Re: chipsec integrity check

Healer64 <[email protected]> Fri, 01 Dec 2017 14:32:52 -0500
Newsgroups dev.linux.lists.oe-chipsec
Message-ID <LmNSBwrulsyeqM_NduX5YaqNxORrJwYyqlSENBczt5C-h38k5GJ875sS5nqSKH9b1Lk0Wei0dltgfY_GhmIQA1rJ_hHiGDgP6b1iyGCg9Co=@protonmail.com>
--===============3215885987047884650==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

Of course.  I did my own analysis which may save you some effort.

Of the efi variables which had changed from the baseline, very few addition=
al changes were seen after a reboot into my normal OS then a reboot into th=
e chipsec usb.  Only the ErrOutDev and SctCsmMemoryMapVariable changed and =
SctCsmMemoryMapVariable is a new variable not part of the baseline.

Here is a list of other changes that occurred with just the reboots mention=
ed above:
ec dump =3D changed
iommu config GFXVTD =3D BAR value changed, flags changed back to baseline
iommu config VTD =3D BAR value changed, some flags changed back to baseline=
 but not all
iommu status GFXVTD =3D returned to baseline
iommu status VTD =3D changed
mmio dump DMIBAR =3D changed
mmio dump GFXVTBAR =3D returned to baseline except mmio register range
mmio dump GMADR =3D changed
mmio dump GTTMADR =3D changed
mmio dump HDABAR =3D changed
mmio dump HDBAR =3D no change
mmio dump MCHBAR =3D changed
mmio dump PXPEPBAR =3D changed
mmio dump VTBAR =3D changed
mmio list =3D changed
pci dump =3D changed

Also when doing the iommu dump config GFXVTD I do get errors from chipsec. =
I couldn't capture them.  They don't show up in the log and even redirectin=
g standard out and standard error doesn't catch them, but I was able to cop=
y one from the screen.
ioremap error for 0xde0c1000-0xdec2000, requested 0x10, got 0x0

Also it occured to me I should mention this is an AMD system and chipsec co=
mplains about an unsupported platform.  Most of the functions appear to wor=
k just fine even so, but it is possible it could have some affect on the re=
sults.

Sent with [ProtonMail](https://protonmail.com) Secure Email.

> -------- Original Message --------
> Subject: RE: [chipsec] chipsec integrity check
> Local Time: December 1, 2017 12:27 AM
> UTC Time: December 1, 2017 12:27 AM
> From: erik.c.bjorge(a)intel.com
> To: Healer64 <[email protected]>
> chipsec(a)lists.01.org <[email protected]>
>
> Thanks for sending the new logs.  Give us a day or so to look them over a=
nd see if we can find anything new.
>
> Thanks,
>
> -Erik
>
> []From: chipsec [mailto:chipsec-bounces(a)lists.01.org] On Behalf Of Heal=
er64
> Sent: Thursday, November 30, 2017 4:23 PM
> To: Bjorge, Erik C <[email protected]>
> Cc: chipsec(a)lists.01.org
> Subject: Re: [chipsec] chipsec integrity check
>
> After a reboot, I ran the tests again.  New log is here:
>
> https://pastebin.com/XCHrYYJF
>
> https://pastebin.com/NiYcnxGG
>
> Just for kicks I did a diff of the 2 instances.
>
> https://pastebin.com/KLea3gVf
>
> Some of the BAR values have changed again.  No longer 0.  That seems odd.
>
>>
>>
>> Sent with [ProtonMail](https://protonmail.com) Secure Email.

