RE: [PATCH v2 12/14] platform/x86/intel/ifs: Add current_batch sysfs entry
From: Luck, Tony
Date: Mon Nov 14 2022 - 13:25:42 EST
> So, what's the point of the sscanf() to check the *filename* other than
> saving some potentially expensive request_firmware() calls?
Not much point. There are two subsequent checks. First the driver checks
the F-M-S in the header of the file ... so your dastardly user will be thwarted
by this check.
If an even more dastardly user edited the file to have the right F-M-S (and
recomputed the file checksum) then the driver would be fooled, but microcode
would see that the signed binary portion is not for this CPU and reject it.
-Tony