Tianocore/edk2.git/SecurityPkg/VariableAuthenticated, branch master

SecurityPkg: Fix wider-type comparisons

2026-09-08T18:20:17+00:00

Makes changes to comply with CodeQL comparison-with-wider-type alerts. Some of these have safe patterns even with wider type comparisons, so an explicit cast is used to make the intention clear and silence the failure. Signed-off-by: Oliver Smith-Denny

SecurityPkg: Guard nullable return values

2026-09-08T18:20:17+00:00

Makes changes to comply with CodeQL unguarded-null-return-dereference alerts. Signed-off-by: Oliver Smith-Denny

SecurityPkg: Add support for LOONGARCH64 and RISCV64 when parsing PE image

2026-06-24T17:31:06+00:00

If the machine type of PE/COFF image is LOONGARCH64 or RISCV64, the LoadPeImage() should return EFI_SUCCESS. This patch is intended as a preparation for future use of LOONGARCH64 or RISCV64 PE image file. Signed-off-by: Qihang Gao

SecurityPkg/SecureBootConfigDxe: Remove unused variable mImageType

2026-06-24T17:31:06+00:00

Remove mImageType as it is assigned but never used. The definition of struct IMAGE_TYPE is also removed. Signed-off-by: Qihang Gao

SecurityPkg: align UNI file headers with UNI Spec standard

2026-03-02T19:32:17+00:00

The Uni file standard specifies that comments begin with the characters "//". The following files contained incorrectly formatted C-style comments and have been updated: SecurityPkg/Library/DxeTcg2PhysicalPresenceLib/PhysicalPresenceStrings.uni SecurityPkg/Library/DxeTcgPhysicalPresenceLib/PhysicalPresenceStrings.uni SecurityPkg/Tcg/Tcg2Config/Tcg2ConfigStrings.uni SecurityPkg/Tcg/TcgConfigDxe/TcgConfigStrings.uni SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigStrings.uni The problems were identified during testing of the parser https://github.com/xpahos/edk2-idea. Signed-off-by: Alexander Gryanko

SecurityPkg: Replace include guards with #pragma once

2026-02-23T21:01:28+00:00

Replace traditional `#ifndef`/`#define`/`#endif` include guards with `#pragma` once. `#pragma once` is a widely supported preprocessor directive that prevents header files from being included multiple times. It is supported by all toolchains used to build edk2: GCC, Clang/LLVM, and MSVC. Compared to macro-based include guards, `#pragma once`: - Eliminates the risk of macro name collisions or copy/paste errors where two headers inadvertently use the same guard macro. - Eliminate inconsistency in the way include guard macros are named (e.g., some files use `__FILE_H__`, others use `FILE_H_`, etc.). - Reduces boilerplate (three lines replaced by one). - Avoids polluting the macro namespace with guard symbols. - Can improve build times as the preprocessor can skip re-opening the file entirely, rather than re-reading it to find the matching `#endif` ("multiple-include optimization"). - Note that some compilers may already optimize traditional include guards, by recognzining the idiomatic pattern. This change is made acknowledging that overall portability of the code will technically be reduced, as `#pragma once` is not part of the C/C++ standards. However, this is considered acceptable given: 1. edk2 already defines a subset of supported compilers in BaseTools/Conf/tools_def.template, all of which have supported `#pragma once` for over two decades. 2. There have been concerns raised to the project about inconsistent include guard naming and potential macro collisions. Approximate compiler support dates: - MSVC: Supported since Visual C++ 4.2 (1996) - GCC: Supported since 3.4 (2004) (http://gnu.ist.utl.pt/software/gcc/gcc-3.4/changes.html) - Clang (LLVM based): Since initial release in 2007 Signed-off-by: Michael Kubacki

SecurityPkg: fix various typos

2025-11-21T21:49:59+00:00

Signed-off-by: Philipp Schuster

SecurityPkg: Drop ARM32 Support

2025-09-25T22:04:10+00:00

edk2 is dropping support for the ARM32 architecture. This commit removes ARM32 code in SecurityPkg. Signed-off-by: Oliver Smith-Denny

Revert "SecurityPkg: CodeQL Fixes."

2025-08-12T03:50:30+00:00

This reverts commit ba6a8eb045aededbc1472cce7314ab1911f0ea1c. PR https://github.com/tianocore/edk2/pull/11307 introduced a logic change that caused regressions in FV verification on some platforms. This PR is being reverted to restore the prior logic. The Code QL fixes in https://github.com/tianocore/edk2/pull/11307 can be resubmitted without the logic change along with one commit for each type of Code QL issue being addressed. Signed-off-by: Michael D Kinney

SecurityPkg: CodeQL Fixes.

2025-07-24T01:58:06+00:00

Makes changes to comply with alerts raised by CodeQL. Most of the issues here fall into the following two categories: 1. Potential use of uninitialized pointer. 2. Inconsistent integer width in comparison. Co-authored-by: Taylor Beebe <31827475+TaylorBeebe@users.noreply.github.com> Co-authored-by: kenlautner <85201046+kenlautner@users.noreply.github.com> Co-authored-by: Bret Barkelew Signed-off-by: Doug Flick