Tianocore/edk2.git/OvmfPkg/Library, branch dependabot/github_actions/actions/github-script-8EDK II (mirror)https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Factions%2Fgithub-script-82025-10-09T22:04:43+00:00OvmfPkg/PlatformInitLib: add sanity checks to igvm code2025-10-09T22:04:43+00:00Gerd Hoffmannkraxel@redhat.com2025-10-06T13:58:47+00:00urn:sha1:0f0b472ae54bc6ef8e186e7a60670a60b4131d9c
With SEV or SEV-ES being active uninitialized memory is random cipher
text instead of being zero-initialized. So checking against zero to
figure whenever igvm parameters are present or not is not sufficient.
Apply more strict sanity checks.
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
OvmfPkg/X86QemuLoadImageLib: do not use the legacy linux loader in CVMs.2025-10-01T09:00:49+00:00Gerd Hoffmannkraxel@redhat.com2025-09-24T11:27:26+00:00urn:sha1:5a6a9f7955f34c7ddf2d045443a9bbb112be4fc7
Do not use the insecure legacy linux loader (which does not
enforce secure boot checks) when running in a confidential VM.
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
OvmfPkg/igvm: add PlatformIgvmVpCount2025-09-29T14:28:23+00:00Gerd Hoffmannkraxel@redhat.com2025-09-16T10:55:47+00:00urn:sha1:38370cf4924205df97b8bcaf0f184983a4b34f66
Add support for getting the cpu count via IGVM parameter.
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
OvmfPkg/igvm: handle igvm data hobs2025-09-29T14:28:23+00:00Gerd Hoffmannkraxel@redhat.com2025-09-09T20:44:03+00:00urn:sha1:c36111cfcacd7c528aebf552d3e584c352786b8a
In case HOBs are present in the IGVM data hob area register the memory
regions as bootservice data to avoid them being overwritten. Also copy
over the HOBs so they can easily be found later using standard HobLib
functions.
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
OvmfPkg/igvm: add igvm memory map support.2025-09-29T14:28:23+00:00Gerd Hoffmannkraxel@redhat.com2025-08-08T12:23:34+00:00urn:sha1:5e8db785e4732891a4e96d2fbc83079b3e4262cc
In case a IGVM memory map is present in the parameter area use that
when detecting guest memory.
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
OvmfPkg: Drop ARM32 Support2025-09-25T22:04:10+00:00Oliver Smith-Dennyosde@microsoft.com2025-09-15T15:53:51+00:00urn:sha1:c6ff778056707c9b545ed0cbe2bb099a98263655
edk2 is dropping support for the ARM32 architecture. This
commit removes ARM32 code from OvmfPkg. This drops irrelevant
VALID_ARCHITECTURES comments from infs that are not arch
specific.
Signed-off-by: Oliver Smith-Denny <osde@microsoft.com>
OvmfPkg: Remove OVMF IA322025-09-09T18:49:32+00:00Oliver Smith-Dennyosde@microsoft.com2025-08-25T18:24:03+00:00urn:sha1:1fb88ffe284782cc79e306306b8d19829b6248b7
This commit removes OVMF IA32 from edk2 per RFC
https://edk2.groups.io/g/devel/topic/rfc_remove_ovmf_ia32_and/114152215.
OVMF IA32 is a 32 bit only platform that no longer represents the vast
majority of physical platforms. The RFC details more reasoning in
much more depth.
OVMF IA32 will be kept in a branch off the edk2-stable202508 tag for
any long term consumers; it will receive build break updates only
(e.g. if an upstream submodule changes location).
Signed-off-by: Oliver Smith-Denny <osde@microsoft.com>
OvmfPkg/MemEncryptSevLib: Check if SEV-SNP coherency mitigitation is needed2025-09-09T17:43:31+00:00Tom Lendackythomas.lendacky@amd.com2025-07-22T20:06:18+00:00urn:sha1:20f24c0f67b3364cd590e1eea470f74be40e7710
CPUID bit Fn8000001F_EBX[31] defines the COHERNECY_SFW_NO CPUID bit that,
when set, indicates that the software mitigation for this vulnerability is
not needed.
Add support to check for this CPUID bit and avoid the mitigation if set.
Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
OvmfPkg/MemEncryptSevLib: Evict cache lines during SNP memory validation2025-09-09T17:43:31+00:00Tom Lendackythomas.lendacky@amd.com2025-08-12T19:43:32+00:00urn:sha1:3b0d834db286a236fd22c41923fc271fc44ead5f
An SNP cache coherency vulnerability may require a mitigation to evict
cache lines after memory has been validated. Perform this mitigation
after having validated memory.
CVE-2024-36331
Signed-off-by: Michael Roth <michael.roth@amd.com>
Co-developed-by: Tom Lendacky <thomas.lendacky@amd.com>
Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>OvmfPkg/MemDebugLogLib: move QemuFwCfgSimpleParserLib to LibraryClasses2025-08-28T09:56:09+00:00Luigi Leonardileonardi@redhat.com2025-07-14T10:15:34+00:00urn:sha1:41c48d2a7cfde90a84954f5810ad5392aa244ce8
There is no good reason to keep QemuFwCfgSimpleParserLib arch-specific.
Move it to the LibraryClasses section.
Signed-off-by: Luigi Leonardi <leonardi@redhat.com>