summaryrefslogtreecommitdiff
path: root/src/drivers/intel/gma/int15.c
diff options
context:
space:
mode:
authorJulius Werner <jwerner@chromium.org>2023-05-25 18:26:32 -0700
committerLean Sheng Tan <sheng.tan@9elements.com>2023-06-19 12:27:15 +0000
commit6e303aa89b906dc12b0bbf6024a23de339634eb1 (patch)
tree13c7fed064b5e00eed7a81744439619006fdff48 /src/drivers/intel/gma/int15.c
parent3f1e034835fc40b43b95746b37b291de8c860810 (diff)
cbfs: Allow controlling decompression of unverified files
This patch adds a new Kconfig that controls whether CBFS APIs for unverified areas will allow file decompression when CBFS verification is enabled. This should be disallowed by default because it exposes the attack surface of all supported decompression algorithms. Make allowances for one legacy use case with CONFIG_SOC_INTEL_CSE_LITE_ COMPRESS_ME_RW that should become obsolete with VBOOT_CBFS_INTEGRATION. Signed-off-by: Julius Werner <jwerner@chromium.org> Change-Id: Ieae420f51cbc01dae2ab265414219cc9c288087b Reviewed-on: https://review.coreboot.org/c/coreboot/+/75457 Reviewed-by: Jakub Czapiga <jacz@semihalf.com> Reviewed-by: Subrata Banik <subratabanik@google.com> Tested-by: build bot (Jenkins) <no-reply@coreboot.org> Reviewed-by: Yu-Ping Wu <yupingso@google.com> Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Diffstat (limited to 'src/drivers/intel/gma/int15.c')
0 files changed, 0 insertions, 0 deletions