Systemd/src/boot/efi
Matthew Garrett d4cbada2a9 sd-boot: stub: Obtain PE section offsets from RAM, not disk (#6250)
In a Secure Boot scenario the stub loader will have been validated
before execution. A malicious drive could then change the data returned
in future reads, resulting in the loader obtaining incorrect section
offsets and (for instance) allowing the command line to be modified.
Pull that information out of the in-RAM representation of the loader
instead in order to avoid this.

Fixes: #6230

(Lennart did some minor coding style fixes, and renamed pefile.c → pe.c,
as suggested by Kay, given that the file now contains a function whose
name doesn't match the filename as prefix anymore.)
2017-07-03 18:14:09 +02:00
..
.gitignore build-sys: update gitignore 2015-02-20 15:42:32 +01:00
boot.c sd-boot: stub: Obtain PE section offsets from RAM, not disk (#6250) 2017-07-03 18:14:09 +02:00
console.c sd-boot: Fix waiting for keyboard input (#3735) 2016-07-18 15:19:32 -04:00
console.h tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
disk.c tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
disk.h tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
graphics.c tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
graphics.h tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
linux.c tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
linux.h tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
measure.c sd-boot: remove compiler warning (#5860) 2017-04-29 22:11:34 -04:00
measure.h sd-boot: remove unnecessary defines (#5848) 2017-04-29 12:24:25 +02:00
meson.build sd-boot: stub: Obtain PE section offsets from RAM, not disk (#6250) 2017-07-03 18:14:09 +02:00
no-undefined-symbols.sh meson: also indent scripts with 8 spaces 2017-04-25 08:49:16 -04:00
pe.c sd-boot: stub: Obtain PE section offsets from RAM, not disk (#6250) 2017-07-03 18:14:09 +02:00
pe.h sd-boot: stub: Obtain PE section offsets from RAM, not disk (#6250) 2017-07-03 18:14:09 +02:00
shim.c sd-boot: added shim signature/MOK validation (#5702) 2017-05-09 20:57:40 +02:00
shim.h sd-boot: added shim signature/MOK validation (#5702) 2017-05-09 20:57:40 +02:00
splash.c tree-wide: minor formatting inconsistency cleanups 2016-02-23 14:20:34 -08:00
splash.h tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
stub.c sd-boot: stub: Obtain PE section offsets from RAM, not disk (#6250) 2017-07-03 18:14:09 +02:00
util.c tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
util.h tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00