From 1f4800f20a5c2fca10a6def54baa6ff9b07fb43c Mon Sep 17 00:00:00 2001 From: Paul Crowley Date: Wed, 10 Feb 2021 11:38:39 -0800 Subject: [PATCH] Add MAX_BOOT_LEVEL tag, BOOT_LEVEL_EXCEEDED error Test: Treehugger Bug: 176450483 Change-Id: Ibfc838496fec507dbe4831e86b933666296a4b35 --- include/hardware/keymaster_defs.h | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/include/hardware/keymaster_defs.h b/include/hardware/keymaster_defs.h index 49f65a9a..c0b3800e 100644 --- a/include/hardware/keymaster_defs.h +++ b/include/hardware/keymaster_defs.h @@ -212,8 +212,8 @@ typedef enum { The value should interpreted as too's complement signed integer. Negative values indicate dates before Jan 1970 */ - - + KM_TAG_MAX_BOOT_LEVEL = KM_UINT | 1010, /* Specifies a maximum boot level at which a key + should function. */ } keymaster_tag_t; /** @@ -512,6 +512,7 @@ typedef enum { KM_ERROR_MISSING_NOT_AFTER = -81, KM_ERROR_MISSING_ISSUER_SUBJECT = -82, KM_ERROR_INVALID_ISSUER_SUBJECT = -83, + KM_ERROR_BOOT_LEVEL_EXCEEDED = -84, KM_ERROR_UNIMPLEMENTED = -100, KM_ERROR_VERSION_MISMATCH = -101,