|
|
|
|
Changelog for qemu-ovmf-x86_64-debug-202202-5.1.x86_64.rpm :
* Mon May 02 2022 jleeAATTsuse.com- Respin amd-sev and amd-sev-es features After more testing, we found that not all descriptors can support both amd-sev with amd-sev-es. So we removed all amd-sev and amd-sev-es feature tags but only keep them in ovmf-x86_64-2m.json and 60-ovmf-x86_64.json. (bsc#1198246#c75) * Sat Mar 26 2022 Martin Liška - Add GCC 12 workaround (ovmf-ignore-spurious-GCC-12-warning.patch) that handles: https://bugzilla.tianocore.org/show_bug.cgi?id=3816 The same patch is already included in qemu package. * Tue Mar 15 2022 Fabian Vogt - TPM_ENABLE got renamed to TPM2_ENABLE and TPM_CONFIG_ENABLE removed (except on ARM for some reason) (boo#1197104) * Thu Mar 10 2022 jleeAATTsuse.com- Update to edk2-stable202202 - Features (https://github.com/tianocore/edk2/releases): OvmfPkg Add new target for Cloud Hypervisor Add TDVF to OvmfPkg Add new APIs to UefiCpuPkg/UefiCpuLib Add AMD Secure Nested Paging Support Add SSDT PCI generator in DynamicTablesPkg Support ACPI 6.4 PPTT changes Add FdtHwInfoParser library Add DynamicPlatRepo library Make package and platform builds reproducible across source format changes Add Uncrustify CI Plugin Apply uncrustify changes to all package C and H files - Patches (git log --oneline --reverse edk2-stable202111~..edk2-stable202202): bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error ef9a059cdb EmulatorPkg/Win/Host: Update CC_FLAGS 69877614fd .pytool/Plugin/EccCheck: Remove RevertCode() 854462bd34 .pytool/Plugin/EccCheck: Remove temp directory on exception 3019f1bbab .pytool/Plugin/EccCheck: Add performance optimizations 99f84ff473 .pytools/Plugin/LicenseCheck: Use temp directory for git diff output 76a1ce4d5f .azurepipelines/templates: Update max pipeline job time to 2 hours 365dced2c3 ArmPkg: Update YAML to ignore specific ECC files/errors 1939fc9569 ArmPlatformPkg: Update YAML to ignore specific ECC files/errors c97fee87f0 ArmVirtPkg: Update YAML to ignore specific ECC files/errors d5744ecba8 CryptoPkg: Update YAML to ignore specific ECC files/errors d7d30e8f21 EmulatorPkg: Update YAML to ignore specific ECC files/errors 9deb937076 MdeModulePkg: Update YAML to ignore specific ECC files/errors df790cd6b3 MdePkg: Update YAML to ignore specific ECC files/errors 60fa40be45 SecurityPkg: Update YAML to ignore specific ECC files/errors 9944508e85 ShellPkg: Update YAML to ignore specific ECC files/errors c30c40d6c6 StandaloneMmPkg: Update YAML to ignore specific ECC files/errors c057347977 UefiPayloadPkg: Update YAML to ignore specific ECC files/errors f0f3f5aae7 UnitTestFrameworkPkg: Update YAML to ignore specific ECC files/errors dfafa8e453 MdeModulePkg/DxeCorePerformanceLib:Variable Initial a4a582e180 ArmPkg: Change use of EFI_D_ * to DEBUG_ * 1d2482e1e3 ArmPlatformPkg: Change use of EFI_D_ * to DEBUG_ * c5b3a56e4f ArmVirtPkg: Change use of EFI_D_ * to DEBUG_ * a1878955b2 EmbeddedPkg: Change use of EFI_D_ * to DEBUG_ * 9c7da8d804 EmulatorPkg: Change use of EFI_D_ * to DEBUG_ * 917e98f3e5 FatPkg: Change use of EFI_D_ * to DEBUG_ * 87000d7708 MdeModulePkg: Change use of EFI_D_ * to DEBUG_ * 5f289f3ae3 MdePkg: Change use of EFI_D_ * to DEBUG_ * c49ca4a29e NetworkPkg: Change use of EFI_D_ * to DEBUG_ * 47719926e8 OvmfPkg: Change use of EFI_D_ * to DEBUG_ * ca56749b0e PcAtChipsetPkg: Change use of EFI_D_ * to DEBUG_ * e905fbb05a SecurityPkg: Change use of EFI_D_ * to DEBUG_ * 4a1aee13d8 ShellPkg: Change use of EFI_D_ * to DEBUG_ * 586fda4800 SourceLevelDebugPkg: Change use of EFI_D_ * to DEBUG_ * 96e1cba5c1 UefiCpuPkg: Change use of EFI_D_ * to DEBUG_ * 1871d28eaf ArmPkg: Change OPTIONAL keyword usage style 2863ba97ca ArmPlatformPkg: Change OPTIONAL keyword usage style 9607597a74 ArmVirtPkg: Change OPTIONAL keyword usage style c8f46130f8 CryptoPkg: Change OPTIONAL keyword usage style fe2d81892f DynamicTablesPkg: Change OPTIONAL keyword usage style 792433088c EmbeddedPkg: Change OPTIONAL keyword usage style c69fc80c80 EmulatorPkg: Change OPTIONAL keyword usage style 9c721071d3 FmpDevicePkg: Change OPTIONAL keyword usage style e3917e22e7 MdeModulePkg: Change OPTIONAL keyword usage style d0e2f8232a MdePkg: Change OPTIONAL keyword usage style 8874fa199d NetworkPkg: Change OPTIONAL keyword usage style 79d49e162e OvmfPkg: Change OPTIONAL keyword usage style 237295f46d PcAtChipsetPkg: Change OPTIONAL