--===============3215885987047884650==
Content-Type: text/html
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"

PGRpdj5PZiBjb3Vyc2UuJm5ic3A7IEkgZGlkIG15IG93biBhbmFseXNpcyB3aGljaCBtYXkgc2F2
ZSB5b3Ugc29tZSBlZmZvcnQuPGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+T2YgdGhlIGVm
aSB2YXJpYWJsZXMgd2hpY2ggaGFkIGNoYW5nZWQgZnJvbSB0aGUgYmFzZWxpbmUsIHZlcnkgZmV3
IGFkZGl0aW9uYWwgY2hhbmdlcyB3ZXJlIHNlZW4gYWZ0ZXIgYSByZWJvb3QgaW50byBteSBub3Jt
YWwgT1MgdGhlbiBhIHJlYm9vdCBpbnRvIHRoZSBjaGlwc2VjIHVzYi4mbmJzcDsgT25seSB0aGUg
RXJyT3V0RGV2IGFuZCBTY3RDc21NZW1vcnlNYXBWYXJpYWJsZSBjaGFuZ2VkIGFuZCBTY3RDc21N
ZW1vcnlNYXBWYXJpYWJsZSBpcyBhIG5ldyB2YXJpYWJsZSBub3QgcGFydCBvZiB0aGUgYmFzZWxp
bmUuPGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+SGVyZSBpcyBhIGxpc3Qgb2Ygb3RoZXIg
Y2hhbmdlcyB0aGF0IG9jY3VycmVkIHdpdGgganVzdCB0aGUgcmVib290cyBtZW50aW9uZWQgYWJv
dmU6PGJyPjwvZGl2PjxkaXY+ZWMgZHVtcCA9IGNoYW5nZWQ8YnI+PC9kaXY+PGRpdj5pb21tdSBj
b25maWcgR0ZYVlREID0gQkFSIHZhbHVlIGNoYW5nZWQsIGZsYWdzIGNoYW5nZWQgYmFjayB0byBi
YXNlbGluZTxicj48L2Rpdj48ZGl2PmlvbW11IGNvbmZpZyBWVEQgPSBCQVIgdmFsdWUgY2hhbmdl
ZCwgc29tZSBmbGFncyBjaGFuZ2VkIGJhY2sgdG8gYmFzZWxpbmUgYnV0IG5vdCBhbGw8YnI+PC9k
aXY+PGRpdj5pb21tdSBzdGF0dXMgR0ZYVlREID0gcmV0dXJuZWQgdG8gYmFzZWxpbmU8YnI+PC9k
aXY+PGRpdj5pb21tdSBzdGF0dXMgVlREID0gY2hhbmdlZDxicj48L2Rpdj48ZGl2Pm1taW8gZHVt
cCBETUlCQVIgPSBjaGFuZ2VkPGJyPjwvZGl2PjxkaXY+bW1pbyBkdW1wIEdGWFZUQkFSID0gcmV0
dXJuZWQgdG8gYmFzZWxpbmUgZXhjZXB0IG1taW8gcmVnaXN0ZXIgcmFuZ2U8YnI+PC9kaXY+PGRp
dj5tbWlvIGR1bXAgR01BRFIgPSBjaGFuZ2VkPGJyPjwvZGl2PjxkaXY+bW1pbyBkdW1wIEdUVE1B
RFIgPSBjaGFuZ2VkPGJyPjwvZGl2PjxkaXY+bW1pbyBkdW1wIEhEQUJBUiA9IGNoYW5nZWQ8YnI+
PC9kaXY+PGRpdj5tbWlvIGR1bXAgSERCQVIgPSBubyBjaGFuZ2U8YnI+PC9kaXY+PGRpdj5tbWlv
IGR1bXAgTUNIQkFSID0gY2hhbmdlZDxicj48L2Rpdj48ZGl2Pm1taW8gZHVtcCBQWFBFUEJBUiA9
IGNoYW5nZWQ8YnI+PC9kaXY+PGRpdj5tbWlvIGR1bXAgVlRCQVIgPSBjaGFuZ2VkPGJyPjwvZGl2
PjxkaXY+bW1pbyBsaXN0ID0gY2hhbmdlZDxicj48L2Rpdj48ZGl2PnBjaSBkdW1wID0gY2hhbmdl
ZDxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkFsc28gd2hlbiBkb2luZyB0aGUgaW9tbXUg
ZHVtcCBjb25maWcgR0ZYVlREIEkgZG8gZ2V0IGVycm9ycyBmcm9tIGNoaXBzZWMuIEkgY291bGRu
J3QgY2FwdHVyZSB0aGVtLiZuYnNwOyBUaGV5IGRvbid0IHNob3cgdXAgaW4gdGhlIGxvZyBhbmQg
ZXZlbiByZWRpcmVjdGluZyBzdGFuZGFyZCBvdXQgYW5kIHN0YW5kYXJkIGVycm9yIGRvZXNuJ3Qg
