clearlinux/graphene
2
0
Fork 0
mirror of https://github.com/clearlinux/graphene.git synced 2026-09-06 22:01:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Do not initialize secs.mrenclave and secs.mrsigner prior to ECREATE.

Browse Source 
Added comment.
This commit is contained in:
Thomas Knauth
2019-02-21 10:23:16 -05:00
committed by Don Porter
parent b44d8335a1
commit 0e320f3fa2
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Pal/src/host/Linux-SGX/sgx_framework.c
+5 -2
View File
@@ -146,8 +146,11 @@ int create_enclave(sgx_arch_secs_t * secs,
secs->miscselect = token->miscselect_mask;
memcpy(&secs->attributes, &token->attributes,
sizeof(sgx_arch_attributes_t));
memcpy(&secs->mrenclave, &token->mrenclave, sizeof(sgx_arch_hash_t));
memcpy(&secs->mrsigner, &token->mrsigner, sizeof(sgx_arch_hash_t));
/* Do not initialize secs->mrsigner and secs->mrenclave here as they are
* not used by ECREATE to populate the internal SECS. SECS's mrenclave is
* computed dynamically and SECS's mrsigner is populated based on the
* SIGSTRUCT during EINIT (see pp21 for ECREATE and pp34 for
* EINIT in https://software.intel.com/sites/default/files/managed/48/88/329298-002.pdf). */
if (baseaddr) {
secs->baseaddr = (uint64_t) baseaddr & ~(secs->size - 1);