Secure PNOR Resource Provider port from p8

Adds a Secure PNOR Resource Provider (SPNORRP) layer on top of the
original PNORRP to handle verification of secured PNOR sections.

Change-Id: Iff25abf599f3c850197c6e6d23ff03e5edf945bb
RTC:163078
Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/31588
Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com>
Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com>
Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com>
Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com>
Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>

1 files changed, 23 insertions, 0 deletions

diff --git a/src/usr/secureboot/trusted/base/trustedboot_base.C b/src/usr/secureboot/trusted/base/trustedboot_base.C
index 687aeb9f0..dbb47b6e5 100644
--- a/src/usr/secureboot/trusted/base/trustedboot_base.C
+++ b/src/usr/secureboot/trusted/base/trustedboot_base.C
@@ -255,4 +255,27 @@ errlHndl_t pcrExtend(TPM_Pcr i_pcr,
     return err;
 }
 
+errlHndl_t extendPnorSectionHash(const SECUREBOOT::ContainerHeader& i_conHdr,
+                                 const void* i_vaddr,
+                                 const PNOR::SectionId i_sec)
+{
+    errlHndl_t l_errhdl = NULL;
+
+    // TODO securebootp9
+    // remove the following code and implement based on p8 code
+    TRACFCOMP(g_trac_trustedboot, "ExtendPnorSectionHash called for section %d and "
+              " address %.16llX with payload text size %i"
+              "but not unimplemented in p9", i_sec, i_vaddr);
+
+    return l_errhdl;
+}
+
+errlHndl_t extendBaseImage()
+{
+    errlHndl_t pError = NULL;
+    // TODO securebootp9
+    // implement extendBaseImage based on p8 code
+    return pError;
+}
+
 } // end TRUSTEDBOOT