+ ZeroMem (CertHash, mHash[HashAlg].DigestLength);\r
+ Status = mHash[HashAlg].HashFinal (HashCtx, CertHash);\r
+\r
+Done:\r
+ if (HashCtx != NULL) {\r
+ FreePool (HashCtx);\r
+ }\r
+\r
+ return Status;\r
+}\r
+\r
+/**\r
+ Check whether the hash of an X.509 certificate is in forbidden database (DBX).\r
+\r
+ @param[in] Certificate Pointer to X.509 Certificate that is searched for.\r
+ @param[in] CertSize Size of X.509 Certificate.\r
+\r
+ @return TRUE Found the certificate hash in the forbidden database.\r
+ @return FALSE Certificate hash is Not found in the forbidden database.\r
+\r
+**/\r
+BOOLEAN\r
+IsCertHashFoundInDbx (\r
+ IN UINT8 *Certificate,\r
+ IN UINTN CertSize\r
+ )\r
+{\r
+ BOOLEAN IsFound;\r
+ EFI_STATUS Status;\r
+ EFI_SIGNATURE_LIST *DbxList;\r
+ EFI_SIGNATURE_DATA *CertHash;\r
+ UINTN CertHashCount;\r
+ UINTN Index;\r
+ UINT32 HashAlg;\r
+ UINT8 CertDigest[MAX_DIGEST_SIZE];\r
+ UINT8 *DbxCertHash;\r
+ UINTN SiglistHeaderSize;\r
+ UINT8 *Data;\r
+ UINTN DataSize;\r
+\r
+ IsFound = FALSE;\r
+ HashAlg = HASHALG_MAX;\r
+ Data = NULL;\r
+\r
+ //\r
+ // Read signature database variable.\r
+ //\r
+ DataSize = 0;\r
+ Status = gRT->GetVariable (EFI_IMAGE_SECURITY_DATABASE1, &gEfiImageSecurityDatabaseGuid, NULL, &DataSize, NULL);\r
+ if (Status != EFI_BUFFER_TOO_SMALL) {\r
+ return FALSE;\r
+ }\r
+\r
+ Data = (UINT8 *) AllocateZeroPool (DataSize);\r
+ if (Data == NULL) {\r
+ return FALSE;\r
+ }\r
+\r
+ Status = gRT->GetVariable (EFI_IMAGE_SECURITY_DATABASE1, &gEfiImageSecurityDatabaseGuid, NULL, &DataSize, Data);\r
+ if (EFI_ERROR (Status)) {\r
+ goto Done;\r
+ }\r
+\r
+ //\r
+ // Check whether the certificate hash exists in the forbidden database.\r
+ //\r
+ DbxList = (EFI_SIGNATURE_LIST *) Data;\r
+ while ((DataSize > 0) && (DataSize >= DbxList->SignatureListSize)) {\r
+ //\r
+ // Determine Hash Algorithm of Certificate in the forbidden database.\r
+ //\r
+ if (CompareGuid (&DbxList->SignatureType, &gEfiCertX509Sha256Guid)) {\r
+ HashAlg = HASHALG_SHA256;\r
+ } else if (CompareGuid (&DbxList->SignatureType, &gEfiCertX509Sha384Guid)) {\r
+ HashAlg = HASHALG_SHA384;\r
+ } else if (CompareGuid (&DbxList->SignatureType, &gEfiCertX509Sha512Guid)) {\r
+ HashAlg = HASHALG_SHA512;\r
+ } else {\r
+ DataSize -= DbxList->SignatureListSize;\r
+ DbxList = (EFI_SIGNATURE_LIST *) ((UINT8 *) DbxList + DbxList->SignatureListSize);\r
+ continue;\r
+ }\r
+\r
+ //\r
+ // Calculate the hash value of current db certificate for comparision.\r
+ //\r
+ if (!CalculateCertHash (Certificate, CertSize, HashAlg, CertDigest)) {\r
