EDK II (mirror) https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Fgithub%2Fcodeql-action-4 2025-02-11T20:25:08+00:00 2025-02-11T20:25:08+00:00 Ard Biesheuvel ardb@kernel.org 2025-02-08T10:25:19+00:00 urn:sha1:96cf70951f53f16853fdd42129b73940e71bab2d SEC, PEI_CORE and PEIM type modules generally execute in place from memory that is not writable. This means that it is not generally possible to use an entrypoint implementation that stores a dynamically generated stack cookie into a global variable. For PEIMs in particular, there may be other options, such as a DEPEX on the permanent memory PPI, but the current dynamic implementations of the stack checking library entrypoints for PEI_CORE and PEIM modules must not be used as-is. So remove them, and update the readme accordingly. Signed-off-by: Ard Biesheuvel <ardb@kernel.org> 2025-02-11T20:25:08+00:00 Ard Biesheuvel ardb@kernel.org 2025-02-08T16:36:48+00:00 urn:sha1:5c3dcef94cf36646f75a44cb75c72beb34fa1fd0 Remove some source files that were part of an earlier incarnation of DynamicStackCookieEntryPointLib but are no longer actually in use. Signed-off-by: Ard Biesheuvel <ardb@kernel.org> 2025-02-07T02:23:11+00:00 Oliver Smith-Denny osde@microsoft.com 2025-01-29T19:05:03+00:00 urn:sha1:e6b6aa90d490c298da140bc118d73ceff510f563 Adds dynamic stack cookies in the form of copies of the entry point libraries that use shared logic to update stack cookies at runtime. This relies on RDRAND on IA32/X64 and RNDR on AARCH64 to get a random number to apply to the stack cookie on module entry point. This simplifies the logic a platform must do to include stack check functionality. Signed-off-by: Oliver Smith-Denny <osde@microsoft.com>