Hi Ilias, On Fri, 30 Oct 2026 at 11:23, Ilias Apalodimas wrote: > What kind of Image are you expecting to boot and measure via EFI if > it's not one of the defined types (10,11,12)? > If you are worried about such an image shoudn't we check that in > loadimage or startimage? The UEFI spec itself only lists these [0]
Sorry, my last mail was much longer than it needed to be. None that is legitimate. Such an image is only interesting to someone who wants code to run unmeasured, so I agree it should be refused in LoadImage(). That is what EDK2 does as well: CoreLoadPeImage() returns EFI_UNSUPPORTED for any subsystem other than 10, 11 and 12. In v2 I'll add a patch that makes efi_load_pe() return EFI_UNSUPPORTED for any other subsystem, before the image is measured. That leaves 08 with images LoadImage() takes but efi_image_parse() can't hash, e.g. a FileAlignment that is not a power of two once 02 is in (the case the test in 09 uses), and with a failed PCR extend. I'd keep it for those. Thanks, Ana
