OrgACRN
/
slimbootloader
mirror of https://github.com/slimbootloader/slimbootloader.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Check fit header entry location 

For bootguard event log fit header location is retrieved
from fit pointer. Added a condition to check the FIT header
range to fix KW error.

Signed-off-by: Subash Lakkimsetti <subash.lakkimsetti@intel.com>
This commit is contained in:
Subash Lakkimsetti 2021-12-17 18:44:36 -07:00 committed by Maurice Ma
parent c3c9ebb1e2
commit c533416ef8
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Silicon/CommonSocPkg/Library/BootGuardLibCBnT/BootGuardLibCBnT.inf
View File

@ -44,3 +44,4 @@
[Pcd]
gEfiMdePkgTokenSpaceGuid.PcdPciExpressBaseAddress
gPlatformModuleTokenSpaceGuid.PcdTopSwapRegionSize

8
Silicon/CommonSocPkg/Library/BootGuardLibCBnT/BootGuardTpmEventLogLib.c
View File

@ -512,7 +512,15 @@ FindFitEntryData (
UINT32 Index;
FitTableOffset = *(UINT64 *)(UINTN)(BASE_4GB - 0x40);
// Fit table is located in Top Swap region.
// Adding check to validate Fit entry location
if ((FitTableOffset < (BASE_4GB - PcdGet32 (PcdTopSwapRegionSize))) || (FitTableOffset > BASE_4GB)) {
DEBUG ((DEBUG_INFO, "FitTableOffset 0x%x is not valid \n", FitTableOffset));
return NULL;
}
FitEntry = (FIRMWARE_INTERFACE_TABLE_ENTRY *)(UINTN)FitTableOffset;
if (FitEntry != NULL) {
if (FitEntry[0].Address != *(UINT64 *)"_FIT_ ") {
return NULL;