keyword usage style dc8fe5ec95 RedfishPkg: Change OPTIONAL keyword usage style 12710fe93b SecurityPkg: Change OPTIONAL keyword usage style 9b8507cabe ShellPkg: Change OPTIONAL keyword usage style 18908e6131 SignedCapsulePkg: Change OPTIONAL keyword usage style f9c9215b55 SourceLevelDebugPkg: Change OPTIONAL keyword usage style 902e76de19 StandaloneMmPkg: Change OPTIONAL keyword usage style 4ec586b9f6 UefiCpuPkg: Change OPTIONAL keyword usage style e35dd32821 UefiPayloadPkg: Change OPTIONAL keyword usage style 78bc3bdd2a UnitTestFrameworkPkg: Change OPTIONAL keyword usage style ea85f0fe13 ArmVirtPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END() e3b855f283 CryptoPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END() 4a9d411662 DynamicTablesPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END() db52c7f755 MdeModulePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END() 098307e082 MdePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END() ed7f7c9168 NetworkPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END() 8e875037bf OvmfPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END() deba54761a PcAtChipsetPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END() f9f4fb2329 SecurityPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END() 7c2a6033c1 UefiCpuPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END() 429309e0c6 ArmPkg: Apply uncrustify changes 40b0b23ed3 ArmPlatformPkg: Apply uncrustify changes 2b16a4fb91 ArmVirtPkg: Apply uncrustify changes 7c34237831 CryptoPkg: Apply uncrustify changes 731c67e1d7 DynamicTablesPkg: Apply uncrustify changes e7108d0e96 EmbeddedPkg: Apply uncrustify changes a550d468a6 EmulatorPkg: Apply uncrustify changes bcdcc4160d FatPkg: Apply uncrustify changes 45ce0a67bb FmpDevicePkg: Apply uncrustify changes 111f2228dd IntelFsp2Pkg: Apply uncrustify changes 7c7184e201 IntelFsp2WrapperPkg: Apply uncrustify changes 1436aea4d5 MdeModulePkg: Apply uncrustify changes 2f88bd3a12 MdePkg: Apply uncrustify changes d1050b9dff NetworkPkg: Apply uncrustify changes ac0a286f4d OvmfPkg: Apply uncrustify changes 5220bd211d PcAtChipsetPkg: Apply uncrustify changes 39de741e2d RedfishPkg: Apply uncrustify changes c411b485b6 SecurityPkg: Apply uncrustify changes 47d20b54f9 ShellPkg: Apply uncrustify changes b878648967 SignedCapsulePkg: Apply uncrustify changes c1e126b119 SourceLevelDebugPkg: Apply uncrustify changes 91415a36ae StandaloneMmPkg: Apply uncrustify changes 053e878bfb UefiCpuPkg: Apply uncrustify changes e5efcf8be8 UefiPayloadPkg: Apply uncrustify changes 7c0ad2c338 UnitTestFrameworkPkg: Apply uncrustify changes dc453b5164 .pytool/Plugin/UncrustifyCheck: Add Uncrustify CI plugin 1832eb15aa UefiPayloadPkg/UefiPayloadPkg.fdf: Update DXE Apriori list ca78281c25 UefiPayloadPkg/PayloadEntry: Inherit 4/5-level paging from bootloader b2f7ee2ded UefiPayloadPkg: Increase SystemMemoryUefiRegionSize from 32M to 64M 94e0a7bddb UefiPayloadPkg: Add missing Guid gUefiAcpiBoardInfoGuid 2527723de9 UefiPayloadPkg: Add performance measurement feature ffdde9d719 UefiPayloadPkg: Skip ModuleInfo HOB in Payload 965292135b UefiPayloadPkg/UefiPayloadPkg.dsc:Add BootManagerLib for BootManagerMenuApp 85a678bf76 UefiPayloadPkg: Add integration instruction for coreboot common error 7b28310008 BaseTools: Increase the DevicePath length for support more PCD value. d25b803e51 MdeModulePkg/Bus/Pci/UhciDxe: Fix the UsbHc memory allocate and free issue c82ab4d8c1 BaseTools/VfrCompile: Correct Bit Field Flags for numeric/one of 2ddacfb6b8 OvmfPkg/SecMain: move SEV specific routines in AmdSev.c e2289d19d8 UefiCpuPkg/MpInitLib: move SEV specific routines in AmdSev.c 2fe8edfe55 OvmfPkg/ResetVector: move clearing GHCB in SecMain 3053183d41 OvmfPkg/ResetVector: introduce SEV metadata descriptor for VMM use 707c71a01b OvmfPkg: reserve SNP secrets page cca9cd3dd6 OvmfPkg: reserve CPUID page f2dc28f0b6 OvmfPkg/ResetVector: pre-validate the data pages used in SEC phase 34819f2cac OvmfPkg/ResetVector: use SEV-SNP-validated CPUID values d9822304ce OvmfPkg/MemEncryptSevLib: add MemEncryptSevSnpEnabled() 7c3b2892ea OvmfPkg/SecMain: register GHCB gpa for the SEV-SNP guest d2b998fbdc OvmfPkg/VmgExitLib: use SEV-SNP-validated CPUID values a19b648952 OvmfPkg/PlatformPei: register GHCB gpa for the SEV-SNP guest 19914edc5a OvmfPkg/AmdSevDxe: do not use extended PCI config space ade62c18f4 OvmfPkg/MemEncryptSevLib: add support to validate system RAM d706f8fec2 OvmfPkg/MemEncryptSevLib: add function to check the VMPL0 11b15336f0 OvmfPkg/BaseMemEncryptSevLib: skip the pre-validated system RAM d39f8d88ec OvmfPkg/MemEncryptSevLib: add support to validate > 4GB memory in PEI phase 202fb22be6 OvmfPkg/SecMain: validate the memory used for decompressing Fv 8eb79b5f4f OvmfPkg/PlatformPei: validate the system RAM when SNP is active 26210f9436 MdePkg: Define ConfidentialComputingGuestAttr 504ae26b80 OvmfPkg/PlatformPei: set PcdConfidentialComputingAttr when SEV is active b95908e043 UefiCpuPkg/MpInitLib: use PcdConfidentialComputingAttr to check SEV status f4e3ce5f53 UefiCpuPkg: add PcdGhcbHypervisorFeatures f5a6e1bab5 OvmfPkg/PlatformPei: set the Hypervisor Features PCD 2c354252be MdePkg/GHCB: increase the GHCB protocol max version 9c703bc0f1 UefiCpuPkg/MpLib: add support to register GHCB GPA when SEV-SNP is enabled d4d7c9ad5f UefiCpuPkg/MpInitLib: use BSP to do extended topology check b928eb44d5 OvmfPkg/MemEncryptSevLib: change the page state in the RMP table b7b8872031 OvmfPkg/MemEncryptSevLib: skip page state change for Mmio address ea3a12d970 OvmfPkg/PlatformPei: mark cpuid and secrets memory reserved in EFI map 67484aed69 OvmfPkg/AmdSev: expose the SNP reserved pages through configuration table 06544455d0 UefiCpuPkg/MpInitLib: Use SEV-SNP AP Creation NAE event to launch APs 0f1d7477c0 OvmfPkg: Remove unused print service driver (PrintDxe) 30631f0a26 MdePkg: Add missing Cache ID (in)valid define 0077c22f6d MdePkg: Remove PPTT ID type structure a50b65ce22 ShellPkg: Update Acpiview PPTT parser to ACPI 6.4 8cf2bdfcfb ShellPkg: Add Cache ID to PPTT parser b2bbe3df54 DynamicTablesPkg: Remove PPTT ID structure from ACPI 6.4 generator e139829dd6 DynamicTablesPkg: Update PPTT generator to ACPI 6.4 e81a81e584 DynamicTablesPkg: Add CacheId to PPTT generator 9afcd48a94 OvmfPkg: Handle Cloud Hypervisor host bridge 2ccefa32a6 OvmfPkg: Create global entry point for SMBIOS parsing d8ef774346 OvmfPkg: Retrieve SMBIOS from Cloud Hypervisor 66bce05f6d OvmfPkg: Generalize AcpiPlatformDxe 7594c5bfe2 OvmfPkg: Install ACPI tables for Cloud Hypervisor f6df289a1c OvmfPkg/OvmfXen: Fix Xen build 2b20a34fd5 OvmfPkg-EmuVariableFvbRuntimeDxe: Support Access To Memory Above 4G d5efc875ef MdePkg: Introduce CcMeasurementProtocol for CC Guest firmware a124cd4ef9 SecurityPkg: Support CcMeasurementProtocol in DxeTpm2MeasureBootLib 8c06c53b58 SecurityPkg: Support CcMeasurementProtocol in DxeTpmMeasurementLib adf070ff56 OvmfPkg/Microvm: add PcdConfidentialComputingGuestAttr 2686468c43 OvmfPkg/Bhyve: add MemEncryptSevLib 61be49e0f7 OvmfPkg/PlatformCI: factor out PlatformBuildLib.py 21ee379407 OvmfPkg/PlatformCI: add QEMU_SKIP 64bccda534 OvmfPkg/PlatformCI: add BhyveBuild.py 04eacd3943 OvmfPkg/PlatformCI: add MicrovmBuild.py 8b8ae609a7 OvmfPkg/PlatformCI: add AmdSevBuild.py 2722856a87 OvmfPkg/PlatformCI: dummy grub.efi for AmdSev 1203eba58e OvmfPkg/PlatformCI: add XenBuild.py 64ef0dd1d3 OvmfPkg/Microvm/fdt: add device tree support 79dcaf7054 OvmfPkg/Microvm/fdt: load fdt from fw_cfg c802f8935c OvmfPkg/Microvm/fdt: add empty fdt 2a68abf6ee OvmfPkg/Microvm/virtio: add virtio-mmio support e07d27e24d OvmfPkg/Microvm: add README 7f1861be2b DynamicTablesPkg: AML Code generation for memory ranges 0e7147fe75 DynamicTablesPkg: AML Code generation to create a named Package() fd5fc4bbb7 DynamicTablesPkg: AML Code generation to create a named ResourceTemplate() b2b8def4e3 DynamicTablesPkg: AML Code generation to add _PRT entries 69ddfee1c3 DynamicTablesPkg: Add AmlAttachNode() ce306e48eb DynamicTablesPkg: Add Pci related objects e35a746cf5 DynamicTablesPkg: SSDT Pci express generator ec37fd9c1f DynamicTablesPkg: Fix multiple objects parsing 557dede8a6 OvmfPkg/PlatformPei: ScanOrAdd64BitE820Ram improvements 759e3c6d21 OvmfPkg/PlatformPei: prefer etc/e820 for memory detection 41d8bb3038 OvmfPkg/PlatformPei: stop using cmos for memory detection 7a6e6ae933 EmulatorPkg: Update lldbefi.py to work with current lldb which uses python3 4d30352445 ArmPkg: Add SMC helper functions c039fa7ff0 ArmPkg: Update SMC calls to use the new ArmCallSmc0/1/2/3 functions 90ad4b3b34 DynamicTablesPkg: Definition for HwInfoParser interface d59c5a20f8 DynamicTablesPkg: FdtHwInfoParser: CM Object descriptor helper 5d8b5d171c DynamicTablesPkg: FdtHwInfoParser: Add FDT utility functions 8d2691c3d5 