Measurement should not be executed when challenge failed

Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
tianocore · Aug 18, 2023 · 2b5bbaf · 2b5bbaf
1 parent 728bbdc
commit 2b5bbaf
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/SecurityPkg/DeviceSecurity/SpdmSecurityLib/SpdmSecurityLib.c b/SecurityPkg/DeviceSecurity/SpdmSecurityLib/SpdmSecurityLib.c
@@ -49,7 +49,8 @@ SpdmDeviceAuthenticationAndMeasurement (
       DEBUG ((DEBUG_ERROR, "DoDeviceAuthentication failed - %r\n", Status));
       goto Ret;
     } else {
-      if (AuthState == TCG_DEVICE_SECURITY_EVENT_DATA_DEVICE_AUTH_STATE_FAIL_NO_SIG) {
+      if ((AuthState == TCG_DEVICE_SECURITY_EVENT_DATA_DEVICE_AUTH_STATE_FAIL_NO_SIG) ||
+          (AuthState == TCG_DEVICE_SECURITY_EVENT_DATA_DEVICE_AUTH_STATE_FAIL_INVALID)) {
         goto Ret;
       } else {
         IsAuthenticated = TRUE;