Add BCC checking
Check whether any stage in the received BCC is marked as debug. If
not, refuse to apply any debug policy we receive. (The bootloader
shouldn't pass one in this case, this is just to make sure we catch
any mistake here.)
In passing fix the lifetime of the config descriptor buffer
(b/280617929).
Bug: 275424867
Test: atest MicrodroidTests
Change-Id: I507fedee9e21e8cbda60044a4e0324e0d6530b00
diff --git a/pvmfw/src/dice.rs b/pvmfw/src/dice.rs
index bad3453..e588acb 100644
--- a/pvmfw/src/dice.rs
+++ b/pvmfw/src/dice.rs
@@ -60,13 +60,13 @@
pub fn into_input_values(
self,
salt: &[u8; HIDDEN_SIZE],
+ config_descriptor_buffer: &mut [u8],
) -> diced_open_dice::Result<InputValues> {
- let mut config_descriptor_buffer = [0; 128];
let config_descriptor_size = bcc_format_config_descriptor(
Some(cstr!("vm_entry")),
None, // component_version
false, // resettable
- &mut config_descriptor_buffer,
+ config_descriptor_buffer,
)?;
let config = &config_descriptor_buffer[..config_descriptor_size];