EDK II (mirror) https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Fgithub%2Fcodeql-action-4 2025-08-26T10:01:25+00:00 2025-08-26T10:01:25+00:00 Yi Li yi1.li@intel.com 2025-08-21T05:10:37+00:00 urn:sha1:31402d2a31ac16472432bde47f73c3c761bb8ed8 Currently BaseCryptLibMbedTls does not support all Crypto services, so the following case will fail: TestVerifyEKUsWith3CertsInSignature() TestVerifyEKUsWith2CertsInSignature() TestNoEKUsInSignature() TestVerifyRsaCertPkcs1SignVerify TestVerifyPkcs7SignVerifyNonSelfIssued() TestVerifyDhGenerateKey() Pkcs1v2Decrypt Pkcs1v2EncryptDecrypt RsaOaepEncrypt (Interface) RsaOaepEncrypt (NoSeed) RsaOaepEncrypt (Seeded) RsaOaepDecrypt RsaOaepEncryptDecrypt RsaOaepEncryptPkcs1v2Decrypt Pkcs1v2EncryptRsaOaepDecrypt RsaOaepEncrypt (MdDefaultMgf1Default) RsaOaepDecrypt (MdDefaultMgf1Default) RsaOaepEncryptDecrypt (MdDefaultMgf1Default) RsaOaepEncrypt (MdSha1Bgf1Sha1 RsaOaepDecrypt (MdSha1Bgf1Sha1) RsaOaepEncryptDecrypt (MdSha1Bgf1Sha1) RsaOaepEncrypt (MdSha256Bgf1Sha256) RsaOaepDecrypt (MdSha256Bgf1Sha256) RsaOaepEncryptDecrypt (MdSha256Bgf1Sha256) TestVerifyBn() TestVerifyEcKey() Signed-off-by: Yi Li <yi1.li@intel.com> 2025-08-26T10:01:25+00:00 Yi Li yi1.li@intel.com 2025-08-21T05:11:17+00:00 urn:sha1:dc9cdf6c90df2068728554893d4b2ec6e990d5ae This case uses a non-self-issued certificate as the signing certificate and CA. BaseCryptLib can pass this case (X509_V_FLAG_PARTIAL_CHAIN ​​enabled). BaseCryptLibMbedTls cannot, because Mbedtls certificate chain validation lacks support for partial certificate chains currently. Signed-off-by: Yi Li <yi1.li@intel.com> 2025-04-21T02:14:50+00:00 Oliver Smith-Denny osde@microsoft.com 2025-04-18T20:51:13+00:00 urn:sha1:2e85d12685b950dc8ff54130f9d623a120f852d6 This patch updates several CodeQL errors for potential null pointer access and unguarded header conclusion across production and test code that have been flagged in the build/security tab in GitHub. Signed-off-by: Oliver Smith-Denny <osde@microsoft.com> 2025-03-07T05:44:30+00:00 Michael D Kinney michael.d.kinney@intel.com 2025-01-14T19:11:49+00:00 urn:sha1:deee46d276c10112dd3a8307c4dedbbfdbf92911 Update the CryptoPkg to support CLANGPDB and CLANGDWARF from both Windows and Linux host environments. * Add PcdOpensslLibAssemblySourceStyleNasm to select the correct optimized assembly source style for OpensslLib for IA32/X64. NASM style is for MSFT and CLANGPDB. GAS style is for GCC. Use this PCD in OpensslLibAccel.inf and OpensslLibFullAccel.inf to select between .nasm and .S files. * Add intrinsic functions required by CLANG IA32/X64 builds. * __ashlti3 * __lshrdi3 * Disable warning -Wno-error=unused-function for CLANG build compatibility * Set -D OPENSSL_NO_INLINE_ASM for CLANG build compatibility * Update TestBaseCryptLib to split out the implementation of main() into its own C file that is only use for host-based unit tests. This is due to CLANGPDB for host environments injecting a __main() call that can only be resolved in host based builds that link against host libraries. * Update Configure.py to update IA32/X64 [Sources] sections with feature flag expressions using the new PCD PcdOpensslLibAssemblySourceStyleNasm. Signed-off-by: Michael D Kinney <michael.d.kinney@intel.com> 2024-09-23T06:11:25+00:00 Ard Biesheuvel ardb@kernel.org 2024-09-05T08:29:18+00:00 urn:sha1:1815f35b87f182ca4c5019e9c570f12dbbef61f8 SM3 needs to be tested so we can verify that alternative implementations (such as the one I will be contributing to BaseCryptLibMbedTls) as well as the reference implementation produce the expected value. Signed-off-by: Ard Biesheuvel <ardb@kernel.org> 2024-06-14T13:31:12+00:00 Gerd Hoffmann kraxel@redhat.com 2024-06-14T09:45:49+00:00 urn:sha1:94961b8817eec6f8d0434555ac50a7aa51c22201 Needed to properly initialize BaseRngLib. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com> 2024-04-07T03:55:04+00:00 Chris Ruffin v-chruffin@microsoft.com 2024-03-30T21:59:45+00:00 urn:sha1:c98c14576f1a93519402a8e2f4736b479ad6007c Add unit test functions: TestVerifyPkcs1v2EncryptInterface() TestVerifyRsaOaepEncryptInterface() TestVerifyEncrypt() TestVerifyDecrypt() TestVerifyEncryptDecrypt() Signed-off-by: Chris Ruffin <v-chruffin@microsoft.com> Cc: Chris Ruffin <cruffin@millcore.com> Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Yi Li <yi1.li@intel.com> Cc: Wenxing Hou <wenxing.hou@intel.com> Reviewed-by: Yi Li <yi1.li@intel.com> 2023-10-12T05:31:19+00:00 Wenxing Hou wenxing.hou@intel.com 2023-08-18T08:34:22+00:00 urn:sha1:c5fedb030a4eee1133358a8c5af9ff05082feb44 Add MD5/SHA1/SHA256/SHA384/SHA512 APIs. REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4177 Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Yi Li <yi1.li@intel.com> Cc: Xiaoyu Lu <xiaoyu1.lu@intel.com> Cc: Guomin Jiang <guomin.jiang@intel.com> Signed-off-by: Wenxing Hou <wenxing.hou@intel.com> Reviewed-by: Yi Li <yi1.li@intel.com> 2023-10-12T05:31:19+00:00 Wenxing Hou wenxing.hou@intel.com 2023-08-16T04:39:51+00:00 urn:sha1:97f51f2e9b78ce94127c2972841342edaefbcc80 Add RSA APIs. REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4177 Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Yi Li <yi1.li@intel.com> Cc: Xiaoyu Lu <xiaoyu1.lu@intel.com> Cc: Guomin Jiang <guomin.jiang@intel.com> Signed-off-by: Wenxing Hou <wenxing.hou@intel.com> Reviewed-by: Yi Li <yi1.li@intel.com> 2023-10-12T05:31:19+00:00 Wenxing Hou wenxing.hou@intel.com 2023-08-16T04:30:01+00:00 urn:sha1:731aa708813774fe0fdfe3f1e2f5b9032f689449 Add HMAC APIS. REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4177 Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Yi Li <yi1.li@intel.com> Cc: Xiaoyu Lu <xiaoyu1.lu@intel.com> Cc: Guomin Jiang <guomin.jiang@intel.com> Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>