+ goto Done;\r
+ }\r
+\r
+ SiglistHeaderSize = sizeof (EFI_SIGNATURE_LIST) + DbxList->SignatureHeaderSize;\r
+ CertHash = (EFI_SIGNATURE_DATA *) ((UINT8 *) DbxList + SiglistHeaderSize);\r
+ CertHashCount = (DbxList->SignatureListSize - SiglistHeaderSize) / DbxList->SignatureSize;\r
+ for (Index = 0; Index < CertHashCount; Index++) {\r
+ //\r
+ // Iterate each Signature Data Node within this CertList for verify.\r
+ //\r
+ DbxCertHash = CertHash->SignatureData;\r
+ if (CompareMem (DbxCertHash, CertDigest, mHash[HashAlg].DigestLength) == 0) {\r
+ //\r
+ // Hash of Certificate is found in forbidden database.\r
+ //\r
+ IsFound = TRUE;\r
+ goto Done;\r
+ }\r
+ CertHash = (EFI_SIGNATURE_DATA *) ((UINT8 *) CertHash + DbxList->SignatureSize);\r
+ }\r
+\r
+ DataSize -= DbxList->SignatureListSize;\r
+ DbxList = (EFI_SIGNATURE_LIST *) ((UINT8 *) DbxList + DbxList->SignatureListSize);\r
+ }\r
+\r
+Done:\r
+ if (Data != NULL) {\r
+ FreePool (Data);\r
+ }\r
+\r
+ return IsFound;\r
+}\r
+\r
+/**\r
+ Check whether the signature list exists in given variable data.\r
+\r
+ It searches the signature list for the ceritificate hash by CertType.\r
+ If the signature list is found, get the offset of Database for the\r
+ next hash of a certificate.\r
+\r
+ @param[in] Database Variable data to save signature list.\r
+ @param[in] DatabaseSize Variable size.\r
+ @param[in] SignatureType The type of the signature.\r
+ @param[out] Offset The offset to save a new hash of certificate.\r
+\r
+ @return TRUE The signature list is found in the forbidden database.\r
+ @return FALSE The signature list is not found in the forbidden database.\r
+**/\r
+BOOLEAN\r
+GetSignaturelistOffset (\r
+ IN EFI_SIGNATURE_LIST *Database,\r
+ IN UINTN DatabaseSize,\r
+ IN EFI_GUID *SignatureType,\r
+ OUT UINTN *Offset\r
+ )\r
+{\r
+ EFI_SIGNATURE_LIST *SigList;\r
+ UINTN SiglistSize;\r
+\r
+ if ((Database == NULL) || (DatabaseSize == 0)) {\r
+ *Offset = 0;\r
+ return FALSE;\r
+ }\r
+\r
+ SigList = Database;\r
+ SiglistSize = DatabaseSize;\r
+ while ((SiglistSize > 0) && (SiglistSize >= SigList->SignatureListSize)) {\r
+ if (CompareGuid (&SigList->SignatureType, SignatureType)) {\r
+ *Offset = DatabaseSize - SiglistSize;\r
+ return TRUE;\r
+ }\r
+ SiglistSize -= SigList->SignatureListSize;\r
+ SigList = (EFI_SIGNATURE_LIST *) ((UINT8 *) SigList + SigList->SignatureListSize);\r
+ }\r
+ *Offset = 0;\r
+ return FALSE;\r
+}\r
+\r
+/**\r
+ Enroll a new X509 certificate hash into Signature Database (dbx) without\r
+ KEK's authentication.\r
+\r
+ @param[in] PrivateData The module's private data.\r
