Skip to content

Commit

Permalink
SecurityPkg: Measure Invoke EBS even in failure case
Browse files Browse the repository at this point in the history
This patch measures the ExitBootServices invocation to the
TPM even in the case of ExitBootServices failing, so that
we can keep a record of the failures and know what is expected.
  • Loading branch information
Matthew Carlson authored and os-d committed Jul 4, 2024
1 parent 62fc5b8 commit 3bbf289
Showing 1 changed file with 14 additions and 0 deletions.
14 changes: 14 additions & 0 deletions SecurityPkg/Tcg/Tcg2Dxe/Tcg2Dxe.c
Original file line number Diff line number Diff line change
Expand Up @@ -2615,6 +2615,20 @@ OnExitBootServicesFailed (
{
EFI_STATUS Status;

// MU_CHANGE START: TCBZ2753
//
// Measure invocation of ExitBootServices,
//
Status = TcgMeasureAction (
5,
EFI_EXIT_BOOT_SERVICES_INVOCATION
);
if (EFI_ERROR (Status)) {
DEBUG ((DEBUG_ERROR, "%a not Measured. Error!\n", EFI_EXIT_BOOT_SERVICES_INVOCATION));
}

// MU_CHANGE END TCBZ2753

//
// Measure Failure of ExitBootServices,
//
Expand Down

0 comments on commit 3bbf289

Please sign in to comment.