admin/chipsec-chipsec
1
0
Fork 0
mirror of https://github.com/chipsec/chipsec synced 2026-06-08 13:31:00 +00:00
Code Issues Packages Projects Releases Wiki Activity
855 Commits 16 Branches 107 Tags
1.4.8
Commit Graph

109 Commits

Author SHA1 Message Date
Assaf Carlsbad 10bc5d1f2b Try to replace other bootloaders as well. 2020-02-28 15:48:18 -08:00
Assaf Carlsbad 6117d46b43 Add Shell.efi 2020-02-28 15:48:18 -08:00
Assaf Carlsbad 5e16e89765 Warn if boot loader can't be found on ESP. 2020-02-28 15:48:18 -08:00
Assaf Carlsbad 16bf089251 Tabs to spaces. 2020-02-28 15:48:18 -08:00
Assaf Carlsbad cd202f5ed0 Gracefully handle the case where 'virus_total_apis' is not installed. 2020-02-28 15:47:57 -08:00
Assaf Carlsbad ca1d27e046 Introduce a small tool to perform reputation checks on EFI modules based on the VirusTotal API. 2020-02-28 15:47:57 -08:00
brentholtsclaw 0a97f2229c Modify SNB support for spd_wd 
Signed-off-by: brentholtsclaw <brent.holtsclaw@intel.com>
 2020-02-28 15:43:11 -08:00
Nathaniel Mitchell 157104bff4 Fixed copy right year and removed enterprise verbiage. 
Signed-off-by: Nathaniel Mitchell <nathaniel.p.mitchell@intel.com>
 2020-02-05 11:08:38 -08:00
Nathaniel Mitchell dfc9d5953a Fixed errors caused by list_EFI_variables in Windows. 
Fixing issues in helper/modules that are caused by some versions of windows blocking runtime access to UEFI varialbes. Also fixed issue print_buffer issue when using --hal.

Signed-off-by: Nathaniel Mitchell <nathaniel.p.mitchell@intel.com>
 2020-02-05 11:08:38 -08:00
BrentHoltsclaw e7b2c983ec Cleanup imports within modules directory 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2020-01-23 15:07:44 -08:00
BrentHoltsclaw cb4f8e889d Clean up spi_access and add check for valid flash descriptor 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2020-01-23 08:55:22 -08:00
nick 23cc63f126 checing IA32_FEATURE_CONTROL and TCO1_CNT lock on atom 2020-01-22 15:53:36 -08:00
assafcarlsbad 27f79aa991 Update copyright years. 2020-01-21 14:44:37 -08:00
assafcarlsbad 79d662bf80 Update access_uefispec.py 2020-01-21 14:44:37 -08:00
Assaf Carlsbad cc63edbc46 Check that 'uefispec_concern' is not empty before logging an error message. 2020-01-21 14:44:37 -08:00
Assaf Carlsbad 666d075213 Always un-mount the ESP, even in the face of exceptions. 2020-01-21 14:44:13 -08:00
Assaf Carlsbad 017a1076a9 Build path to blacklist.json such that it will be valid when running the py2exe version. 2020-01-13 10:42:04 -08:00
Assaf Carlsbad 53c6310861 Strip terminating NULL bytes from the CPU brand. 2020-01-13 10:29:46 -08:00
BrentHoltsclaw a582c5249f Cleanup sgx_check 
Add is_supported funciton
cleanup imports
check register field name not bits where applicable
modify prmrr config lock check

Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-12-19 15:43:48 -08:00
BrentHoltsclaw f984ad68e4 fixup some lgtm_errors 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-12-19 14:10:43 -08:00
BrentHoltsclaw 71bb8103b6 Update is_supported to not run if bootscript is not found 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-12-05 15:51:13 -08:00
BrentHoltsclaw 6be52acec2 Remove smbios bios_version module 
The module is currently not stable and causing issues.  Given it is an Informational Check, it is being removed for the time being.
Similar functionality exists within chipsec util.

Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-11-18 15:23:45 -08:00
Erik Bjorge 40ff7cffbf Get extended BIOS R/W access information 
Use the Flash Descriptor Observability registers to OR in the settings
from the flash descriptor to the existing FRAP register fields.

