Tianocore/edk2.git/SecurityPkg, branch dependabot/github_actions/github/codeql-action-4EDK II (mirror)https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Fgithub%2Fcodeql-action-42025-10-30T10:00:32+00:00SecurityPkg: Remove DXE_SAL_DRIVER2025-10-30T10:00:32+00:00Sathya Ravichandransathyar@ami.com2025-09-23T10:36:13+00:00urn:sha1:d36680ad13bc84e274e60729146adb574d4f44f2
The DXE_SAL_DRIVER module type was introduced to support
Itanium (IPF) platforms. Since support for Itanium processors has been
dropped, the instances of DXE_SAL_DRIVER have been removed.
Ref: [3cb0a311cb7e747d7be5c5076d0fff76ad256d2b]
Cc: Sachin Ganesh <sachinganesh@ami.com>
Signed-off-by: Sathya Ravichandran <sathyar@ami.com>
SecurityPkg: Trace and return status are handled.2025-10-27T01:49:32+00:00Arun Subramanian Baskaranarun.subramanian.baskaran@intel.com2025-10-24T02:27:41+00:00urn:sha1:c6cea09e9ad0674bb58e430623407092cdc8ac30
Added debug trace messages on LocateProtocol failure for
gEfiDxeSmmReadyToLockProtocolGuid. Returned device error in case of
EfiCreateProtocolNotifyEvent failure.
Removed ASSERT due to if condition.
Signed-off-by: Arun Subramanian Baskaran <arun.subramanian.baskaran@intel.com>
SecurityPkg/BuildOptions : Add CLANGPDB DLINK_FLAGS flags to build options2025-10-17T10:25:33+00:00Deepak5x Singhdeepakx.singh@intel.com2025-10-08T04:11:34+00:00urn:sha1:519ccd4d593345d454ffd3f2f68bf909dca62ada
[Issue] : There is no DLINK_FLAGS definition for CLANGPDB,
leading to potential discrepancies in build alignments
[Resolution] : This change adds a CLANGPDB line for DLINK_FLAGS.
Maintaining the alignment with existing standards in place for
other compiler packages.
Signed-off-by: Deepak5x <deepakx.singh@intel.com>
SecurityPkg: Tcg2StandaloneMmArm: Enable TPM FFA Instance to Register PPI2025-10-14T15:58:23+00:00Kun Qinkuqin@microsoft.com2025-08-01T20:00:26+00:00urn:sha1:9c06ac56fb7e910943c8cb384aaad72aacbd3efe
Previously, the implementation restricted usage to TPM instances with the
DTPM ID, which worked only if the system supported TPM over FFA but still
set the instance ID to DTPM. However, Tpm2InstanceLibFfa requires the
`PcdTpmInstanceGuid` to be set to `gTpm2ServiceFfaGuid`.
This update expands support by allowing the `PcdTpmInstanceGuid` to
include the TPM-over-FFA instance GUID, enabling proper registration of
the PPI.
Signed-off-by: Kun Qin <kun.qin@microsoft.com>
SecurityPkg: Tcg2AcpiFfa: Correct TPM Instance Validation2025-10-14T15:58:23+00:00Kun Qinkuqin@microsoft.com2025-08-01T19:53:46+00:00urn:sha1:4883960e5e50c3a01a48d5f3bb51fcb795ff11a9
The current implementation checks `PcdTpmInstanceGuid` and enforces the
use of the DTPM instance GUID. However, for FFA-specific modules, the
correct value should be `gTpm2ServiceFfaGuid`.
This update fixes the validation logic to support routing through
Tpm2DeviceLibRouter* with the appropriate instance library, which
requires the instance ID to be set to `gTpm2ServiceFfaGuid`.
Signed-off-by: Kun Qin <kun.qin@microsoft.com>
SecurityPkg: rename PeilessSecMeasureNullLib2025-10-02T14:42:07+00:00Leif Lindholmleif.lindholm@oss.qualcomm.com2025-09-30T14:55:49+00:00urn:sha1:baf0ae3b1d3cd038ab287c3ff9a780ec171808db
By edk2 convention, a NULL library should be called *LibNull.
This library did not follow this convention, so rename i.
Signed-off-by: Leif Lindholm <leif.lindholm@oss.qualcomm.com>
SecurityPkg/Library: introduce PeilessSecMeasureLib2025-09-30T11:39:04+00:00Levi Yunyeoreum.yun@arm.com2025-09-15T13:50:12+00:00urn:sha1:9bca0ee3b25acc42c9d420494aca9dbabc0edec3
PeilessSecMeasureLib is library to support
measurement and extend PCR in PeilessSec where no PEI phase exist.
Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>
SecurityPkg/Library: introduce HashLibTpm2PeilessSec2025-09-30T11:39:04+00:00Levi Yunyeoreum.yun@arm.com2025-09-15T13:45:36+00:00urn:sha1:9c651ef83a74d83219075316aa5d1c189ed608c8
PeilessSec couldn't use the HasLibTpm2 since:
- HashLibTpm2 uses memory allocation/free for Hash interface.
But in PeilessSecPhase doesn't support the free memory since
the allocation of memory via MemoryAllocation APIs is allocated
using HOB which couldn't be freed.
- In SEC phase, it couldn't use DynamicPcd -- PcdHashMasks
- PeilessSec utilises the algorithm passed in
the SpecId event log handed off by TF-A
To address theses, introduce HashLibTpm2PeilessSec used for
measurements in the PeilessSec.
Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>
SecurityPkg: Drop ARM32 Support2025-09-25T22:04:10+00:00Oliver Smith-Dennyosde@microsoft.com2025-09-15T14:51:59+00:00urn:sha1:08ae634ccb4dc5463b3d4473c44269cdd9e0c191
edk2 is dropping support for the ARM32 architecture. This
commit removes ARM32 code in SecurityPkg.
Signed-off-by: Oliver Smith-Denny <osde@microsoft.com>
SecurityPkg/Tpm2DeviceLibDTpm: Remove global variable for command code2025-09-25T10:24:54+00:00Phil NohPhil.Noh@amd.com2025-09-05T20:11:15+00:00urn:sha1:21eff866e7a8e7e9669ec3448a4a3f455a67f2f8
As a BASE type library, currently the TCG PEI driver, Tcg2Pei.inf links
the library. On edk2-stable202508 version, it is found that the driver
includes and updates the global variable of mLastCommandSent in debug
build. Also found that the previous commit (460f270) for the library adds
and uses the global variable. Updating the global variable in PEI drivers
could affect the following issues. To address these issues, remove the
global variable usage.
PEI ROM Boot : Global variable is not updated
PEI RAM Boot : PEI FV integration/security check is failed
Signed-off-by: Phil Noh <Phil.Noh@amd.com>