microsoft / MSRSec

Security and Privacy Research at Microsoft
MIT License
37 stars 28 forks source link

Authvar fixes 2 #4

Closed dmcilvaney closed 5 years ago

dmcilvaney commented 5 years ago

Reset linked lists when a variable is realloc'd. The surounding nodes were not having their f/b links updated when a non-volatile variable was enlarged via a realloc call. The varlist[] entry is also updated.

TEE_ReadObjectData was not being passed a handle to the object correctly causing initialization to fail when there were existing variables.

This fix allows the authvar TA to pass the UEFI test app (5/6), there is a flaw in one of the tests which causes a failure on a technicallity (random buffer of data + authentication attribute gives a bad parameter error instead of a security violation error as the test expects).