[coreboot-gerrit] Change in coreboot[master]: security/vboot: Decouple measured boot from verified boot

[Werner Zeh (Code Review)]

Werner Zeh has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/35077 )

Change subject: security/vboot: Decouple measured boot from verified boot
......................................................................

Patch Set 74: Code-Review+2

(1 comment)

https://review.coreboot.org/c/coreboot/+/35077/74/src/security/tpm/tspi/crtm... 
File src/security/tpm/tspi/crtm.c:

https://review.coreboot.org/c/coreboot/+/35077/74/src/security/tpm/tspi/crtm... 
PS74, Line 108: for (i = 0; (i + name_len) <= whitelist_len; i++) {
              : 		if (!strcmp(whitelist + i, name))
              : 			return true;
              : 	}
This code still does not take care of the delimiter character (used to be comma separated list here). We should keep this in mind and fix in a folloow up commit (sorry for being late).