diff options
| author | Nick Bofferding <bofferdn@us.ibm.com> | 2018-04-10 14:49:55 -0500 |
|---|---|---|
| committer | William G. Hoffa <wghoffa@us.ibm.com> | 2018-04-12 16:28:00 -0400 |
| commit | 9964a274521177f062debb85fbd2e7b3022847be (patch) | |
| tree | 711ccb4514b824e5c2d05798e658b2d1fd071e0c | |
| parent | cde4990515a7a190fca7a3eb9f722f74c12acdb2 (diff) | |
| download | talos-hostboot-9964a274521177f062debb85fbd2e7b3022847be.tar.gz talos-hostboot-9964a274521177f062debb85fbd2e7b3022847be.zip | |
Secure Boot: Inhibit preverifying WOFDATA reserved memory area
Hostboot reserved memory areas are large, and there is enough content in
certain cases such that data bleeds into the start of the PHyp image. This
change stops preverifying one of the largets partitions, WOFDATA, so that
the reserved memory areas will stay well within bounds for the time being.
Change-Id: Ia099bc3bc27ba7000c2e5a1420a1e8ac72537ba6
CQ: SW421678
Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/57031
Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com>
Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com>
Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com>
Reviewed-by: ILYA SMIRNOV <ismirno@us.ibm.com>
Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com>
Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com>
Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com>
Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
| -rw-r--r-- | src/usr/runtime/populate_hbruntime.C | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/src/usr/runtime/populate_hbruntime.C b/src/usr/runtime/populate_hbruntime.C index 1554633ae..687cad196 100644 --- a/src/usr/runtime/populate_hbruntime.C +++ b/src/usr/runtime/populate_hbruntime.C @@ -1328,9 +1328,12 @@ errlHndl_t populate_HbRsvMem(uint64_t i_nodeId, bool i_master_node) for (const auto & secIdPair : preVerifiedPnorSections) { // Skip RINGOVD section in POWERVM mode - if (secIdPair.first == PNOR::RINGOVD && - INITSERVICE::spBaseServicesEnabled() && - TARGETING::is_phyp_load()) + // Skip loading WOFDATA in POWERVM mode due to its huge size; + // PHyp will just dynamically load it at runtime when requested. + if ( ( (secIdPair.first == PNOR::RINGOVD) + || (secIdPair.first == PNOR::WOFDATA)) + && INITSERVICE::spBaseServicesEnabled() + && TARGETING::is_phyp_load()) { continue; } |
