Hello Piotr Kleinschmidt, build bot (Jenkins), Frans Hendriks, Stefan Reinauer, Duncan Laurie, Angel Pons, Julius Werner, Arthur Heymans, Kyösti Mälkki, Aaron Durbin, Patrick Rudolph, Philipp Deppenwiese, Michał Żygowski, Tim Wawrzynczak, Christian Walter, Alexander Couzens, Furquan Shaikh, Wim Vervoorn,
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/41086
to look at the new patch set (#12).
Change subject: SMM: Validate more user-provided pointers ......................................................................
SMM: Validate more user-provided pointers
Migitate issues presented in "Digging Into The Core of Boot" found by "Yuriy Bulygin" and "Oleksandr Bazhaniuk" at RECON-MTL-2017.
Validate user-provided pointers using the newly-added functions. This protects SMM from ring0 attacks.
Change-Id: I8a347ccdd20816924bf1bceb3b24bf7b22309312 Signed-off-by: Patrick Rudolph patrick.rudolph@9elements.com Signed-off-by: Christian Walter christian.walter@9elements.com --- M src/mainboard/lenovo/t60/smihandler.c M src/soc/intel/baytrail/smihandler.c M src/soc/intel/braswell/smihandler.c M src/soc/intel/broadwell/smihandler.c M src/soc/intel/common/block/smm/smihandler.c M src/southbridge/intel/bd82x6x/smihandler.c M src/southbridge/intel/ibexpeak/smihandler.c M src/southbridge/intel/lynxpoint/smihandler.c 8 files changed, 75 insertions(+), 23 deletions(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/86/41086/12