# Copyright (c) 2012 The Chromium OS Authors. All rights reserved.
|
# Use of this source code is governed by a BSD-style license that can be
|
# found in the LICENSE file.
|
|
# The constants of verified boot.
|
|
# Recovery reason codes, copied from:
|
# vboot_reference/firmware/include/vboot_nvstorage.h
|
# vboot_reference/firmware/include/vboot_struct.h
|
RECOVERY_REASON = {
|
# Recovery not requested
|
'NOT_REQUESTED': '0', # 0x00
|
# Recovery requested from legacy utility
|
'LEGACY': '1', # 0x01
|
# User manually requested recovery via recovery button
|
'RO_MANUAL': '2', # 0x02
|
# RW firmware failed signature check
|
'RO_INVALID_RW': '3', # 0x03
|
# S3 resume failed
|
'RO_S3_RESUME': '4', # 0x04
|
# TPM error in read-only firmware (deprecated)
|
'DEP_RO_TPM_ERROR': '5', # 0x05
|
# Shared data error in read-only firmware
|
'RO_SHARED_DATA': '6', # 0x06
|
# Test error from S3Resume()
|
'RO_TEST_S3': '7', # 0x07
|
# Test error from LoadFirmwareSetup()
|
'RO_TEST_LFS': '8', # 0x08
|
# Test error from LoadFirmware()
|
'RO_TEST_LF': '9', # 0x09
|
# RW firmware failed signature check
|
'RW_NOT_DONE': '16', # 0x10
|
'RW_DEV_MISMATCH': '17', # 0x11
|
'RW_REC_MISMATCH': '18', # 0x12
|
'RW_VERIFY_KEYBLOCK': '19', # 0x13
|
'RW_KEY_ROLLBACK': '20', # 0x14
|
'RW_DATA_KEY_PARSE': '21', # 0x15
|
'RW_VERIFY_PREAMBLE': '22', # 0x16
|
'RW_FW_ROLLBACK': '23', # 0x17
|
'RW_HEADER_VALID': '24', # 0x18
|
'RW_GET_FW_BODY': '25', # 0x19
|
'RW_HASH_WRONG_SIZE': '26', # 0x1A
|
'RW_VERIFY_BODY': '27', # 0x1B
|
'RW_VALID': '28', # 0x1C
|
# Read-only normal path requested by firmware preamble, but
|
# unsupported by firmware.
|
'RW_NO_RO_NORMAL': '29', # 0x1D
|
# Firmware boot failure outside of verified boot
|
'RO_FIRMWARE': '32', # 0x20
|
# Recovery mode TPM initialization requires a system reboot.
|
# The system was already in recovery mode for some other reason
|
# when this happened.
|
'RO_TPM_REBOOT': '33', # 0x21
|
# EC software sync - other error
|
'EC_SOFTWARE_SYNC': '34', # 0x22
|
# EC software sync - unable to determine active EC image
|
'EC_UNKNOWN_IMAGE': '35', # 0x23
|
# EC software sync - error obtaining EC image hash (deprecated)
|
'DEP_EC_HASH': '36', # 0x24
|
# EC software sync - error obtaining expected EC image
|
'EC_EXPECTED_IMAGE': '37', # 0x25
|
# EC software sync - error updating EC
|
'EC_UPDATE': '38', # 0x26
|
# EC software sync - unable to jump to EC-RW
|
'EC_JUMP_RW': '39', # 0x27
|
# EC software sync - unable to protect / unprotect EC-RW
|
'EC_PROTECT': '40', # 0x28
|
# Unspecified/unknown error in read-only firmware
|
'RO_UNSPECIFIED': '63', # 0x3F
|
# User manually requested recovery by pressing a key at developer
|
# warning screen.
|
'RW_DEV_SCREEN': '65', # 0x41
|
# No OS kernel detected
|
'RW_NO_OS': '66', # 0x42
|
# OS kernel failed signature check
|
'RW_INVALID_OS': '67', # 0x43
|
# TPM error in rewritable firmware (deprecated)
|
'DEP_RW_TPM_ERROR': '68', # 0x44
|
# RW firmware in dev mode, but dev switch is off.
|
'RW_DEV_MISMATCH': '69', # 0x45
|
