RE: [PATCH v2 12/14] platform/x86/intel/ifs: Add current_batch sysfs entry

From: Luck, Tony
Date: Mon Nov 14 2022 - 13:25:42 EST


> So, what's the point of the sscanf() to check the *filename* other than
> saving some potentially expensive request_firmware() calls?

Not much point. There are two subsequent checks. First the driver checks
the F-M-S in the header of the file ... so your dastardly user will be thwarted
by this check.

If an even more dastardly user edited the file to have the right F-M-S (and
recomputed the file checksum) then the driver would be fooled, but microcode
would see that the signed binary portion is not for this CPU and reject it.

-Tony