Tianocore/edk2.git/SecurityPkg/Library, branch master

SecurityPkg/FmpAuthenticationLibPkcs7: Use pages for scratch buffer

2026-09-29T06:13:02+00:00

FmpAuthenticatedHandlerPkcs7() allocates a scratch buffer whose size is (ImageSize - AuthInfo.Hdr.dwLength): the full firmware payload plus the 8-byte monotonic count, assembled contiguously for Pkcs7Verify(). The library declares support for the DXE and post-memory PEI phases. In PEI, MemoryAllocationLib's AllocatePool() maps to PeiAllocatePool(), which builds an EFI_HOB_TYPE_MEMORY_POOL HOB and rejects any request larger than (0xFFF8 - sizeof (EFI_HOB_MEMORY_POOL)), i.e. just under 64 KiB. PeiAllocatePool() itself notes that a post-memory PEIM wanting a larger pool should use the AllocatePages service instead. As a result, authenticating any image whose payload exceeds that limit fails at allocation with RETURN_OUT_OF_RESOURCES before Pkcs7Verify() is ever called. Callers that map this to a status code report an authentication/security failure for an otherwise validly signed image. Allocate the scratch buffer with AllocatePages (EFI_SIZE_TO_PAGES (Size)) and release it with the matching FreePages (). The data assembled for Pkcs7Verify() is unchanged, so authentication results are identical for valid and invalid signatures. The DXE phase is unaffected because its pool allocator has no comparable size limit. Cc: Jiewen Yao Cc: Chris Fernald Signed-off-by: Anandh krishna U

SecurityPkg/TcgEventLogRecordLib: Define LIBRARY_CLASS

2026-09-24T18:29:59+00:00

Set LIBRARY_CLASS to TcgEventLogRecordLib instead of NULL. The library is already consumed through TcgEventLogRecordLib DSC mappings and INF dependencies. Defining the library class explicitly matches its current usage and avoids build warnings. Signed-off-by: Vishal Oliyil Kunnil

SecurityPkg: Remove Globals from HashLibTpm2PeilessSec

2026-09-22T02:10:45+00:00

Updated the HashLibTpm2PeilessSec library to no longer use globals in SEC. Changed the code to query the relevant information each time it was needed either through the TPM or Transfer List. Signed-off-by: Raymond Diaz

SecurityPkg: Propagate Cryptographic Operation Failures

2026-09-08T18:20:17+00:00

Check and propagate failures in HashLibBaseCryptoRouter and RngDxe. Signed-off-by: Oliver Smith-Denny

SecurityPkg: Fix wider-type comparisons

2026-09-08T18:20:17+00:00

Makes changes to comply with CodeQL comparison-with-wider-type alerts. Some of these have safe patterns even with wider type comparisons, so an explicit cast is used to make the intention clear and silence the failure. Signed-off-by: Oliver Smith-Denny

SecurityPkg: Guard nullable return values

2026-09-08T18:20:17+00:00

Makes changes to comply with CodeQL unguarded-null-return-dereference alerts. Signed-off-by: Oliver Smith-Denny

SecurityPkg: Break out the user prompt from Tcg2 PPI

2026-09-03T23:32:46+00:00

Use PromptForUserConfirmation() function from library so it is abstracted at the platform level. Signed-off-by: Raymond Diaz Signed-off-by: Bret Barkelew

SecurityPkg: Add Tcg2PhysicalPresencePromptLib

2026-09-03T23:32:46+00:00

Add Tcg2PhysicalPresencePromptLib to support breaking out the PromptForUserConfirmation() function into a platform specific library. Signed-off-by: Raymond Diaz Signed-off-by: Bret Barkelew

Revert "SecurityPkg: Break out the user prompt from Tcg2 PPI"

2026-09-03T23:32:46+00:00

This reverts commit 2c2f74a581473d20b54c4310f27abbd73c8e9687. Signed-off-by: Michael D Kinney

SecurityPkg: Break out the user prompt from Tcg2 PPI

2026-08-26T10:54:45+00:00

Break out the PromptForUserConfirmation() function into a lib so it can be abstracted at the platform level. Signed-off-by: Raymond Diaz Signed-off-by: Bret Barkelew