Tianocore/edk2.git/MdeModulePkg/Library/GptLib/GptLib.inf, branch masterEDK II (mirror)https://git.radix-linux.su/Tianocore/edk2.git/atom?h=master2026-07-20T21:50:57+00:00MdeModulePkg/GptLib: Extract shareable GPT parser into a library2026-07-20T21:50:57+00:00Richard Lyurichard.lyu@suse.com2026-06-25T06:17:28+00:00urn:sha1:00a865d595591fef44dc9f23353f5c3d50152e04
As reported in CVE-2024-13745 via oss-sec, DxeTpm2MeasureBootLib can
measure a partition table that differs from the one parsed by the
PartitionDxe driver.
To address this, the more complete GPT parsing logic from PartitionDxe
is extracted into a standalone GptLib library so it can be
shared between PartitionDxe and DxeTpm2MeasureBootLib. This ensures
that the exact same partition table measured into PCR[5] is the one
parsed and used by the system. PartitionDxe behavior is unchanged.
Ref: https://seclists.org/oss-sec/2026/q2/727
Signed-off-by: Richard Lyu <richard.lyu@suse.com>