mirror of https://github.com/acidanthera/audk.git
SecurityPkg/Tcg2Smm: Measure the table before patch.
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=1940
According to TCG PFP specification: the ACPI table must be
measured prior to any modification, and the measurement
must be same cross every boot cycle.
There is a fix 3a63c17ebc
for the HID data. However that is not enough.
The LAML/LASA and PCD configuration change may also cause
similar problem.
We need measure the table before any update.
Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Chao Zhang <chao.b.zhang@intel.com>
Signed-off-by: Jiewen Yao <Jiewen.Yao@intel.com>
Reviewed-by: Chao Zhang <chao.b.zhang@intel.com>
This commit is contained in:
parent
a80032dc44
commit
7e55cf6b48
|
@ -651,6 +651,21 @@ PublishAcpiTable (
|
|||
);
|
||||
ASSERT_EFI_ERROR (Status);
|
||||
|
||||
//
|
||||
// Measure to PCR[0] with event EV_POST_CODE ACPI DATA.
|
||||
// The measurement has to be done before any update.
|
||||
// Otherwise, the PCR record would be different after TPM FW update
|
||||
// or the PCD configuration change.
|
||||
//
|
||||
TpmMeasureAndLogData(
|
||||
0,
|
||||
EV_POST_CODE,
|
||||
EV_POSTCODE_INFO_ACPI_DATA,
|
||||
ACPI_DATA_LEN,
|
||||
Table,
|
||||
TableSize
|
||||
);
|
||||
|
||||
//
|
||||
// Update Table version before measuring it to PCR
|
||||
//
|
||||
|
@ -663,21 +678,6 @@ PublishAcpiTable (
|
|||
(CHAR8 *) PcdGetPtr(PcdTcgPhysicalPresenceInterfaceVer)
|
||||
));
|
||||
|
||||
//
|
||||
// Measure to PCR[0] with event EV_POST_CODE ACPI DATA.
|
||||
// The measurement has to be done before UpdateHID since TPM2 ACPI HID
|
||||
// imply TPM Firmware Version. Otherwise, the PCR record would be
|
||||
// different after TPM FW update.
|
||||
//
|
||||
TpmMeasureAndLogData(
|
||||
0,
|
||||
EV_POST_CODE,
|
||||
EV_POSTCODE_INFO_ACPI_DATA,
|
||||
ACPI_DATA_LEN,
|
||||
Table,
|
||||
TableSize
|
||||
);
|
||||
|
||||
//
|
||||
// Update TPM2 HID after measuring it to PCR
|
||||
//
|
||||
|
@ -753,6 +753,21 @@ PublishTpm2 (
|
|||
EFI_TPM2_ACPI_CONTROL_AREA *ControlArea;
|
||||
TPM2_PTP_INTERFACE_TYPE InterfaceType;
|
||||
|
||||
//
|
||||
// Measure to PCR[0] with event EV_POST_CODE ACPI DATA.
|
||||
// The measurement has to be done before any update.
|
||||
// Otherwise, the PCR record would be different after event log update
|
||||
// or the PCD configuration change.
|
||||
//
|
||||
TpmMeasureAndLogData(
|
||||
0,
|
||||
EV_POST_CODE,
|
||||
EV_POSTCODE_INFO_ACPI_DATA,
|
||||
ACPI_DATA_LEN,
|
||||
&mTpm2AcpiTemplate,
|
||||
mTpm2AcpiTemplate.Header.Length
|
||||
);
|
||||
|
||||
mTpm2AcpiTemplate.Header.Revision = PcdGet8(PcdTpm2AcpiTableRev);
|
||||
DEBUG((DEBUG_INFO, "Tpm2 ACPI table revision is %d\n", mTpm2AcpiTemplate.Header.Revision));
|
||||
|
||||
|
@ -776,18 +791,6 @@ PublishTpm2 (
|
|||
mTpm2AcpiTemplate.Header.Length = sizeof(EFI_TPM2_ACPI_TABLE);
|
||||
}
|
||||
|
||||
//
|
||||
// Measure to PCR[0] with event EV_POST_CODE ACPI DATA
|
||||
//
|
||||
TpmMeasureAndLogData(
|
||||
0,
|
||||
EV_POST_CODE,
|
||||
EV_POSTCODE_INFO_ACPI_DATA,
|
||||
ACPI_DATA_LEN,
|
||||
&mTpm2AcpiTemplate,
|
||||
mTpm2AcpiTemplate.Header.Length
|
||||
);
|
||||
|
||||
InterfaceType = PcdGet8(PcdActiveTpmInterfaceType);
|
||||
switch (InterfaceType) {
|
||||
case Tpm2PtpInterfaceCrb:
|
||||
|
|
Loading…
Reference in New Issue