[coreboot-gerrit] Change in coreboot[master]: cbfs: Add verification for RO CBFS metadata hash

[Jakub Czapiga (Code Review)]

Attention is currently required from: Julius Werner.
Jakub Czapiga has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/41120 )

Change subject: cbfs: Add verification for RO CBFS metadata hash
......................................................................

Patch Set 19:

(1 comment)

File src/lib/Kconfig.cbfs_verification:

PS19:
> No, it's used and (last time I tested, at least) it works as intended (see src/lib/metadata_hash.c).

Oh, my apologies. I didn't notice it in my grep output.

Regarding the comment above, I was referring to the file as a whole. So, #TODO comments, and WIP messages. Values CBFS_VERIFICATION and TOCTOU_SAFETY are being used in the code and at least the first one works, so TODO/WIP messages should not be there anymore.