EDK II (mirror) https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Fgithub%2Fcodeql-action-4 2025-10-10T08:44:42+00:00 2025-10-10T08:44:42+00:00 Qihang Gao gaoqihang@loongson.cn 2025-09-18T12:29:05+00:00 urn:sha1:80eaa563ec1cd2272334134d5fd35d856843fe65 TempBuffer variable is only dynamically allocated when the opcode is EFI_IFR_STRING_OP and the string value is not 0, so it should be freed under the same condition. Otherwise, the variable may be unexpected freed. Signed-off-by: Qihang Gao <gaoqihang@loongson.cn> 2025-08-22T09:15:51+00:00 Gao Qihang gaoqihang@loongson.cn 2025-07-25T02:44:37+00:00 urn:sha1:eb3354a49953e1ff35cfcb986e8a959c4c8f1aeb If string default is set to zero in vfr file and VfrCompile may not found the invalid operation, assert is trigged. This patch will check whether StringId is 0 to avoid assert. Cc: Chao Li <lichao@loongson.cn> Signed-off-by: Gao Qihang <gaoqihang@loongson.cn> 2025-07-08T15:42:03+00:00 GuoMinJ newexplorerj@gmail.com 2025-06-16T08:50:30+00:00 urn:sha1:0fe2520aad17d6c9a228b343dd8e0e3126484ce7 The Universal Graphics Adapter (UGA) is a graphic abstraction. The UGA I/O and Draw protocols are deprecated since UEFI 2.0 was introduced. Cf. the UEFI spec v2.9: "Appendix L - EFI 1.10 Protocol Changes and Deprecation List" section L.2 "Deprecated Protocols" Remove the UGA support. Signed-off-by: GuoMinJ <newexplorerj@gmail.com> Signed-off-by: Pierre Gondois <pierre.gondois@arm.com> 2025-06-09T06:38:29+00:00 DeepakX Singh deepakx.singh@intel.com 2025-06-04T07:24:58+00:00 urn:sha1:c87ea4751991ecb107d72437f45b70e25734c927 Issue : When user access "Boot Maintenance Manager Menu/Secure Boot Configuration Menu" with PcdNullPointerDetectionPropertyMask|0x03 and PcdHeapGuardPageType|0x7FFF protection policy set, we get X64 Exception Type - 0E(#PF - Page-Fault) Root cause : When user access "Boot Maintenance Manager Menu/Secure Boot Configuration Menu", BIOS calls FindQuestionDefaultSetting function and send EFI VarStore header pointer to AuthFindVariableData function. When header pointer is NULL, it send NULL pointer to AuthFindVariableData function and causes the page fault. Fix : Database.c: In function FindQuestionDefaultSetting, added NULL pointers check, so that when EFI VarStore header argument is passed to AuthFindVariableData function, NULL pointer access will not happen. Test: Cross verified while accessing the "Boot Maintenance Manager Menu/ Secure Boot Configuration Menu" page. Signed-off-by: DeepakX Singh <deepakx.singh@intel.com> 2025-05-16T01:04:53+00:00 Maximilian Brune maximilian.brune@9elements.com 2024-05-16T13:50:41+00:00 urn:sha1:5ea30a061cdfb6b0ed08369fd7c72ed1f43cfe2d The BlockSize calculation was missing the 0 terminator which caused the string block to shrink by 1 every time the string was processed. Therefore causing memory corruptions, because the string took more memory space as was allocated for the string block therefore corrupting the memory pool at the end (which caused an ASSERT upon trying to free it). Signed-off-by: Maximilian Brune <maximilian.brune@9elements.com> 2025-02-28T16:14:37+00:00 Michael Kubacki michael.kubacki@microsoft.com 2022-05-12T20:08:19+00:00 urn:sha1:29f02d0161bc5d10a6e3b2cfc4d10799644964a5 Prevent an issue where `memcpy()` instrinsic is being used after recent MSVC linker update in windows-2022 VM image from 14.31.31103 to 14.32.31326. Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com> 2025-02-21T00:50:36+00:00 Longhaox Lee longhaox.lee@intel.com 2025-02-14T08:44:06+00:00 urn:sha1:fbe0805b2091393406952e84724188f8c1941837 Remove efivarstore IFR buffer error when string load default. In the case of varstore type IFR, it will be NULL, just break into next opcode process. Resolve issue from commit cbe8a09dbac5c39d24ce5c4b9e7d44607f6c23da varstore type IFR string might return status error while execute ExtractConfig function. Signed-off-by: Longhao Lee <longhaox.lee@intel.com> 2025-01-14T10:00:29+00:00 Longhaox Lee longhaox.lee@intel.com 2024-12-26T03:04:59+00:00 urn:sha1:cbe8a09dbac5c39d24ce5c4b9e7d44607f6c23da Add string question load default support. load default data from PCD PcdNvStoreDefaultValueBuffer. Signed-off-by: Longhao Lee <longhaox.lee@intel.com> 2024-12-02T13:38:48+00:00 Dandan Bi dandan.bi@intel.com 2024-11-19T08:56:28+00:00 urn:sha1:9112fb0ecc6db221268cb54eec76f07149756c91 REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4874 Question CheckBox, OneOf and Numeric can refer to Bit EFI VarStore. CheckBox: data type is Boolean (1 byte), Numeric/Oneof: data type is always UNIT32 for BIT VarStore, When get default value for BIT VarStore, should return default value with sizeof (UINT32) rather than the byte the bit width occupied. Or incorrect default value will be used due to the size mismatch. Signed-off-by: Dandan Bi <dandan.bi@intel.com> 2024-10-30T03:36:56+00:00 nikhil p sheshagiri nikhil.p.sheshagiri@intel.com 2024-10-24T15:24:13+00:00 urn:sha1:acce74762b45f26adb461ef46de4bf8e2d722e94 storage data format REF:https://bugzilla.tianocore.org/show_bug.cgi?id=4857 NVS needs to support both authenticated and non-authenticated header for NV region. PcdNvStoreDefaultValueBuffer can have variables with data format of the type Authenticated variable storage and this change provides the support to differentiate between the normal variable storage and authenticated variable storage for the hii database to consume and update the setup variables accordingly Signed-off-by: nikhil p sheshagiri <nikhil.p.sheshagiri@intel.com>