Re: [coreboot] qemu v3 etherboot

[Peter Stuge]

On Thu, Mar 20, 2008 at 09:40:11AM -0700, ron minnich wrote:
> On Thu, Mar 20, 2008 at 9:27 AM, Peter Stuge  wrote:
> > Currently v3 looks for segments until a segment cannot be found.
> >
> > This is counterintuitive and potentially a security hole, I think
> >  we will fix it but so far I think everything works anyway.
>
> I don't quite get counterintuitive but hey ...

User stores a payload with n segments into flash, uses a coreboot
tool (lar) to do so, and yet information is lost until coreboot run
time when the payload is to be executed.
> security hole? the whole bios is that :-)

Think flashing over padding files with a rouge segment.

//Peter