PrivilegePolymorphic.h File Reference

#include <Uefi/UefiBaseType.h>

Go to the source code of this file.

Functions
VOID EFIAPI	SecureBootHook (IN CHAR16 *VariableName, IN EFI_GUID *VendorGuid)
EFI_STATUS	MorLockInit (VOID)
VOID	MorLockInitAtEndOfDxe (VOID)
EFI_STATUS	SetVariableCheckHandlerMor (IN CHAR16 *VariableName, IN EFI_GUID *VendorGuid, IN UINT32 Attributes, IN UINTN DataSize, IN VOID *Data)
VOID	VariableSpeculationBarrier (VOID)
VOID	VariableNotifySmmReady (VOID)
VOID	VariableNotifySmmWriteReady (VOID)
EFI_STATUS EFIAPI	MmVariableServiceInitialize (VOID)
BOOLEAN	VariableSmmIsBufferOutsideSmmValid (IN EFI_PHYSICAL_ADDRESS Buffer, IN UINT64 Length)
BOOLEAN	VariableHaveTcgProtocols (VOID)

Detailed Description

Polymorphic functions that are called from both the privileged driver (i.e., the DXE_SMM variable module) and the non-privileged drivers (i.e., one or both of the DXE_RUNTIME variable modules).

Each of these functions has two implementations, appropriate for privileged vs. non-privileged driver code.

Copyright (c) 2017, Red Hat, Inc.
Copyright (c) 2010 - 2018, Intel Corporation. All rights reserved.

SPDX-License-Identifier: BSD-2-Clause-Patent

Definition in file PrivilegePolymorphic.h.

Function Documentation

MmVariableServiceInitialize()

EFI_STATUS EFIAPI MmVariableServiceInitialize

(

VOID

)

Variable Driver main entry point. The Variable driver places the 4 EFI runtime services in the EFI System Table and installs arch protocols for variable read and write services being available. It also registers a notification function for an EVT_SIGNAL_VIRTUAL_ADDRESS_CHANGE event.

Return values

EFI_SUCCESS

Variable service successfully initialized.

MorLockInit()

EFI_STATUS MorLockInit

(

VOID

)

Initialization for MOR Control Lock.

Return values

EFI_SUCCESS

MorLock initialization success.

Returns

Others Some error occurs.

Definition at line 65 of file TcgMorLockDxe.c.

MorLockInitAtEndOfDxe()

VOID MorLockInitAtEndOfDxe

(

VOID

)

Delayed initialization for MOR Control Lock at EndOfDxe.

This function performs any operations queued by MorLockInit().

Definition at line 109 of file TcgMorLockDxe.c.

SecureBootHook()

VOID EFIAPI SecureBootHook	(	IN CHAR16 *	VariableName,
		IN EFI_GUID *	VendorGuid )

SecureBoot Hook for auth variable update.

Parameters

[in]	VariableName	Name of Variable to be found.
[in]	VendorGuid	Variable vendor GUID.

SecureBoot Hook for SetVariable.

Parameters

[in]	VariableName	Name of Variable to be found.
[in]	VendorGuid	Variable vendor GUID.

Definition at line 218 of file Measurement.c.

SetVariableCheckHandlerMor()

EFI_STATUS SetVariableCheckHandlerMor	(	IN CHAR16 *	VariableName,
		IN EFI_GUID *	VendorGuid,
		IN UINT32	Attributes,
		IN UINTN	DataSize,
		IN VOID *	Data )

This service is an MOR/MorLock checker handler for the SetVariable().

Parameters

[in]	VariableName	the name of the vendor's variable, as a Null-Terminated Unicode String
[in]	VendorGuid	Unify identifier for vendor.
[in]	Attributes	Attributes bitmask to set for the variable.
[in]	DataSize	The size in bytes of Data-Buffer.
[in]	Data	Point to the content of the variable.

Return values

EFI_SUCCESS	The MOR/MorLock check pass, and Variable driver can store the variable data.
EFI_INVALID_PARAMETER	The MOR/MorLock data or data size or attributes is not allowed for MOR variable.
EFI_ACCESS_DENIED	The MOR/MorLock is locked.
EFI_ALREADY_STARTED	The MorLock variable is handled inside this function. Variable driver can just return EFI_SUCCESS.

Definition at line 44 of file TcgMorLockDxe.c.

VariableHaveTcgProtocols()

BOOLEAN VariableHaveTcgProtocols

(

VOID

)

Whether the TCG or TCG2 protocols are installed in the UEFI protocol database. This information is used by the MorLock code to infer whether an existing MOR variable is legitimate or not.

Return values

TRUE	Either the TCG or TCG2 protocol is installed in the UEFI protocol database
FALSE	Neither the TCG nor the TCG2 protocol is installed in the UEFI protocol database

VariableNotifySmmReady()

VOID VariableNotifySmmReady

(

VOID

)

Notify the system that the SMM variable driver is ready.

VariableNotifySmmWriteReady()

VOID VariableNotifySmmWriteReady

(

VOID

)

Notify the system that the SMM variable write driver is ready.

VariableSmmIsBufferOutsideSmmValid()

BOOLEAN VariableSmmIsBufferOutsideSmmValid	(	IN EFI_PHYSICAL_ADDRESS	Buffer,
		IN UINT64	Length )

This function checks if the buffer is valid per processor architecture and does not overlap with SMRAM.

Parameters

Buffer	The buffer start address to be checked.
Length	The buffer length to be checked.

Return values

TRUE	This buffer is valid per processor architecture and does not overlap with SMRAM.
FALSE	This buffer is not valid per processor architecture or overlaps with SMRAM.

VariableSpeculationBarrier()

VOID VariableSpeculationBarrier

(

VOID

)

This service is consumed by the variable modules to place a barrier to stop speculative execution.

Ensures that no later instruction will execute speculatively, until all prior instructions have completed.

Definition at line 20 of file SpeculationBarrierDxe.c.