Tianocore/edk2.git/BaseTools/Source, branch dependabot/github_actions/github/codeql-action-4

BaseTools: Update Brotli Compress to 1.2.0

2025-11-05T04:12:21+00:00

# Description Update brotli from v1.0.9 to v1.2.0 https://github.com/google/brotli/releases/tag/v1.2.0 - [ ] Breaking change? - **Breaking change** - Does this PR cause a break in build or boot behavior? - Examples: Does it add a new library class or move a module to a different repo. - [x] Impacts security? - **Security** - Does this PR have a direct security impact? - Fixes CVE-2025-6176 reported in brotli < 1.2.0. - [ ] Includes tests? - **Tests** - Does this PR include any explicit test code? - Examples: Unit tests or integration tests. ## How This Was Tested Verified booting on a virtual platform by compressing/decompressing PEI/DXE sections. ## Integration Instructions NA Signed-off-by: Vineel Kovvuri[MSFT]

BaseTools/GenFW: RISC-V: Detect Zicfilp extension

2025-11-03T09:39:59+00:00

Parse the ELF file for RISC-V Zicfilp extension support to identify forward control flow integrity (FCFI) features. Signed-off-by: Tuan Phan

BaseTools: Remove DXE_SAL_DRIVER

2025-10-30T10:00:32+00:00

The DXE_SAL_DRIVER module type was introduced to support Itanium (IPF) platforms. Since support for Itanium processors has been dropped, the instances of DXE_SAL_DRIVER have been removed. Ref: [3cb0a311cb7e747d7be5c5076d0fff76ad256d2b] Cc: Sachin Ganesh Signed-off-by: Sathya Ravichandran

BaseTools:Remove deprecated ast.Str import for Python 3.14 compatibility

2025-10-21T02:45:38+00:00

- Str is not being used in FvHeader.py - Removed import of ast.Str as it was removed in Python 3.14. - Ensures compatibility with Python 3.14 and later. - https://docs.python.org/3/whatsnew/3.14.html#id9 This addresses ImportError caused by removal of deprecated AST classes including ast.Str. Signed-off-by: Ashraf Ali S

BaseTools: Add Quoting to Python Path on Windows

2025-10-20T22:52:02+00:00

Building the C BaseTools using Clang on a Windows system that has the Python interpreter installed to a path that contains spaces (for example C:\Program Files\Python314\python.exe) currently fails. This change adds quoting to fix that issue. Signed-off-by: Nate DeSimone

BaseTools/Source/C/GenFw: Add --image-version option

2025-10-17T06:23:17+00:00

Add --image-version option that takes a version value of the form MMMM.mmmm where MMMM and mmmm are decimal values < 65536. The MMMM and mmmm values are used to set the PE/COFF optional header fields MajorImageVersion and MinorImageVersion. If MMMM or mmmm are larger than 65535, then generate Error() condition. Signed-off-by: Michael D Kinney

BaseTools/Source/C/GenFw: Add no symbols check to --prm

2025-10-17T06:23:17+00:00

When --prm is specified, a search for the symbol with the name PRM_MODULE_EXPORT_DESCRIPTOR_NAME is performed. If the symbol is not found, then GENFW generates an exception due to a loop with a terminal count of -1. Update logic to not search for PRM Handler symbols if the PRM_MODULE_EXPORT_DESCRIPTOR_NAME was not found and add an Error() message when --prm is specified and PRM_MODULE_EXPORT_DESCRIPTOR_NAME was not found. Signed-off-by: Michael D Kinney

BaseTools/FMMT: Fix errors when operating the FV with CRC32 section

2025-10-16T14:14:06+00:00

Currently the FMMT tool supports CRC32 GUID section (Ref. GuidTools.py). But it is found that there are errors for the FV with CRC32 section. For example, the errors are checked on the following commands. --v : Show FV information except for the FV --a : Show "Target Fv not found!!!" when adding an FFS file to the FV --d : Show "Target Ffs not found!!!" when deleting an FFS file in the FV They are caused by the mismatch for CRC32 section data between the FMMT and GenCrc32 tools. The FMMT tool returns CRC32 section data without CRC checksum field (4 bytes). The GenCrc32 tool (with -d option, verify CRC32 value for the input file) requires CRC32 section data including CRC checksum field (4 bytes). Fix the issue through adjusting the section data to include CRC checksum field. Currently DataOffset field for CRC32 GUID section is reported as 0x1C differently (GUID Section header length: 0x18 + Checksum field: 0x4). Instead of DataOffset field that includes CRC checksum field, configure the section data based on the offset from section header length (0x18) that was previously calculated. This update enables GUID sections to use the same offset consistently. Signed-off-by: Phil Noh

BaseTools/build.py: set BUILD_TIME_EPOCH if not already in environment

2025-10-16T10:41:09+00:00

Set BUILD_TIME_EPOCH to the current UTC timestamp if not already present in the environment. Use the resulting value to print the "Build start time:" message. Signed-off-by: Leif Lindholm

BaseTools/build.py: language cleanup around CheckEnvVariable

2025-10-16T10:41:09+00:00

The function CheckEnvVariable in fact checks several environment variables. And the comment at its invocation enumerates a specific set of variables, which defeats half the point of abstracting it out into a helper function. Rename the function to the plural form and turn the comment into a list of examples. Signed-off-by: Leif Lindholm