Y2F0Y2ggdGhlbSwgYnV0IEkgd2FzIGFibGUgdG8gY29weSBvbmUgZnJvbSB0aGUgc2NyZWVuLjxi
cj48L2Rpdj48ZGl2PmlvcmVtYXAgZXJyb3IgZm9yIDB4ZGUwYzEwMDAtMHhkZWMyMDAwLCByZXF1
ZXN0ZWQgMHgxMCwgZ290IDB4MDxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkFsc28gaXQg
b2NjdXJlZCB0byBtZSBJIHNob3VsZCBtZW50aW9uIHRoaXMgaXMgYW4gQU1EIHN5c3RlbSBhbmQg
Y2hpcHNlYyBjb21wbGFpbnMgYWJvdXQgYW4gdW5zdXBwb3J0ZWQgcGxhdGZvcm0uJm5ic3A7IE1v
c3Qgb2YgdGhlIGZ1bmN0aW9ucyBhcHBlYXIgdG8gd29yayBqdXN0IGZpbmUgZXZlbiBzbywgYnV0
IGl0IGlzIHBvc3NpYmxlIGl0IGNvdWxkIGhhdmUgc29tZSBhZmZlY3Qgb24gdGhlIHJlc3VsdHMu
PGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2Pjxk
aXYgY2xhc3M9InByb3Rvbm1haWxfc2lnbmF0dXJlX2Jsb2NrIj48ZGl2IGNsYXNzPSJwcm90b25t
YWlsX3NpZ25hdHVyZV9ibG9jay11c2VyIHByb3Rvbm1haWxfc2lnbmF0dXJlX2Jsb2NrLWVtcHR5
Ij48YnI+PC9kaXY+PGRpdiBjbGFzcz0icHJvdG9ubWFpbF9zaWduYXR1cmVfYmxvY2stcHJvdG9u
Ij5TZW50IHdpdGggPGEgaHJlZj0iaHR0cHM6Ly9wcm90b25tYWlsLmNvbSI+UHJvdG9uTWFpbDwv
YT4gU2VjdXJlIEVtYWlsLjxicj48L2Rpdj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48YmxvY2txdW90
ZSBjbGFzcz0icHJvdG9ubWFpbF9xdW90ZSIgdHlwZT0iY2l0ZSI+PGRpdj4tLS0tLS0tLSBPcmln
aW5hbCBNZXNzYWdlIC0tLS0tLS0tPGJyPjwvZGl2PjxkaXY+U3ViamVjdDogUkU6IFtjaGlwc2Vj
XSBjaGlwc2VjIGludGVncml0eSBjaGVjazxicj48L2Rpdj48ZGl2PkxvY2FsIFRpbWU6IERlY2Vt
YmVyIDEsIDIwMTcgMTI6MjcgQU08YnI+PC9kaXY+PGRpdj5VVEMgVGltZTogRGVjZW1iZXIgMSwg
MjAxNyAxMjoyNyBBTTxicj48L2Rpdj48ZGl2PkZyb206IGVyaWsuYy5iam9yZ2VAaW50ZWwuY29t
PGJyPjwvZGl2PjxkaXY+VG86IEhlYWxlcjY0ICZsdDtIZWFsZXI2NEBwcm90b25tYWlsLmNvbSZn
dDs8YnI+PC9kaXY+PGRpdj5jaGlwc2VjQGxpc3RzLjAxLm9yZyAmbHQ7Y2hpcHNlY0BsaXN0cy4w
MS5vcmcmZ3Q7PGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+IDxicj48L2Rpdj48ZGl2IGNs
YXNzPSJXb3JkU2VjdGlvbjEiPjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGNsYXNzPSJjb2xv
dXIiIHN0eWxlPSJjb2xvcjpyZ2IoMzEsIDczLCAxMjUpIj48c3BhbiBjbGFzcz0iZm9udCIgc3R5
bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PHNwYW4gY2xh
c3M9InNpemUiIHN0eWxlPSJmb250LXNpemU6MTFwdCI+VGhhbmtzIGZvciBzZW5kaW5nIHRoZSBu
ZXcgbG9ncy4mbmJzcDsgR2l2ZSB1cyBhIGRheSBvciBzbyB0byBsb29rIHRoZW0gb3ZlciBhbmQg
c2VlIGlmIHdlIGNhbiBmaW5kIGFueXRoaW5nIG5ldy48L3NwYW4+PC9zcGFuPjwvc3Bhbj48YnI+
PC9wPjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGNsYXNzPSJjb2xvdXIiIHN0eWxlPSJjb2xv
