Attention is currently required from: Raul Rangel, Jakub Czapiga. Hello Raul Rangel, Jakub Czapiga,
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/59678
to look at the new patch set (#2).
Change subject: cbfs: Add unverified_area APIs ......................................................................
cbfs: Add unverified_area APIs
This patch adds a new ..._unverified_area_... group of functions to the cbfs_map/_load/_alloc() APIs. These functions can be used to access custom FMAP sections and are meant to replace the existing cbfs_locate_file_in_region(). The name is intended to highlight that accesses through this API will not be verified when CBFS_VERIFICATION is enabled and should always be treated as if they may return malicious data. (Due to laziness I'm not adding the combination of this API with the ..._type_... variant at this point, since it seems very unlikely that we'll ever have a use case for that. If we ever do, it should be easy to add later.)
(Also remove the 'inline' from cbfs_file_hash_mismatch(). I'm not sure why I put it there in the first place, probably a bad copy&paste.)
Signed-off-by: Julius Werner jwerner@chromium.org Change-Id: I402265900f7075aa0c2f58d812c67ea63ddf2900 --- M src/include/cbfs.h M src/lib/cbfs.c 2 files changed, 151 insertions(+), 78 deletions(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/78/59678/2