+ @param[in] HashAlg The hash algorithm to enroll the certificate.\r
+ @param[in] RevocationDate The revocation date of the certificate.\r
+ @param[in] RevocationTime The revocation time of the certificate.\r
+ @param[in] AlwaysRevocation Indicate whether the certificate is always revoked.\r
+\r
+ @retval EFI_SUCCESS New X509 is enrolled successfully.\r
+ @retval EFI_INVALID_PARAMETER The parameter is invalid.\r
+ @retval EFI_OUT_OF_RESOURCES Could not allocate needed resources.\r
+\r
+**/\r
+EFI_STATUS\r
+EnrollX509HashtoSigDB (\r
+ IN SECUREBOOT_CONFIG_PRIVATE_DATA *Private,\r
+ IN UINT32 HashAlg,\r
+ IN EFI_HII_DATE *RevocationDate,\r
+ IN EFI_HII_TIME *RevocationTime,\r
+ IN BOOLEAN AlwaysRevocation\r
+ )\r
+{\r
+ EFI_STATUS Status;\r
+ UINTN X509DataSize;\r
+ VOID *X509Data;\r
+ EFI_SIGNATURE_LIST *SignatureList;\r
+ UINTN SignatureListSize;\r
+ UINT8 *Data;\r
+ UINT8 *NewData;\r
+ UINTN DataSize;\r
+ UINTN DbSize;\r
+ UINT32 Attr;\r
+ EFI_SIGNATURE_DATA *SignatureData;\r
+ UINTN SignatureSize;\r
+ EFI_GUID SignatureType;\r
+ UINTN Offset;\r
+ UINT8 CertHash[MAX_DIGEST_SIZE];\r
+ UINT16* FilePostFix;\r
+ UINTN NameLength;\r
+ EFI_TIME *Time;\r
+\r
+ X509DataSize = 0;\r
+ DbSize = 0;\r
+ X509Data = NULL;\r
+ SignatureData = NULL;\r
+ SignatureList = NULL;\r
+ Data = NULL;\r
+ NewData = NULL;\r
+\r
+ if ((Private->FileContext->FileName == NULL) || (Private->FileContext->FHandle == NULL) || (Private->SignatureGUID == NULL)) {\r
+ return EFI_INVALID_PARAMETER;\r
+ }\r
+\r
+ Status = SetSecureBootMode (CUSTOM_SECURE_BOOT_MODE);\r
+ if (EFI_ERROR (Status)) {\r
+ return Status;\r
+ }\r
+\r
+ //\r
+ // Parse the file's postfix.\r
+ //\r
+ NameLength = StrLen (Private->FileContext->FileName);\r
+ if (NameLength <= 4) {\r
+ return EFI_INVALID_PARAMETER;\r
+ }\r
+ FilePostFix = Private->FileContext->FileName + NameLength - 4;\r
+ if (!IsDerEncodeCertificate(FilePostFix)) {\r
+ //\r
+ // Only supports DER-encoded X509 certificate.\r
+ //\r
+ return EFI_INVALID_PARAMETER;\r
+ }\r
+\r
+ //\r
+ // Get the certificate from file and calculate its hash.\r
+ //\r
+ Status = ReadFileContent (\r
+ Private->FileContext->FHandle,\r
+ &X509Data,\r
+ &X509DataSize,\r
+ 0\r
+ );\r
+ if (EFI_ERROR (Status)) {\r
+ goto ON_EXIT;\r
+ }\r
+ ASSERT (X509Data != NULL);\r
+\r
+ if (!CalculateCertHash (X509Data, X509DataSize, HashAlg, CertHash)) {\r
+ goto ON_EXIT;\r
+ }\r
+\r
+ //\r
+ // Get the variable for enrollment.\r
+ //\r
+ DataSize = 0;\r
+ Status = gRT->GetVariable (EFI_IMAGE_SECURITY_DATABASE1, &gEfiImageSecurityDatabaseGuid, NULL, &DataSize, NULL);\r
