2 Implement defer image load services for user identification in UEFI2.2.
4 Copyright (c) 2016, Intel Corporation. All rights reserved.<BR>
5 SPDX-License-Identifier: BSD-2-Clause-Patent
8 #include "Defer3rdPartyImageLoad.h"
11 // The structure to save the deferred 3rd party image information.
14 EFI_DEVICE_PATH_PROTOCOL
*ImageDevicePath
;
17 } DEFERRED_3RD_PARTY_IMAGE_INFO
;
20 // The table to save the deferred 3rd party image item.
23 UINTN Count
; ///< deferred 3rd party image count
24 DEFERRED_3RD_PARTY_IMAGE_INFO
*ImageInfo
; ///< deferred 3rd party image item
25 } DEFERRED_3RD_PARTY_IMAGE_TABLE
;
27 BOOLEAN mImageLoadedAfterEndOfDxe
= FALSE
;
28 BOOLEAN mEndOfDxe
= FALSE
;
29 DEFERRED_3RD_PARTY_IMAGE_TABLE mDeferred3rdPartyImage
= {
30 0, // Deferred image count
31 NULL
// The deferred image info
34 EFI_DEFERRED_IMAGE_LOAD_PROTOCOL mDeferredImageLoad
= {
39 Return whether the file comes from FV.
41 @param[in] File This is a pointer to the device path of the file
42 that is being dispatched.
44 @retval TRUE File comes from FV.
45 @retval FALSE File doesn't come from FV.
49 IN CONST EFI_DEVICE_PATH_PROTOCOL
*File
53 EFI_HANDLE DeviceHandle
;
54 EFI_DEVICE_PATH_PROTOCOL
*TempDevicePath
;
57 // First check to see if File is from a Firmware Volume
60 TempDevicePath
= (EFI_DEVICE_PATH_PROTOCOL
*) File
;
61 Status
= gBS
->LocateDevicePath (
62 &gEfiFirmwareVolume2ProtocolGuid
,
66 if (!EFI_ERROR (Status
)) {
67 Status
= gBS
->OpenProtocol (
69 &gEfiFirmwareVolume2ProtocolGuid
,
73 EFI_OPEN_PROTOCOL_TEST_PROTOCOL
75 if (!EFI_ERROR (Status
)) {
84 Find the deferred image which matches the device path.
86 @param[in] ImageDevicePath A pointer to the device path of a image.
87 @param[in] BootOption Whether the image is a boot option.
89 @return Pointer to the found deferred image or NULL if not found.
91 DEFERRED_3RD_PARTY_IMAGE_INFO
*
93 IN CONST EFI_DEVICE_PATH_PROTOCOL
*ImageDevicePath
,
100 DevicePathSize
= GetDevicePathSize (ImageDevicePath
);
102 for (Index
= 0; Index
< mDeferred3rdPartyImage
.Count
; Index
++) {
103 if (CompareMem (ImageDevicePath
, mDeferred3rdPartyImage
.ImageInfo
[Index
].ImageDevicePath
, DevicePathSize
) == 0) {
104 ASSERT (mDeferred3rdPartyImage
.ImageInfo
[Index
].BootOption
== BootOption
);
105 return &mDeferred3rdPartyImage
.ImageInfo
[Index
];
113 Add the image info to a deferred image list.
115 @param[in] ImageDevicePath A pointer to the device path of a image.
116 @param[in] BootOption Whether the image is a boot option.
121 IN CONST EFI_DEVICE_PATH_PROTOCOL
*ImageDevicePath
,
122 IN BOOLEAN BootOption
125 DEFERRED_3RD_PARTY_IMAGE_INFO
*ImageInfo
;
128 // Expand memory for the new deferred image.
