[coreboot] qemu v3 etherboot
Peter Stuge
peter at stuge.se
Thu Mar 20 17:46:17 CET 2008
On Thu, Mar 20, 2008 at 09:40:11AM -0700, ron minnich wrote:
> On Thu, Mar 20, 2008 at 9:27 AM, Peter Stuge <peter at stuge.se> wrote:
>
> > Currently v3 looks for segments until a segment cannot be found.
> >
> > This is counterintuitive and potentially a security hole, I think
> > we will fix it but so far I think everything works anyway.
>
> I don't quite get counterintuitive but hey ...
User stores a payload with n segments into flash, uses a coreboot
tool (lar) to do so, and yet information is lost until coreboot run
time when the payload is to be executed.
> security hole? the whole bios is that :-)
Think flashing over padding files with a rouge segment.
//Peter
More information about the coreboot
mailing list