cjpyZ2IoMzEsIDczLCAxMjUpIj48c3BhbiBjbGFzcz0iZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5
OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PHNwYW4gY2xhc3M9InNpemUiIHN0eWxl
PSJmb250LXNpemU6MTFwdCI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PGJyPjwvcD48cCBj
bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBjbGFzcz0iY29sb3VyIiBzdHlsZT0iY29sb3I6cmdiKDMx
LCA3MywgMTI1KSI+PHNwYW4gY2xhc3M9ImZvbnQiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtD
YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxzcGFuIGNsYXNzPSJzaXplIiBzdHlsZT0iZm9udC1z
aXplOjExcHQiPlRoYW5rcyw8L3NwYW4+PC9zcGFuPjwvc3Bhbj48YnI+PC9wPjxwIGNsYXNzPSJN
c29Ob3JtYWwiPjxzcGFuIGNsYXNzPSJjb2xvdXIiIHN0eWxlPSJjb2xvcjpyZ2IoMzEsIDczLCAx
MjUpIj48c3BhbiBjbGFzcz0iZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm
cXVvdDssc2Fucy1zZXJpZiI+PHNwYW4gY2xhc3M9InNpemUiIHN0eWxlPSJmb250LXNpemU6MTFw
dCI+LUVyaWs8L3NwYW4+PC9zcGFuPjwvc3Bhbj48YnI+PC9wPjxwIGNsYXNzPSJNc29Ob3JtYWwi
PjxzcGFuIGNsYXNzPSJjb2xvdXIiIHN0eWxlPSJjb2xvcjpyZ2IoMzEsIDczLCAxMjUpIj48c3Bh
biBjbGFzcz0iZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu
cy1zZXJpZiI+PHNwYW4gY2xhc3M9InNpemUiIHN0eWxlPSJmb250LXNpemU6MTFwdCI+Jm5ic3A7
PC9zcGFuPjwvc3Bhbj48L3NwYW4+PGJyPjwvcD48ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk
ZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPjxkaXY+
PGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3Bh
ZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIG5hbWU9Il9f
X19fcmVwbHlzZXBhcmF0b3IiPjwvYT48Yj48c3BhbiBjbGFzcz0iZm9udCIgc3R5bGU9ImZvbnQt
ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PHNwYW4gY2xhc3M9InNpemUi
IHN0eWxlPSJmb250LXNpemU6MTFwdCI+RnJvbTo8L3NwYW4+PC9zcGFuPjwvYj48c3BhbiBjbGFz
cz0iZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp
ZiI+PHNwYW4gY2xhc3M9InNpemUiIHN0eWxlPSJmb250LXNpemU6MTFwdCI+IGNoaXBzZWMgW21h
aWx0bzpjaGlwc2VjLWJvdW5jZXNAbGlzdHMuMDEub3JnXSA8Yj5PbiBCZWhhbGYgT2YgPC9iPkhl
YWxlcjY0PGJyPiA8Yj5TZW50OjwvYj4gVGh1cnNkYXksIE5vdmVtYmVyIDMwLCAyMDE3IDQ6MjMg
UE08YnI+IDxiPlRvOjwvYj4gQmpvcmdlLCBFcmlrIEMgJmx0O2VyaWsuYy5iam9yZ2VAaW50ZWwu
Y29tJmd0Ozxicj4gPGI+Q2M6PC9iPiBjaGlwc2VjQGxpc3RzLjAxLm9yZzxicj4gPGI+U3ViamVj
dDo8L2I+IFJlOiBbY2hpcHNlY10gY2hpcHNlYyBpbnRlZ3JpdHkgY2hlY2s8L3NwYW4+PC9zcGFu
PjwvcD48L2Rpdj48L2Rpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8YnI+PC9wPjxkaXY+
