MdePkg: Update MorLock comment to latest doc.

Microsoft updated secure MOR lock document with version 2.
So we update comment here.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: "Yao, Jiewen" <jiewen.yao@intel.com>
Reviewed: "Zhang, Chao B" <chao.b.zhang@intel.com>

git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@19687 6f19259b-4bc3-4df7-8a09-765794883524

diff --git a/MdePkg/Include/IndustryStandard/MemoryOverwriteRequestControlLock.h b/MdePkg/Include/IndustryStandard/MemoryOverwriteRequestControlLock.h
index 771306b88298ee3331098faaf2b100c8de29abba..8a34731396731c29a38976c3c2b1e8b5621a8914 100644 (file)
--- a/MdePkg/Include/IndustryStandard/MemoryOverwriteRequestControlLock.h
+++ b/MdePkg/Include/IndustryStandard/MemoryOverwriteRequestControlLock.h
@@ -3,7 +3,7 @@
   Microsoft Secure MOR implementation.\r
   https://msdn.microsoft.com/en-us/library/windows/hardware/mt270973(v=vs.85).aspx\r
 \r
-  Copyright (c) 2015, Intel Corporation. All rights reserved.<BR>\r
+  Copyright (c) 2015 - 2016, Intel Corporation. All rights reserved.<BR>\r
   This program and the accompanying materials\r
   are licensed and made available under the terms and conditions of the BSD License\r
   which accompanies this distribution.  The full text of the license may be found at\r
@@ -28,14 +28,14 @@
 // VendorGuid: {BB983CCF-151D-40E1-A07B-4A17BE168292}\r
 // Name:       MemoryOverwriteRequestControlLock\r
 // Attributes: NV+BS+RT\r
-// Size:       0x1 byte\r
+// GetVariable value in Data parameter: 0x0 (unlocked); 0x1 (locked without key); 0x2 (locked with key)\r
+// SetVariable value in Data parameter: 0x0 (unlocked); 0x1 (locked);\r
+//                                      Revision 2 additionally accepts an 8-byte value that represents a shared secret key.\r
 //\r
-// The BIOS initializes MemoryOverwriteRequestControlLock to a value of 0x00\r
-// before BDS (BOOT#### processing). When the OS loader calls SetVariable by\r
-// specifying 0x01, the access mode for both MemoryOverwriteRequestControlLock\r
-// and MemoryOverwriteRequestControl is changed to read-only. If any other\r
-// value is specified in the SetVariable call, it fails with the \r
-// EFI_INVALID_PARAMETER error code.\r
+\r
+//\r
+// Note: Setting MemoryOverwriteRequestControlLock does not commit to flash (just changes the internal lock state).\r
+// Getting the variable returns the internal state and never exposes the key.\r
 //\r
 \r
 extern EFI_GUID gEfiMemoryOverwriteRequestControlLockGuid;\r