Aseda Aboagye 114f5cee5a g: extension: Add a whitelist for vendor commands. ...

The USB FW upgrade endpoint should really only accept vendor commands
required to perform the firmware update.  This commit adds a whitelist
that is checked whenever a vendor command is received over this
endpoint.

The allowed commands over USB are the following:

 - EXTENSION_POST_RESET
 - VENDOR_CC_IMMEDIATE_RESET (only for dev images)

There is also functionality to have a whitelist for vendor commands that
come over the TPM interface.

BUG=chrome-os-partner:62815
BRANCH=None
TEST=Flash Cr50 with image containing this change.  Verify that an
upgrade over USB to newer image works.
TEST=Try using usb_updater to send a vendor command that's not in the
whitelist.  Verify that the vendor command is dropped.

Change-Id: I71f8ba090a1cc6c9e7c30ce0dd3c25259e8f292f
Signed-off-by: Aseda Aboagye <aaboagye@google.com>
Reviewed-on: https://chromium-review.googlesource.com/443447
Commit-Ready: Aseda Aboagye <aaboagye@chromium.org>
Tested-by: Aseda Aboagye <aaboagye@chromium.org>
Reviewed-by: Vadim Bendebury <vbendeb@chromium.org>

2017-02-18 17:26:59 -08:00

..

acpi.c

common: Add tablet_mode API

2016-11-08 17:11:28 -08:00

adc.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

als.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

ap_hang_detect.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

backlight_lid.c

Support backlight control via lid only

2013-09-27 23:07:21 +00:00

battery.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

bluetooth_le.c

btle: Cleanup: Moved constants, renamed functions

2016-08-11 14:46:33 -07:00

btle_hci_controller.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

btle_ll.c

btle_ll.c: Initialize variables to fix GCC warnings

2016-11-16 19:04:31 -08:00

build.mk

console: Add non-verbose print config option

2017-02-11 13:06:38 -08:00

button.c

console: Add non-verbose print config option

2017-02-11 13:06:38 -08:00

capsense.c

Deferred: Use deferred_data instead of function pointer

2016-04-18 17:32:40 -07:00

case_closed_debug.c

g: use devid 0 and 1 to create a serial number

2016-10-11 23:01:59 -07:00

charge_manager.c

charge_ramp: Specify port number in board_is_vbus_too_low()

2017-02-02 19:09:52 -08:00

charge_ramp.c

charge_ramp: Specify port number in board_is_vbus_too_low()

2017-02-02 19:09:52 -08:00

charge_state_v2.c

cleanup: Remove charge_state_v1

2017-02-06 14:50:32 -08:00

charger_profile_override.c

charger_profile: support multiple battery voltage range thresholds

2017-02-10 19:02:55 -08:00

charger.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

chipset.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

clz.c

Add option to enable GCC LTO

2015-05-19 02:46:27 +00:00

console_output.c

Cr50: The chan command is not safe.

2016-10-01 03:13:43 +00:00

console.c

Cr50: Mark several console commands as safe

2016-08-31 17:20:26 +00:00

crc8.c

crc8: Support crc calculation across non-contiguous data

2016-03-18 22:16:53 -07:00

crc.c

Move software CRC implementation to common

2014-08-08 03:11:38 +00:00

device_state.c

device_state: signal if device_set_state changed the state

2017-01-23 13:38:22 -08:00

dptf.c

eve: Move DPTF tablet mode support to common code

2017-02-14 14:50:36 -08:00

ec.libsharedobjs.ld

build-infr: Add support for shared RO library.

2015-07-17 03:17:50 +00:00

extension.c

g: extension: Add a whitelist for vendor commands.

2017-02-18 17:26:59 -08:00

extpower_gpio.c

extpower: Allow board to override signal debounce time

2016-09-02 07:11:33 -07:00

fan.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

firmware_image.lds.S

rwsig: Add support for rwsig image types

2017-02-17 04:09:37 -08:00

firmware_image.S

rwsig: Add support for rwsig image types

2017-02-17 04:09:37 -08:00

flash.c

common/flash.c: Rename flashwp parameter from [no]rw to [no]all

2017-02-17 04:09:38 -08:00

fmap.c

rwsig: Add support for rwsig image types

2017-02-17 04:09:37 -08:00

gesture.c

Fix various misspellings in comments

2016-11-15 17:41:53 -08:00

gpio_commands.c

Cr50: Mark several console commands as safe

2016-08-31 17:20:26 +00:00

gpio.c

servo_micro: add gpio mode get and set

2016-04-27 14:04:07 -07:00

hooks.c

cleanup: Remove charge_state_v1

2017-02-06 14:50:32 -08:00

host_command_master.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

host_command_pd.c

charge_state_v2: Limit i/p current to meet allowed MAX i/p system power

2016-12-05 16:43:00 -08:00

host_command.c

iec: Improve efficiency of host command dispatcher

2017-01-06 11:10:03 -08:00

host_event_commands.c

mkbp: Always keep memmap host event mask up-to-date

2016-12-01 19:59:04 -08:00

i2c_wedge.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

i2c.c

common/i2c.c: Check that i2c port is always 0 or greater

2016-12-16 15:42:47 -08:00

i2cs_tpm.c

Cr50: i2cs: Added counter for write mismatch error

2017-02-02 12:29:30 -08:00

inductive_charging.c

Deferred: Use deferred_data instead of function pointer

2016-04-18 17:32:40 -07:00

keyboard_8042_sharedlib.c

libsharedobjs: Add 8042 scancodes to shared lib.

2015-07-17 03:18:03 +00:00

keyboard_8042.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

keyboard_mkbp.c

console: Add non-verbose print config option

2017-02-11 13:06:38 -08:00

keyboard_scan.c

keyboard: Always call keyboard_state_changed

2016-11-17 07:08:25 -08:00

keyboard_test.c

Move keyboard dimension and key constants to keyboard_config.h

2013-03-22 11:24:29 -07:00

lb_common.c

ryu: fix max lightbar brightness

2015-09-25 09:13:34 -07:00

led_common.c

rambi: fix led command

2014-01-14 09:19:45 +00:00

led_policy_std.c

led_policy_std: Blink LED in S0iX

2016-07-19 12:03:27 -07:00

lid_angle.c

oak: enable lid angle update

2016-03-02 13:39:47 -08:00

lid_switch.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

lightbar.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

mag_cal.c

common: Add magnetometer online calibration.

2015-10-13 05:28:54 -07:00

main.c

button: Check volume up/down status and set recovery mode

2017-01-20 00:05:06 -08:00

mat33.c

common: Add magnetometer online calibration.

2015-10-13 05:28:54 -07:00

mat44.c

common: Add magnetometer online calibration.

2015-10-13 05:28:54 -07:00

math_util.c

math_util: Fix rotation by identity.

2016-08-24 17:40:27 -07:00

memory_commands.c

Add more CONFIG_CMD_* options for console commands

2016-10-01 00:02:01 -07:00

mkbp_event.c

mkbp_event: Properly queue events during host sleep

2016-11-04 18:31:37 -07:00

motion_lid.c

motion_lid: Fix merge of cl/430344

2017-02-10 12:11:47 -08:00

motion_sense.c

motion: Add opt3001 as a motion sensor

2017-02-16 18:03:59 -08:00

nvmem_vars.c

nvmem_vars: use dynamic memory allocation

2017-01-09 23:47:07 -08:00

nvmem.c

commom: enable commits prior to checking for valid nvmem partitions

2017-02-08 16:24:42 -08:00

onewire.c

Move onewire bus support from chip/lm4 to common

2013-08-02 18:22:57 -07:00

panic_output.c

Cr50: The panicinfo command is not safe

2016-10-01 03:14:07 +00:00

pd_log.c

Fix various misspellings in comments

2016-11-15 17:41:53 -08:00

port80.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

power_button_x86.c

cleanup: Remove charge_state_v1

2017-02-06 14:50:32 -08:00

power_button.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

printf.c

console: Add non-verbose print config option

2017-02-11 13:06:38 -08:00

pstore_commands.c

pstore: Fix issue with block calculation for pstore blocks

2017-01-03 15:13:58 -08:00

pwm_kblight.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

pwm.c

pwm: PWM is disabled when duty is set to max value

2016-09-08 17:57:51 -07:00

queue_policies.c

Stream: Remove in_stream/out_stream interface

2015-06-11 00:08:49 +00:00

queue.c

Queue: Add ability to modify contiguous units inplace

2015-07-15 21:57:36 +00:00

rsa.c

common/rsa: Add support for exponent 3 RSA keys

2016-11-10 21:28:28 -08:00

rwsig.c

rwsig: Add support for rwsig image types

2017-02-17 04:09:37 -08:00

sensor_common.c

console: Add non-verbose print config option

2017-02-11 13:06:38 -08:00

sha1.c

Add SHA-1 hash

2014-05-17 20:14:17 +00:00

sha256.c

common: Drop unused data structure

2016-05-05 19:16:50 -07:00

shared_mem.c

Cr50: Mark several console commands as safe

2016-08-31 17:20:26 +00:00

shmalloc.c

common: introduce malloc/free implementation

2017-01-05 21:13:09 -08:00

smbus.c

smbus: Re-write smbus driver

2016-03-21 16:35:33 -07:00

spi_commands.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

spi_flash_reg.c

spi_flash_reg: Correct lengths for W25Q40/GD25LQ40

2016-10-20 01:55:59 -07:00

spi_flash.c

Enable spi_flash_read to read > SPI_FLASH_MAX_READ_SIZE

2016-10-05 20:58:37 -07:00

spi_nor.c

common/spi_nor: Differential erase support

2017-02-09 05:04:56 +00:00

switch.c

kevin / gru: Reduce SRAM footprint

2017-02-13 18:25:51 -08:00

system.c

cr50: Decrement retry counter on manual reboots.

2017-02-18 17:26:59 -08:00

tablet_mode.c

motion: Disable tablet mode if one accel is broken

2017-01-04 18:07:12 -08:00

temp_sensor.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

test_util.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

thermal.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

throttle_ap.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

timer.c

common: add decimal real number seconds value to timeirnfo output

2017-02-03 20:01:45 -08:00

tpm_registers.c

g: extension: Add a whitelist for vendor commands.

2017-02-18 17:26:59 -08:00

uart_buffering.c

UART: Remove X-on/X-off flow control

2016-04-27 10:10:02 -07:00

update_fw.c

servo_v4: copypasta usb updater code into common

2016-07-21 13:13:35 -07:00

usb_charger.c

bd99955: Improve interrupt / USB charger task wake scheme

2016-06-16 12:27:42 -07:00

usb_i2c.c

cr50: Have INAs and I2Cm enabled when rdd is attached

2017-02-06 14:50:31 -08:00

usb_pd_policy.c

usb_pd_policy: make pd_set_vbus_discharge work with devices with one USB PD port

2017-02-02 16:42:50 -08:00

usb_pd_protocol.c

pdchipinfo: Add option to force renewal

2017-02-14 17:28:16 -08:00

usb_pd_tcpc.c

servo_v4: pd: Added Device Test System support

2017-01-26 23:16:40 -08:00

usb_port_power_dumb.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00

usb_port_power_smart.c

usb: power_smart: Allow CONFIG_USB_PORT_POWER_SMART_PORT_COUNT < 2

2016-09-22 19:12:36 -07:00

usb_update.c

servo_v4: copypasta usb updater code into common

2016-07-21 13:13:35 -07:00

util.c

builtin: Expands string.h / stdint.h

2017-02-17 01:46:31 +00:00

vboot_hash.c

console: Add non-verbose print config option

2017-02-11 13:06:38 -08:00

vec3.c

common: Add magnetometer online calibration.

2015-10-13 05:28:54 -07:00

version.c

Revert "version: Store image size data in version struct"

2017-02-01 06:36:18 +00:00

virtual_battery.c

i2c_passthru: fix virtual battery operation

2016-12-14 06:03:14 -08:00

vstore.c

ec: Add temporary secure storage for the host during boot

2016-01-25 21:46:48 -08:00

wireless.c

cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args

2016-08-24 16:30:10 +00:00