Add tpm lite to vboot reference

firmware/lib/rollback_index.c

 /* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  *
  * Functions for querying, manipulating and locking rollback indices
  * stored in the TPM NVRAM.
  */
 
 #include "rollback_index.h"
 
@@ skipping 227 matching lines @@
  * previous boot.)  In recovery mode, we ignore the failure and continue, thus
  * giving the recovery kernel a chance to fix things (that's why we don't set
  * bGlobalLock).  The choice is between a knowingly insecure device and a
  * bricked device.
  *
  * As a side note, observe that we go through considerable hoops to avoid using
  * the STCLEAR permissions for the index spaces.  We do this to avoid writing
  * to the TPM flashram at every reboot or wake-up, because of concerns about
  * the durability of the NVRAM.
  */
-static uint32_t SetupTPM(int recovery_mode,
-                         int developer_mode) {
+uint32_t SetupTPM(int recovery_mode, int developer_mode) {
   uint8_t disable;
   uint8_t deactivated;
   uint32_t result;
 
   TlclLibInit();
   RETURN_ON_FAILURE(TlclStartup());
   RETURN_ON_FAILURE(TlclContinueSelfTest());
   RETURN_ON_FAILURE(TlclAssertPhysicalPresence());
   /* Checks that the TPM is enabled and activated. */
   RETURN_ON_FAILURE(TlclGetFlags(&disable, &deactivated));
@@ skipping 23 matching lines @@
   if (recovery_mode) {
     /* In recovery mode global variables are usable. */
     g_rollback_recovery_mode = 1;
   }
   return TPM_SUCCESS;
 }
 
 /* disable MSVC warnings on unused arguments */
 __pragma(warning (disable: 4100))
 
+
+#ifdef DISABLE_ROLLBACK_TPM
+
+/* Dummy implementations which don't call into the tpm_lite library */
+
+uint32_t RollbackFirmwareSetup(int developer_mode) {
+  return TPM_SUCCESS;
+}
+
+uint32_t RollbackFirmwareRead(uint16_t* key_version, uint16_t* version) {
+  *key_version = *version = 0;
+  return TPM_SUCCESS;
+}
+
+uint32_t RollbackFirmwareWrite(uint16_t key_version, uint16_t version) {
+  return TPM_SUCCESS;
+}
+
+uint32_t RollbackFirmwareLock(void) {
+  return TPM_SUCCESS;
+}
+
+uint32_t RollbackKernelRecovery(int developer_mode) {
+  return TPM_SUCCESS;
+}
+
+uint32_t RollbackKernelRead(uint16_t* key_version, uint16_t* version) {
+  *key_version = *version = 0;
+  return TPM_SUCCESS;
+}
+
+uint32_t RollbackKernelWrite(uint16_t key_version, uint16_t version) {
+  return TPM_SUCCESS;
+}
+
+uint32_t RollbackKernelLock(void) {
+  return TPM_SUCCESS;
+}
+
+#else
+
 uint32_t RollbackFirmwareSetup(int developer_mode) {
   return SetupTPM(0, developer_mode);
 }
 
 uint32_t RollbackFirmwareRead(uint16_t* key_version, uint16_t* version) {
   uint32_t firmware_versions;
   /* Gets firmware versions. */
   RETURN_ON_FAILURE(TlclRead(FIRMWARE_VERSIONS_NV_INDEX,
                              (uint8_t*) &firmware_versions,
                              sizeof(firmware_versions)));
@@ skipping 55 matching lines @@
   return TPM_SUCCESS;
 }
 
 uint32_t RollbackKernelLock(void) {
   if (!g_rollback_recovery_mode) {
     return TlclLockPhysicalPresence();
   } else {
     return TPM_SUCCESS;
   }
 }
+
+#endif // DISABLE_ROLLBACK_TPM