tyler.durden/audk
1
0
Fork 0
mirror of https://github.com/acidanthera/audk.git synced 2025-07-27 07:34:06 +02:00
Code Issues Packages Projects Releases Wiki Activity

SecurityPkg/Tcg2Smm: Measure the table before patch.

Browse Source 
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=1940

According to TCG PFP specification: the ACPI table must be
measured prior to any modification, and the measurement
must be same cross every boot cycle.

There is a fix 3a63c17ebc853cbb27d190729d01e27f68e65b94
for the HID data. However that is not enough.
The LAML/LASA and PCD configuration change may also cause
similar problem.

We need measure the table before any update.

Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Chao Zhang <chao.b.zhang@intel.com>
Signed-off-by: Jiewen Yao <Jiewen.Yao@intel.com>
Reviewed-by: Chao Zhang <chao.b.zhang@intel.com>
This commit is contained in:
Jiewen Yao 2019-12-07 21:41:10 +08:00 committed by mergify[bot]
parent a80032dc44
commit 7e55cf6b48
1 changed files with 30 additions and 27 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

57
SecurityPkg/Tcg/Tcg2Smm/Tcg2Smm.c
View File

@ -651,6 +651,21 @@ PublishAcpiTable (
); );
ASSERT_EFI_ERROR (Status); ASSERT_EFI_ERROR (Status);
//
// Measure to PCR[0] with event EV_POST_CODE ACPI DATA.
// The measurement has to be done before any update.
// Otherwise, the PCR record would be different after TPM FW update
// or the PCD configuration change.
//
TpmMeasureAndLogData(
0,
EV_POST_CODE,
EV_POSTCODE_INFO_ACPI_DATA,
ACPI_DATA_LEN,
Table,
TableSize
);
// //
// Update Table version before measuring it to PCR // Update Table version before measuring it to PCR
// //
@ -663,21 +678,6 @@ PublishAcpiTable (
(CHAR8 *) PcdGetPtr(PcdTcgPhysicalPresenceInterfaceVer) (CHAR8 *) PcdGetPtr(PcdTcgPhysicalPresenceInterfaceVer)
)); ));
//
// Measure to PCR[0] with event EV_POST_CODE ACPI DATA.
// The measurement has to be done before UpdateHID since TPM2 ACPI HID
// imply TPM Firmware Version. Otherwise, the PCR record would be
// different after TPM FW update.
//
TpmMeasureAndLogData(
0,
EV_POST_CODE,
EV_POSTCODE_INFO_ACPI_DATA,
ACPI_DATA_LEN,
Table,
TableSize
);
// //
// Update TPM2 HID after measuring it to PCR // Update TPM2 HID after measuring it to PCR
// //
@ -753,6 +753,21 @@ PublishTpm2 (
EFI_TPM2_ACPI_CONTROL_AREA *ControlArea; EFI_TPM2_ACPI_CONTROL_AREA *ControlArea;
TPM2_PTP_INTERFACE_TYPE InterfaceType; TPM2_PTP_INTERFACE_TYPE InterfaceType;
//
// Measure to PCR[0] with event EV_POST_CODE ACPI DATA.
// The measurement has to be done before any update.
// Otherwise, the PCR record would be different after event log update
// or the PCD configuration change.
//
TpmMeasureAndLogData(
0,
EV_POST_CODE,
EV_POSTCODE_INFO_ACPI_DATA,
ACPI_DATA_LEN,
&mTpm2AcpiTemplate,
mTpm2AcpiTemplate.Header.Length
);
mTpm2AcpiTemplate.Header.Revision = PcdGet8(PcdTpm2AcpiTableRev); mTpm2AcpiTemplate.Header.Revision = PcdGet8(PcdTpm2AcpiTableRev);
DEBUG((DEBUG_INFO, "Tpm2 ACPI table revision is %d\n", mTpm2AcpiTemplate.Header.Revision)); DEBUG((DEBUG_INFO, "Tpm2 ACPI table revision is %d\n", mTpm2AcpiTemplate.Header.Revision));
@ -776,18 +791,6 @@ PublishTpm2 (
mTpm2AcpiTemplate.Header.Length = sizeof(EFI_TPM2_ACPI_TABLE); mTpm2AcpiTemplate.Header.Length = sizeof(EFI_TPM2_ACPI_TABLE);
} }
//
// Measure to PCR[0] with event EV_POST_CODE ACPI DATA
//
TpmMeasureAndLogData(
0,
EV_POST_CODE,
EV_POSTCODE_INFO_ACPI_DATA,
ACPI_DATA_LEN,
&mTpm2AcpiTemplate,
mTpm2AcpiTemplate.Header.Length
);
InterfaceType = PcdGet8(PcdActiveTpmInterfaceType); InterfaceType = PcdGet8(PcdActiveTpmInterfaceType);
switch (InterfaceType) { switch (InterfaceType) {
case Tpm2PtpInterfaceCrb: case Tpm2PtpInterfaceCrb: