1 /* Microsoft Reference Implementation for TPM 2.0
2 *
3 * The copyright in this software is being made available under the BSD License,
4 * included below. This software may be subject to other third party and
5 * contributor rights, including patent rights, and no such rights are granted
6 * under this license.
7 *
8 * Copyright (c) Microsoft Corporation
9 *
10 * All rights reserved.
11 *
12 * BSD License
13 *
14 * Redistribution and use in source and binary forms, with or without modification,
15 * are permitted provided that the following conditions are met:
16 *
17 * Redistributions of source code must retain the above copyright notice, this list
18 * of conditions and the following disclaimer.
19 *
20 * Redistributions in binary form must reproduce the above copyright notice, this
21 * list of conditions and the following disclaimer in the documentation and/or
22 * other materials provided with the distribution.
23 *
24 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ""AS IS""
25 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
27 * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
28 * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
29 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
30 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
31 * ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
32 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 */
35 #include "Tpm.h"
36 #include "NV_WriteLock_fp.h"
37
38 #if CC_NV_WriteLock // Conditional expansion of this file
39
40 /*(See part 3 specification)
41 // Set write lock on a NV index
42 */
43 // Return Type: TPM_RC
44 // TPM_RC_ATTRIBUTES neither TPMA_NV_WRITEDEFINE nor
45 // TPMA_NV_WRITE_STCLEAR is SET in Index
46 // referenced by 'nvIndex'
47 // TPM_RC_NV_AUTHORIZATION the authorization was valid but the
48 // authorizing entity ('authHandle')
49 // is not allowed to write to the Index
50 // referenced by 'nvIndex'
51 //
52 TPM_RC
TPM2_NV_WriteLock(NV_WriteLock_In * in)53 TPM2_NV_WriteLock(
54 NV_WriteLock_In *in // IN: input parameter list
55 )
56 {
57 TPM_RC result;
58 NV_REF locator;
59 NV_INDEX *nvIndex = NvGetIndexInfo(in->nvIndex, &locator);
60 TPMA_NV nvAttributes = nvIndex->publicArea.attributes;
61
62 // Input Validation:
63
64 // Common access checks, NvWriteAccessCheck() may return TPM_RC_NV_AUTHORIZATION
65 // or TPM_RC_NV_LOCKED
66 result = NvWriteAccessChecks(in->authHandle, in->nvIndex, nvAttributes);
67 if(result != TPM_RC_SUCCESS)
68 {
69 if(result == TPM_RC_NV_AUTHORIZATION)
70 return result;
71 // If write access failed because the index is already locked, then it is
72 // no error.
73 return TPM_RC_SUCCESS;
74 }
75 // if neither TPMA_NV_WRITEDEFINE nor TPMA_NV_WRITE_STCLEAR is set, the index
76 // can not be write-locked
77 if(!IS_ATTRIBUTE(nvAttributes, TPMA_NV, WRITEDEFINE)
78 && !IS_ATTRIBUTE(nvAttributes, TPMA_NV, WRITE_STCLEAR))
79 return TPM_RCS_ATTRIBUTES + RC_NV_WriteLock_nvIndex;
80 // Internal Data Update
81 // Set the WRITELOCK attribute.
82 // Note: if TPMA_NV_WRITELOCKED were already SET, then the write access check
83 // above would have failed and this code isn't executed.
84 SET_ATTRIBUTE(nvAttributes, TPMA_NV, WRITELOCKED);
85
86 // Write index info back
87 return NvWriteIndexAttributes(nvIndex->publicArea.nvIndex, locator,
88 nvAttributes);
89 }
90
91 #endif // CC_NV_WriteLock