init

hc

2024-03-22 a0752693d998599af469473b8dc239ef973a012f

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
/** @file 
 
Copyright (c) 2017 - 2019, Intel Corporation. All rights reserved.<BR> 
SPDX-License-Identifier: BSD-2-Clause-Patent 
 
**/ 
 
#include <Uefi.h> 
#include <PiDxe.h> 
#include <Library/TestPointCheckLib.h> 
#include <Library/TestPointLib.h> 
#include <Library/DebugLib.h> 
#include <Library/UefiLib.h> 
#include <Library/PrintLib.h> 
#include <Library/MemoryAllocationLib.h> 
#include <Guid/GlobalVariable.h> 
#include <Guid/ImageAuthentication.h> 
 
typedef struct { 
  CHAR16     *Name; 
  EFI_GUID   *Guid; 
  UINT8      ExpectedSize; 
  UINT8      ExpectedData; 
} VARIABLE_LIST; 
 
VARIABLE_LIST mUefiSecureBootVariable[] = { 
  {EFI_PLATFORM_KEY_NAME,        &gEfiGlobalVariableGuid}, 
  {EFI_KEY_EXCHANGE_KEY_NAME,    &gEfiGlobalVariableGuid}, 
  {EFI_IMAGE_SECURITY_DATABASE,  &gEfiImageSecurityDatabaseGuid}, 
  {EFI_IMAGE_SECURITY_DATABASE1, &gEfiImageSecurityDatabaseGuid}, 
}; 
 
VARIABLE_LIST mUefiSecureBootModeVariable[] = { 
  {EFI_SECURE_BOOT_MODE_NAME, &gEfiGlobalVariableGuid, sizeof(UINT8), 1}, 
  {EFI_SETUP_MODE_NAME,       &gEfiGlobalVariableGuid, sizeof(UINT8), 0}, 
}; 
 
EFI_STATUS 
EFIAPI 
TestPointCheckUefiSecureBoot ( 
  VOID 
  ) 
{ 
  VOID        *Variable; 
  UINTN       Size; 
  UINTN       Index; 
  EFI_STATUS  Status; 
  EFI_STATUS  ReturnStatus; 
 
  DEBUG ((DEBUG_INFO, "==== TestPointCheckUefiSecureBoot - Enter\n")); 
 
  ReturnStatus = EFI_SUCCESS; 
  for (Index = 0; Index < sizeof(mUefiSecureBootVariable)/sizeof(mUefiSecureBootVariable[0]); Index++) { 
    Status = GetVariable2 (mUefiSecureBootVariable[Index].Name, mUefiSecureBootVariable[Index].Guid, &Variable, &Size); 
    if(Variable == NULL) { 
      return EFI_NOT_FOUND; 
    } 
    if (EFI_ERROR(Status)) { 
      DEBUG ((DEBUG_ERROR, "Variable - %S not found\n", mUefiSecureBootVariable[Index].Name)); 
      ReturnStatus = Status; 
      TestPointLibAppendErrorString ( 
        PLATFORM_TEST_POINT_ROLE_PLATFORM_IBV, 
        NULL, 
        TEST_POINT_BYTE5_READY_TO_BOOT_UEFI_SECURE_BOOT_ENABLED_ERROR_CODE \ 
          TEST_POINT_READY_TO_BOOT \ 
          TEST_POINT_BYTE5_READY_TO_BOOT_UEFI_SECURE_BOOT_ENABLED_ERROR_STRING 
        ); 
    } else { 
      FreePool (Variable); 
    } 
  } 
 
  for (Index = 0; Index < sizeof(mUefiSecureBootModeVariable)/sizeof(mUefiSecureBootModeVariable[0]); Index++) { 
    Status = GetVariable2 (mUefiSecureBootModeVariable[Index].Name, mUefiSecureBootModeVariable[Index].Guid, &Variable, &Size); 
    if(Variable == NULL) { 
      return EFI_NOT_FOUND; 
    } 
    if (EFI_ERROR(Status)) { 
      DEBUG ((DEBUG_ERROR, "Variable - %S not found\n", mUefiSecureBootModeVariable[Index].Name)); 
      ReturnStatus = Status; 
      TestPointLibAppendErrorString ( 
        PLATFORM_TEST_POINT_ROLE_PLATFORM_IBV, 
        NULL, 
        TEST_POINT_BYTE5_READY_TO_BOOT_UEFI_SECURE_BOOT_ENABLED_ERROR_CODE \ 
          TEST_POINT_READY_TO_BOOT \ 
          TEST_POINT_BYTE5_READY_TO_BOOT_UEFI_SECURE_BOOT_ENABLED_ERROR_STRING 
        ); 
    } else { 
      if ((Size != mUefiSecureBootModeVariable[Index].ExpectedSize) || 
          (*(UINT8 *)Variable != mUefiSecureBootModeVariable[Index].ExpectedData)) { 
        DEBUG ((DEBUG_ERROR, "Variable - %S is not expected (0x%x)\n", mUefiSecureBootModeVariable[Index].Name, *(UINT8 *)Variable)); 
        ReturnStatus = EFI_SECURITY_VIOLATION; 
        TestPointLibAppendErrorString ( 
          PLATFORM_TEST_POINT_ROLE_PLATFORM_IBV, 
          NULL, 
          TEST_POINT_BYTE5_READY_TO_BOOT_UEFI_SECURE_BOOT_ENABLED_ERROR_CODE \ 
            TEST_POINT_READY_TO_BOOT \ 
            TEST_POINT_BYTE5_READY_TO_BOOT_UEFI_SECURE_BOOT_ENABLED_ERROR_STRING 
          ); 
      } 
      FreePool (Variable); 
    } 
  } 
 
  DEBUG ((DEBUG_INFO, "==== TestPointCheckUefiSecureBoot - Exit\n")); 
  return ReturnStatus; 
}