[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH 7/7] verifiers: Verify after decompression
From: |
Ross Lagerwall |
Subject: |
Re: [PATCH 7/7] verifiers: Verify after decompression |
Date: |
Thu, 28 Mar 2024 14:55:20 +0000 |
On Fri, Mar 15, 2024 at 7:26 AM Vladimir 'phcoder' Serbinenko
<phcoder@gmail.com> wrote:
>
> Verifying after decompression is a bad security practice. It relies on
> decompression having no security holes. Given how complex decompression is,
> this is almost guaranteed to be false.
>
Point taken... I'll drop this patch as it is not essential to the goal
of booting Secure Booting Xen via GRUB.
Thanks,
Ross