OpenCoreMisc: Improve ScanPolicy checking and update docs

Docs/Configuration.tex

@@ -1636,6 +1636,8 @@ rm vault.pub
     types are prefixed with \texttt{OC\_SCAN\_ALLOW\_DEVICE\_}.
     \item \texttt{0x00000100} (bit \texttt{8}) --- \texttt{OC\_SCAN\_ALLOW\_FS\_APFS}, allows scanning
     of APFS file system.
+    \item \texttt{0x00000200} (bit \texttt{9}) --- \texttt{OC\_SCAN\_ALLOW\_FS\_HFS}, allows scanning
+    of HFS file system (must be blessed).
     \item \texttt{0x00010000} (bit \texttt{16}) --- \texttt{OC\_SCAN\_ALLOW\_DEVICE\_SATA}, allow
     scanning SATA devices.
     \item \texttt{0x00020000} (bit \texttt{17}) --- \texttt{OC\_SCAN\_ALLOW\_DEVICE\_SASEX}, allow

Docs/Differences/Differences.tex

 \documentclass[]{article}
 %DIF LATEXDIFF DIFFERENCE FILE
 %DIF DEL PreviousConfiguration.tex   Fri May  3 12:13:06 2019
-%DIF ADD ../Configuration.tex        Wed May 22 17:42:47 2019
+%DIF ADD ../Configuration.tex        Wed May 22 18:00:23 2019
 
 \usepackage{lmodern}
 \usepackage{amssymb,amsmath}
@@ -1795,6 +1795,8 @@ rm vault.pub
     types are prefixed with }\texttt{\DIFadd{OC\_SCAN\_ALLOW\_DEVICE\_}}\DIFadd{.
     }\item \texttt{\DIFadd{0x00000100}} \DIFadd{(bit }\texttt{\DIFadd{8}}\DIFadd{) --- }\texttt{\DIFadd{OC\_SCAN\_ALLOW\_FS\_APFS}}\DIFadd{, allows scanning
     of APFS file system.
+    }\item \texttt{\DIFadd{0x00000200}} \DIFadd{(bit }\texttt{\DIFadd{9}}\DIFadd{) --- }\texttt{\DIFadd{OC\_SCAN\_ALLOW\_FS\_HFS}}\DIFadd{, allows scanning
+    of HFS file system (must be blessed).
     }\item \texttt{\DIFadd{0x00010000}} \DIFadd{(bit }\texttt{\DIFadd{16}}\DIFadd{) --- }\texttt{\DIFadd{OC\_SCAN\_ALLOW\_DEVICE\_SATA}}\DIFadd{, allow
     scanning SATA devices.
     }\item \texttt{\DIFadd{0x00020000}} \DIFadd{(bit }\texttt{\DIFadd{17}}\DIFadd{) --- }\texttt{\DIFadd{OC\_SCAN\_ALLOW\_DEVICE\_SASEX}}\DIFadd{, allow

Platform/OpenCore/OpenCoreMisc.c

@@ -270,6 +270,14 @@ OcMiscUefiQuirksLoaded (
   IN OC_GLOBAL_CONFIG   *Config
   )
 {
+  if (((Config->Misc.Security.ScanPolicy & OC_SCAN_FILE_SYSTEM_LOCK) == 0
+    && (Config->Misc.Security.ScanPolicy & OC_SCAN_FILE_SYSTEM_BITS) != 0)
+    || ((Config->Misc.Security.ScanPolicy & OC_SCAN_DEVICE_LOCK) == 0
+    && (Config->Misc.Security.ScanPolicy & OC_SCAN_DEVICE_BITS) != 0)) {
+    DEBUG ((DEBUG_ERROR, "OC: Invalid ScanPolicy %X\n", Config->Misc.Security.ScanPolicy));
+    CpuDeadLoop ();
+  }
+
   //
   // Inform drivers about our scan policy.
   //