Tianocore/edk2.git/NetworkPkg/Library, branch dependabot/github_actions/actions/setup-python-6

NetworkPkg/DxeNetLib: Fix CodeQl Error

2025-06-13T19:56:32+00:00

Fix possible NULL pointer dereference in NetBuffer.c This was flagged by CodeQl as an error. Github Issue #11190 Signed-off-by: Brit Chesley

NetworkPkg: Update to make IPv6 prefix length 128 will not be excluded.

2025-05-27T21:01:52+00:00

Signed-off-by: Ken Peng

NetworkPkg/DxeNetLib: drop GLOBAL_REMOVE_IF_UNREFERENCED

2024-12-04T22:25:37+00:00

With mSecureHashAlgorithms being static this should not be needed any more. Suggested-by: Ard Biesheuvel Signed-off-by: Gerd Hoffmann

NetworkPkg/DxeNetLib: make mSecureHashAlgorithms static

2024-11-14T17:03:03+00:00

Signed-off-by: Gerd Hoffmann

MdePkg: Move PcdEnforceSecureRngAlgorithms from NetworkPkg

2024-09-13T14:34:21+00:00

The PcdEnforceSecureRngAlgorithms Pcd enforces the use of RNG algorithms defined by the UEFI spec. To re-use the Pcd in other packages and have a generic mean to control the usage of unsecure algorithms, move the Pcd to the MdePkg. Continuous-integration-options: PatchCheck.ignore-multi-package Signed-off-by: Pierre Gondois

NetworkPkg/DxeNetLib: Update misleading comment

2024-09-09T17:53:44+00:00

Commit 6862b9d538d96363635677198899e1669e591259 makes more explicit the previous logic of the code anyway, which is that it is (and was) only a fatal error if all secure algorithms fail. However the comment updated by this commit seems somewhat incompatible with that change, and even with the previous code (which operated as now, just logging different error messages). This updates the comment to be more compatible with how the code operates. Signed-off-by: Mike Beaton

NetworkPkg: DxeHttpLib: Use HTTP error 429

2024-09-02T21:17:25+00:00

Include a mapping for HTTP error 429 to return the correct status code. Additionally include a link to the official HTTP status codes in the HttpMappingToStatusCode function header. Signed-off-by: Kenneth Lautner

NetworkPkg/DxeHttpLib: Support HTTP CONNECT message in Tx path.

2024-08-07T23:01:48+00:00

Add HTTP CONNECT message support in HttpGenRequestMessage() Signed-off-by: Saloni Kasbekar

NetworkPkg/DxeNetLib: adjust PseudoRandom error logging

2024-06-27T15:14:56+00:00

There is a list of allowed rng algorithms, if /one/ of them is not supported this is not a problem, only /all/ of them failing is an error condition. Downgrade the message for a single unsupported algorithm from ERROR to VERBOSE. Add an error message in case we finish the loop without finding a supported algorithm. Signed-off-by: Gerd Hoffmann

NetworkPkg: SECURITY PATCH CVE-2023-45237

2024-05-24T15:48:52+00:00

REF:https://bugzilla.tianocore.org/show_bug.cgi?id=4542 Bug Overview: PixieFail Bug #9 CVE-2023-45237 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Use of a Weak PseudoRandom Number Generator Change Overview: Updates all Instances of NET_RANDOM (NetRandomInitSeed ()) to either > > EFI_STATUS > EFIAPI > PseudoRandomU32 ( > OUT UINT32 *Output > ); > or (depending on the use case) > > EFI_STATUS > EFIAPI > PseudoRandom ( > OUT VOID *Output, > IN UINTN OutputLength > ); > This is because the use of Example: The following code snippet PseudoRandomU32 () function is used: > > UINT32 Random; > > Status = PseudoRandomU32 (&Random); > if (EFI_ERROR (Status)) { > DEBUG ((DEBUG_ERROR, "%a failed to generate random number: %r\n", __func__, Status)); > return Status; > } > This also introduces a new PCD to enable/disable the use of the secure implementation of algorithms for PseudoRandom () and instead depend on the default implementation. This may be required for some platforms where the UEFI Spec defined algorithms are not available. > > PcdEnforceSecureRngAlgorithms > If the platform does not have any one of the UEFI defined secure RNG algorithms then the driver will assert. Cc: Saloni Kasbekar Cc: Zachary Clark-williams Signed-off-by: Doug Flick [MSFT] Reviewed-by: Saloni Kasbekar