summaryrefslogtreecommitdiff
path: root/SecurityPkg/Library/DxeImageVerificationLib/GoogleTest
AgeCommit message (Collapse)AuthorFilesLines
2026-07-16SecurityPkg: added image verification tests for signed imagesAlexander Gryanko8-51/+1632
Previous changes introduced tests for unsigned images verified by hash entries in DB/DBX. This commit adds tests covering verification of signed images, including certificate chain validation as well as cases where image hashes are checked against entries in DB/DBX. Signed-off-by: Alexander Gryanko <xpahos@gmail.com>
2026-07-16SecurityPkg: added image verification test using DB hashAlexander Gryanko4-13/+761
The part of DxeImageVerificationHandler responsible for verifying the image location source has already been implemented. This commit implements tests for verifying images in cases where the image has no signature, but there is a hash record for this file in DB/DBX. Signed-off-by: Alexander Gryanko <xpahos@gmail.com>
2026-02-24SecurityPkg: Replace include guards with #pragma onceMichael Kubacki1-4/+1
Replace traditional `#ifndef`/`#define`/`#endif` include guards with `#pragma` once. `#pragma once` is a widely supported preprocessor directive that prevents header files from being included multiple times. It is supported by all toolchains used to build edk2: GCC, Clang/LLVM, and MSVC. Compared to macro-based include guards, `#pragma once`: - Eliminates the risk of macro name collisions or copy/paste errors where two headers inadvertently use the same guard macro. - Eliminate inconsistency in the way include guard macros are named (e.g., some files use `__FILE_H__`, others use `FILE_H_`, etc.). - Reduces boilerplate (three lines replaced by one). - Avoids polluting the macro namespace with guard symbols. - Can improve build times as the preprocessor can skip re-opening the file entirely, rather than re-reading it to find the matching `#endif` ("multiple-include optimization"). - Note that some compilers may already optimize traditional include guards, by recognzining the idiomatic pattern. This change is made acknowledging that overall portability of the code will technically be reduced, as `#pragma once` is not part of the C/C++ standards. However, this is considered acceptable given: 1. edk2 already defines a subset of supported compilers in BaseTools/Conf/tools_def.template, all of which have supported `#pragma once` for over two decades. 2. There have been concerns raised to the project about inconsistent include guard naming and potential macro collisions. Approximate compiler support dates: - MSVC: Supported since Visual C++ 4.2 (1996) - GCC: Supported since 3.4 (2004) (http://gnu.ist.utl.pt/software/gcc/gcc-3.4/changes.html) - Clang (LLVM based): Since initial release in 2007 Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com>
2025-08-07SecurityPkg: Added basic DxeImageVerificationLib testsAlexander Gryanko3-0/+295
Add initial unit test for DxeImageVerificationHandler to validate signature verification bypass for selected image types. Signed-off-by: Alexander Gryanko <xpahos@gmail.com>