EDK II (mirror) https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Fgithub%2Fcodeql-action-4 2025-11-06T03:17:41+00:00 2025-11-06T03:17:41+00:00 Kun Qin kuqin@microsoft.com 2025-11-04T00:34:34+00:00 urn:sha1:49d4753385dd4949c2ba3f0f3ab5b941cd817749 The current implementation from Dxe/Image/Image.c does not handle the configuration where there might be multiple MemoryAllocationModules. Given that the `ModuleName` is included in the hob data and used for targetting the consumer, DXE core should specify the GUID when looking up for its own MemoryAllocationModule. This change adds a check to ensure the located hob is targetting DXE core. Signed-off-by: Kun Qin <kuqin12@gmail.com> 2025-11-05T04:12:21+00:00 Vineel Kovvuri[MSFT] vineelko@microsoft.com 2025-11-04T00:15:10+00:00 urn:sha1:a3a180e2bc417403e563d2f1204f444afa5e4db7 # Description Update brotli from v1.0.9 to v1.2.0 https://github.com/google/brotli/releases/tag/v1.2.0 - [ ] Breaking change? - **Breaking change** - Does this PR cause a break in build or boot behavior? - Examples: Does it add a new library class or move a module to a different repo. - [x] Impacts security? - **Security** - Does this PR have a direct security impact? - Fixes CVE-2025-6176 reported in brotli < 1.2.0. - [ ] Includes tests? - **Tests** - Does this PR include any explicit test code? - Examples: Unit tests or integration tests. ## How This Was Tested Verified booting on a virtual platform by compressing/decompressing PEI/DXE sections. ## Integration Instructions NA Signed-off-by: Vineel Kovvuri[MSFT] <vineelko@microsoft.com> 2025-10-31T07:26:12+00:00 kuqin12 42554914+kuqin12@users.noreply.github.com 2025-09-12T05:02:42+00:00 urn:sha1:94065db3dc726124b5f607896431e47b36707c90 If a secure partition on AArch64 platforms would consume extended time to operate with peripherals, it might elect to yield the control back to normal world and expect the normal world to callback after hinted period of time. This change adds the FFA_YIELD handling from ArmFfaLib to support long operations from secure partitions. Timeout arguments are ignored because systems in this context cannot benefit from the timeout period. Treating FFA_YIELD like FFA_INTERRUPT and expecting the caller to invoke FFA_RUN is the least disruptive approach while achieving the intended behavior. This was tested on proprietary hardware platforms and booted to Windows. Signed-off-by: Kun Qin <kun.qin@microsoft.com> 2025-10-30T10:00:32+00:00 Sathya Ravichandran sathyar@ami.com 2025-09-23T10:07:04+00:00 urn:sha1:147e9a053e3b7a65ee21c23d5a83338e153a4c3e The DXE_SAL_DRIVER module type was introduced to support Itanium (IPF) platforms. Since support for Itanium processors has been dropped, the instances of DXE_SAL_DRIVER have been removed. Ref: [3cb0a311cb7e747d7be5c5076d0fff76ad256d2b] Cc: Sachin Ganesh <sachinganesh@ami.com> Signed-off-by: Sathya Ravichandran <sathyar@ami.com> 2025-10-30T03:26:29+00:00 Michael D Kinney michael.d.kinney@intel.com 2025-10-29T15:55:05+00:00 urn:sha1:d145aef952ebbce9464e9f9d177912f6e67bea7f PR #11443 introduced a regression by adding a DEBUG() message when the lock for events is acquired and that lock is at TPL_HIGH_LEVEL. If DEBUG() messages are routed through Report Status Code, and the Report Status Code Protocol has not been located yet, then a call to gBS->LocateProtocol() is made and that call raises TPL to TPL_NOTIFY which causes a TPL inversion. The event lock is used to atomically update gEventSignalQueue. There is no need for the DEBUG() message to within the event lock scope. The fix is to scope the event lock to only the InsertHeadList() call to update gEventSignalQueue. Signed-off-by: Michael D Kinney <michael.d.kinney@intel.com> 2025-10-23T13:59:39+00:00 Vitaly Cheptsov vit9696@protonmail.com 2025-08-07T08:53:07+00:00 urn:sha1:64a1aca08fd4e2f50be1564242959189fbf417d6 Memory Attributes Table needs to be updated to contain executable permissions for UEFI runtime drivers loaded after EndOfDxe. Fixes a regression introduced by bb248a9. Signed-off-by: Vitaly Cheptsov <vit9696@protonmail.com> 2025-10-23T00:57:59+00:00 Oliver Smith-Denny osde@microsoft.com 2025-10-20T03:18:54+00:00 urn:sha1:cec2c6bbccf7b529266884dbef25ad212bf167d5 Following the APs now always initializing separate exception stacks, this commit always initializes a separate exception stack for the BSP as well. Previously, this was only enabled when PcdCpuStackGuard was set. However, even when a stack guard page is not present, stack overflows can still occur and corrupt the stack; if an exception is taken here, it is still valuable to have a separate exception stack for sanity. Signed-off-by: Oliver Smith-Denny <osde@microsoft.com> 2025-10-23T00:57:59+00:00 Oliver Smith-Denny osde@microsoft.com 2025-10-22T15:47:33+00:00 urn:sha1:1d6f2f0d8d4fb967df4a54d0734f1c4cee32bf88 Currently, CpuExceptionHandlerLibNull returns EFI_UNSUPPORTED for InitializeSeparateExceptionStacks. However, CpuMpPei, CpuDxe, and DXE Core are all moving to call this function unconditionally and expect it returns success. As such, the null lib is updated to return success. This fixes a hang on EmulatorPkg where DXE Core asserts if this function returns an error. Signed-off-by: Oliver Smith-Denny <osde@microsoft.com> 2025-10-21T11:46:17+00:00 George Liao george.liao@intel.com 2025-10-21T09:03:32+00:00 urn:sha1:44214c0cdf12bf91df9319c5bc90c640b461f252 Improving InitializeAcpiTableDxe() behavior. Signed-off-by: George Liao <george.liao@intel.com> 2025-10-21T11:46:17+00:00 George Liao george.liao@intel.com 2025-10-21T08:57:38+00:00 urn:sha1:9f31aa33d8f83d01372750b219cd9960a8aff7a0 Added "PublishTables()" and "SdtNotifyAcpiList()" for completing AddTableToList behavior in the InstallAcpiTableFromAcpiSiliconHob(). Signed-off-by: George Liao <george.liao@intel.com>