X-Git-Url: https://git.proxmox.com/?p=mirror_edk2.git;a=blobdiff_plain;f=SecurityPkg%2FVariableAuthenticated%2FRuntimeDxe%2FVariableRuntimeDxe.inf;h=a05c048494b9d76b187215a61e9fc397e868c903;hp=d2a2025b66f46e7596cb2d6c9b9b1887245ddc99;hb=4345d16427c4b88e2c4183b38eefb7015bc36bcf;hpb=beda2356f5128efa4461046f882b6516ece6afc7 diff --git a/SecurityPkg/VariableAuthenticated/RuntimeDxe/VariableRuntimeDxe.inf b/SecurityPkg/VariableAuthenticated/RuntimeDxe/VariableRuntimeDxe.inf index d2a2025b66..a05c048494 100644 --- a/SecurityPkg/VariableAuthenticated/RuntimeDxe/VariableRuntimeDxe.inf +++ b/SecurityPkg/VariableAuthenticated/RuntimeDxe/VariableRuntimeDxe.inf @@ -1,7 +1,12 @@ ## @file # Component description file for Authenticated Variable module. # -# Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.
+# Caution: This module requires additional review when modified. +# This driver will have external input - variable data. +# This external input must be validated carefully to avoid security issue like +# buffer overflow, integer overflow. +# +# Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.
# This program and the accompanying materials # are licensed and made available under the terms and conditions of the BSD License # which accompanies this distribution. The full text of the license may be found at @@ -13,7 +18,7 @@ [Defines] INF_VERSION = 0x00010005 - BASE_NAME = VariableRuntimeDxe + BASE_NAME = VariableAuthRuntimeDxe FILE_GUID = 2226F30F-3D5B-402d-9936-A97184EB4516 MODULE_TYPE = DXE_RUNTIME_DRIVER VERSION_STRING = 1.0 @@ -34,6 +39,7 @@ Variable.h AuthService.c AuthService.h + Measurement.c [Packages] MdePkg/MdePkg.dec @@ -56,23 +62,32 @@ BaseCryptLib PlatformSecureLib HobLib + TpmMeasurementLib [Protocols] gEfiFirmwareVolumeBlockProtocolGuid ## SOMETIMES_CONSUMES gEfiVariableWriteArchProtocolGuid ## ALWAYS_PRODUCES gEfiVariableArchProtocolGuid ## ALWAYS_PRODUCES gEfiFaultTolerantWriteProtocolGuid ## SOMETIMES_CONSUMES + gEdkiiVariableLockProtocolGuid ## ALWAYS_PRODUCES [Guids] - gEfiAuthenticatedVariableGuid ## PRODUCES ## Configuration Table Guid + gEfiAuthenticatedVariableGuid ## PRODUCES ## Configuration Table Guid gEfiGlobalVariableGuid ## PRODUCES ## Variable Guid - gEfiEventVirtualAddressChangeGuid ## PRODUCES ## Event - gEfiCertRsa2048Sha256Guid + gEfiEventVirtualAddressChangeGuid ## CONSUMES ## Event + gEfiCertTypeRsa2048Sha256Guid gEfiImageSecurityDatabaseGuid gEfiCertX509Guid gEfiCertPkcs7Guid gEfiCertRsa2048Guid gEfiSecureBootEnableDisableGuid + gEfiCustomModeEnableGuid + gEfiVendorKeysNvGuid + gEfiSystemNvDataFvGuid ## CONSUMES + gEfiCertDbGuid + gEfiHardwareErrorVariableGuid ## SOMETIMES_CONSUMES + gEfiEndOfDxeEventGroupGuid ## CONSUMES ## Event + gEdkiiFaultTolerantWriteGuid ## CONSUMES [Pcd] gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize @@ -82,13 +97,12 @@ gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize - gEfiSecurityPkgTokenSpaceGuid.PcdMaxAppendVariableSize - + [FeaturePcd] gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics ## SOMETIME_CONSUMES (statistic the information of variable.) [Depex] - gEfiFirmwareVolumeBlockProtocolGuid AND gEfiFaultTolerantWriteProtocolGuid + TRUE # [Event] # ## @@ -97,4 +111,4 @@ # EVENT_TYPE_NOTIFY_SIGNAL ## PRODUCES # # - +