converged-security-suite

converged-security-suite copied to clipboard

bg-prov: bpm-gen is panicking because of out of bounds array access

1

This code is essentially always crashing, because `idx` iterates over `img.Segs`, but `ibbElements` is only of size `ibbCount`, which is almost always smaller. https://github.com/9elements/converged-security-suite/blob/8e176a0bb8493584a972805def838c7dfb344aee/pkg/provisioning/bootguard/bootguard.go#L1071-L1082 I could easily fix that, but...

ansiwen

BG suite multierror support

5

Signed-off-by: Daniel Maslowski

orangecms

Issues following bg-prov instructions, may be several bugs or user error

6

Thanks for this project, it's awesome! I am trying to write new bootguard metadata to a sapphire rapids board, and found this, which is perfect. I ran into a few...

65a

bg-prov bpm-gen-v-1 is broken

1

``` ./bg-prov bpm-gen-v-1 ./bpm_unsigned.bin ./bios.rom bg-prov: error: no Run() method found in hierarchy of bpm-gen-v-1 ```

ansiwen

Reproduce PCR0: Lenovo X1 Carbon Gen9 test data

6

[test-data.zip](https://github.com/9elements/converged-security-suite/files/8413886/test-data.zip)

zaolin

intel/manifest/metadata parser is flakey

1

Parser dies by parsing internal file e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 which is correct an can be parsed by intel tooling.

zaolin

From the template itself you can't identify which data needs to be filled in.

PatrickRudolph

walterchris

When I use the stitch command, it does not complain when I enter a file that does not exist. It should error if the file does not exists.

walterchris

Create a downloadable converged security suite ISO which runs test automatically

1

* Prebuilt ISO image on release * OS should be built with all tooling and correct kernel configuration

zaolin