UefiCpuPkg: Move AsmRelocateApLoopStart from Mpfuncs.nasm to AmdSev.nasm

[mirror_edk2.git] / SecurityPkg / Library / DxeImageAuthenticationStatusLib / DxeImageAuthenticationStatusLib.c

/** @file\r
  Implement image authentication status check in UEFI2.3.1.\r
\r
Copyright (c) 2012 - 2018, Intel Corporation. All rights reserved.<BR>\r
SPDX-License-Identifier: BSD-2-Clause-Patent\r
\r
**/\r
\r
#include <PiDxe.h>\r
#include <Library/SecurityManagementLib.h>\r
\r
/**\r
  Check image authentication status returned from Section Extraction Protocol\r
\r
  @param[in]    AuthenticationStatus  This is the authentication status returned from\r
                             the Section Extraction Protocol when reading the input file.\r
  @param[in]    File       This is a pointer to the device path of the file that is\r
                           being dispatched. This will optionally be used for logging.\r
  @param[in]    FileBuffer File buffer matches the input file device path.\r
  @param[in]    FileSize   Size of File buffer matches the input file device path.\r
  @param[in]    BootPolicy A boot policy that was used to call LoadImage() UEFI service.\r
\r
  @retval EFI_SUCCESS            The input file specified by File did authenticate, and the\r
                                 platform policy dictates that the DXE Core may use File.\r
  @retval EFI_ACCESS_DENIED      The file specified by File and FileBuffer did not\r
                                 authenticate, and the platform policy dictates that the DXE\r
                                 Foundation many not use File.\r
\r
**/\r
EFI_STATUS\r
EFIAPI\r
DxeImageAuthenticationStatusHandler (\r
  IN  UINT32                          AuthenticationStatus,\r
  IN  CONST EFI_DEVICE_PATH_PROTOCOL  *File  OPTIONAL,\r
  IN  VOID                            *FileBuffer,\r
  IN  UINTN                           FileSize,\r
  IN  BOOLEAN                         BootPolicy\r
  )\r
{\r
  if ((AuthenticationStatus & EFI_AUTH_STATUS_IMAGE_SIGNED) != 0) {\r
    if ((AuthenticationStatus & (EFI_AUTH_STATUS_TEST_FAILED | EFI_AUTH_STATUS_NOT_TESTED)) != 0) {\r
      return EFI_ACCESS_DENIED;\r
    }\r
  }\r
\r
  return EFI_SUCCESS;\r
}\r
\r
/**\r
  Register image authentication status check handler.\r
\r
  @param  ImageHandle   ImageHandle of the loaded driver.\r
  @param  SystemTable   Pointer to the EFI System Table.\r
\r
  @retval EFI_SUCCESS   The handlers were registered successfully.\r
**/\r
EFI_STATUS\r
EFIAPI\r
DxeImageAuthenticationStatusLibConstructor (\r
  IN EFI_HANDLE        ImageHandle,\r
  IN EFI_SYSTEM_TABLE  *SystemTable\r
  )\r
{\r
  return RegisterSecurity2Handler (\r
           DxeImageAuthenticationStatusHandler,\r
           EFI_AUTH_OPERATION_AUTHENTICATION_STATE\r
           );\r
}\r