# Shared data error in rewritable firmware
|
'RW_SHARED_DATA': '70', # 0x46
|
# Test error from LoadKernel()
|
'RW_TEST_LK': '71', # 0x47
|
# No bootable disk found (deprecated)
|
'DEP_RW_NO_DISK': '72', # 0x48
|
# Rebooting did not correct TPM_E_FAIL or TPM_E_FAILEDSELFTEST
|
'TPM_E_FAIL': '73', # 0x49
|
# TPM setup error in read-only firmware
|
'RO_TPM_S_ERROR': '80', # 0x50
|
# TPM write error in read-only firmware
|
'RO_TPM_W_ERROR': '81', # 0x51
|
# TPM lock error in read-only firmware
|
'RO_TPM_L_ERROR': '82', # 0x52
|
# TPM update error in read-only firmware
|
'RO_TPM_U_ERROR': '83', # 0x53
|
# TPM read error in rewritable firmware
|
'RW_TPM_R_ERROR': '84', # 0x54
|
# TPM write error in rewritable firmware
|
'RW_TPM_W_ERROR': '85', # 0x55
|
# TPM lock error in rewritable firmware
|
'RW_TPM_L_ERROR': '86', # 0x56
|
# EC software sync unable to get EC image hash
|
'EC_HASH_FAILED': '87', # 0x57
|
# EC software sync invalid image hash size
|
'EC_HASH_SIZE': '88', # 0x58
|
# Unspecified error while trying to load kernel
|
'LK_UNSPECIFIED': '89', # 0x59
|
# No bootable storage device in system
|
'RW_NO_DISK': '90', # 0x5A
|
# No bootable kernel found on disk
|
'RW_NO_KERNEL': '91', # 0x5B
|
# Unspecified/unknown error in rewritable firmware
|
'RW_UNSPECIFIED': '127', # 0x7F
|
# DM-verity error
|
'KE_DM_VERITY': '129', # 0x81
|
# Unspecified/unknown error in kernel
|
'KE_UNSPECIFIED': '191', # 0xBF
|
# Recovery mode test from user-mode
|
'US_TEST': '193', # 0xC1
|
# Unspecified/unknown error in user-mode
|
'US_UNSPECIFIED': '255', # 0xFF
|
}
|
|
# GBB flags, copied from:
|
# vboot_reference/firmware/include/gbb_header.h
|
GBB_FLAG_DEV_SCREEN_SHORT_DELAY = 0x00000001
|
GBB_FLAG_LOAD_OPTION_ROMS = 0x00000002
|
GBB_FLAG_ENABLE_ALTERNATE_OS = 0x00000004
|
GBB_FLAG_FORCE_DEV_SWITCH_ON = 0x00000008
|
GBB_FLAG_FORCE_DEV_BOOT_USB = 0x00000010
|
GBB_FLAG_DISABLE_FW_ROLLBACK_CHECK = 0x00000020
|
GBB_FLAG_ENTER_TRIGGERS_TONORM = 0x00000040
|
GBB_FLAG_FORCE_DEV_BOOT_LEGACY = 0x00000080
|
GBB_FLAG_FAFT_KEY_OVERIDE = 0x00000100
|
GBB_FLAG_DISABLE_EC_SOFTWARE_SYNC = 0x00000200
|
GBB_FLAG_DEFAULT_DEV_BOOT_LEGACY = 0x00000400
|
GBB_FLAG_DISABLE_PD_SOFTWARE_SYNC = 0x00000800
|
GBB_FLAG_DISABLE_LID_SHUTDOWN = 0x00001000
|
GBB_FLAG_FORCE_DEV_BOOT_FASTBOOT_FULL_CAP = 0x00002000
|
|
|
# VbSharedData flags, copied from:
|
# vboot_reference/firmware/include/vboot_struct.h
|
VDAT_FLAG_FWB_TRIED = 0x00000001
|
VDAT_FLAG_KERNEL_KEY_VERIFIED = 0x00000002
|
VDAT_FLAG_LF_DEV_SWITCH_ON = 0x00000004
|
VDAT_FLAG_LF_USE_RO_NORMAL = 0x00000008
|
VDAT_FLAG_BOOT_DEV_SWITCH_ON = 0x00000010
|
VDAT_FLAG_BOOT_REC_SWITCH_ON = 0x00000020
|
VDAT_FLAG_BOOT_FIRMWARE_WP_ENABLED = 0x00000040
|
VDAT_FLAG_BOOT_S3_RESUME = 0x00000100
|
VDAT_FLAG_BOOT_RO_NORMAL_SUPPORT = 0x00000200
|
VDAT_FLAG_HONOR_VIRT_DEV_SWITCH = 0x00000400
|
VDAT_FLAG_EC_SOFTWARE_SYNC = 0x00000800
|
VDAT_FLAG_EC_SLOW_UPDATE = 0x00001000
|
|
# Firmware preamble flags, copied from:
|
# vboot_reference/firmware/include/vboot_struct.h
|
PREAMBLE_USE_RO_NORMAL = 0x00000001
|