PHAgY2xhc3M9Ik1zb05vcm1hbCI+QWZ0ZXIgYSByZWJvb3QsIEkgcmFuIHRoZSB0ZXN0cyBhZ2Fp
bi4mbmJzcDsgTmV3IGxvZyBpcyBoZXJlOjxicj48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz0iTXNv
Tm9ybWFsIj48YSBocmVmPSJodHRwczovL3Bhc3RlYmluLmNvbS9YQ0hyWVlKRiI+aHR0cHM6Ly9w
YXN0ZWJpbi5jb20vWENIcllZSkY8L2E+PGJyPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPSJNc29O
b3JtYWwiPjxhIGhyZWY9Imh0dHBzOi8vcGFzdGViaW4uY29tL05pWWNueEdHIj5odHRwczovL3Bh
c3RlYmluLmNvbS9OaVljbnhHRzwvYT48YnI+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9Ik1zb05v
cm1hbCI+Jm5ic3A7PGJyPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPSJNc29Ob3JtYWwiPkp1c3Qg
Zm9yIGtpY2tzIEkgZGlkIGEgZGlmZiBvZiB0aGUgMiBpbnN0YW5jZXMuPGJyPjwvcD48L2Rpdj48
ZGl2PjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxicj48L3A+PC9kaXY+PGRpdj48cCBjbGFz
cz0iTXNvTm9ybWFsIj48YSBocmVmPSJodHRwczovL3Bhc3RlYmluLmNvbS9LTGVhM2dWZiI+aHR0
cHM6Ly9wYXN0ZWJpbi5jb20vS0xlYTNnVmY8L2E+PGJyPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNz
PSJNc29Ob3JtYWwiPiZuYnNwOzxicj48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFs
Ij4mbmJzcDs8YnI+PC9wPjwvZGl2PjxkaXY+PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz
cDs8YnI+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9Ik1zb05vcm1hbCI+U29tZSBvZiB0aGUgQkFS
IHZhbHVlcyBoYXZlIGNoYW5nZWQgYWdhaW4uJm5ic3A7IE5vIGxvbmdlciAwLiZuYnNwOyBUaGF0
IHNlZW1zIG9kZC48YnI+PC9wPjwvZGl2PjwvZGl2PjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4t
dG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPjxkaXY+PGRpdj48ZGl2PjxwIHN0eWxlPSJt
c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byIgY2xhc3M9
Ik1zb05vcm1hbCI+Jm5ic3A7PGJyPjwvcD48L2Rpdj48ZGl2PjxwIHN0eWxlPSJtc28tbWFyZ2lu
LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byIgY2xhc3M9Ik1zb05vcm1h
bCI+U2VudCB3aXRoIDxhIGhyZWY9Imh0dHBzOi8vcHJvdG9ubWFpbC5jb20iPlByb3Rvbk1haWw8
L2E+IFNlY3VyZSBFbWFpbC48YnI+PC9wPjwvZGl2PjwvZGl2PjxkaXY+PHAgc3R5bGU9Im1zby1t
YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIiBjbGFzcz0iTXNv
Tm9ybWFsIj4mbmJzcDs8YnI+PC9wPjwvZGl2PjwvZGl2PjwvYmxvY2txdW90ZT48ZGl2PjxwIGNs
YXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxicj48L3A+PC9kaXY+PC9kaXY+PC9kaXY+PC9ibG9ja3F1
b3RlPjxkaXY+PGJyPjwvZGl2Pg==
--===============3215885987047884650==--