uefi-ref/edk2
1
0
Fork 0
mirror of https://github.com/tianocore/edk2 synced 2026-08-27 00:23:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

AmdSev: enable kernel hashes without initrd

Browse source 
If kernel hashes are enabled but no initrd is provided,
QEMU will still create an entry in the hash table, but it
will be the hash of an empty buffer.

Remove the explicit check for the length of the blob.
This logic will be handled by the later hash comparison,
which will still fail when the blob is not present
but is expected, but will pass when the blob is not present
and the hash table contains a hash of an empty buffer.

Signed-off-by: Tobin Feldman-Fitzthum <tobin@linux.ibm.com>
This commit is contained in:
Tobin Feldman-Fitzthum 2024-06-26 18:42:45 +00:00 • committed by mergify[bot]
parent 4e36bed812
commit cdffb638c8
1 changed files with 0 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

10
OvmfPkg/AmdSev/BlobVerifierLibSevHashes/BlobVerifierSevHashes.c
View file

@ -156,16 +156,6 @@ VerifyBlob (
DEBUG ((DEBUG_INFO, "%a: Found GUID %g in table\n", __func__, Guid));
if (BufSize == 0) {
DEBUG ((
DEBUG_ERROR,
"%a: Blob Specified in Hash Table was not Provided",
__func__
));
CpuDeadLoop ();
}
EntrySize = Entry->Len - sizeof Entry->Guid - sizeof Entry->Len;
if (EntrySize != SHA256_DIGEST_SIZE) {
DEBUG ((