GNUBoot
/
coreboot-kgpe-d16
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

soc/amd: Add an optional unsigned section in PSP verstage 

To enable RO CBFS verification in AMD platforms with PSP verstage,
metadata hash for RO CBFS is kept as part of verstage. This means any
updates to RO CBFS, before WP is enabled, requires updating the
metadata hash in the verstage. Hence keep the metadata hash outside the
signed range of PSP verstage. This means the metadata hash gets loaded
as part of loading PSP verstage while still being excluded from the
verification of PSP verstage.

This change keeps the metadata hash outside the PSP footer data. This
will help to keep it outside the signed range of PSP verstage & aligned
to 64 bytes.

BUG=b:227809919
TEST=Build and boot to OS in Skyrim with CBFS verification enabled with
both x86 and PSP verstage.

Change-Id: I308223be8fbca1c0bec8c2e1c86ed65d9f91b966
Signed-off-by: Karthikeyan Ramasubramanian <kramasub@google.com>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/68135
Reviewed-by: Julius Werner <jwerner@chromium.org>
Reviewed-by: Raul Rangel <rrangel@chromium.org>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
This commit is contained in:
Karthikeyan Ramasubramanian 2022-09-29 11:04:14 -06:00 committed by Raul Rangel
parent f19e461f4f
commit ab82a9f9b4
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/soc/amd/common/block/cpu/noncar/memlayout_psp_verstage.ld
View File

@ -17,8 +17,14 @@ SECTIONS
.text : { *(.text*) } .text : { *(.text*) }
.rodata : { *(.rodata*) } .rodata : { *(.rodata*) }
.data : { *(.data*) } .data : {
.data : { *(PSP_FOOTER_DATA) } *(.data*);
*(PSP_FOOTER_DATA);
#if CONFIG(CBFS_VERIFICATION)
*(.metadata_hash_anchor);
. = ALIGN(64);
#endif
}
_bss_start = .; _bss_start = .;
.bss : { *(.bss*) } .bss : { *(.bss*) }