+ if (Status == EFI_BUFFER_TOO_SMALL) {\r
+ Data = (UINT8 *) AllocateZeroPool (DataSize);\r
+ if (Data == NULL) {\r
+ return EFI_OUT_OF_RESOURCES;\r
+ }\r
+\r
+ Status = gRT->GetVariable (EFI_IMAGE_SECURITY_DATABASE1, &gEfiImageSecurityDatabaseGuid, NULL, &DataSize, Data);\r
+ if (EFI_ERROR (Status)) {\r
+ goto ON_EXIT;\r
+ }\r
+ }\r
+\r
+ //\r
+ // Allocate memory for Signature and fill the Signature\r
+ //\r
+ SignatureSize = sizeof(EFI_SIGNATURE_DATA) - 1 + sizeof (EFI_TIME) + mHash[HashAlg].DigestLength;\r
+ SignatureData = (EFI_SIGNATURE_DATA *) AllocateZeroPool (SignatureSize);\r
+ if (SignatureData == NULL) {\r
+ return EFI_OUT_OF_RESOURCES;\r
+ }\r
+ CopyGuid (&SignatureData->SignatureOwner, Private->SignatureGUID);\r
+ CopyMem (SignatureData->SignatureData, CertHash, mHash[HashAlg].DigestLength);\r
+\r
+ //\r
+ // Fill the time.\r
+ //\r
+ if (!AlwaysRevocation) {\r
+ Time = (EFI_TIME *)(&SignatureData->SignatureData + mHash[HashAlg].DigestLength);\r
+ Time->Year = RevocationDate->Year;\r
+ Time->Month = RevocationDate->Month;\r
+ Time->Day = RevocationDate->Day;\r
+ Time->Hour = RevocationTime->Hour;\r
+ Time->Minute = RevocationTime->Minute;\r
+ Time->Second = RevocationTime->Second;\r
+ }\r
+\r
+ //\r
+ // Determine the GUID for certificate hash.\r
+ //\r
+ switch (HashAlg) {\r
+ case HASHALG_SHA256:\r
+ SignatureType = gEfiCertX509Sha256Guid;\r
+ break;\r
+ case HASHALG_SHA384:\r
+ SignatureType = gEfiCertX509Sha384Guid;\r
+ break;\r
+ case HASHALG_SHA512:\r
+ SignatureType = gEfiCertX509Sha512Guid;\r
+ break;\r
+ default:\r
+ return FALSE;\r
+ }\r
+\r
+ //\r
+ // Add signature into the new variable data buffer\r
+ //\r
+ if (GetSignaturelistOffset((EFI_SIGNATURE_LIST *)Data, DataSize, &SignatureType, &Offset)) {\r
+ //\r
+ // Add the signature to the found signaturelist.\r
+ //\r
+ DbSize = DataSize + SignatureSize;\r
+ NewData = AllocateZeroPool (DbSize);\r
+ if (NewData == NULL) {\r
+ Status = EFI_OUT_OF_RESOURCES;\r
+ goto ON_EXIT;\r
+ }\r
+\r
+ SignatureList = (EFI_SIGNATURE_LIST *)(Data + Offset);\r
+ SignatureListSize = (UINTN) ReadUnaligned32 ((UINT32 *)&SignatureList->SignatureListSize);\r
+ CopyMem (NewData, Data, Offset + SignatureListSize);\r
+\r
+ SignatureList = (EFI_SIGNATURE_LIST *)(NewData + Offset);\r
+ WriteUnaligned32 ((UINT32 *) &SignatureList->SignatureListSize, (UINT32)(SignatureListSize + SignatureSize));\r
+\r
+ Offset += SignatureListSize;\r
+ CopyMem (NewData + Offset, SignatureData, SignatureSize);\r
