Checking system, checking method and compiling method of system start-up file
The present disclosure provides a checking method of a system start-up file. The method includes: acquiring the system start-up file and a mapping table from a system firmware partition; reading first check data and addressing data associated therewith from the mapping table; reading segmentation data corresponding to the first check data from the system start-up file according to the addressing data; determining whether the first check data is a first type or a second type; if it is the first type, determining whether the segmentation data is a repeated permutation of the first check data, and if not, a security error exists in the system start-up file; and if it is the second type, determining whether second check data, obtained by calculating the segmentation data according to a check algorithm, is consistent with the first check data, and if inconsistent, a security error exists in the system start-up file.
1. A checking system of a system start-up file, comprising a processor, and a memory coupled to the processor; wherein:
the memory is configured to store a system start-up file, a mapping table, and an instruction executed by the processor;
the processor is configured to:
acquire the system start-up file and the mapping table from a system firmware partition;
read first check data and addressing data associated with the first check data from the mapping table;
read segmentation data corresponding to the first check data from the system start-up file according to the addressing data;
determine whether the first check data is a first type or a second type;
determine whether the segmentation data is a repeated permutation of the first check data when the first check data is the first type, and when the segmentation data is not the repeated permutation of the first check data a security error exists in the system start-up file; and
determine whether second check data, acquired through calculating the segmentation data according to a check algorithm, is consistent with the first check data when the first check data is the second type, and when the second check data is inconsistent with the first check data a security error exists in the system start-up file.
2. The system according to claim 1 , wherein the mapping table is provided with a data type identifier associated with the first check data, or the first check data of the first type and the first check data of the second type are separately stored in different mapping tables; and
the processor is further configured to determine whether the first check data is the first type or the second type, according to the data type identifier or the mapping table from which the first check data is derived.
3. The system according to claim 1 , wherein the memory is further configured to continuously store the first check data of the first type and the first check data of the second type, and to set the first check data of the first type to get read prior to the first check data of the second type.
4. The system according to claim 1 , wherein the addressing data comprises a starting address and a data length corresponding to the segmentation data.
5. The system according to claim 1 , wherein the check algorithm is a HASH algorithm.