PEI variable implementation checks only the variable header signature for validity. This does not seem robust if system crash occurred during previous Reclaim() operation. If the crash occurred while FTW was rewriting the variable FV, the signature could be valid even though the rest of the FV isn't valid. Solution: PEI variable and early phase(before FTW protocol ready) of DXE variable can check the FTW last write status provided by FaultTolerantWritePei and determine if all or partial variable data has been backed up in spare block, and then use the backed up data. Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Star Zeng <star.zeng@intel.com> Reviewed-by: Liming Gao <liming.gao@intel.com> git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@14455 6f19259b-4bc3-4df7-8a09-765794883524
112 lines
3.7 KiB
INI
112 lines
3.7 KiB
INI
## @file
|
|
# Component description file for Authenticated Variable module.
|
|
#
|
|
# Caution: This module requires additional review when modified.
|
|
# This driver will have external input - variable data.
|
|
# This external input must be validated carefully to avoid security issue like
|
|
# buffer overflow, integer overflow.
|
|
#
|
|
# Copyright (c) 2009 - 2013, Intel Corporation. All rights reserved.<BR>
|
|
# This program and the accompanying materials
|
|
# are licensed and made available under the terms and conditions of the BSD License
|
|
# which accompanies this distribution. The full text of the license may be found at
|
|
# http://opensource.org/licenses/bsd-license.php
|
|
# THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
#
|
|
##
|
|
|
|
[Defines]
|
|
INF_VERSION = 0x00010005
|
|
BASE_NAME = VariableRuntimeDxe
|
|
FILE_GUID = 2226F30F-3D5B-402d-9936-A97184EB4516
|
|
MODULE_TYPE = DXE_RUNTIME_DRIVER
|
|
VERSION_STRING = 1.0
|
|
ENTRY_POINT = VariableServiceInitialize
|
|
|
|
#
|
|
# The following information is for reference only and not required by the build tools.
|
|
#
|
|
# VALID_ARCHITECTURES = IA32 X64 EBC
|
|
#
|
|
# VIRTUAL_ADDRESS_MAP_CALLBACK = VariableClassAddressChangeEvent
|
|
#
|
|
|
|
[Sources]
|
|
Reclaim.c
|
|
Variable.c
|
|
VariableDxe.c
|
|
Variable.h
|
|
AuthService.c
|
|
AuthService.h
|
|
|
|
[Packages]
|
|
MdePkg/MdePkg.dec
|
|
MdeModulePkg/MdeModulePkg.dec
|
|
CryptoPkg/CryptoPkg.dec
|
|
SecurityPkg/SecurityPkg.dec
|
|
|
|
[LibraryClasses]
|
|
MemoryAllocationLib
|
|
BaseLib
|
|
SynchronizationLib
|
|
UefiLib
|
|
UefiBootServicesTableLib
|
|
BaseMemoryLib
|
|
DebugLib
|
|
UefiRuntimeLib
|
|
DxeServicesTableLib
|
|
UefiDriverEntryPoint
|
|
PcdLib
|
|
BaseCryptLib
|
|
PlatformSecureLib
|
|
HobLib
|
|
|
|
[Protocols]
|
|
gEfiFirmwareVolumeBlockProtocolGuid ## SOMETIMES_CONSUMES
|
|
gEfiVariableWriteArchProtocolGuid ## ALWAYS_PRODUCES
|
|
gEfiVariableArchProtocolGuid ## ALWAYS_PRODUCES
|
|
gEfiFaultTolerantWriteProtocolGuid ## SOMETIMES_CONSUMES
|
|
gEdkiiVariableLockProtocolGuid ## ALWAYS_PRODUCES
|
|
|
|
[Guids]
|
|
gEfiAuthenticatedVariableGuid ## PRODUCES ## Configuration Table Guid
|
|
gEfiGlobalVariableGuid ## PRODUCES ## Variable Guid
|
|
gEfiEventVirtualAddressChangeGuid ## CONSUMES ## Event
|
|
gEfiCertTypeRsa2048Sha256Guid
|
|
gEfiImageSecurityDatabaseGuid
|
|
gEfiCertX509Guid
|
|
gEfiCertPkcs7Guid
|
|
gEfiCertRsa2048Guid
|
|
gEfiSecureBootEnableDisableGuid
|
|
gEfiCustomModeEnableGuid
|
|
gEfiSystemNvDataFvGuid ## CONSUMES
|
|
gEfiCertDbGuid
|
|
gEfiHardwareErrorVariableGuid ## SOMETIMES_CONSUMES
|
|
gEfiEndOfDxeEventGroupGuid ## CONSUMES ## Event
|
|
gEdkiiFaultTolerantWriteGuid ## CONSUMES
|
|
|
|
[Pcd]
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize
|
|
|
|
[FeaturePcd]
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics ## SOMETIME_CONSUMES (statistic the information of variable.)
|
|
|
|
[Depex]
|
|
gEfiFirmwareVolumeBlockProtocolGuid AND gEfiFaultTolerantWriteProtocolGuid
|
|
|
|
# [Event]
|
|
# ##
|
|
# # Event will be signaled for VIRTUAL_ADDRESS_CHANGE event.
|
|
# #
|
|
# EVENT_TYPE_NOTIFY_SIGNAL ## PRODUCES
|
|
#
|
|
#
|
|
|