libsecureboot: do further checks on files without manifests
ClosedPublic
Actions

Authored by khng on Nov 26 2025, 7:58 PM.

Details

Reviewers

imp
sjg

Group Reviewers

Restricted Owners Package

(Owns No Changed Paths)

Commits

rG52c0749723bd: libsecureboot: do further checks on files without manifests

Summary

verify_prep can return VE_FINGERPRINT_NONE. Consider such scenario so
the VE_GEUSS heuristics works with files that likely will not have
fingerprints in the manifest file.

Obtained from: Hewlett Packard Enterprise

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

khng created this revision.Nov 26 2025, 7:58 PM

Owners added a reviewer: Restricted Owners Package.Nov 26 2025, 7:58 PM

Herald added a subscriber: dab. · View Herald TranscriptNov 26 2025, 7:58 PM

khng requested review of this revision.Nov 26 2025, 7:58 PM

Harbormaster completed remote builds in B68877: Diff 167155.Nov 26 2025, 7:58 PM

khng added a reviewer: sjg.Nov 26 2025, 7:59 PM

sjg accepted this revision.Nov 26 2025, 8:29 PM

This revision is now accepted and ready to land.Nov 26 2025, 8:29 PM

Closed by commit rG52c0749723bd: libsecureboot: do further checks on files without manifests (authored by khng). · Explain WhyNov 27 2025, 2:19 AM

This revision was automatically updated to reflect the committed changes.

khng added a commit: rG52c0749723bd: libsecureboot: do further checks on files without manifests.

Revision Contents
Changeset List

Path

Size

lib/

libsecureboot/

verify_file.c

2 lines

Diff 167168

View Options

lib/libsecureboot/verify_file.c

libsecureboot: do further checks on files without manifestsClosedPublicActions