<feed xmlns='http://www.w3.org/2005/Atom'>
<title>Tianocore/edk2.git/NetworkPkg/Test, branch dependabot/github_actions/actions/setup-python-6</title>
<subtitle>EDK II (mirror)</subtitle>
<id>https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Factions%2Fsetup-python-6</id>
<link rel='self' href='https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Factions%2Fsetup-python-6'/>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/'/>
<updated>2024-09-13T03:58:46+00:00</updated>
<entry>
<title>NetworkPkg: Add StackCheckLib</title>
<updated>2024-09-13T03:58:46+00:00</updated>
<author>
<name>Taylor Beebe</name>
<email>taylor.d.beebe@gmail.com</email>
</author>
<published>2024-06-14T21:00:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=fefd0178517ce7424e02c995979834158210b720'/>
<id>urn:sha1:fefd0178517ce7424e02c995979834158210b720</id>
<content type='text'>
Remove the old stack check lib now that MdeLibs.inc includes
the new one.

Signed-off-by: Oliver Smith-Denny &lt;osde@linux.microsoft.com&gt;
</content>
</entry>
<entry>
<title>MdePkg: Move CompilerIntrinsicsLib from ArmPkg</title>
<updated>2024-09-12T19:36:59+00:00</updated>
<author>
<name>Oliver Smith-Denny</name>
<email>osde@linux.microsoft.com</email>
</author>
<published>2024-08-05T17:25:07+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=8f74b95a21cf106fa4eb4932e22b404c57297ba2'/>
<id>urn:sha1:8f74b95a21cf106fa4eb4932e22b404c57297ba2</id>
<content type='text'>
As per the emailed RFC in
https://edk2.groups.io/g/devel/topic/rfc_move/107675828,
this patch moves CompilerIntrinsicsLib from ArmPkg to
MdePkg as this library provides compiler intrinsics, which
are industry standard.

This aligns with the goal of integrating ArmPkg into existing
packages: https://bugzilla.tianocore.org/show_bug.cgi?id=4121.

The newly placed CompilerIntrinsicsLib is added to MdeLibs.dsc.inc
as every DSC that builds ARM/AARCH64 needs this library added. The
old location is removed from every DSC in edk2 in this commit also
to not break bisectability with minimal hoop jumping.

Continuous-integration-options: PatchCheck.ignore-multi-package

Signed-off-by: Oliver Smith-Denny &lt;osde@linux.microsoft.com&gt;
</content>
</entry>
<entry>
<title>NetworkPkg: Update the PxeBcDhcp6GoogleTest due to underlying changes</title>
<updated>2024-05-24T15:48:52+00:00</updated>
<author>
<name>Doug Flick</name>
<email>dougflick@microsoft.com</email>
</author>
<published>2024-05-09T05:56:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=207b6d68a0ea4748d666e0a73e486feba89bd4c3'/>
<id>urn:sha1:207b6d68a0ea4748d666e0a73e486feba89bd4c3</id>
<content type='text'>
This patch updates the PxeBcDhcp6GoogleTest due to the changes in the
underlying code. The changes are as follows:
 - Random now comes from the RngLib Protocol
 - The TCP ISN is now generated by the hash function

Cc: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
Cc: Zachary Clark-williams &lt;zachary.clark-williams@intel.com&gt;

Signed-off-by: Doug Flick [MSFT] &lt;doug.edk2@gmail.com&gt;
Reviewed-by: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
</content>
</entry>
<entry>
<title>NetworkPkg: UefiPxeBcDxe: SECURITY PATCH CVE-2023-45235 Unit Tests</title>
<updated>2024-02-06T19:24:26+00:00</updated>
<author>
<name>Doug Flick</name>
<email>dougflick@microsoft.com</email>
</author>
<published>2024-01-25T21:54:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=ff2986358f75d8f58ef08a66fe673539c9c48f41'/>
<id>urn:sha1:ff2986358f75d8f58ef08a66fe673539c9c48f41</id>
<content type='text'>
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=4540

Unit tests to confirm that the bug..

Buffer overflow when handling Server ID option from a DHCPv6 proxy
Advertise message

..has been patched.

This patch contains unit tests for the following functions:
PxeBcRequestBootService
PxeBcDhcp6Discover

Cc: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
Cc: Zachary Clark-williams &lt;zachary.clark-williams@intel.com&gt;

Signed-off-by: Doug Flick [MSFT] &lt;doug.edk2@gmail.com&gt;
Reviewed-by: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
</content>
</entry>
<entry>
<title>NetworkPkg: UefiPxeBcDxe: SECURITY PATCH CVE-2023-45234 Unit Tests</title>
<updated>2024-02-06T19:24:26+00:00</updated>
<author>
<name>Doug Flick</name>
<email>dougflick@microsoft.com</email>
</author>
<published>2024-01-25T21:54:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=458c582685fc0e8057d2511c5a0394078d988c17'/>
<id>urn:sha1:458c582685fc0e8057d2511c5a0394078d988c17</id>
<content type='text'>
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=4539

Unit tests to that the bug..

Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise
message

..has been patched

This contains tests for the following functions:
PxeBcHandleDhcp6Offer
PxeBcCacheDnsServerAddresses

Cc: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
Cc: Zachary Clark-williams &lt;zachary.clark-williams@intel.com&gt;

Signed-off-by: Doug Flick [MSFT] &lt;doug.edk2@gmail.com&gt;
Reviewed-by: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
</content>
</entry>
<entry>
<title>NetworkPkg: Ip6Dxe: SECURITY PATCH CVE-2023-45231 Unit Tests</title>
<updated>2024-02-06T19:24:26+00:00</updated>
<author>
<name>Doug Flick</name>
<email>dougflick@microsoft.com</email>
</author>
<published>2024-01-25T21:54:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=6f77463d72807ec7f4ed6518c3dac29a1040df9f'/>
<id>urn:sha1:6f77463d72807ec7f4ed6518c3dac29a1040df9f</id>
<content type='text'>
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=4536

Validates that the patch for...

Out-of-bounds read when handling a ND Redirect message with truncated
options

.. has been fixed

Tests the following function to ensure that an out of bounds read does
not occur
Ip6OptionValidation

Cc: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
Cc: Zachary Clark-williams &lt;zachary.clark-williams@intel.com&gt;

Signed-off-by: Doug Flick [MSFT] &lt;doug.edk2@gmail.com&gt;
Reviewed-by: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
</content>
</entry>
<entry>
<title>NetworkPkg: Dhcp6Dxe: SECURITY PATCH CVE-2023-45229 Unit Tests</title>
<updated>2024-02-06T19:24:26+00:00</updated>
<author>
<name>Doug Flick via groups.io</name>
<email>dougflick=microsoft.com@groups.io</email>
</author>
<published>2024-01-25T21:54:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=07362769ab7a7d74dbea1c7a7a3662c7b5d1f097'/>
<id>urn:sha1:07362769ab7a7d74dbea1c7a7a3662c7b5d1f097</id>
<content type='text'>
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4534

These tests confirm that the report bug...

"Out-of-bounds read when processing IA_NA/IA_TA options in a
DHCPv6 Advertise message"

..has been patched.

The following functions are tested to confirm an out of bounds read is
patched and that the correct statuses are returned:

Dhcp6SeekInnerOptionSafe
Dhcp6SeekStsOption

TCBZ4534
CVE-2023-45229
CVSS 6.5 : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-125 Out-of-bounds Read

Cc: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
Cc: Zachary Clark-williams &lt;zachary.clark-williams@intel.com&gt;

Signed-off-by: Doug Flick [MSFT] &lt;doug.edk2@gmail.com&gt;
Reviewed-by: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
</content>
</entry>
<entry>
<title>NetworkPkg: Dhcp6Dxe: SECURITY PATCH CVE-2023-45230 Unit Tests</title>
<updated>2024-02-06T19:24:26+00:00</updated>
<author>
<name>Doug Flick via groups.io</name>
<email>dougflick=microsoft.com@groups.io</email>
</author>
<published>2024-01-25T21:54:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=5f3658197bf29c83b3349b0ab1d99cdb0c3814bc'/>
<id>urn:sha1:5f3658197bf29c83b3349b0ab1d99cdb0c3814bc</id>
<content type='text'>
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4535

Confirms that reported issue...

"Buffer overflow in the DHCPv6 client via a long Server ID option"

..has been corrected by the provided patch.

Tests the following functions to ensure they appropriately handle
untrusted data (either too long or too small) to prevent a buffer
overflow:

Dhcp6AppendOption
Dhcp6AppendETOption
Dhcp6AppendIaOption

Cc: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
Cc: Zachary Clark-williams &lt;zachary.clark-williams@intel.com&gt;

Signed-off-by: Doug Flick [MSFT] &lt;doug.edk2@gmail.com&gt;
Reviewed-by: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
</content>
</entry>
<entry>
<title>NetworkPkg: : Add Unit tests to CI and create Host Test DSC</title>
<updated>2024-02-06T19:24:26+00:00</updated>
<author>
<name>Doug Flick via groups.io</name>
<email>dougflick=microsoft.com@groups.io</email>
</author>
<published>2024-01-25T21:54:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=8014ac2d7bbbc503f5562b51af46bb20ae3d22ff'/>
<id>urn:sha1:8014ac2d7bbbc503f5562b51af46bb20ae3d22ff</id>
<content type='text'>
Adds Host Based testing to the NetworkPkg

Cc: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
Cc: Zachary Clark-williams &lt;zachary.clark-williams@intel.com&gt;

Signed-off-by: Doug Flick [MSFT] &lt;doug.edk2@gmail.com&gt;
Reviewed-by: Saloni Kasbekar &lt;saloni.kasbekar@intel.com&gt;
</content>
</entry>
</feed>