DynamicTablesPkg: FdtHwInfoParser: Add Boot Arch parser 3ebe1ff5c9 DynamicTablesPkg: FdtHwInfoParser: Generic Timer Parser 51941f7558 DynamicTablesPkg: FdtHwInfoParser: Add Serial port parser e366a41ef0 DynamicTablesPkg: FdtHwInfoParser: Add GICC parser 0fa1217726 DynamicTablesPkg: FdtHwInfoParser: Add GICD parser b04cf355a0 DynamicTablesPkg: FdtHwInfoParser: Add MSI Frame parser d250d408cf DynamicTablesPkg: FdtHwInfoParser: Add ITS parser 7b6c8b30a5 DynamicTablesPkg: FdtHwInfoParser: Add GICR parser 26bf034a59 DynamicTablesPkg: FdtHwInfoParser: Add GIC dispatcher c67bf628c8 DynamicTablesPkg: FdtHwInfoParser: Add PCI config parser deb01dfd7f DynamicTablesPkg: Add FdtHwInfoParser library 9006967c8d DynamicTablesPkg: Handle 16550_WITH_GAS id b2d0ed20fd DynamicTablesPkg: Definition for DynamicPlatRepoLib interface 2e2db65e39 DynamicTablesPkg: DynamicPlatRepo: Add TokenGenerator 740e3bb634 DynamicTablesPkg: DynamicPlatRepo: Add TokenFixer 5fe5b6f94f DynamicTablesPkg: DynamicPlatRepo: Add TokenMapper 38f6d78c3b DynamicTablesPkg: Add DynamicPlatRepo library f14fff5135 StandaloneMmPkg/FvLib: Support large file with EFI_FFS_FILE_HEADER2. 3a72ec71cd OvmfPkg: remove unused TPM options from MicrovmX64.dsc b47575801e OvmfPkg: move tcg configuration to dsc and fdf include files 5711ff4d0b OvmfPkg: drop TPM_CONFIG_ENABLE b819388772 OvmfPkg: create Tcg12ConfigPei.inf 4de8d61bce OvmfPkg: rework TPM configuration e6ea1464a8 OvmfPkg/PlatformPei: Revert \"stop using cmos for memory detection\" a6c0418651 ArmPkg/SmbiosMiscDxe: Remove duplicate HII string definition 45e3842970 ArmPkg/SmbiosMiscDxe: Get full SMBIOS strings from OemMiscLib b451c69088 ArmPkg/ProcessorSubClassDxe: Get serial and part number from OemMiscLib 8ed8568922 SecurityPkg: Debug code to audit BIOS TPM extend operations 195f011973 SecurityPkg: Reallocate TPM Active PCRs based on platform support ab5ab2f603 SecurityPkg: TPM must go to Idle state on CRB command completion c63a10ecb7 EmbeddedPkg/AcpiLib: Add more helper functions f129b1f06f OvmfPkg/Bhyve: fix tls-enabled build ee1f8262b8 OvmfPkg: Call PlatformInitializeConsole for GPU passthrough case de9e5b7dc7 IntelFsp2WrapperPkg : FSPM/S UPD data address based on Build Type 9ec2cc1f31 IntelFsp2WrapperPkg : Remove EFIAPI from local functions. ae8272ef78 MdeModulePkg/UsbBusDxe: fix NOOPT build error 15c596aeeb OvmfPkg: Bhyve: Delete unused AcpiTables/Ssdt.asl file 6612ff8561 UefiCpuPkg: Extend measurement of microcode patches to TPM e910f076ad BaseTools: Fix the bug of --cmd-len build option 7935be0fbd IntelFsp2Pkg/FspSecCore: ExtendedImageRevision was not printed. c095122d4b MdeModulePkg/PciBusDxe: Enumerator to check for RCiEP before looking for RP d463c56ddd MdeModulePkg: Replace with UFS_UNIT_DESC to fix timeout problem 45920941d9 MdeModulePkg: Refactoring UFS DME request and fix timing problem 13d9e8ec98 MdeModulePkg: Put off UFS HCS.DP checking to fix timing problem 079a58276b OvmfPkg/AmdSev/SecretPei: Mark SEV launch secret area as reserved 9dd14fc91c MdePkg: Add registers of boot partition feature 14a731096d UnitTestFrameworkPkg: CI YAML: Grant cmockery spell check exception 6062002bd5 MdeModulePkg/PartitionDxe: Add break to handle invalid LBA0 in MBR 7438a85bf1 BaseTools: Fix wrong variable header size c712ce2bb1 OvmfPkg/CloudHv: Add new target for Cloud Hypervisor a2da72b2ca OvmfPkg/CloudHv: Replace legacy 8254 PIT with local APIC timer 6ecdda71fe OvmfPkg/CloudHv: Connect serial console 1552050ce7 OvmfPkg/CloudHv: Remove legacy 8259 PIC support fdcea7ff6f OvmfPkg/CloudHv: Remove Q35 specifics 71082d3d1b OvmfPkg/CloudHv: Reduce dependency on QemuFwCfg 196be601f9 OvmfPkg/CloudHv: Remove video support 7b6cbe0a81 OvmfPkg/CloudHv: Remove USB support e73d1bf96a OvmfPkg/CloudHv: Remove CSM support b66056ef21 OvmfPkg/CloudHv: add Maintainers.txt entry 5302bd81d9 OvmfPkg: Add CloudHvX64 to the CI 59c48c9314 UefiPayloadPkg: Change the user interface name of the Uiapp 5801910013 UefiPayloadPkg: Not use BaseCpuTimerLib by default. 