AuthState needs to be recorded for get_Challenge failed

Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
tianocore · Aug 25, 2023 · 16cda8a · 16cda8a
1 parent b8edea7
commit 16cda8a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/SecurityPkg/DeviceSecurity/SpdmSecurityLib/SpdmAuthentication.c b/SecurityPkg/DeviceSecurity/SpdmSecurityLib/SpdmAuthentication.c
@@ -606,7 +606,7 @@ DoDeviceAuthentication (
     SpdmReturn = SpdmChallengeEx (SpdmContext, NULL, *ValidSlotId, SPDM_CHALLENGE_REQUEST_NO_MEASUREMENT_SUMMARY_HASH, NULL, NULL, NULL, RequesterNonce, ResponderNonce, NULL, 0);
     if (SpdmReturn == LIBSPDM_STATUS_SUCCESS) {
       IsValidChallengeAuthSig = TRUE;
-    } else if (SpdmReturn == LIBSPDM_STATUS_VERIF_FAIL) {
+    } else if ((LIBSPDM_STATUS_IS_ERROR (SpdmReturn))) {
       IsValidChallengeAuthSig            = FALSE;
       *AuthState                         = TCG_DEVICE_SECURITY_EVENT_DATA_DEVICE_AUTH_STATE_FAIL_INVALID;
       SecurityState->AuthenticationState = EDKII_DEVICE_SECURITY_STATE_ERROR_CHALLENGE_FAILURE;