summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTobin Feldman-Fitzthum <tobin@linux.ibm.com>2024-06-26 18:42:45 +0000
committermergify[bot] <37929162+mergify[bot]@users.noreply.github.com>2024-07-04 16:09:56 +0000
commitcdffb638c85da87f6b9d61194513a24cd6a73c6a (patch)
treeb9783ae9c64b3880c178d28f0ccfce4ee02b3df4
parent4e36bed8128f67fc73f41acb1beaffd77ef76e90 (diff)
downloadedk2-cdffb638c85da87f6b9d61194513a24cd6a73c6a.zip
edk2-cdffb638c85da87f6b9d61194513a24cd6a73c6a.tar.gz
edk2-cdffb638c85da87f6b9d61194513a24cd6a73c6a.tar.bz2
AmdSev: enable kernel hashes without initrd
If kernel hashes are enabled but no initrd is provided, QEMU will still create an entry in the hash table, but it will be the hash of an empty buffer. Remove the explicit check for the length of the blob. This logic will be handled by the later hash comparison, which will still fail when the blob is not present but is expected, but will pass when the blob is not present and the hash table contains a hash of an empty buffer. Signed-off-by: Tobin Feldman-Fitzthum <tobin@linux.ibm.com>
-rw-r--r--OvmfPkg/AmdSev/BlobVerifierLibSevHashes/BlobVerifierSevHashes.c10
1 files changed, 0 insertions, 10 deletions
diff --git a/OvmfPkg/AmdSev/BlobVerifierLibSevHashes/BlobVerifierSevHashes.c b/OvmfPkg/AmdSev/BlobVerifierLibSevHashes/BlobVerifierSevHashes.c
index bc2d5da..7bc9f89 100644
--- a/OvmfPkg/AmdSev/BlobVerifierLibSevHashes/BlobVerifierSevHashes.c
+++ b/OvmfPkg/AmdSev/BlobVerifierLibSevHashes/BlobVerifierSevHashes.c
@@ -156,16 +156,6 @@ VerifyBlob (
DEBUG ((DEBUG_INFO, "%a: Found GUID %g in table\n", __func__, Guid));
- if (BufSize == 0) {
- DEBUG ((
- DEBUG_ERROR,
- "%a: Blob Specified in Hash Table was not Provided",
- __func__
- ));
-
- CpuDeadLoop ();
- }
-
EntrySize = Entry->Len - sizeof Entry->Guid - sizeof Entry->Len;
if (EntrySize != SHA256_DIGEST_SIZE) {
DEBUG ((