Files
chipsec-chipsec/chipsec/utilcmd/ucode_cmd.py
T
2019-08-15 14:11:20 -07:00

97 lines
3.9 KiB
Python

#!/usr/bin/python
#CHIPSEC: Platform Security Assessment Framework
#Copyright (c) 2010-2015, Intel Corporation
#
#This program is free software; you can redistribute it and/or
#modify it under the terms of the GNU General Public License
#as published by the Free Software Foundation; Version 2.
#
#This program is distributed in the hope that it will be useful,
#but WITHOUT ANY WARRANTY; without even the implied warranty of
#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
#GNU General Public License for more details.
#
#You should have received a copy of the GNU General Public License
#along with this program; if not, write to the Free Software
#Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
#
#Contact information:
#chipsec@intel.com
#
import time
from chipsec.command import BaseCommand
from chipsec.file import read_file
from chipsec.hal.ucode import Ucode, dump_ucode_update_header
# ###################################################################
#
# Microcode patches
#
# ###################################################################
class UCodeCommand(BaseCommand):
"""
>>> chipsec_util ucode id|load|decode [ucode_update_file (in .PDB or .BIN format)] [cpu_id]
Examples:
>>> chipsec_util ucode id
>>> chipsec_util ucode load ucode.bin 0
>>> chipsec_util ucode decode ucode.pdb
"""
def requires_driver(self):
# No driver required when printing the util documentation
if len(self.argv) < 3:
return False
return True
def run(self):
if len(self.argv) < 3:
print (UCodeCommand.__doc__)
return
ucode_op = self.argv[2]
t = time.time()
if ( 'load' == ucode_op ):
if (4 == len(self.argv)):
ucode_filename = self.argv[3]
self.logger.log( "[CHIPSEC] Loading Microcode update on all cores from '{}'".format(ucode_filename) )
self.cs.ucode.update_ucode_all_cpus( ucode_filename )
elif (5 == len(self.argv)):
ucode_filename = self.argv[3]
cpu_thread_id = int(self.argv[4],16)
self.logger.log( "[CHIPSEC] Loading Microcode update on CPU{:d} from '{}'".format(cpu_thread_id, ucode_filename) )
self.cs.ucode.update_ucode( cpu_thread_id, ucode_filename )
else:
print (UCodeCommand.__doc__)
return
elif ( 'decode' == ucode_op ):
if (4 == len(self.argv)):
ucode_filename = self.argv[3]
if (not ucode_filename.endswith('.pdb')):
self.logger.log( "[CHIPSEC] Ucode update file is not PDB file: '{}'".format(ucode_filename) )
return
pdb_ucode_buffer = read_file( ucode_filename )
self.logger.log( "[CHIPSEC] Decoding Microcode Update header of PDB file: '{}'".format(ucode_filename) )
dump_ucode_update_header( pdb_ucode_buffer )
elif ( 'id' == ucode_op ):
if (3 == len(self.argv)):
for tid in range(self.cs.msr.get_cpu_thread_count()):
ucode_update_id = self.cs.ucode.ucode_update_id( tid )
self.logger.log( "[CHIPSEC] CPU{:d}: Microcode update ID = 0x{:08X}".format(tid, ucode_update_id) )
elif (4 == len(self.argv)):
cpu_thread_id = int(self.argv[3],16)
ucode_update_id = self.cs.ucode.ucode_update_id( cpu_thread_id )
self.logger.log( "[CHIPSEC] CPU{:d}: Microcode update ID = 0x{:08X}".format(cpu_thread_id, ucode_update_id) )
else:
self.logger.error( "unknown command-line option '{:32}'".format(ucode_op) )
print (UCodeCommand.__doc__)
return
self.logger.log( "[CHIPSEC] (ucode) time elapsed {:.3f}".format(time.time()-t) )
commands = { 'ucode': UCodeCommand }