From 9964a274521177f062debb85fbd2e7b3022847be Mon Sep 17 00:00:00 2001 From: Nick Bofferding Date: Tue, 10 Apr 2018 14:49:55 -0500 Subject: Secure Boot: Inhibit preverifying WOFDATA reserved memory area Hostboot reserved memory areas are large, and there is enough content in certain cases such that data bleeds into the start of the PHyp image. This change stops preverifying one of the largets partitions, WOFDATA, so that the reserved memory areas will stay well within bounds for the time being. Change-Id: Ia099bc3bc27ba7000c2e5a1420a1e8ac72537ba6 CQ: SW421678 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/57031 Reviewed-by: Michael Baiocchi Tested-by: Jenkins Server Reviewed-by: Marshall J. Wilks Reviewed-by: ILYA SMIRNOV Tested-by: Jenkins OP Build CI Tested-by: Jenkins OP HW Tested-by: FSP CI Jenkins Reviewed-by: William G. Hoffa --- src/usr/runtime/populate_hbruntime.C | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) (limited to 'src/usr/runtime') diff --git a/src/usr/runtime/populate_hbruntime.C b/src/usr/runtime/populate_hbruntime.C index 1554633ae..687cad196 100644 --- a/src/usr/runtime/populate_hbruntime.C +++ b/src/usr/runtime/populate_hbruntime.C @@ -1328,9 +1328,12 @@ errlHndl_t populate_HbRsvMem(uint64_t i_nodeId, bool i_master_node) for (const auto & secIdPair : preVerifiedPnorSections) { // Skip RINGOVD section in POWERVM mode - if (secIdPair.first == PNOR::RINGOVD && - INITSERVICE::spBaseServicesEnabled() && - TARGETING::is_phyp_load()) + // Skip loading WOFDATA in POWERVM mode due to its huge size; + // PHyp will just dynamically load it at runtime when requested. + if ( ( (secIdPair.first == PNOR::RINGOVD) + || (secIdPair.first == PNOR::WOFDATA)) + && INITSERVICE::spBaseServicesEnabled() + && TARGETING::is_phyp_load()) { continue; } -- cgit v1.2.3