SecurityPkg: Clean up source files

[mirror_edk2.git] / SecurityPkg / Library / DxeImageAuthenticationStatusLib / DxeImageAuthenticationStatusLib.c

/** @file\r
  Implement image authentication status check in UEFI2.3.1.\r
\r
Copyright (c) 2012 - 2018, Intel Corporation. All rights reserved.<BR>\r
This program and the accompanying materials\r
are licensed and made available under the terms and conditions of the BSD License\r
which accompanies this distribution.  The full text of the license may be found at\r
http://opensource.org/licenses/bsd-license.php\r
\r
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,\r
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r
\r
**/\r
\r
#include <PiDxe.h>\r
#include <Library/SecurityManagementLib.h>\r
\r
\r
/**\r
  Check image authentication status returned from Section Extraction Protocol\r
\r
  @param[in]    AuthenticationStatus  This is the authentication status returned from\r
                             the Section Extraction Protocol when reading the input file.\r
  @param[in]    File       This is a pointer to the device path of the file that is\r
                           being dispatched. This will optionally be used for logging.\r
  @param[in]    FileBuffer File buffer matches the input file device path.\r
  @param[in]    FileSize   Size of File buffer matches the input file device path.\r
  @param[in]    BootPolicy A boot policy that was used to call LoadImage() UEFI service.\r
\r
  @retval EFI_SUCCESS            The input file specified by File did authenticate, and the\r
                                 platform policy dictates that the DXE Core may use File.\r
  @retval EFI_ACCESS_DENIED      The file specified by File and FileBuffer did not\r
                                 authenticate, and the platform policy dictates that the DXE\r
                                 Foundation many not use File.\r
\r
**/\r
EFI_STATUS\r
EFIAPI\r
DxeImageAuthenticationStatusHandler (\r
  IN  UINT32                           AuthenticationStatus,\r
  IN  CONST EFI_DEVICE_PATH_PROTOCOL   *File,\r
  IN  VOID                             *FileBuffer,\r
  IN  UINTN                            FileSize,\r
  IN  BOOLEAN                          BootPolicy\r
  )\r
{\r
  if ((AuthenticationStatus & EFI_AUTH_STATUS_IMAGE_SIGNED) != 0) {\r
    if ((AuthenticationStatus & (EFI_AUTH_STATUS_TEST_FAILED | EFI_AUTH_STATUS_NOT_TESTED)) != 0) {\r
      return EFI_ACCESS_DENIED;\r
    }\r
  }\r
\r
  return EFI_SUCCESS;\r
}\r
\r
\r
/**\r
  Register image authenticaion status check handler.\r
\r
  @param  ImageHandle   ImageHandle of the loaded driver.\r
  @param  SystemTable   Pointer to the EFI System Table.\r
\r
  @retval EFI_SUCCESS   The handlers were registered successfully.\r
**/\r
EFI_STATUS\r
EFIAPI\r
DxeImageAuthenticationStatusLibConstructor (\r
  IN EFI_HANDLE        ImageHandle,\r
  IN EFI_SYSTEM_TABLE  *SystemTable\r
  )\r
{\r
  return RegisterSecurity2Handler (\r
           DxeImageAuthenticationStatusHandler,\r
           EFI_AUTH_OPERATION_AUTHENTICATION_STATE\r
           );\r
}\r