Library/BaseMemoryLib.h>
|
||
|
#include <Library/UefiRuntimeServicesTableLib.h>
|
||
|
#include <Library/UefiDriverEntryPoint.h>
|
||
|
#include <Library/UefiBootServicesTableLib.h>
|
||
|
#include <Library/UefiLib.h>
|
||
|
#include <Library/MemoryAllocationLib.h>
|
||
|
#include <Library/PrintLib.h>
|
||
|
#include <Library/HiiLib.h>
|
||
|
#include <Guid/EventGroup.h>
|
||
|
#include <Guid/TrEEPhysicalPresenceData.h>
|
||
|
#include <Library/Tpm2CommandLib.h>
|
||
|
#include <Library/TrEEPpVendorLib.h>
|
||
|
|
||
|
|
||
|
/**
|
||
|
Get string by string id from HII Interface.
|
||
|
|
||
|
@param[in] Id String ID.
|
||
|
|
||
|
@retval CHAR16 * String from ID.
|
||
|
@retval NULL If error occurs.
|
||
|
|
||
|
**/
|
||
|
CHAR16 *
|
||
|
TrEEPhysicalPresenceGetStringById (
|
||
|
IN EFI_STRING_ID Id
|
||
|
)
|
||
|
{
|
||
|
return NULL;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
Send ClearControl and Clear command to TPM.
|
||
|
|
||
|
@param[in] PlatformAuth platform auth value. NULL means no platform auth change.
|
||
|
|
||
|
@retval EFI_SUCCESS Operation completed successfully.
|
||
|
@retval EFI_TIMEOUT The register can't run into the expected status in time.
|
||
|
@retval EFI_BUFFER_TOO_SMALL Response data buffer is too small.
|
||
|
@retval EFI_DEVICE_ERROR Unexpected device behavior.
|
||
|
|
||
|
**/
|
||
|
EFI_STATUS
|
||
|
EFIAPI
|
||
|
TpmCommandClear (
|
||
|
IN TPM2B_AUTH *PlatformAuth OPTIONAL
|
||
|
)
|
||
|
{
|
||
|
return EFI_SUCCESS;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
Execute physical presence operation requested by the OS.
|
||
|
|
||
|
@param[in] PlatformAuth platform auth value. NULL means no platform auth change.
|
||
|
@param[in] CommandCode Physical presence operation value.
|
||
|
@param[in, out] PpiFlags The physical presence interface flags.
|
||
|
|
||
|
@retval TREE_PP_OPERATION_RESPONSE_BIOS_FAILURE Unknown physical presence operation.
|
||
|
@retval TREE_PP_OPERATION_RESPONSE_BIOS_FAILURE Error occurred during sending command to TPM or
|
||
|
receiving response from TPM.
|
||
|
@retval Others Return code from the TPM device after command execution.
|
||
|
**/
|
||
|
UINT32
|
||
|
TrEEExecutePhysicalPresence (
|
||
|
IN TPM2B_AUTH *PlatformAuth, OPTIONAL
|
||
|
IN UINT32 CommandCode,
|
||
|
IN OUT EFI_TREE_PHYSICAL_PRESENCE_FLAGS *PpiFlags
|
||
|
)
|
||
|
{
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
|
||
|
/**
|
||
|
Read the specified key for user confirmation.
|
||
|
|
||
|
@param[in] CautionKey If true, F12 is used as confirm key;
|
||
|
If false, F10 is used as confirm key.
|
||
|
|
||
|
@retval TRUE User confirmed the changes by input.
|
||
|
@retval FALSE User discarded the changes.
|
||
|
**/
|
||
|
BOOLEAN
|
||
|
TrEEReadUserKey (
|
||
|
IN BOOLEAN CautionKey
|
||
|
)
|
||
|
{
|
||
|
return FALSE;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
The constructor function register UNI strings into imageHandle.
|
||
|
|
||
|
It will ASSERT() if that operation fails and it will always return EFI_SUCCESS.
|
||
|
|
||
|
@param ImageHandle The firmware allocated handle for the EFI image.
|
||
|
@param SystemTable A pointer to the EFI System Table.
|
||
|
|
||
|
@retval EFI_SUCCESS The constructor successfully added string package.
|
||
|
@retval Other value The constructor can't add string package.