130 ImageInfo
= ReallocatePool (
131 mDeferred3rdPartyImage
.Count
* sizeof (DEFERRED_3RD_PARTY_IMAGE_INFO
),
132 (mDeferred3rdPartyImage
.Count
+ 1) * sizeof (DEFERRED_3RD_PARTY_IMAGE_INFO
),
133 mDeferred3rdPartyImage
.ImageInfo
135 if (ImageInfo
== NULL
) {
138 mDeferred3rdPartyImage
.ImageInfo
= ImageInfo
;
141 // Save the deferred image information.
143 ImageInfo
= &mDeferred3rdPartyImage
.ImageInfo
[mDeferred3rdPartyImage
.Count
];
144 ImageInfo
->ImageDevicePath
= DuplicateDevicePath (ImageDevicePath
);
145 if (ImageInfo
->ImageDevicePath
== NULL
) {
148 ImageInfo
->BootOption
= BootOption
;
149 ImageInfo
->Loaded
= FALSE
;
150 mDeferred3rdPartyImage
.Count
++;
155 Returns information about a deferred image.
157 This function returns information about a single deferred image. The deferred images are
158 numbered consecutively, starting with 0. If there is no image which corresponds to
159 ImageIndex, then EFI_NOT_FOUND is returned. All deferred images may be returned by
160 iteratively calling this function until EFI_NOT_FOUND is returned.
161 Image may be NULL and ImageSize set to 0 if the decision to defer execution was made
162 because of the location of the executable image, rather than its actual contents.
164 @param[in] This Points to this instance of the EFI_DEFERRED_IMAGE_LOAD_PROTOCOL.
165 @param[in] ImageIndex Zero-based index of the deferred index.
166 @param[out] ImageDevicePath On return, points to a pointer to the device path of the image.
167 The device path should not be freed by the caller.
168 @param[out] Image On return, points to the first byte of the image or NULL if the
169 image is not available. The image should not be freed by the caller
170 unless LoadImage() has been successfully called.
171 @param[out] ImageSize On return, the size of the image, or 0 if the image is not available.
172 @param[out] BootOption On return, points to TRUE if the image was intended as a boot option
173 or FALSE if it was not intended as a boot option.
175 @retval EFI_SUCCESS Image information returned successfully.
176 @retval EFI_NOT_FOUND ImageIndex does not refer to a valid image.
177 @retval EFI_INVALID_PARAMETER ImageDevicePath is NULL or Image is NULL or ImageSize is NULL or
183 GetDefferedImageInfo (
184 IN EFI_DEFERRED_IMAGE_LOAD_PROTOCOL
*This
,
186 OUT EFI_DEVICE_PATH_PROTOCOL
**ImageDevicePath
,
188 OUT UINTN
*ImageSize
,
189 OUT BOOLEAN
*BootOption
195 if ((This
== NULL
) || (ImageSize
== NULL
) || (Image
== NULL
)) {
196 return EFI_INVALID_PARAMETER
;
199 if ((ImageDevicePath
== NULL
) || (BootOption
== NULL
)) {
200 return EFI_INVALID_PARAMETER
;
204 // Remove the loaded images from the defer list in the first call.
206 if (ImageIndex
== 0) {
208 for (Index
= 0; Index
< mDeferred3rdPartyImage
.Count
; Index
++) {
209 if (!mDeferred3rdPartyImage
.ImageInfo
[Index
].Loaded
) {
211 &mDeferred3rdPartyImage
.ImageInfo
[NewCount
],
212 &mDeferred3rdPartyImage
.ImageInfo
[Index
],
213 sizeof (DEFERRED_3RD_PARTY_IMAGE_INFO
)
219 mDeferred3rdPartyImage
.Count
= NewCount
;
222 if (ImageIndex
>= mDeferred3rdPartyImage
.Count
) {
223 return EFI_NOT_FOUND
;
227 // Get the request deferred image.
