[coreboot-gerrit] [M] Change in coreboot[main]: security/intel/txt: Verify Intel TXT required TPM2 indices presence

[Filip Lewiński (Code Review)]

Attention is currently required from: Arthur Heymans, Felix Singer, Filip Lewiński, Julius Werner, Martin Roth, Michał Kopeć, Michał Żygowski, Yu-Ping Wu.

Hello Arthur Heymans, Felix Singer, Julius Werner, Krystian Hebel, Martin Roth, Michał Kopeć, Michał Żygowski, Yu-Ping Wu, build bot (Jenkins),

I'd like you to reexamine a change. Please visit

https://review.coreboot.org/c/coreboot/+/82417?usp=email

to look at the new patch set (#12).

The following approvals got outdated and were removed:
Verified+1 by build bot (Jenkins)

Change subject: security/intel/txt: Verify Intel TXT required TPM2 indices presence
......................................................................

security/intel/txt: Verify Intel TXT required TPM2 indices presence

If required TPM2 indices are not present, the SCHECK will cause a
reset, which will result in a reset-loop. Unable to boot any
operating-system or shell environment to provision a TPM, one ends
up in a soft-brick. Avoid it by checkign the TPM2 indices presence
and skip SCHECK if indices not found. Better to leave Intel TXT
uninitialized rather than having a reset loop.

Change-Id: I5b4267b2d51e21cfa514e96301f30ebf7437c470
Signed-off-by: Michał Żygowski 
---
M src/security/intel/txt/common.c
1 file changed, 90 insertions(+), 0 deletions(-)

git pull ssh://review.coreboot.org:29418/coreboot refs/changes/17/82417/12