summary |
shortlog |
log |
commit | commitdiff |
tree
raw |
patch |
inline | side by side (from parent 1:
7623b4b)
https://bugzilla.tianocore.org/show_bug.cgi?id=4245
QEMU provides the following three files for guest to install the ACPI
tables:
- etc/acpi/rsdp
- etc/acpi/tables
- etc/table-loader
"etc/acpi/rsdp" and "etc/acpi/tables" are similar, they are only kept
separate because they have different allocation requirements in SeaBIOS.
Both of these fw_cfg files contain preformatted ACPI payload.
"etc/acpi/rsdp" contains only the RSDP table, while "etc/acpi/tables"
contains all other tables, concatenated. To be noted, the tables in these
two files have been filled in by qemu, but two kinds of fields are
incomplete: pointers to other tables and checksums (which depend on the
pointers).
"/etc/table-loader" is a linker/loader which provides the commands to
"patch" the tables in "etc/acpi/tables" and then install them. "Patch"
means to fill the pointers and compute the checksum.
From the security perspective these 3 files are the raw data downloaded
from qemu. They should be measured and extended before they're consumed.
Cc: Erdem Aktas <erdemaktas@google.com>
Cc: James Bottomley <jejb@linux.ibm.com>
Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Gerd Hoffmann <kraxel@redhat.com>
Cc: Tom Lendacky <thomas.lendacky@amd.com>
Cc: Michael Roth <michael.roth@amd.com>
Signed-off-by: Min Xu <min.m.xu@intel.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
Acked-by: Gerd Hoffmann <kraxel@redhat.com>
UefiBootServicesTableLib\r
UefiDriverEntryPoint\r
HobLib\r
UefiBootServicesTableLib\r
UefiDriverEntryPoint\r
HobLib\r
\r
[Protocols]\r
gEfiAcpiTableProtocolGuid # PROTOCOL ALWAYS_CONSUMED\r
\r
[Protocols]\r
gEfiAcpiTableProtocolGuid # PROTOCOL ALWAYS_CONSUMED\r
\r
#include <IndustryStandard/Acpi.h> // EFI_ACPI_DESCRIPTION_HEADER\r
#include <IndustryStandard/QemuLoader.h> // QEMU_LOADER_FNAME_SIZE\r
\r
#include <IndustryStandard/Acpi.h> // EFI_ACPI_DESCRIPTION_HEADER\r
#include <IndustryStandard/QemuLoader.h> // QEMU_LOADER_FNAME_SIZE\r
+#include <IndustryStandard/UefiTcgPlatform.h>\r
#include <Library/BaseLib.h> // AsciiStrCmp()\r
#include <Library/BaseMemoryLib.h> // CopyMem()\r
#include <Library/DebugLib.h> // DEBUG()\r
#include <Library/BaseLib.h> // AsciiStrCmp()\r
#include <Library/BaseMemoryLib.h> // CopyMem()\r
#include <Library/DebugLib.h> // DEBUG()\r
#include <Library/QemuFwCfgLib.h> // QemuFwCfgFindFile()\r
#include <Library/QemuFwCfgS3Lib.h> // QemuFwCfgS3Enabled()\r
#include <Library/UefiBootServicesTableLib.h> // gBS\r
#include <Library/QemuFwCfgLib.h> // QemuFwCfgFindFile()\r
#include <Library/QemuFwCfgS3Lib.h> // QemuFwCfgS3Enabled()\r
#include <Library/UefiBootServicesTableLib.h> // gBS\r
+#include <Library/TpmMeasurementLib.h>\r
\r
#include "AcpiPlatform.h"\r
\r
\r
#include "AcpiPlatform.h"\r
\r
(UINT64)Blob->Size,\r
(UINT64)(UINTN)Blob->Base\r
));\r
(UINT64)Blob->Size,\r
(UINT64)(UINTN)Blob->Base\r
));\r
+\r
+ //\r
+ // Measure the data which is downloaded from QEMU.\r
+ // It has to be done before it is consumed. Because the data will\r
+ // be updated in the following operations.\r
+ //\r
+ TpmMeasureAndLogData (\r
+ 1,\r
+ EV_PLATFORM_CONFIG_FLAGS,\r
+ EV_POSTCODE_INFO_ACPI_DATA,\r
+ ACPI_DATA_LEN,\r
+ (VOID *)(UINTN)Blob->Base,\r
+ Blob->Size\r
+ );\r
+\r
return EFI_SUCCESS;\r
\r
FreeBlob:\r
return EFI_SUCCESS;\r
\r
FreeBlob:\r
QemuFwCfgSelectItem (FwCfgItem);\r
QemuFwCfgReadBytes (FwCfgSize, LoaderStart);\r
RestorePciDecoding (OriginalPciAttributes, OriginalPciAttributesCount);\r
QemuFwCfgSelectItem (FwCfgItem);\r
QemuFwCfgReadBytes (FwCfgSize, LoaderStart);\r
RestorePciDecoding (OriginalPciAttributes, OriginalPciAttributesCount);\r
+\r
+ //\r
+ // Measure the "etc/table-loader" which is downloaded from QEMU.\r
+ // It has to be done before it is consumed. Because it would be\r
+ // updated in the following operations.\r
+ //\r
+ TpmMeasureAndLogData (\r
+ 1,\r
+ EV_PLATFORM_CONFIG_FLAGS,\r
+ EV_POSTCODE_INFO_ACPI_DATA,\r
+ ACPI_DATA_LEN,\r
+ (VOID *)(UINTN)LoaderStart,\r
+ FwCfgSize\r
+ );\r
+\r
LoaderEnd = LoaderStart + FwCfgSize / sizeof *LoaderEntry;\r
\r
AllocationsRestrictedTo32Bit = NULL;\r
LoaderEnd = LoaderStart + FwCfgSize / sizeof *LoaderEntry;\r
\r
AllocationsRestrictedTo32Bit = NULL;\r