|
||
|
**/
|
||
|
EFI_STATUS
|
||
|
EFIAPI
|
||
|
TrEEPhysicalPresenceLibConstructor (
|
||
|
IN EFI_HANDLE ImageHandle,
|
||
|
IN EFI_SYSTEM_TABLE *SystemTable
|
||
|
)
|
||
|
{
|
||
|
return EFI_SUCCESS;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
Display the confirm text and get user confirmation.
|
||
|
|
||
|
@param[in] TpmPpCommand The requested TPM physical presence command.
|
||
|
|
||
|
@retval TRUE The user has confirmed the changes.
|
||
|
@retval FALSE The user doesn't confirm the changes.
|
||
|
**/
|
||
|
BOOLEAN
|
||
|
TrEEUserConfirm (
|
||
|
IN UINT32 TpmPpCommand
|
||
|
)
|
||
|
{
|
||
|
return FALSE;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
Check if there is a valid physical presence command request. Also updates parameter value
|
||
|
to whether the requested physical presence command already confirmed by user
|
||
|
|
||
|
@param[in] TcgPpData EFI TrEE Physical Presence request data.
|
||
|
@param[in] Flags The physical presence interface flags.
|
||
|
@param[out] RequestConfirmed If the physical presence operation command required user confirm from UI.
|
||
|
True, it indicates the command doesn't require user confirm, or already confirmed
|
||
|
in last boot cycle by user.
|
||
|
False, it indicates the command need user confirm from UI.
|
||
|
|
||
|
@retval TRUE Physical Presence operation command is valid.
|
||
|
@retval FALSE Physical Presence operation command is invalid.
|
||
|
|
||
|
**/
|
||
|
BOOLEAN
|
||
|
TrEEHaveValidTpmRequest (
|
||
|
IN EFI_TREE_PHYSICAL_PRESENCE *TcgPpData,
|
||
|
IN EFI_TREE_PHYSICAL_PRESENCE_FLAGS Flags,
|
||
|
OUT BOOLEAN *RequestConfirmed
|
||
|
)
|
||
|
{
|
||
|
return TRUE;
|
||
|
}
|
||
|
|
||
|
|
||
|
/**
|
||
|
Check and execute the requested physical presence command.
|
||
|
|
||
|
Caution: This function may receive untrusted input.
|
||
|
TcgPpData variable is external input, so this function will validate
|
||
|
its data structure to be valid value.
|
||
|
|
||
|
@param[in] PlatformAuth platform auth value. NULL means no platform auth change.
|
||
|
@param[in] TcgPpData Point to the physical presence NV variable.
|
||
|
@param[in] Flags The physical presence interface flags.
|
||
|
**/
|
||
|
VOID
|
||
|
TrEEExecutePendingTpmRequest (
|
||
|
IN TPM2B_AUTH *PlatformAuth, OPTIONAL
|
||
|
IN EFI_TREE_PHYSICAL_PRESENCE *TcgPpData,
|
||
|
IN EFI_TREE_PHYSICAL_PRESENCE_FLAGS Flags
|
||
|
)
|
||
|
{
|
||
|
return;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
Check and execute the pending TPM request.
|
||
|
|
||
|
The TPM request may come from OS or BIOS. This API will display request information and wait
|
||
|
for user confirmation if TPM request exists. The TPM request will be sent to TPM device after
|
||
|
the TPM request is confirmed, and one or more reset may be required to make TPM request to
|
||
|
take effect.
|
||
|
|
||
|
This API should be invoked after console in and console out are all ready as they are required
|
||
|
to display request information and get user input to confirm the request.
|
||
|
|
||
|
@param[in] PlatformAuth platform auth value. NULL means no platform auth change.
|
||
|
**/
|
||
|
VOID
|
||
|
EFIAPI
|
||
|
TrEEPhysicalPresenceLibProcessRequest (
|
||
|
IN TPM2B_AUTH *PlatformAuth OPTIONAL
|
||
|
)
|
||
|
{
|
||
|
return;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
Check if the pending TPM request needs user input to confirm.
|
||
|
|
||
|
The TPM request may come from OS. This API will check if TPM request exists and need user
|
||
|
input to confirmation.
|
||
|
|
||
|
@retval TRUE TPM needs input to confirm user physical presence.
|
||
|
@retval FALSE TPM doesn't need input to confirm user physical presence.
|
||
|
|
||
|
**/
|
||
|
BOOLEAN
|
||
|
EFIAPI
|
||
|
TrEEPhysicalPresenceLibNeedUserConfirm(
|
||
|
VOID
|
||
|
)
|
||
|
{
|
||
|
|
||
|
return FALSE;
|
||
|
}
|
||
|
|