src/security/memory/memory.c

/* SPDX-License-Identifier: GPL-2.0-only */

#include <stdint.h>
#include <security/intel/txt/txt.h>
#include "memory.h"

/**
 * To be called after DRAM init.
 * Tells the caller if DRAM must be cleared as requested by the user,
 * firmware or security framework.
 */
bool security_clear_dram_request(void)
{
	if (CONFIG(SECURITY_CLEAR_DRAM_ON_REGULAR_BOOT))
		return true;

	if (CONFIG(INTEL_TXT) && intel_txt_memory_has_secrets())
		return true;

	/* TODO: Add TEE environments here */

	return false;
}