Update DEC file and DxeImageVerificationLib to note user that ALLOW_EXECUTE_ON_SECURITY_VIOLATION is no longer supported.
Signed-off-by: Fu Siyuan <siyuan.fu@intel.com> Reviewed-by: Dong, Guo <guo.dong@intel.com> git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@14923 6f19259b-4bc3-4df7-8a09-765794883524
This commit is contained in:
@ -1108,10 +1108,11 @@ DxeImageVerificationHandler (
|
||||
}
|
||||
|
||||
//
|
||||
// The policy QUERY_USER_ON_SECURITY_VIOLATION violates the UEFI spec and has been removed.
|
||||
// The policy QUERY_USER_ON_SECURITY_VIOLATION and ALLOW_EXECUTE_ON_SECURITY_VIOLATION
|
||||
// violates the UEFI spec and has been removed.
|
||||
//
|
||||
ASSERT (Policy != QUERY_USER_ON_SECURITY_VIOLATION);
|
||||
if (Policy == QUERY_USER_ON_SECURITY_VIOLATION) {
|
||||
ASSERT (Policy != QUERY_USER_ON_SECURITY_VIOLATION && Policy != ALLOW_EXECUTE_ON_SECURITY_VIOLATION);
|
||||
if (Policy == QUERY_USER_ON_SECURITY_VIOLATION || Policy == ALLOW_EXECUTE_ON_SECURITY_VIOLATION) {
|
||||
CpuDeadLoop ();
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user