[PATCH v2 5/6] tpm: PCR allocate during PCR extend to disable the unsupported algorithms

Ilias Apalodimas ilias.apalodimas at linaro.org
Thu Jan 23 07:19:28 CET 2025


On Fri, 17 Jan 2025 at 18:41, Raymond Mao <raymond.mao at linaro.org> wrote:
>
> During PCR extend process, if any unsupported algorithms are active,
> try to use PCR allocate to inactivate them.
>
> Signed-off-by: Raymond Mao <raymond.mao at linaro.org>
> ---
> changes in v2
> - None.
>
>  lib/tpm-v2.c | 5 ++++-
>  1 file changed, 4 insertions(+), 1 deletion(-)
>
> diff --git a/lib/tpm-v2.c b/lib/tpm-v2.c
> index 0e497b2c2a..4995ddc9af 100644
> --- a/lib/tpm-v2.c
> +++ b/lib/tpm-v2.c
> @@ -344,7 +344,10 @@ u32 tpm2_pcr_extend(struct udevice *dev, u32 index, u32 algorithm,
>
>         if (!tpm2_check_active_banks(dev)) {
>                 log_err("Cannot extend PCRs if all the TPM enabled algorithms are not supported\n");
> -               return -EINVAL;
> +
> +               ret = tpm2_pcr_allocate(dev, 0);
> +               if (ret)
> +                       return -EINVAL;
>         }
>         /*
>          * Fill the command structure starting from the first buffer:
> --
> 2.25.1
>

Reviewed-by: Ilias Apalodimas <ilias.apalodimas at linaro.org>


More information about the U-Boot mailing list