mirror of
https://github.com/AuxXxilium/linux_dsm_epyc7002.git
synced 2024-12-28 11:18:45 +07:00
06e67b849a
The "FIRMWARE_EFI_EMBEDDED" enum is a "where", not a "what". It
should not be distinguished separately from just "FIRMWARE", as this
confuses the LSMs about what is being loaded. Additionally, there was
no actual validation of the firmware contents happening.
Fixes: e4c2c0ff00 ("firmware: Add new platform fallback mechanism and firmware_request_platform()")
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Luis Chamberlain <mcgrof@kernel.org>
Acked-by: Scott Branden <scott.branden@broadcom.com>
Cc: stable@vger.kernel.org
Link: https://lore.kernel.org/r/20201002173828.2099543-3-keescook@chromium.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
40 lines
845 B
C
40 lines
845 B
C
// SPDX-License-Identifier: GPL-2.0
|
|
|
|
#include <linux/efi_embedded_fw.h>
|
|
#include <linux/property.h>
|
|
#include <linux/security.h>
|
|
#include <linux/vmalloc.h>
|
|
|
|
#include "fallback.h"
|
|
#include "firmware.h"
|
|
|
|
int firmware_fallback_platform(struct fw_priv *fw_priv, u32 opt_flags)
|
|
{
|
|
const u8 *data;
|
|
size_t size;
|
|
int rc;
|
|
|
|
if (!(opt_flags & FW_OPT_FALLBACK_PLATFORM))
|
|
return -ENOENT;
|
|
|
|
rc = security_kernel_load_data(LOADING_FIRMWARE);
|
|
if (rc)
|
|
return rc;
|
|
|
|
rc = efi_get_embedded_fw(fw_priv->fw_name, &data, &size);
|
|
if (rc)
|
|
return rc; /* rc == -ENOENT when the fw was not found */
|
|
|
|
if (fw_priv->data && size > fw_priv->allocated_size)
|
|
return -ENOMEM;
|
|
if (!fw_priv->data)
|
|
fw_priv->data = vmalloc(size);
|
|
if (!fw_priv->data)
|
|
return -ENOMEM;
|
|
|
|
memcpy(fw_priv->data, data, size);
|
|
fw_priv->size = size;
|
|
fw_state_done(fw_priv);
|
|
return 0;
|
|
}
|