772c5bb8dc FmpDevicePkg/FmpDxe: Update FmpDeviceCheckImageWithStatus() handling 7709988dd8 RedfishPkg/RedfishRestExDxe:Simplify status check 21320ef669 MdeModulePkg/Variable: Make only EFI_VARIABLE_NON_VOLATILE invalid 7e5c603cba MdeModulePkg/SdMmcPciHcDxe: Robust improvements for SD card 1.8V switch ee67067f17 MdeModulePkg: VariableSmmRuntimeDxe: Fix Variable Policy Message Length 5b39832e18 MdePkg: MmCommunication2: Update MM communicate2 function description ce37f45955 ArmPkg: MmCommunicationDxe: MM communicate function argument attributes 541a077bd1 ArmPkg: MmCommunicationDxe: Update MM communicate `CommBuffer * *` checks 1aa1ec4574 ArmPkg: MmCommunicationDxe: Update MM communicate `CommSize` check 8cc5590eab ArmPkg: MmCommunicationDxe: Update MM communicate `MessageLength` check 6777e67383 EmbeddedPkg: Fix a build error in FwVol.c in X64 arch a867f3a704 UefiPayloadPkg: Use BaseCpuTimerLib for Universal Payload by default f4b7b473b4 MdeModulePkg/UefiBootManagerLib: Convert BmLoadOption to Variable Policy 76b3d45b75 ShellPkg: Add the missing VariablePolicyHelperLib in ShellPkg.dsc 8542fc5f95 NetworkPkg: Add the missing VariablePolicyHelperLib in NetworkPkg.dsc ae35314e7b Maintainers.txt: Add Sami Mujawar as reviewer for ArmPkg 862ea6e836 OvmfPkg: change qemu default resolution to 1280x800 e95b44c90e ArmVirtPkg: change qemu default resolution to 1280x800 929804b172 OvmfPkg: add PcdVideoResolutionSource 7f25ddbc03 OvmfPkg/QemuVideoDxe: simplify InitializeBochsGraphicsMode 336da55ca8 OvmfPkg/QemuVideoDxe: drop QEMU_VIDEO_BOCHS_MODES->ColorDepth 55c05427b9 OvmfPkg/QemuVideoDxe: factor out QemuVideoBochsAddMode 49a2d8cbf5 OvmfPkg/QemuVideoDxe: parse edid blob, detect display resolution ba79becd55 OvmfPkg/BaseCachingPciExpressLib: Migrate BaseCachingPciExpressLib 103fa647d1 ArmPkg: Replace CoreId and ClusterId with Mpidr in ARM_CORE_INFO struct 742dafd2cc DynamicTablesPkg: Print specifier macro for CM_OBJECT_ID 13136cc311 DynamicTablesPkg: FdtHwInfoParserLib: Parse Pmu info 5751d60821 DynamicTablesPkg: AmlLib: AmlAddPrtEntry() to handle GSI 5816bd3eab DynamicTablesPkg: AcpiSsdtPcieLibArm: Remove link device generation dc1118fa0d ArmVirtPkg: Add cspell exceptions 0dbd356983 ArmVirtPkg/Kvmtool: Add DSDT ACPI table 312ef7a0a4 ArmVirtPkg/Kvmtool: Add Configuration Manager 17a02163bd ArmVirtPkg/Kvmtool: Enable ACPI support 5b3c682d91 ArmVirtPkg/Kvmtool: Enable Acpiview 017564d637 ArmPkg/ArmMmuLib AARCH64: avoid EL0 accessible mappings 45b1612659 DynamicTablesPkg: Add Memory32Fixed function 007a95055b DynamicTablesPkg: Remove redundant cast in AmlCodeGenReturn 33189f0527 DynamicTablesPkg: Add AmlCodeGenMethodRetInteger function a4b7aa362d MdeModulePkg/Bus/Pci/PciBusDxe: Support platform PCI ROM override 6fb09da89f ShellPkg: Fix incorrect PPTT FlagName dereference c09dbc92e9 BaseTools/Conf: Add new macro for customizing dll file reduction. d4ac53aa91 BaseTools: Fix error leg in DscBuildData.py f78b937c95 MdeModulePkg/RuntimeDxe: clear mVirtualMapMaxIndex 96b8b5fd10 MdeModulePkg/UiApp: Fix spelling of \'FRONTPAGE\' bd676f080a Maintainers.txt: add missing github IDs to OvmfPkf/Fdt reviewers 1f54eaa725 Maintainers.txt: update email for Leif Lindholm b360b0b589 Maintainers.txt: Update email address c9b7c6e0cc BaseTools: Update CLANG{35,38}_WARNING_OVERRIDES to ignore unused vars 42af706dfb BaseTools: Update brotli submodule 1193aa2dfb MdeModulePkg: update brotli submodule 85589ddbf6 OvmfPkg/VmgExitLib: Fix uninitialized variable warning with XCODE5 c28e376edc OvmfPkg/FvbServicesSmm: use the VmgExitLibNull 8a57673316 ShellPkg: Fix Ping GetTimerPeriod API failure b24306f15d NetworkPkg: Fix incorrect unicode string of the AKM/Cipher Suite- Add amd-sev-es to the following descriptors because James Fehlig tested them (bsc#1196879): 60-ovmf-x86_64.json 60-ovmf-x86_64-2m.json 60-ovmf-x86_64-ms.json 60-ovmf-x86_64-2m-ms.json- Backported patches in ovmf-bsc1196879-sev-fix.patch for fixing SEV: de463163d9 OvmfPkg/AmdSev: reserve snp pages 63c50d3ff2 OvmfPkg/ResetVector: cache the SEV status MSR value in workarea f1d1c337e7 OvmfPkg/BaseMemEncryptLib: use the SEV_STATUS MSR value from workarea * Thu Feb 17 2022 Bernhard Wiedemann - Sort file lists for reproducible build results * Mon Jan 03 2022 Joey Lee - Modified gdb_uefi.py.in for python3 (bsc#1192126) - change \'long\' to \'int\' - using print (\' instead of print \" * Thu Dec 23 2021 jleeAATTsuse.com- Removed useless patch files because they are merged to edk2-stable202111 - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch- Updated URL to the edk2 repo on github- Use downloaded edk2-edk2-stable%{version}.tar.gz instead of the URL for Source0 because the edk2-edk2-stable202111 tarball is broken in tianocore repo which can not pass the \"osc service