starfive-tech/u-boot.git/lib/efi_loader/efi_capsule.c, branch rtthread_AMP

Revert "efi_capsule: Move signature from DTB to .rodata"

2021-09-18T09:47:50+00:00

This was unfortunately applied despite much discussion about it beiong the wrong way to implement this feature. Revert it before too many other things are built on top of it. This reverts commit ddf67daac39de76d2697d587148f4c2cb768f492. Signed-off-by: Simon Glass

efi_loader: capsule: remove authentication data

2021-07-24T08:49:51+00:00

If capsule authentication is disabled and yet a capsule file is signed, its signature must be removed from image data to flush. Otherwise, the firmware will be corrupted after update. Fixes: 04be98bd6bcf ("efi: capsule: Add support for uefi capsule authentication") Signed-off-by: AKASHI Takahiro

efi_loader: capsule: remove unused guid

2021-07-24T08:49:51+00:00

efi_guid_capsule_root_cert_guid is never used. Just remove it. Signed-off-by: AKASHI Takahiro Reviewed-by: Heinrich Schuchardt

efi_capsule: Move signature from DTB to .rodata

2021-07-18T12:43:56+00:00

The capsule signature is now part of our DTB. This is problematic when a user is allowed to change/fixup that DTB from U-Boots command line since he can overwrite the signature as well. So Instead of adding the key on the DTB, embed it in the u-boot binary it self as part of it's .rodata. This assumes that the U-Boot binary we load is authenticated by a previous boot stage loader. Reviewed-by: Masami Hiramatsu Tested-by: Masami Hiramatsu Tested-by: Sughosh Ganu Signed-off-by: Ilias Apalodimas

efi_loader: Use %pD to log device-path instead of local efi_dp_str()

2021-07-18T12:43:56+00:00

Use %pD to log device-path instead of using efi_dp_str() and efi_free_pool() locally in find_boot_device(). This is a cleanup patch, no feature update nor fix. Suggested-by: Heinrich Schuchardt Signed-off-by: Masami Hiramatsu Reviewed-by: Heinrich Schuchardt

efi_loader: Fix to set bootdev_root correctly if bootdev found

2021-07-12T18:38:16+00:00

Fix find_boot_device() to set bootdev_root if it finds the bootdev from BootNext. Currently it sets the bootdev_root only when it finds bootdev from BootOrder. Fixes: c74cd8bd08d1 ("efi_loader: capsule: add capsule_on_disk support") Signed-off-by: Masami Hiramatsu Accked-by: Ilias Apalodimas Reviewed-by: Heinrich Schuchardt

efi_loader: set CapsuleLast after each capsule

2021-07-12T18:30:48+00:00

If multiple capsules are applied, the FMP drivers for the individual capsules can expect the value of CapsuleLast to be accurate. Hence CapsuleLast must be updated after each capsule. Signed-off-by: Heinrich Schuchardt

efi_loader: missing EFI_CALL() in set_capsule_result

2021-07-12T18:30:48+00:00

efi_set_variable() should be called with EFI_CALL(). Use efi_set_variable_int() instead. Signed-off-by: Heinrich Schuchardt

efi_loader: rework messages for capsule updates

2021-07-12T18:30:48+00:00

* Use log category LOGC_EFI. This allows to remove 'EFI:' prefixes in messages. * Rephrase some of the messages. Signed-off-by: Heinrich Schuchardt

efi_loader: Allow capsule update on-disk without checking OsIndications

2021-07-02T16:29:06+00:00

Although U-Boot supports capsule update on-disk, it's lack of support for SetVariable at runtime prevents applications like fwupd from using it. In order to perform the capsule update on-disk the spec says that the OS must copy the capsule to the \EFI\UpdateCapsule directory and set a bit in the OsIndications variable. The firmware then checks for the EFI_OS_INDICATIONS_FILE_CAPSULE_DELIVERY_SUPPORTED bit in OsIndications variable, which is set by the submitter to trigger processing of the capsule on the next reboot. Let's add a config option which ignores the bit and just relies on the capsule being present. Since U-Boot deletes the capsule while processing it, we won't end up applying it multiple times. Note that this is allowed for all capsules. In the future, once authenticated capsules are fully supported, we can limit the functionality to those only. Signed-off-by: apalos Reword Kconfig description. Reviewed-by: Heinrich Schuchardt Signed-off-by: Heinrich Schuchardt