[coreboot-gerrit] Change in ...coreboot[master]: lib/prog_loaders.c: Add prog_locate_hook() for measured and verified ...

[Patrick Rudolph (Code Review)]

Patrick Rudolph has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/30811 )

Change subject: lib/prog_loaders.c: Add prog_locate_hook() for measured and verified boot
......................................................................

Patch Set 2:

(1 comment)

https://review.coreboot.org/#/c/30811/1//COMMIT_MSG 
Commit Message:

https://review.coreboot.org/#/c/30811/1//COMMIT_MSG@9 
PS1, Line 9: Before
> Implementation verifies image before loading. Don't load images which does not pass verification.

The whole measurement architecture should be documented and it must be explained why it is believed there's no TOCTOU.