feat: add scsi mode sense operation to detect write protection

Author: dependabot[bot]

MdeModulePkg/Bus/Scsi/ScsiDiskDxe/ScsiDisk.c

@@ -196,6 +196,47 @@ ScsiDiskDriverBindingSupported (
   return Status;
 }
 
+EFI_STATUS
+IsWriteProtected (
+  IN OUT SCSI_DISK_DEV  *ScsiDiskDevice,
+  OUT BOOLEAN        *WriteProtectionEnabled
+  )
+{
+  EFI_STATUS                       Status;
+  EFI_SCSI_IO_SCSI_REQUEST_PACKET  CommandPacket;
+  UINT8                            Cdb[6];
+  UINT8                            DataBuffer[64];
+
+  //
+  // Initialize SCSI REQUEST_PACKET and 6-byte Cdb
+  //
+  ZeroMem (&CommandPacket, sizeof (CommandPacket));
+  ZeroMem (Cdb, sizeof (Cdb));
+
+  Cdb[0]                         = ATA_CMD_MODE_SENSE6;
+  Cdb[1]                         = 0b1000; // Setting the bit for Disable Block Descriptor
+  Cdb[2]                         = ATA_PAGE_CODE_RETURN_ALL_PAGES;
+  Cdb[4]                         = sizeof (DataBuffer);
+
+  CommandPacket.Timeout          = SCSI_DISK_TIMEOUT;
+  CommandPacket.Cdb              = Cdb;
+  CommandPacket.CdbLength        = (UINT8)sizeof (Cdb);
+  CommandPacket.InDataBuffer     = &DataBuffer;
+  CommandPacket.InTransferLength = sizeof (DataBuffer);
+
+  Status = ScsiDiskDevice->ScsiIo->ExecuteScsiCommand (ScsiDiskDevice->ScsiIo, &CommandPacket, NULL);
+
+  if (EFI_ERROR (Status)) {
+    return Status;
+  }
+
+  // Mode Sense 6 Byte Command returns the Write Protection status in the 3rd byte
+  // Bit 7 of the 3rd byte indicates the Write Protection status
+  *WriteProtectionEnabled = (DataBuffer[2] & 0x80) != 0;
+  return EFI_SUCCESS;
+}
+
+
 /**
   Start this driver on ControllerHandle.
 
@@ -234,6 +275,7 @@ ScsiDiskDriverBindingStart (
   CHAR8                 VendorStr[VENDOR_IDENTIFICATION_LENGTH + 1];
   CHAR8                 ProductStr[PRODUCT_IDENTIFICATION_LENGTH + 1];
   CHAR16                DeviceStr[VENDOR_IDENTIFICATION_LENGTH + PRODUCT_IDENTIFICATION_LENGTH + 2];
+  BOOLEAN               WriteProtectionEnabled = FALSE;
 
   MustReadCapacity = TRUE;
 
@@ -297,6 +339,17 @@ ScsiDiskDriverBindingStart (
       break;
   }
 
+  if (ScsiDiskDevice->DeviceType == EFI_SCSI_TYPE_DISK) {
+      Status = IsWriteProtected (ScsiDiskDevice, &WriteProtectionEnabled);
+      if (EFI_ERROR (Status)) {
+        DEBUG ((DEBUG_ERROR, "ScsiDisk: IsWriteProtected() fails. Status = %r\n", Status));
+      }
+      if (WriteProtectionEnabled) {
+        ScsiDiskDevice->BlkIo.Media->ReadOnly = TRUE;
+      }
+  }
+
+
   //
   // The Sense Data Array's initial size is 6
   //
@@ -6332,6 +6385,8 @@ AtapiIdentifyDevice (
   return ScsiDiskDevice->ScsiIo->ExecuteScsiCommand (ScsiDiskDevice->ScsiIo, &CommandPacket, NULL);
 }
 
+
+
 /**
   Initialize the installation of DiskInfo protocol.
 

MdePkg/Include/IndustryStandard/Atapi.h

@@ -503,6 +503,8 @@ typedef union {
 #define ATA_CMD_PREVENT_ALLOW_MEDIA_REMOVAL  0x1E              ///< defined in ATAPI Removable Rewritable Media Devices
 #define ATA_CMD_MODE_SELECT                  0x55              ///< defined in ATAPI Removable Rewritable Media Devices
 
+
+#define ATA_CMD_MODE_SENSE6                         0x1A       ///< defined in ATAPI Removable Rewritable Media Devices
 #define ATA_CMD_MODE_SENSE                          0x5A       ///< defined in ATAPI Removable Rewritable Media Devices
 #define ATA_PAGE_CODE_READ_WRITE_ERROR              0x01       ///< defined in ATAPI Removable Rewritable Media Devices
 #define ATA_PAGE_CODE_CACHING_PAGE                  0x08       ///< defined in ATAPI Removable Rewritable Media Devices

pip-requirements.txt

@@ -13,7 +13,7 @@
 ##
 
 edk2-pytool-library~=0.23.8 # MU_CHANGE
-edk2-pytool-extensions~=0.30.0 # MU_CHANGE
+edk2-pytool-extensions~=0.30.2 # MU_CHANGE
 antlr4-python3-runtime==4.13.2
 lcov-cobertura==2.1.1
 pygount==3.1.0 # MU_CHANGE