EDK II (mirror) https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Fgithub%2Fcodeql-action-4 2025-11-05T04:12:21+00:00 2025-11-05T04:12:21+00:00 Vineel Kovvuri[MSFT] vineelko@microsoft.com 2025-11-04T00:15:10+00:00 urn:sha1:a3a180e2bc417403e563d2f1204f444afa5e4db7 # Description Update brotli from v1.0.9 to v1.2.0 https://github.com/google/brotli/releases/tag/v1.2.0 - [ ] Breaking change? - **Breaking change** - Does this PR cause a break in build or boot behavior? - Examples: Does it add a new library class or move a module to a different repo. - [x] Impacts security? - **Security** - Does this PR have a direct security impact? - Fixes CVE-2025-6176 reported in brotli < 1.2.0. - [ ] Includes tests? - **Tests** - Does this PR include any explicit test code? - Examples: Unit tests or integration tests. ## How This Was Tested Verified booting on a virtual platform by compressing/decompressing PEI/DXE sections. ## Integration Instructions NA Signed-off-by: Vineel Kovvuri[MSFT] <vineelko@microsoft.com> 2024-12-11T00:38:27+00:00 Phil Noh Phil.Noh@amd.com 2024-12-05T17:09:40+00:00 urn:sha1:1bb10a479fd67b693b3c9fd9c925f7ea1dcc923e REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4877 Brotli decompression library is supported in EDK2 core. Currently it is not buildable when linking it to DxeIpl driver. The result is also checked on edk2 master branch. It could be related to updating Brotli submodule (v1.0.9) on the previous commit (1193aa2). The update makes the library buildable. It was verified for the functional status. Signed-off-by: Phil Noh <Phil.Noh@amd.com> 2022-02-15T02:13:32+00:00 Bob Feng bob.c.feng@intel.com 2022-01-26T08:29:18+00:00 urn:sha1:1193aa2dfbbd11fa7191d000a0cc166d03a249d2 REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3D3417 Update the brotli submodule to the latest commit (f4153a0) so that the build isn't broken in GCC 11 compilers. Cc: Jian J Wang <jian.j.wang@intel.com> Cc: Hao A Wu <hao.a.wu@intel.com> Cc: Dandan Bi <dandan.bi@intel.com> Cc: Liming Gao <gaoliming@byosoft.com.cn> Cc: Pedro Falcato <pedro.falcato@gmail.com> Signed-off-by: Bob Feng <bob.c.feng@intel.com> Reviewed-by: Liming Gao <gaoliming@byosoft.com.cn> 2021-12-07T17:24:28+00:00 Michael Kubacki michael.kubacki@microsoft.com 2021-12-05T22:54:02+00:00 urn:sha1:1436aea4d5707e672672a11bda72be2c63c936c3 REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3737 Apply uncrustify changes to .c/.h files in the MdeModulePkg package Cc: Andrew Fish <afish@apple.com> Cc: Leif Lindholm <leif@nuviainc.com> Cc: Michael D Kinney <michael.d.kinney@intel.com> Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com> Reviewed-by: Liming Gao <gaoliming@byosoft.com.cn> 2021-12-07T17:24:28+00:00 Michael D Kinney michael.d.kinney@intel.com 2021-12-03T02:00:49+00:00 urn:sha1:e3917e22e769898bb0d08d0112e768437f1ff9fb REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3760 Update all use of ', OPTIONAL' to ' OPTIONAL,' for function params. Cc: Andrew Fish <afish@apple.com> Cc: Leif Lindholm <leif@nuviainc.com> Cc: Michael Kubacki <michael.kubacki@microsoft.com> Signed-off-by: Michael D Kinney <michael.d.kinney@intel.com> Reviewed-by: Liming Gao <gaoliming@byosoft.com.cn> 2021-01-06T07:15:09+00:00 gaoliming gaoliming@byosoft.com.cn 2020-12-30T06:30:22+00:00 urn:sha1:67e0e4caa5bacdd65327d8b302eace2d9ebd209f The same functions have been defined in BrotliDecUefiSupport.c. Signed-off-by: Liming Gao <gaoliming@byosoft.com.cn> Cc: Hao A Wu <hao.a.wu@intel.com> Cc: Dandan Bi <dandan.bi@intel.com> Reviewed-by: Hao A Wu <hao.a.wu@intel.com> 2020-04-16T01:58:38+00:00 Shenglei Zhang shenglei.zhang@intel.com 2020-02-12T10:08:15+00:00 urn:sha1:58802e02c41bd715a5d3586f4bf2a4b1c46e9274 Use submodule way to access brotli in MdeModulePkg based on brotli version 666c3280cc11dc433c303d79a83d4ffbdd12cc8d. The newly added BrotliDecUefiSupport.h/.c are used by directory 'brotli'. REF: https://bugzilla.tianocore.org/show_bug.cgi?id=2559 Cc: Liming Gao <liming.gao@intel.com> Cc: Jian J Wang <jian.j.wang@intel.com> Cc: Hao A Wu <hao.a.wu@intel.com> Signed-off-by: Shenglei Zhang <shenglei.zhang@intel.com> Reviewed-by: Liming Gao <liming.gao@intel.com> 2019-11-15T02:06:12+00:00 Zhiguang Liu zhiguang.liu@intel.com 2019-11-12T08:47:44+00:00 urn:sha1:9639c1f3e7f4f0d2df4072a60f754a9c43f2d784 REF:https://bugzilla.tianocore.org/show_bug.cgi?id=2338 Cc: Jian J Wang <jian.j.wang@intel.com> Cc: Hao A Wu <hao.a.wu@intel.com> Signed-off-by: Zhiguang Liu <zhiguang.liu@intel.com> Reviewed-by: Liming Gao <liming.gao@intel.com> 2019-04-09T17:58:08+00:00 Michael D Kinney michael.d.kinney@intel.com 2019-04-03T23:05:13+00:00 urn:sha1:9d510e61fceee7b92955ef9a3c20343752d8ce3f https://bugzilla.tianocore.org/show_bug.cgi?id=1373 Replace BSD 2-Clause License with BSD+Patent License. This change is based on the following emails: https://lists.01.org/pipermail/edk2-devel/2019-February/036260.html https://lists.01.org/pipermail/edk2-devel/2018-October/030385.html RFCs with detailed process for the license change: V3: https://lists.01.org/pipermail/edk2-devel/2019-March/038116.html V2: https://lists.01.org/pipermail/edk2-devel/2019-March/037669.html V1: https://lists.01.org/pipermail/edk2-devel/2019-March/037500.html Contributed-under: TianoCore Contribution Agreement 1.1 Signed-off-by: Michael D Kinney <michael.d.kinney@intel.com> Reviewed-by: Hao Wu <hao.a.wu@intel.com> Reviewed-by: Jian J Wang <jian.j.wang@intel.com> 2018-10-19T00:21:47+00:00 Liming Gao liming.gao@intel.com 2018-10-16T07:27:15+00:00 urn:sha1:1c3399d73dda6acded6d1f680b43306f1eb84ebe This change is to pass static analysis. Contributed-under: TianoCore Contribution Agreement 1.1 Signed-off-by: Liming Gao <liming.gao@intel.com> Reviewed-by: Star Zeng <star.zeng@intel.com>