runall download_files\" testing. - We ill change it back to the following setting when upstream fixed tarball: Source0: https://github.com/tianocore/edk2/releases/download/edk2-stable%{version}/edk2-edk2-stable%{version}.tar.gz * Tue Dec 21 2021 Joey Lee - Update to edk2-stable202111 - Features (https://github.com/tianocore/edk2/releases): Add SSDT CPU topology generator Support ACPI 6.4 in GTDT parser and generator Support ACPI 6.4 in DynamicTables FADT parser Support ACPI 6.4 in Acpiview PCCT parser Support ACPI 6.4 in Acpiview HMAT parser Add support for the microvm machine type (qemu) OVMF/ArmVirt: add support for virtio-mmio 1.0 IntelFsp2Pkg: adopt FSP 2.3 specification UefiCpuPkg VTF0 X64: Build page tables using Linear-Address Translation to a 1-GByte Page Enable wildcard host name matching in HTTPS/TLS implementation Add QuickSort function into BaseLib Add SMM NV variable support in universal UEFI payload Add TDVF to OvmfPkg Make package and platform builds reproducible across source format changes - Patches (git log --oneline --reverse edk2-stable202108~..edk2-stable202111): 7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order 82f7e315d6 MdeModulePkg/PeiCore: Remove MigrateSecModulesInFv() 8b15024dc7 Maintainers: Add kraxel as Reviewer to ArmVirtPkg and OvmfPkg 80e67af9af OvmfPkg: introduce a common work area ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm a82bad9730 ArmPkg/GicV3Dxe: Don\'t signal EOI on arbitrary interrupts 94e465e5cb OvmfPkg/Virtio10: Add virtio-mmio 1.0 defines 08293e43da OvmfPkg/VirtioMmioDeviceLib: Add virtio 1.0 detection. 212a2b9bb8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetPageSize. 537a724421 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetQueueAddress 6a3e9576b8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Add default QueueNum ae12188cf8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Adapt feature bit handling 77d5fa8024 OvmfPkg/VirtioMmioDeviceLib: enable virtio 1.0 b04453d36b MdeModulePkg/EbcDxe: Mitigate memcpy intrinsics dc995ce906 MdeModulePkg: Add BootDiscoveryPolicyOld variable. 443300be46 MdePkg:Update IndustryStandard/Nvme.h with Nvme amdin controller data 0f11537548 MdeModulePkg:Increase Nvme capacity display cae735f613 ArmPkg: Enable boot discovery policy for ARM package. cb0d24637d OvmfPkg/OvmfXen: set PcdAcpiS3Enable at initialization 28152333bc OvmfPkg/LockBoxLib: use PcdAcpiS3Enable to detect S3 support 52e2dabc0f OvmfPkg/PlatformBootManagerLib: use PcdAcpiS3Enable to detect S3 support 5b5f10d746 OvmfPkg/SmmControl2Dxe: use PcdAcpiS3Enable to detect S3 support 9f3eda177a OvmfPkg/OvmfXen: add QemuKernelLoaderFsDxe f0fe55bca4 UefiPayloadPkg: Fix the build error when enable Core ci for UefiPayloadPkg 5d34cc49d5 UefiCpuPkg/PiSmmCpuDxeSmm: Update mPatchCetSupported set condition cdda3f74a1 UefiPayloadPkg/UefiPayloadEntry: Fix memory corruption 3b3f882288 MdeModulePkg/PiSmmCore: Drop deprecated image profiling commands b170806518 UefiCpuPkg: Clean up save state boundary checks and comments. 12e33dca4c IntelFsp2Pkg: Support Config File and Binary delta comparison 63fddc98e0 UefiPayloadPkg: Create .yaml file in UefiPayloadPkg e3ee8c8dbd .azurepipelines: Add UefiPayloadPkg in gate-build-job.yml and CISetting.py b6bc203375 MdeModulePkg/HiiDatabaseDxe:remove dead code block c5e805ffe1 MdeModulePkg: Fix typo of \"memory\" in RamDiskDxe debug message 81d71fb86e Maintainers.txt: Update maintainer/reviewer roles in MdeModulePkg edf8bc6d24 SecurityPkg/MemoryOverwriteControl: Add missing argument to DEBUG print 4473834e7d OvmfPkg/OvmfXen: Fix build with QemuKernelLoaderFsDxe a7cf2c5664 RedfishPkg: Fix various typos 851785ea67 UefiPayloadPkg: Include more modules in UefiPayloadPkg. d248516b3a UefiPayloadPkg: Include Network modules in UefiPayloadPkg. 