diff options
| author | Aaron Pop <aaronpop@microsoft.com> | 2026-10-15 23:13:40 +0300 |
|---|---|---|
| committer | mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> | 2026-10-31 02:41:08 +0300 |
| commit | e76e710ad875c13413b55b94bf3599dbb377a025 (patch) | |
| tree | d5db6712fc5b4799e5d288cfa07fbd01b12ab661 /SecurityPkg | |
| parent | 7eee9931c8074b20ff1c0f1c08f20bb7c2d81803 (diff) | |
| download | edk2-master.tar.xz | |
Explicitly set EFI_MEMORY_XP on PRM runtime MMIO ranges so they do not
remain executable. Include the XP capability when adding missing MMIO
ranges and enable it on existing ranges before setting attributes.
Apply EFI_MEMORY_RUNTIME | EFI_MEMORY_XP to provide read/write access
without execute permission, clearing any existing RP or RO attributes.
Skip the attribute update only when the range is already runtime,
execute-protected, and neither read-protected nor read-only.
Found while running a paging audit on a system consuming PRM.
Signed-off-by: Aaron Pop <aaronpop@microsoft.com>
Diffstat (limited to 'SecurityPkg')
0 files changed, 0 insertions, 0 deletions