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>
 2019-11-18 15:13:59 -08:00
nick 6817e43149 remap module not applicable for atom 2019-11-18 15:12:19 -08:00
Erik Bjorge 736871e5f9 Adding initial SMBIOS support (#722) 
* Initial SMBIOS HAL and Command

- Only searches for the Entry Point structure
- Currently only detects 2.x structures correctly

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>

* Added support for 64bit 3.x entry point

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>

* Updated command processing

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>

* Added ability to parse structures based on header

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>

* Updated command processing

- Made command processing a bit more flexible
- Improved logging messages
- Added place holders for future functionality

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>

* Added ability to get structures by type

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>

* Added string extraction support

- Also added some initial code for decoding type 0 structure information
- Updated interface to make things cleaner

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>

* Added decode support

- Only supports partial decode of Type 0 (2.0) structure

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>

* Removed unused variable

- Also fixed tool name in timing string

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>

* Adding basic BIOS Information module

- Adding module to get the BIOS Information SMBIOS data

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>

* Python 3 updates

- Requires additional Python 3 UEFI HAL changes

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>
 2019-10-31 14:17:47 -07:00
Erik Bjorge c2f13379e7 Fixing Python 3 bug 
Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>
 2019-10-24 14:11:06 -07:00
Erik Bjorge af7fdb6d37 Fixing imports and __init__ function 
Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>
 2019-10-24 14:11:06 -07:00
Frinzell 7eafa42649 Minor typo in debugenabled 2019-10-21 13:12:05 -07:00
Erik Bjorge d5c4d234c9 Adding CPU Info module 
This new module just displays general CPU data.

Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>
 2019-10-21 13:11:00 -07:00
BrentHoltsclaw b38d1e02f0 Fix import error and cleanup imports for tools.secureboot.te 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-09-24 12:23:01 -07:00
BrentHoltsclaw b1bfb491a7 Satisfy unittest errors 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-09-24 12:22:28 -07:00
BrentHoltsclaw e7f23c76b6 Fixup lgtm module errors 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-09-24 12:22:28 -07:00
BrentHoltsclaw eb7d40e23c Remove dumpstr from tools.secureboot.te 
Function is unused and causing build/install errors within py2

Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-09-17 15:26:30 -07:00
BrentHoltsclaw abb0f3231f Fix ia32cfg verbose error 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-09-04 14:04:28 -07:00
BrentHoltsclaw c390e0378a requested changes 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-09-04 09:17:56 -07:00
BrentHoltsclaw 30312c7905 Cleanup ia32cfg modules 
Cleanup of imports
Enabled check per thread

Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-09-04 09:17:56 -07:00
Frinzell f0e0410788 Optimize a check 2019-09-03 11:13:21 -07:00
Frinzell 288b4d3e32 Updates to memlock 2019-09-03 11:13:21 -07:00
BrentHoltsclaw 877ecb1ad8 Fixes to make uefivar_fuzz python3 compatible 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-09-03 10:06:46 -07:00
BrentHoltsclaw 4ce1127743 Add cs_input to fix compatability issues with input/raw_input 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-09-03 10:06:46 -07:00
BrentHoltsclaw 3827ec6b7e Fix setup.py install errors 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-09-03 10:06:46 -07:00
BrentHoltsclaw 6fccb31877 Fixup spd_wd to work with python3 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-08-16 14:19:26 -07:00
BrentHoltsclaw 73485556d7 Cleanup bugs - Division compliant with python3 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-08-16 14:19:02 -07:00
BrentHoltsclaw 18827a8574 Cleanup use is for None type compare 
Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-08-16 14:18:47 -07:00
BrentHoltsclaw 2efeda4345 Merge python3-rc2 branch into master (#656) 2019-08-15 14:11:20 -07:00
BrentHoltsclaw abf3f627e6 Cleanup of debug_cleanup module 
Removed hardcoded offsets

Signed-off-by: BrentHoltsclaw <brent.holtsclaw@intel.com>
 2019-07-23 11:13:19 -07:00
Erik Bjorge f4408c5cf8 Adding case for PRMRR Base/Mask set to zero. 
Signed-off-by: Erik Bjorge <erik.c.bjorge@intel.com>
 2019-07-23 11:12:53 -07:00
Jesse Michael cbb6ea45c0 Use logger functions instead of print and set self.res before returning in case of error 2019-06-13 13:15:25 -07:00
Jesse Michael 6fa21fc97c If SPD_WD is not set, fail the check if SPDs only are detected, informational message otherwise 2019-06-13 13:15:25 -07:00
Jesse Michael 1f52d84777 Add vulnerability check to verify that SPD Write Disable bit in SMBus controller bit is set 2019-06-13 13:15:25 -07:00