6c7d6d4a5e UefiCpuPkg: ResetVector Tool Support for Python 3 cf7c650592 UefiCpuPkg: ResetVector Tool additional debug prints d96df7e993 UefiPayloadPkg: Fix the bug in dump guid HOB info functions dcd3d63f4f UefiPayloadPkg: Dump hob info from gEdkiiBootManagerMenuFileGuid 610d8073f2 SecurityPkg/TPM: Import PeiDxeTpmPlatformHierarchyLib.c from edk2-platforms 4d5f39cd22 SecurityPkg/TPM: Fix bugs in imported PeiDxeTpmPlatformHierarchyLib ebbc8ab2cd SecrutiyPkg/Tcg: Import Tcg2PlatformDxe from edk2-platforms 2906e572c6 SecurityPkg/Tcg: Make Tcg2PlatformDxe buildable and fix style issues f108178c56 SecurityPkg: Introduce new PCD PcdRandomizePlatformHierarchy a4867dea2a SecurityPkg/Tcg: Import Tcg2PlatformPei from edk2-platforms 2fa89c8e11 SecurityPkg/Tcg: Make Tcg2PlatformPei buildable and fix style issues 3b69fcf5f8 SecurityPkg: Add references to header and inf files to SecurityPkg 6c80564b89 MdeModulePkg/Core/Pei: Fix typo in function descriptions 6f501a7c9b MdeModulePkg/Core/Pei: Make migrated PEIM message verbose c19d18136e MdeModulePkg/Core/Pei: Fix pointer size mismatch in EvacuateTempRam() f4e72cf9d6 UefiPayloadPkg: Add script to build UniversalPayload in UefiPayloadPkg bda3546c55 UefiPayloadPkg: Fix the warning when building UefiPayloadPkg with IA32+X64 010753b7e7 UefiCpuPkg: Refactor initialization of CPU features during S3 resume 89f7ed8b29 UefiCpuPkg: Prevent from re-initializing CPU features during S3 resume 60d8bb9f28 UefiCpuPkg: VTF0 Linear-Address Translation to a 1-GByte Page till 512GB ac6388add4 ArmPkg/ProcessorSubClassDxe: Fix the format of ProcessorId e3e47d7963 UefiCpuPkg: SecCoreNative without ResetVector 542cba73d2 SecurityPkg: Add debug log for indicating IBB verified OBB successfully f334c5a41d IntelFsp2WrapperPkg: Make PcdFspModeSelection dynamic 79019c7a42 OvmfPkg: set a default value for the WorkAreaHeader PCD fdeff3fdae EmbeddedPkg: Remove duplicate libfdt.h include f2a7e24e38 EmbeddedPkg: AndroidBootImgBoot error handling updates c0cd26f43c EmbeddedPkg: Install FDT if UpdateDtb is not present 7ea7f9c077 EmbeddedPkg: Add LoadFile2 for linux initrd d60915b751 UefiPayloadPkg: Add Macro to enable or disable some drivers. 46b4606ba2 MdeModulePkg/PciBusDxe: Improve the flow of testing support attributes f57040b038 MdeModulePkg/BootManagerMenuApp: Limit string drawing within one line b0f1b1c5fd MdePkg: Fix DEVICE_SECURITY_EVENT_DATA_HEADER version definition cc5a67269e UefiPayloadPkg: Build a HOB from bootloader ACPI table dc430ccf3f UefiPayloadPkg: Use dummy constructor for PlatformHookLib 4a1899dd79 UefiPayloadPkg: Add \".upld_info\" in universal payload 2ea0a0a414 BaseTools: Switch to downloading the ARM compiler from Arm\'s site 1ce6ceb75b BaseTools: Switch to downloading the AARCH64 compiler from Arm\'s site c214128a38 BaseTools/GenMake: Use ToolDefinition as fallback option 259c184c8f BaseTools/build: Set MakefileName 445c39f757 BaseTools: Remove Makefile/MakefileName fields c7d5b046d9 BaseTools: Remove hard-coded strings for target and tools_def 442e46d3b6 UefiPayloadPkg: Update maximum logic processor to 256 499c4608b1 OvmfPkg/TPM PPI: Connect default consoles for user interaction b8675deaa8 OvmfPkg: Handle TPM 2 physical presence opcodes much earlier 8ab8fbc016 OvmfPkg: Reference new Tcg2PlatformDxe in the build system for compilation bd298d7593 OvmfPkg: Reference new Tcg2PlatformPei in the build system f86de75862 MdePkg: MmCommunication: Added definition of MM Communication PPI 8b4bb94f64 MdePkg: CI YAML: Added new GUID to ignore duplicate list 9e950cda6a MdeModulePkg: CI YAML: Added new GUID to ignore duplicate list 2273799677 SecurityPkg: Fix SecureBootDefaultKeysDxe failed to start 422e5d2f7f UefiPayloadPkg: Remove asm code and sharing libraries 0875443f7e DynamicTablesPkg: Extract AcpiHelperLib from TableHelperLib 20775950c6 DynamicTablesPkg: Update TableHelperLib.inf 1ad5182500 DynamicTablesPkg: Rename single char input parameter 653113412f DynamicTablesPkg: Add HexFromAscii() to AcpiHelperLib 72ab552554 DynamicTablesPkg: Add AmlGetEisaIdFromString() to AcpiHelperLib 96e006b37e DynamicTablesPkg: Add Configuration Manager Object parser 235ff9fcd1 DynamicTablesPkg: Use %a formatter in AmlDbgPrint 7a8c037e9e DynamicTablesPkg: Update DynamicTablesPkg.ci.yaml 691c5f7762 DynamicTablesPkg: Deprecate Crs specific methods in AmlLib 22873f58c4 DynamicTablesPkg: Rework AmlResourceDataCodegen.c/h 4cc1458dbe IntelFsp2Pkg: Adopt FSP 2.3 specification. c49cb8f30e ArmPkg: SmbiosMiscDxe: Don\'t populate ExtendedBiosSize when size < 16MB 282122ec5f ArmVirtPkg/TPM: Add a NULL implementation of TpmPlatformHierarchyLib b3685956d2 ArmVirtPkg: Reference new TPM classes in the build system for compilation c806b76865 ArmVirtPkg: Disable the TPM2 platform hierarchy 606340fba3 OvmfPkg/Microvm: copy OvmfPkgX64 files as-is 4932f05a00 OvmfPkg/Microvm: rename output files, fix includes 2a49c19b9e OvmfPkg/Microvm: no smm 60d55c4156 OvmfPkg/Microvm: no secure boot 0569c52b15 OvmfPkg/Microvm: no tpm 06fa1f1931 OvmfPkg/Microvm: no sev 6073bf6cd8 OvmfPkg/Microvm: no csm b9dd64b80e OvmfPkg/Microvm: no emulated scsi 27de86ae41 OvmfPkg/Microvm: use MdePkg/Library/SecPeiDxeTimerLibCpu 76602f45dc OvmfPkg/Microvm: use XenTimerDxe (lapic timer) 6a8e9ad24b OvmfPkg/Microvm: PlatformPei/MemDetect tweaks 8583b57c5c OvmfPkg/Microvm: PlatformPei/Platform memory map tweaks bf02d73e74 OvmfPkg/Microvm: PlatformPei/Platform: add id. 1d3e89f349 OvmfPkg/ResetSystemLib: add driver for microvm 2c467c9be2 OvmfPkg/Microvm: BdsPlatform: PciAcpiInitialization tweak. 