diff options
author | Rizwan Qureshi <rizwan.qureshi@intel.com> | 2023-09-29 07:31:17 +0530 |
---|---|---|
committer | Lean Sheng Tan <sheng.tan@9elements.com> | 2023-10-27 06:37:35 +0000 |
commit | d81d80c554a2549720ce2114a1a84720d0605192 (patch) | |
tree | 3bd232330514c0f92c20892efc6ed81496c35569 /src/soc/intel/skylake/chipset.cb | |
parent | 952a4473ec233af74a458ffc8db987429cbb8fce (diff) |
soc/intel/cse: remove cbfs_unverified_area_map() API in cse_lite
With CBFS verification feature (CONFIG_VBOOT_CBFS_INTEGRATION)
being enabled, we can now remove cbfs_unverified_area_map() APIs
which are potential cause of security issues as they skip verification.
These APIs were used earlier to skip verification and hence save
boot time. With CBFS verification enabled, the files are verified
only when being loaded so we can now use cbfs_cbmem_alloc()/cbfs_map
function to load them.
BUG=b:284382452
Change-Id: Ie0266e50463926b8d377825142afda7f44754eb7
Signed-off-by: Rizwan Qureshi <rizwan.qureshi@intel.com>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/78214
Reviewed-by: Jérémy Compostella <jeremy.compostella@intel.com>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Julius Werner <jwerner@chromium.org>
Reviewed-by: Jamie Ryu <jamie.m.ryu@intel.com>
Diffstat (limited to 'src/soc/intel/skylake/chipset.cb')
0 files changed, 0 insertions, 0 deletions