+ CopyMem (NewData + Offset + SignatureSize, Data + Offset, DataSize - Offset);\r
+\r
+ FreePool (Data);\r
+ Data = NewData;\r
+ DataSize = DbSize;\r
+ } else {\r
+ //\r
+ // Create a new signaturelist, and add the signature into the signaturelist.\r
+ //\r
+ DbSize = DataSize + sizeof(EFI_SIGNATURE_LIST) + SignatureSize;\r
+ NewData = AllocateZeroPool (DbSize);\r
+ if (NewData == NULL) {\r
+ Status = EFI_OUT_OF_RESOURCES;\r
+ goto ON_EXIT;\r
+ }\r
+ //\r
+ // Fill Certificate Database parameters.\r
+ //\r
+ SignatureList = (EFI_SIGNATURE_LIST*) (NewData + DataSize);\r
+ SignatureListSize = sizeof(EFI_SIGNATURE_LIST) + SignatureSize;\r
+ WriteUnaligned32 ((UINT32 *) &SignatureList->SignatureListSize, (UINT32) SignatureListSize);\r
+ WriteUnaligned32 ((UINT32 *) &SignatureList->SignatureSize, (UINT32) SignatureSize);\r
+ CopyGuid (&SignatureList->SignatureType, &SignatureType);\r
+ CopyMem ((UINT8* ) SignatureList + sizeof (EFI_SIGNATURE_LIST), SignatureData, SignatureSize);\r
+ if ((DataSize != 0) && (Data != NULL)) {\r
+ CopyMem (NewData, Data, DataSize);\r
+ FreePool (Data);\r
+ }\r
+ Data = NewData;\r
+ DataSize = DbSize;\r
+ }\r
+\r
+ Status = CreateTimeBasedPayload (&DataSize, (UINT8**) &Data);\r
+ if (EFI_ERROR (Status)) {\r
+ goto ON_EXIT;\r
+ }\r
+\r
+ Attr = EFI_VARIABLE_NON_VOLATILE | EFI_VARIABLE_RUNTIME_ACCESS\r
+ | EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS;\r
+ Status = gRT->SetVariable(\r
+ EFI_IMAGE_SECURITY_DATABASE1,\r
+ &gEfiImageSecurityDatabaseGuid,\r
+ Attr,\r
+ DataSize,\r
+ Data\r
+ );\r
+ if (EFI_ERROR (Status)) {\r
+ goto ON_EXIT;\r
+ }\r
+\r
+ON_EXIT:\r
+\r
+ CloseEnrolledFile(Private->FileContext);\r
+\r
+ if (Private->SignatureGUID != NULL) {\r
+ FreePool (Private->SignatureGUID);\r
+ Private->SignatureGUID = NULL;\r
+ }\r
+\r
+ if (Data != NULL) {\r
+ FreePool (Data);\r
+ }\r
+\r
+ if (SignatureData != NULL) {\r
+ FreePool (SignatureData);\r
+ }\r
+\r
+ if (X509Data != NULL) {\r
+ FreePool (X509Data);\r
+ }\r
+\r
+ return Status;\r
+}\r
+\r
+/**\r
+ Check whether a certificate from a file exists in dbx.\r
+\r
+ @param[in] PrivateData The module's private data.\r
+ @param[in] VariableName Variable name of signature database, must be\r
+ EFI_IMAGE_SECURITY_DATABASE1.\r
+\r
+ @retval TRUE The X509 certificate is found in dbx successfully.\r
+ @retval FALSE The X509 certificate is not found in dbx.\r
+**/\r
+BOOLEAN\r
+IsX509CertInDbx (\r
+ IN SECUREBOOT_CONFIG_PRIVATE_DATA *Private,\r
+ IN CHAR16 *VariableName\r
+ )\r
+{\r
+ EFI_STATUS Status;\r
+ UINTN X509DataSize;\r
+ VOID *X509Data;\r
+ BOOLEAN IsFound;\r
