[Feature]: Enhance SEA pointer validation

[makubacki]

Feature Overview

Currently the pointer size and whether the pointer is null are checked. This issue tracks adding more checks to verify pointer correctness. It is expected that those be discussed further in the issue until an implementation plan is agreed upon and then an owner is assigned.

Solution Overview

Consider whether to add checks like verifying the pointer is to an address within TSEG and/or MSEG and other constraints.

Alternatives Considered

No response

Urgency

Medium

Are you going to implement the feature request?

Someone else needs to implement the feature

Do you need maintainer feedback?

Maintainer feedback requested

Anything else?

No response

[makubacki]

#399 included some initial checks for the pointer entry type, therefore I'm assigning to @Javagedes to close out this issue.

The current validation checks the pointer size and whether the pointer is null. This issue still needs to capture any additional requirements so they can be implemented.

@kuqin12, do you have any additional requirements? Would we expect all pointers to either point within a specific area for example?

[Javagedes]

From offline discussion:

1. Create new entry extension for the Pointer validation type. Extension includes a single field to indicate if the pointer should point into MSEG or not (And some reserved data for alignment)
2. Default value is false, indicating the pointer will NOT point to an area in MSEG. Overrideable via config file
3. Outside of the rule, do a general check to ensure MSEG is readonly (And @kuqin12 will add code to lock it).

[kuqin12]

[like] Kun Qin reacted to your message:

…

________________________________ From: Joey Vagedes ***@***.***> Sent: Wednesday, February 19, 2025 7:47:10 PM To: microsoft/mu_feature_mm_supv ***@***.***> Cc: Mention ***@***.***> Subject: Re: [microsoft/mu_feature_mm_supv] [Feature]: Enhance SEA pointer validation (Issue #400) From offline discussion: 1. Create new entry extension for the Pointer validation type. Extension includes a single field to indicate if the pointer should point into MSEG or not (And some reserved data for alignment) 2. Default value is false, indicating the pointer will NOT point to an area in MSEG. Overrideable via config file 3. Outside of the rule, do a general check to ensure MSEG is readonly (And @kuqin12<https://github.com/kuqin12> will add code to lock it). — Reply to this email directly, view it on GitHub<#400 (comment)> or unsubscribe<https://github.com/notifications/unsubscribe-auth/AKEVMIQ636KC6OMWEZ6XA7D2QTNT7BFKMF2HI4TJMJ2XIZLTS6BKK5TBNR2WLJDUOJ2WLJDOMFWWLO3UNBZGKYLEL5YGC4TUNFRWS4DBNZ2F6YLDORUXM2LUPGBKK5TBNR2WLJDUOJ2WLJDOMFWWLLTXMF2GG2C7MFRXI2LWNF2HTAVFOZQWY5LFUVUXG43VMWSG4YLNMWVXI2DSMVQWIX3UPFYGLAVFOZQWY5LFVI2DQNJRHEZTMMJYGKSG4YLNMWUWQYLTL5WGCYTFNSBKK5TBNR2WLKRUHA2TCOJTGYYTSMFENZQW2ZNJNBQXGX3MMFRGK3ECUV3GC3DVMWVDIOBVGE4TGNRRHEY2I3TBNVS2S2DBONPWYYLCMVWIFJLWMFWHKZNKGQ4DQMRSHAZDMNRTURXGC3LFVFUGC427NRQWEZLMVRZXKYTKMVRXIX3UPFYGLLCJONZXKZKDN5WW2ZLOOSTHI33QNFRXHFUCUR2HS4DFVJZGK4DPONUXI33SPGSXMYLMOVS2SNBYG44TSOJZGYYIFJDUPFYGLJLJONZXKZNFOZQWY5LFVIZDQNJRHA3DCMZRGGBKI5DZOBS2K3DBMJSWZJLWMFWHKZNKGQ4DKMJZGM3DCOBSQKSHI6LQMWSWYYLCMVWKK5TBNR2WLKRUHA2TCOJTGYYTSMECUR2HS4DFUVWGCYTFNSSXMYLMOVS2UNBYGUYTSMZWGE4TDAVEOR4XAZNFNRQWEZLMUV3GC3DVMWVDIOBYGIZDQMRWGYZ2O5DSNFTWOZLSUZRXEZLBORSQ>. You are receiving this email because you were mentioned. Triage notifications on the go with GitHub Mobile for iOS<https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android<https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

[Javagedes]

#406 Added the bulk of this issue. Once kunqin12 Updates SEA to have MSEG be read only, I will add a final change to validate MSEG is in-fact read only in PeCoffImageDiffValidation