diff options
author | Lennart Poettering <lennart@poettering.net> | 2022-08-25 16:53:43 +0200 |
---|---|---|
committer | Lennart Poettering <lennart@poettering.net> | 2022-08-26 13:08:32 +0200 |
commit | 71611f2b56719f5570bf14acc88cc19ed91b3157 (patch) | |
tree | 43f8948182fe4d99d4d06ad533ac363205b1afbb /src/boot | |
parent | Merge pull request #24457 from poettering/smbios-condition-fix (diff) | |
download | systemd-71611f2b56719f5570bf14acc88cc19ed91b3157.tar.xz systemd-71611f2b56719f5570bf14acc88cc19ed91b3157.zip |
cpio: split out cpio TPM measurement logic from pack_cpio()
No code change, just some refactoring, so that we can reuse the
measurement logic later elsewhere.
Diffstat (limited to 'src/boot')
-rw-r--r-- | src/boot/efi/cpio.c | 69 |
1 files changed, 45 insertions, 24 deletions
diff --git a/src/boot/efi/cpio.c b/src/boot/efi/cpio.c index 0d41102d2d..cec901d0c3 100644 --- a/src/boot/efi/cpio.c +++ b/src/boot/efi/cpio.c @@ -304,6 +304,48 @@ static EFI_STATUS pack_cpio_trailer( return EFI_SUCCESS; } +static EFI_STATUS measure_cpio( + void *buffer, + UINTN buffer_size, + const uint32_t tpm_pcr[], + UINTN n_tpm_pcr, + const char16_t *tpm_description, + bool *ret_measured) { + + int measured = -1; + EFI_STATUS err; + + assert(buffer || buffer_size == 0); + assert(tpm_pcr || n_tpm_pcr == 0); + + for (UINTN i = 0; i < n_tpm_pcr; i++) { + bool m; + + if (tpm_pcr[i] == UINT32_MAX) /* Disabled */ + continue; + + err = tpm_log_event( + tpm_pcr[i], + POINTER_TO_PHYSICAL_ADDRESS(buffer), + buffer_size, + tpm_description, + &m); + if (err != EFI_SUCCESS) { + log_error_stall(L"Unable to add initrd TPM measurement for PCR %u (%s), ignoring: %r", tpm_pcr[i], tpm_description, err); + measured = false; + continue; + } + + if (measured != false) + measured = m; + } + + if (ret_measured) + *ret_measured = measured > 0; + + return EFI_SUCCESS; +} + EFI_STATUS pack_cpio( EFI_LOADED_IMAGE_PROTOCOL *loaded_image, const char16_t *dropin_dir, @@ -325,7 +367,6 @@ EFI_STATUS pack_cpio( _cleanup_(strv_freep) char16_t **items = NULL; _cleanup_free_ void *buffer = NULL; uint32_t inode = 1; /* inode counter, so that each item gets a new inode */ - int measured = -1; EFI_STATUS err; assert(loaded_image); @@ -433,33 +474,13 @@ EFI_STATUS pack_cpio( if (err != EFI_SUCCESS) return log_error_status_stall(err, L"Failed to pack cpio trailer: %r"); - for (UINTN i = 0; i < n_tpm_pcr; i++) { - bool m; - - if (tpm_pcr[i] == UINT32_MAX) /* Disabled */ - continue; - - err = tpm_log_event( - tpm_pcr[i], - POINTER_TO_PHYSICAL_ADDRESS(buffer), - buffer_size, - tpm_description, - &m); - if (err != EFI_SUCCESS) { - log_error_stall(L"Unable to add initrd TPM measurement for PCR %u (%s), ignoring: %r", tpm_pcr[i], tpm_description, err); - measured = false; - continue; - } - - measured = measured < 0 ? m : (measured && m); - } + err = measure_cpio(buffer, buffer_size, tpm_pcr, n_tpm_pcr, tpm_description, ret_measured); + if (err != EFI_SUCCESS) + return err; *ret_buffer = TAKE_PTR(buffer); *ret_buffer_size = buffer_size; - if (ret_measured) - *ret_measured = measured; - return EFI_SUCCESS; nothing: |