+\r
+ //\r
+ // Read the certificate from file\r
+ //\r
+ X509DataSize = 0;\r
+ X509Data = NULL;\r
+ Status = ReadFileContent (\r
+ Private->FileContext->FHandle,\r
+ &X509Data,\r
+ &X509DataSize,\r
+ 0\r
+ );\r
+ if (EFI_ERROR (Status)) {\r
+ return FALSE;\r
+ }\r
+\r
+ //\r
+ // Check the raw certificate.\r
+ //\r
+ IsFound = FALSE;\r
+ if (IsSignatureFoundInDatabase (EFI_IMAGE_SECURITY_DATABASE1, X509Data, X509DataSize)) {\r
+ IsFound = TRUE;\r
+ goto ON_EXIT;\r
+ }\r
+\r
+ //\r
+ // Check the hash of certificate.\r
+ //\r
+ if (IsCertHashFoundInDbx (X509Data, X509DataSize)) {\r
+ IsFound = TRUE;\r
+ goto ON_EXIT;\r
+ }\r
+\r
+ON_EXIT:\r
+ if (X509Data != NULL) {\r
+ FreePool (X509Data);\r
+ }\r
+\r
+ return IsFound;\r
+}\r
+\r
+/**\r
+ Reads contents of a PE/COFF image in memory buffer.\r
+\r
+ Caution: This function may receive untrusted input.\r
+ PE/COFF image is external input, so this function will make sure the PE/COFF image content\r
+ read is within the image buffer.\r
+\r
+ @param FileHandle Pointer to the file handle to read the PE/COFF image.\r
+ @param FileOffset Offset into the PE/COFF image to begin the read operation.\r
+ @param ReadSize On input, the size in bytes of the requested read operation.\r
+ On output, the number of bytes actually read.\r
+ @param Buffer Output buffer that contains the data read from the PE/COFF image.\r
+\r
+ @retval EFI_SUCCESS The specified portion of the PE/COFF image was read and the size\r
+**/\r
+EFI_STATUS\r
+EFIAPI\r
+SecureBootConfigImageRead (\r
+ IN VOID *FileHandle,\r
+ IN UINTN FileOffset,\r
+ IN OUT UINTN *ReadSize,\r
+ OUT VOID *Buffer\r
+ )\r
+{\r
+ UINTN EndPosition;\r
+\r
+ if (FileHandle == NULL || ReadSize == NULL || Buffer == NULL) {\r
+ return EFI_INVALID_PARAMETER;\r
+ }\r
+\r
+ if (MAX_ADDRESS - FileOffset < *ReadSize) {\r
+ return EFI_INVALID_PARAMETER;\r
+ }\r
+\r
+ EndPosition = FileOffset + *ReadSize;\r
+ if (EndPosition > mImageSize) {\r
+ *ReadSize = (UINT32)(mImageSize - FileOffset);\r
+ }\r
+\r
+ if (FileOffset >= mImageSize) {\r
+ *ReadSize = 0;\r
+ }\r
+\r
+ CopyMem (Buffer, (UINT8 *)((UINTN) FileHandle + FileOffset), *ReadSize);\r
+\r
+ return EFI_SUCCESS;\r
+}\r
+\r
+/**\r
+ Load PE/COFF image information into internal buffer and check its validity.\r
+\r
+ @retval EFI_SUCCESS Successful\r
+ @retval EFI_UNSUPPORTED Invalid PE/COFF file\r
+ @retval EFI_ABORTED Serious error occurs, like file I/O error etc.\r
+\r
+**/\r
+EFI_STATUS\r
+LoadPeImage (\r
+ VOID\r
+ )\r
+{\r
+ EFI_IMAGE_DOS_HEADER *DosHdr;\r
+ EFI_IMAGE_NT_HEADERS32 *NtHeader32;\r
