With CBFS verification feature (CONFIG_VBOOT_CBFS_INTEGRATION) being enabled, we can now remove cbfs_unverified_area_map() APIs which are potential cause of security issues as they skip verification. These APIs were used earlier to skip verification and hence save boot time. With CBFS verification enabled, the files are verified only when being loaded so we can now use cbfs_cbmem_alloc()/cbfs_map function to load them. BUG=b:284382452 Change-Id: Ie0266e50463926b8d377825142afda7f44754eb7 Signed-off-by: Rizwan Qureshi <rizwan.qureshi@intel.com> Reviewed-on: https://review.coreboot.org/c/coreboot/+/78214 Reviewed-by: Jérémy Compostella <jeremy.compostella@intel.com> Tested-by: build bot (Jenkins) <no-reply@coreboot.org> Reviewed-by: Julius Werner <jwerner@chromium.org> Reviewed-by: Jamie Ryu <jamie.m.ryu@intel.com> |
||
|---|---|---|
| .. | ||
| acpi | ||
| basecode | ||
| block | ||
| pch | ||
| fsp_reset.c | ||
| hda_verb.c | ||
| hda_verb.h | ||
| Kconfig.common | ||
| Makefile.inc | ||
| mma.c | ||
| mma.h | ||
| nhlt.c | ||
| reset.c | ||
| reset.h | ||
| smbios.c | ||
| smbios.h | ||
| tpm_tis.c | ||
| vbt.c | ||
| vbt.h | ||