coreboot/src/security/vboot
Aseda Aboagye 3c79777cd6 vboot/secdata_mock: Make v0 kernel secdata context
The new kernel secdata v1 stores the last read EC hash, and reboots the
device during EC software sync when that hash didn't match the currently
active hash on the EC (this is used with TPM_CR50 to support EC-EFS2 and
pretty much a no-op for other devices). Generally, of course the whole
point of secdata is always that it persists across reboots, but with
MOCK_SECDATA we can't do that. Previously we always happened to somewhat
get away with presenting freshly-reinitialized data for MOCK_SECDATA on
every boot, but with the EC hash feature in secdata v1, that would cause
a reboot loop. The simplest solution is to just pretend we're a secdata
v0 device when using MOCK_SECDATA.

This was encountered on using a firmware built with MOCK_SECDATA but had
EC software sync enabled.

BUG=b:187843114
BRANCH=None
TEST=`USE=mocktpm cros build-ap -b keeby`; Flash keeby device, verify
that DUT does not continuously reboot with EC software sync enabled.

Signed-off-by: Aseda Aboagye <aaboagye@google.com>
Change-Id: Id8e81afcddadf27d9eec274f7f85ff1520315aaa
Reviewed-on: https://review.coreboot.org/c/coreboot/+/54304
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Julius Werner <jwerner@chromium.org>
2021-05-18 15:30:47 +00:00
..
antirollback.h security/vboot: Add new TPM NVRAM index MRC_RW_HASH_NV_INDEX 2020-10-20 23:25:50 +00:00
bootmode.c security/vboot/bootmode: Add weak fill_lb_gpios 2021-02-09 20:43:12 +00:00
common.c src/security: Remove unused <console/console.h> 2021-02-15 10:49:53 +00:00
ec_sync.c vboot: ec_sync: Switch to new CBFS API 2021-04-14 01:03:22 +00:00
Kconfig cbfs: Increase mcache size defaults 2021-05-14 00:35:46 +00:00
Makefile.inc security/vboot: Include fspt.bin in the RO region only 2021-05-04 21:31:47 +00:00
misc.h src/security: Drop unneeded empty lines 2020-09-21 16:26:17 +00:00
mrc_cache_hash_tpm.c mrc_cache: Add tpm_hash_index field to cache_region struct 2020-10-20 23:26:01 +00:00
mrc_cache_hash_tpm.h security/vboot: Make mrc_cache hash functions generic 2020-10-20 23:25:39 +00:00
secdata_mock.c vboot/secdata_mock: Make v0 kernel secdata context 2021-05-18 15:30:47 +00:00
secdata_tpm.c vboot/secdata_tpm: Create FWMP space in coreboot 2021-05-16 21:54:24 +00:00
symbols.h
tpm_common.c security: vboot: Clarify PCR extension algorithms/sizes 2021-03-30 21:07:56 +00:00
tpm_common.h
vbnv.c
vbnv.h
vbnv_cmos.c coreboot_table: Move VBOOT_VBNV support 2021-02-04 08:43:39 +00:00
vbnv_ec.c
vbnv_flash.c
vbnv_layout.h
vboot_common.c src: Remove unused 'include <boot_device.h>' 2020-08-18 12:15:10 +00:00
vboot_common.h cbfs: Add metadata cache 2020-11-21 10:43:53 +00:00
vboot_lib.c src: Change BOOL CONFIG_ to CONFIG() in comments & strings 2020-07-26 21:20:30 +00:00
vboot_loader.c cbfs: Remove prog_locate() for stages and rmodules 2021-03-16 21:45:34 +00:00
vboot_logic.c src: Add missing 'include <console/console.h>' 2020-11-17 09:01:14 +00:00
verstage.c verstage: Add debug print when returning from verstage 2021-04-06 07:49:43 +00:00