+ EFI_IMAGE_NT_HEADERS64 *NtHeader64;\r
+ PE_COFF_LOADER_IMAGE_CONTEXT ImageContext;\r
+ EFI_STATUS Status;\r
+\r
+ NtHeader32 = NULL;\r
+ NtHeader64 = NULL;\r
+\r
+ ZeroMem (&ImageContext, sizeof (ImageContext));\r
+ ImageContext.Handle = (VOID *) mImageBase;\r
+ ImageContext.ImageRead = (PE_COFF_LOADER_READ_FILE) SecureBootConfigImageRead;\r
+\r
+ //\r
+ // Get information about the image being loaded\r
+ //\r
+ Status = PeCoffLoaderGetImageInfo (&ImageContext);\r
+ if (EFI_ERROR (Status)) {\r
+ //\r
+ // The information can't be got from the invalid PeImage\r
+ //\r
+ DEBUG ((DEBUG_INFO, "SecureBootConfigDxe: PeImage invalid. \n"));\r
+ return Status;\r
+ }\r
+\r
+ //\r
+ // Read the Dos header\r
+ //\r
+ DosHdr = (EFI_IMAGE_DOS_HEADER*)(mImageBase);\r
+ if (DosHdr->e_magic == EFI_IMAGE_DOS_SIGNATURE)\r
+ {\r
+ //\r
+ // DOS image header is present,\r
+ // So read the PE header after the DOS image header\r
+ //\r
+ mPeCoffHeaderOffset = DosHdr->e_lfanew;\r
+ }\r
+ else\r
+ {\r
+ mPeCoffHeaderOffset = 0;\r
+ }\r
+\r
+ //\r
+ // Read PE header and check the signature validity and machine compatibility\r
+ //\r
+ NtHeader32 = (EFI_IMAGE_NT_HEADERS32*) (mImageBase + mPeCoffHeaderOffset);\r
+ if (NtHeader32->Signature != EFI_IMAGE_NT_SIGNATURE)\r
+ {\r
+ return EFI_UNSUPPORTED;\r
+ }\r
+\r
+ mNtHeader.Pe32 = NtHeader32;\r
+\r
+ //\r
+ // Check the architecture field of PE header and get the Certificate Data Directory data\r
+ // Note the size of FileHeader field is constant for both IA32 and X64 arch\r
+ //\r
+ if ((NtHeader32->FileHeader.Machine == EFI_IMAGE_MACHINE_IA32)\r
+ || (NtHeader32->FileHeader.Machine == EFI_IMAGE_MACHINE_EBC)\r
+ || (NtHeader32->FileHeader.Machine == EFI_IMAGE_MACHINE_ARMTHUMB_MIXED)) {\r
+ //\r
+ // 32-bits Architecture\r
+ //\r
+ mImageType = ImageType_IA32;\r
+ mSecDataDir = (EFI_IMAGE_SECURITY_DATA_DIRECTORY*) &(NtHeader32->OptionalHeader.DataDirectory[EFI_IMAGE_DIRECTORY_ENTRY_SECURITY]);\r
+ }\r
+ else if ((NtHeader32->FileHeader.Machine == EFI_IMAGE_MACHINE_IA64)\r
+ || (NtHeader32->FileHeader.Machine == EFI_IMAGE_MACHINE_X64)\r
+ || (NtHeader32->FileHeader.Machine == EFI_IMAGE_MACHINE_AARCH64)) {\r
+ //\r
+ // 64-bits Architecture\r
+ //\r
+ mImageType = ImageType_X64;\r
+ NtHeader64 = (EFI_IMAGE_NT_HEADERS64 *) (mImageBase + mPeCoffHeaderOffset);\r
+ mSecDataDir = (EFI_IMAGE_SECURITY_DATA_DIRECTORY*) &(NtHeader64->OptionalHeader.DataDirectory[EFI_IMAGE_DIRECTORY_ENTRY_SECURITY]);\r
+ } else {\r
+ return EFI_UNSUPPORTED;\r
+ }\r
+\r
+ return EFI_SUCCESS;\r
+}\r
+\r
