Provides security service of image verification
This library hooks LoadImage() API to verify every image by the verification policy.
Caution: This module requires additional review when modified.
This library will have external input - PE/COFF image.
This external input must be validated carefully to avoid security issues such as
buffer overflow or integer overflow.
Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.
This program and the accompanying materials
are licensed and made available under the terms and conditions of the BSD License
which accompanies this distribution. The full text of the license may be found at
http://opensource.org/licenses/bsd-license.php
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
Version of INF file specification | 0x00010005 |
Module Guid | 0CA970E1-43FA-4402-BC0A-81AF336BFFD6 |
Module Type | DXE_DRIVER |
Module Version | 1.0 |
Produced Library Class | NULL |
Supported Module Types | DXE_DRIVER DXE_RUNTIME_DRIVER DXE_SAL_DRIVER DXE_SMM_DRIVER UEFI_APPLICATION UEFI_DRIVER |
Library Constructor Function | DxeImageVerificationLibConstructor |
PCD Name | TokenSpace | Package |
PcdOptionRomImageVerificationPolicy | gEfiSecurityPkgTokenSpaceGuid | SecurityPkg |
PcdRemovableMediaImageVerificationPolicy | gEfiSecurityPkgTokenSpaceGuid | SecurityPkg |
PcdFixedMediaImageVerificationPolicy | gEfiSecurityPkgTokenSpaceGuid | SecurityPkg |
Name | Package |
gEfiImageSecurityDatabaseGuid | MdePkg |
gEfiCertSha1Guid | MdePkg |
gEfiCertSha256Guid | MdePkg |
gEfiCertSha384Guid | MdePkg |
gEfiCertSha512Guid | MdePkg |
gEfiCertX509Guid | MdePkg |
gEfiCertX509Sha256Guid | MdePkg |
gEfiCertX509Sha384Guid | MdePkg |
gEfiCertX509Sha512Guid | MdePkg |
gEfiCertPkcs7Guid | MdePkg |
Name | Package |
gEfiFirmwareVolume2ProtocolGuid | MdePkg |
gEfiBlockIoProtocolGuid | MdePkg |
gEfiSimpleFileSystemProtocolGuid | MdePkg |
Name | Type | Package | Header File |
NULL | Produce | NULL | NULL |
MemoryAllocationLib | Consume | MdePkg | MdePkg/Include/Library/MemoryAllocationLib.h |
BaseLib | Consume | MdePkg | MdePkg/Include/Library/BaseLib.h |
UefiLib | Consume | MdePkg | MdePkg/Include/Library/UefiLib.h |
UefiBootServicesTableLib | Consume | MdePkg | MdePkg/Include/Library/UefiBootServicesTableLib.h |
UefiRuntimeServicesTableLib | Consume | MdePkg | MdePkg/Include/Library/UefiRuntimeServicesTableLib.h |
BaseMemoryLib | Consume | MdePkg | MdePkg/Include/Library/BaseMemoryLib.h |
DebugLib | Consume | MdePkg | MdePkg/Include/Library/DebugLib.h |
DevicePathLib | Consume | MdePkg | MdePkg/Include/Library/DevicePathLib.h |
BaseCryptLib | Consume | CryptoPkg | CryptoPkg/Include/Library/BaseCryptLib.h |
SecurityManagementLib | Consume | MdeModulePkg | MdeModulePkg/Include/Library/SecurityManagementLib.h |
PeCoffLib | Consume | MdePkg | MdePkg/Include/Library/PeCoffLib.h |
TpmMeasurementLib | Consume | MdeModulePkg | MdeModulePkg/Include/Library/TpmMeasurementLib.h |