229 *ImageDevicePath
= mDeferred3rdPartyImage
.ImageInfo
[ImageIndex
].ImageDevicePath
;
230 *BootOption
= mDeferred3rdPartyImage
.ImageInfo
[ImageIndex
].BootOption
;
238 Callback function executed when the EndOfDxe event group is signaled.
240 @param[in] Event Event whose notification function is being invoked.
241 @param[in] Context The pointer to the notification function's context, which
242 is implementation-dependent.
255 Event notification for gEfiDxeSmmReadyToLockProtocolGuid event.
257 This function reports failure if any deferred image is loaded before
259 Platform should publish ReadyToLock protocol immediately after signaling
260 of the End of DXE Event.
262 @param Event The Event that is being processed, not used.
263 @param Context Event Context, not used.
276 Status
= gBS
->LocateProtocol (&gEfiDxeSmmReadyToLockProtocolGuid
, NULL
, &Interface
);
277 if (EFI_ERROR (Status
)) {
281 gBS
->CloseEvent (Event
);
283 if (mImageLoadedAfterEndOfDxe
) {
285 // Platform should not dispatch the 3rd party images after signaling EndOfDxe event
286 // but before publishing DxeSmmReadyToLock protocol.
290 "[Security] 3rd party images must be dispatched after DxeSmmReadyToLock Protocol installation!\n"
293 EFI_ERROR_CODE
| EFI_ERROR_UNRECOVERED
,
294 (EFI_SOFTWARE_DXE_BS_DRIVER
| EFI_SW_EC_ILLEGAL_SOFTWARE_STATE
)
302 Defer the 3rd party image load and installs Deferred Image Load Protocol.
304 @param[in] File This is a pointer to the device path of the file that
305 is being dispatched. This will optionally be used for
307 @param[in] BootPolicy A boot policy that was used to call LoadImage() UEFI service.
309 @retval EFI_SUCCESS The file is not 3rd party image and can be loaded immediately.
310 @retval EFI_ACCESS_DENIED The file is 3rd party image and needs deferred.
313 Defer3rdPartyImageLoad (
314 IN CONST EFI_DEVICE_PATH_PROTOCOL
*File
,
315 IN BOOLEAN BootPolicy
318 DEFERRED_3RD_PARTY_IMAGE_INFO
*ImageInfo
;
321 // Ignore if File is NULL.
327 if (FileFromFv (File
)) {
331 ImageInfo
= LookupImage (File
, BootPolicy
);
334 CHAR16
*DevicePathStr
;
335 DevicePathStr
= ConvertDevicePathToText (File
, FALSE
, FALSE
);
338 "[Security] 3rd party image[%p] %s EndOfDxe: %s.\n", ImageInfo
,
339 mEndOfDxe
? L
"can be loaded after": L
"is deferred to load before",
342 if (DevicePathStr
!= NULL
) {
343 FreePool (DevicePathStr
);
348 mImageLoadedAfterEndOfDxe
= TRUE
;
350 // The image might be first time loaded after EndOfDxe,
351 // So ImageInfo can be NULL.
353 if (ImageInfo
!= NULL
) {
354 ImageInfo
->Loaded
= TRUE
;
359 // The image might be second time loaded before EndOfDxe,
360 // So ImageInfo can be non-NULL.
362 if (ImageInfo
== NULL
) {
363 QueueImage (File
, BootPolicy
);
365 return EFI_ACCESS_DENIED
;
370 Installs DeferredImageLoad Protocol and listens EndOfDxe event.
373 Defer3rdPartyImageLoadInitialize (
383 Status
= gBS
->InstallMultipleProtocolInterfaces (
385 &gEfiDeferredImageLoadProtocolGuid
,
389 ASSERT_EFI_ERROR (Status
);
391 Status
= gBS
->CreateEventEx (
396 &gEfiEndOfDxeEventGroupGuid
,
399 ASSERT_EFI_ERROR (Status
);
401 EfiCreateProtocolNotifyEvent (
402 &gEfiDxeSmmReadyToLockProtocolGuid
,