[coreboot-gerrit] Change in ...coreboot[master]: security/vboot: Add fmap measurements

[Werner Zeh (Code Review)]

Werner Zeh has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/31597 )

Change subject: security/vboot: Add fmap measurements
......................................................................

Patch Set 33: Code-Review+1

(1 comment)

https://review.coreboot.org/#/c/31597/33/src/security/vboot/vboot_crtm.c 
File src/security/vboot/vboot_crtm.c:

https://review.coreboot.org/#/c/31597/33/src/security/vboot/vboot_crtm.c@59 
PS33, Line 59: "SI_DESC",
There are configurations that are possible where the host has no read access to the descriptor (r/w access defined in the descriptor). Shall we take this into account here? Maybe check that access is possible by reading the descripor magic at offset 0x10?