+/**\r
+ Calculate hash of Pe/Coff image based on the authenticode image hashing in\r
+ PE/COFF Specification 8.0 Appendix A\r
+\r
+ Notes: PE/COFF image has been checked by BasePeCoffLib PeCoffLoaderGetImageInfo() in \r
+ the function LoadPeImage ().\r
+\r
+ @param[in] HashAlg Hash algorithm type.\r
+\r
+ @retval TRUE Successfully hash image.\r
+ @retval FALSE Fail in hash image.\r
+\r
+**/\r
+BOOLEAN\r
+HashPeImage (\r
+ IN UINT32 HashAlg\r
+ )\r
+{\r
+ BOOLEAN Status;\r
+ UINT16 Magic;\r
+ EFI_IMAGE_SECTION_HEADER *Section;\r
+ VOID *HashCtx;\r
+ UINTN CtxSize;\r
+ UINT8 *HashBase;\r
+ UINTN HashSize;\r
+ UINTN SumOfBytesHashed;\r
+ EFI_IMAGE_SECTION_HEADER *SectionHeader;\r
+ UINTN Index;\r
+ UINTN Pos;\r
+\r
+ HashCtx = NULL;\r
+ SectionHeader = NULL;\r
+ Status = FALSE;\r
+\r
+ if (HashAlg != HASHALG_SHA256) {\r
+ return FALSE;\r
+ }\r
+\r
+ //\r
+ // Initialize context of hash.\r
+ //\r
+ ZeroMem (mImageDigest, MAX_DIGEST_SIZE);\r
+\r
+ mImageDigestSize = SHA256_DIGEST_SIZE;\r
+ mCertType = gEfiCertSha256Guid;\r
+\r
+ CtxSize = mHash[HashAlg].GetContextSize();\r
+\r
+ HashCtx = AllocatePool (CtxSize);\r
+ ASSERT (HashCtx != NULL);\r
+\r
+ // 1. Load the image header into memory.\r
+\r
+ // 2. Initialize a SHA hash context.\r
+ Status = mHash[HashAlg].HashInit(HashCtx);\r
+ if (!Status) {\r
+ goto Done;\r
+ }\r
+ //\r
+ // Measuring PE/COFF Image Header;\r
+ // But CheckSum field and SECURITY data directory (certificate) are excluded\r
+ //\r
+ if (mNtHeader.Pe32->FileHeader.Machine == IMAGE_FILE_MACHINE_IA64 && mNtHeader.Pe32->OptionalHeader.Magic == EFI_IMAGE_NT_OPTIONAL_HDR32_MAGIC) {\r
+ //\r
+ // NOTE: Some versions of Linux ELILO for Itanium have an incorrect magic value\r
+ // in the PE/COFF Header. If the MachineType is Itanium(IA64) and the\r
+ // Magic value in the OptionalHeader is EFI_IMAGE_NT_OPTIONAL_HDR32_MAGIC\r
+ // then override the magic value to EFI_IMAGE_NT_OPTIONAL_HDR64_MAGIC\r
+ //\r
+ Magic = EFI_IMAGE_NT_OPTIONAL_HDR64_MAGIC;\r
+ } else {\r
+ //\r
+ // Get the magic value from the PE/COFF Optional Header\r
+ //\r
+ Magic = mNtHeader.Pe32->OptionalHeader.Magic;\r
+ }\r
+\r
+ //\r
+ // 3. Calculate the distance from the base of the image header to the image checksum address.\r
+ // 4. Hash the image header from its base to beginning of the image checksum.\r
+ //\r
+ HashBase = mImageBase;\r
+ if (Magic == EFI_IMAGE_NT_OPTIONAL_HDR32_MAGIC) {\r
+ //\r
+ // Use PE32 offset.\r
+ //\r
+ HashSize = (UINTN) (&mNtHeader.Pe32->OptionalHeader.CheckSum) - (UINTN) HashBase;\r
+ } else {\r
+ //\r