Merged PR 5400: SecurityPkg: Tcg2Smm: Added communicate buffer check

Added communicate buffer check for the Tcg2Smm driver in lieu of the legacy MmOutsideValid check.

SecurityPkg/Tcg/Tcg2Smm/Tcg2Smm.c

@@ -73,7 +73,7 @@ TpmNvsCommunciate (
     return EFI_ACCESS_DENIED;
   }
 
-  if (!IsBufferOutsideMmValid ((UINTN)CommBuffer, TempCommBufferSize)) {
+  if (!IsCommBufferValid ((UINTN)CommBuffer, TempCommBufferSize)) {
     DEBUG ((DEBUG_ERROR, "[%a] - MM Communication buffer in invalid location!\n", __func__));
     return EFI_ACCESS_DENIED;
   }

SecurityPkg/Tcg/Tcg2Smm/Tcg2Smm.h

@@ -69,6 +69,22 @@ IsBufferOutsideMmValid (
   IN UINT64                Length
   );
 
+/**
+  This function is wrapper function to validate the communicate buffer.
+
+  @param Buffer  The buffer start address to be checked.
+  @param Length  The buffer length to be checked.
+
+  @retval TRUE  This buffer is valid per processor architecture and not overlap with SMRAM.
+  @retval FALSE This buffer is not valid per processor architecture or overlap with SMRAM.
+**/
+BOOLEAN
+EFIAPI
+IsCommBufferValid (
+  IN EFI_PHYSICAL_ADDRESS  Buffer,
+  IN UINT64                Length
+  );
+
 /**
   The driver's common initialization routine.
 

SecurityPkg/Tcg/Tcg2Smm/Tcg2StandaloneMm.c

@@ -47,6 +47,25 @@ IsBufferOutsideMmValid (
   return MmIsBufferOutsideMmValid (Buffer, Length);
 }
 
+/**
+  This function is wrapper function to validate the communicate buffer.
+
+  @param Buffer  The buffer start address to be checked.
+  @param Length  The buffer length to be checked.
+
+  @retval TRUE  This buffer is valid per processor architecture and not overlap with SMRAM.
+  @retval FALSE This buffer is not valid per processor architecture or overlap with SMRAM.
+**/
+BOOLEAN
+EFIAPI
+IsCommBufferValid (
+  IN EFI_PHYSICAL_ADDRESS  Buffer,
+  IN UINT64                Length
+  )
+{
+  return MmCommBufferValid (Buffer, Length);
+}
+
 /**
   The driver's entry point.
 

SecurityPkg/Tcg/Tcg2Smm/Tcg2TraditionalMm.c

@@ -58,6 +58,25 @@ IsBufferOutsideMmValid (
   return SmmIsBufferOutsideSmmValid (Buffer, Length);
 }
 
+/**
+  This function is wrapper function to validate the communicate buffer.
+
+  @param Buffer  The buffer start address to be checked.
+  @param Length  The buffer length to be checked.
+
+  @retval TRUE  This buffer is valid per processor architecture and not overlap with SMRAM.
+  @retval FALSE This buffer is not valid per processor architecture or overlap with SMRAM.
+**/
+BOOLEAN
+EFIAPI
+IsCommBufferValid (
+  IN EFI_PHYSICAL_ADDRESS  Buffer,
+  IN UINT64                Length
+  )
+{
+  return SmmIsBufferOutsideSmmValid (Buffer, Length);
+}
+
 /**
   The driver's entry point.