Changeset 55502 in vbox for trunk/src/VBox/Devices/EFI/DevSmc.cpp

Timestamp:

Apr 29, 2015 7:45:00 AM (10 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

99854

Message:

DevSmc: retrieve the SMC key from the host OS if possible

File:

• trunk/src/VBox/Devices/EFI/DevSmc.cpp (modified) (3 diffs)

trunk/src/VBox/Devices/EFI/DevSmc.cpp

@@ -35 +35 @@
 # include <iprt/asm-amd64-x86.h>
 # include <iprt/once.h>
+#endif
+#if defined(RT_OS_DARWIN) && defined(IN_RING3)
+# include "IOKit/IOKitLib.h"
 #endif
 
@@ -501 +504 @@
 
 #endif /* IN_RING0 */
+
+#if defined(IN_RING3) && defined(RT_OS_DARWIN)
+
+/**
+ * Preferred method to retrieve the SMC key.
+ *
+ * @param   pabKey  where to store the key.
+ * @param   cbKey   size of the buffer.
+ */
+static int getSmcKeyOs(char *pabKey, uint32_t cbKey)
+{
+    /*
+     * Method as described in Amit Singh's article:
+     *   http://osxbook.com/book/bonus/chapter7/tpmdrmmyth/
+     */
+    typedef struct
+    {
+        uint32_t   key;
+        uint8_t    pad0[22];
+        uint32_t   datasize;
+        uint8_t    pad1[10];
+        uint8_t    cmd;
+        uint32_t   pad2;
+        uint8_t    data[32];
+    } AppleSMCBuffer;
+
+    AssertReturn(cbKey >= 65, VERR_INTERNAL_ERROR);
+
+    io_service_t service = IOServiceGetMatchingService(kIOMasterPortDefault,
+                                                       IOServiceMatching("AppleSMC"));
+    if (!service)
+        return VERR_NOT_FOUND;
+
+    io_connect_t    port = (io_connect_t)0;
+    kern_return_t   kr   = IOServiceOpen(service, mach_task_self(), 0, &port);
+    IOObjectRelease(service);
+
+    if (kr != kIOReturnSuccess)
+        return RTErrConvertFromDarwin(kr);
+
+    AppleSMCBuffer  inputStruct    = { 0, {0}, 32, {0}, 5, };
+    AppleSMCBuffer  outputStruct;
+    size_t          cbOutputStruct = sizeof(outputStruct);
+
+    for (int i = 0; i < 2; i++)
+    {
+        inputStruct.key = (uint32_t)(i == 0 ? 'OSK0' : 'OSK1');
+        kr = IOConnectCallStructMethod((mach_port_t)port,
+                                       (uint32_t)2,
+                                       (const void *)&inputStruct,
+                                       sizeof(inputStruct),
+                                       (void *)&outputStruct,
+                                       &cbOutputStruct);
+        if (kr != kIOReturnSuccess)
+        {
+            IOServiceClose(port);
+            return RTErrConvertFromDarwin(kr);
+        }
+
+        for (int j = 0; j < 32; j++)
+            pabKey[j + i*32] = outputStruct.data[j];
+    }
+
+    IOServiceClose(port);
+
+    pabKey[64] = 0;
+
+    return VINF_SUCCESS;
+}
+
+#endif /* IN_RING3 && RT_OS_DARWIN */
 
 #ifdef IN_RING3 /* For now. */
@@ -1346 +1420 @@
     if (fGetKeyFromRealSMC)
     {
-        rc = PDMDevHlpCallR0(pDevIns, SMC_CALLR0_READ_OSK, 0 /*u64Arg*/);
+#ifdef RT_OS_DARWIN
+        rc = getSmcKeyOs(pThis->szOsk0And1, sizeof(pThis->szOsk0And1));
+        if (RT_FAILURE(rc))
+        {
+            LogRel(("SMC: Retrieving the SMC key from OS failed, trying to read it from hardware\n"));
+#endif
+            rc = PDMDevHlpCallR0(pDevIns, SMC_CALLR0_READ_OSK, 0 /*u64Arg*/);
+#ifdef RT_OS_DARWIN
+        }
+        else
+            LogRel(("SMC: Successfully retrieved the SMC key from the OS\n"));
+#endif
         if (RT_FAILURE(rc))
             return PDMDevHlpVMSetError(pDevIns, rc, RT_SRC_POS,