|
VBoot Reference: Add version checking to for preventing rollbacks.
This CL adds a new function VerifyFirmwareDriver_f() means to be a part of the RO firmware which determine which copy of the firmware to boot from. It is meant to ensure that a particular firmware is only booted if 1) it verifies successfully, 2) its version is newer or equal to current stored version. In addition, the driver function also updates the stored version if needed.
Currently I am using the TLCL API with stub calls, (in fact, most of the TPM interaction is done in rollback_index.c which implements the actual version query/update API) used by the firmware.
Total comments: 42
Total comments: 1
Total comments: 15
|
Unified diffs |
Side-by-side diffs |
Delta from patch set |
Stats (+726 lines, -82 lines) |
Patch |
 |
M |
src/platform/vboot_reference/common/Makefile
|
View
|
|
1 chunk |
+2 lines, -2 lines |
0 comments
|
Download
|
 |
A |
src/platform/vboot_reference/common/tlcl_stub.c
|
View
|
1
|
1 chunk |
+28 lines, -0 lines |
0 comments
|
Download
|
 |
M |
src/platform/vboot_reference/include/firmware_image.h
|
View
|
1
2
|
3 chunks |
+27 lines, -2 lines |
0 comments
|
Download
|
 |
A |
src/platform/vboot_reference/include/rollback_index.h
|
View
|
|
1 chunk |
+36 lines, -0 lines |
0 comments
|
Download
|
 |
M |
src/platform/vboot_reference/include/utility.h
|
View
|
1
|
1 chunk |
+8 lines, -0 lines |
0 comments
|
Download
|
 |
M |
src/platform/vboot_reference/tests/Makefile
|
View
|
1
2
3
|
2 chunks |
+31 lines, -20 lines |
0 comments
|
Download
|
 |
M |
src/platform/vboot_reference/tests/firmware_image_tests.c
|
View
|
2
3
4
|
8 chunks |
+39 lines, -29 lines |
0 comments
|
Download
|
 |
A |
src/platform/vboot_reference/tests/firmware_rollback_tests.c
|
View
|
2
3
4
|
1 chunk |
+145 lines, -0 lines |
0 comments
|
Download
|
 |
A |
src/platform/vboot_reference/tests/rollback_index_mock.c
|
View
|
|
1 chunk |
+61 lines, -0 lines |
0 comments
|
Download
|
 |
A |
src/platform/vboot_reference/tests/test_common.h
|
View
|
|
1 chunk |
+13 lines, -0 lines |
0 comments
|
Download
|
 |
A |
src/platform/vboot_reference/tests/test_common.c
|
View
|
|
1 chunk |
+30 lines, -0 lines |
0 comments
|
Download
|
 |
M |
src/platform/vboot_reference/utils/Makefile
|
View
|
1
|
2 chunks |
+10 lines, -8 lines |
0 comments
|
Download
|
 |
M |
src/platform/vboot_reference/utils/firmware_image.c
|
View
|
1
2
|
12 chunks |
+148 lines, -21 lines |
0 comments
|
Download
|
 |
A |
src/platform/vboot_reference/utils/rollback_index.c
|
View
|
1
|
1 chunk |
+148 lines, -0 lines |
0 comments
|
Download
|
Total messages: 15 (0 generated)
|