8456785986 OvmfPkg/Microvm: use PciHostBridgeLibNull 55f47d2299 OvmfPkg/Microvm: wire up serial console, drop super-io 862e814de4 OvmfPkg/Microvm: add Maintainers.txt entry 06a326caf1 DynamicTablesPkg: Update FADT generator to ACPI 6.4 f09dbf20b9 DynamicTablesPkg: Rename SBSA generic watchdog 942c9bd357 ShellPkg: Update Acpiview GTDT parser to ACPI 6.4 80e67bcb23 ShellPkg: Update Acpiview PCCT parser to ACPI 6.4 b4da6c29f1 ShellPkg: Add Type 5 PCC Subspace Structure parser 5ece2ad36c MdeModulePkg/Core/Dxe: Add lock protection in CoreLocateHandleBuffer() 30400318a2 ShellPkg: Update Acpiview HMAT parser to ACPI spec version 6.4 71c3c9c0c4 DynamicTablesPkg: Remove unnecessary includes 25cf58a163 DynamicTablesPkg: Add missing parameter check bfaf7c8b9e DynamicTablesPkg: Add AddSsdtAcpiHeader() 28b2df475f DynamicTablesPkg: Add AmlRdSetEndTagChecksum() 74addfeab6 DynamicTablesPkg: Add AmlSetRdListCheckSum() 7b2022d39e DynamicTablesPkg: Set EndTag\'s Checksum if RdList is modified 2dd7dd3952 DynamicTablesPkg: Clear pointer in node creation fcts 37bd08176c DynamicTablesPkg: Update error handling for node creation 6d2777d85f DynamicTablesPkg: Make AmlNodeGetIntegerValue public f995f8672b DynamicTablesPkg: AML Code generation for Register() 9454d1ebcb DynamicTablesPkg: AML Code generation for Resource data EndTag 1e33479b39 DynamicTablesPkg: AML code generation for a Package 12e65fd258 DynamicTablesPkg: Helper function to compute package length ce15936f2f DynamicTablesPkg: AML code generation for a ResourceTemplate de62ccbf4f DynamicTablesPkg: AML code generation for a Method e2d7b4950b DynamicTablesPkg: AML code generation to Return a NameString 3e958e93ce DynamicTablesPkg: AML code generation for a Method returning a NS 018a962d92 DynamicTablesPkg: AML code generation for a _LPI object a5e36ad9bc DynamicTablesPkg: AML code generation to add an _LPI state f17ef10e63 DynamicTablesPkg: Add CM_ARM_LPI_INFO object 769e63999f DynamicTablesPkg: SSDT CPU topology and LPI state generator 19ee56c4b3 UefiPayloadPkg: Add a macro to select the SecurityStubDxe driver. 782d018703 MdePkg: Add ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0 ba4ae92234 ShellPkg: Support ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0 f22feb0e3b CryptoPkg/BaseCryptLib: Eliminate extra buffer copy in Pkcs7Verify() 4225a464c6 MdePkg/BaseLib: Add QuickSort function on BaseLib 6ed6abd6c1 BaseTools: Change RealPath to AbsPath 978d428ec3 UefiPayloadPkg: Add PCI root bridge info hob support for SBL 43b3840873 MdeModulePkg/Sd: Corrections for Extra.uni files a7fcab7aa3 MdeModulePkg/Core/Dxe: Acquire a lock when iterating gHandleList e40fefafa9 ArmVirtPkg/FdtClintDxe: Move FdtClientDxe to EmbeddedPkg fb759b8b73 MdePkg: Add PcdPciIoTranslation PCD 7d78a86ecf ArmPkg: Use PcdPciIoTranslation PCD from MdePkg 77e9b3a7c6 ArmVirtPkg/FdtPciPcdProducerLib: Relocate PciPcdProducerLib to OvmfPkg d881c6ddf5 ArmVirtPkg/HighMemDxe: Relocate HighMemDxe to OvmfPkg 47bd85e9f9 OvmfPkg/HighMemDxe: Add RISC-V in the supported arch. f8d0501ded ArmVirtPkg/QemuFwCfgLib: Relocate QemuFwCfgLib to OvmfPkg 26aa241d2f OvmfPkg/QemuFwCfgLibMmio: Add RISC-V arch support c6770f4b88 MdePkg: Add PcdPciMmio32(64)Translation PCDs 9a7509e465 ArmVirtPkg/FdtPciHostBridgeLib: Relocate FdtPciHostBridgeLib to OvmfPkg/Fdt b21c6794de OvmfPkg/FdtPciHostBridgeLib: Add RISC-V in the supported arch. e0c23cba5e ArmVirtPkg/VirtioFdtDxe: Relocate VirtioFdtDxe to OvmfPkg/Fdt f2400e06db BaseTools: add edk2-test repo to SetupGit.py 785cfd3305 UefiPayloadPkg: Use SECURITY_STUB_ENABLE to control the SecurityStubDxe 7e43d3e086 ArmPkg/Smbios: Fix max cache size 2 wrong issue f10a112f08 UefiPayloadPkg: Fix the build issue for coreboot 2108698346 StandaloneMmPkg: Support CLANGPDB builds 11a4af85a4 Ovmfpkg: update Ia32 build to use new work area 36b561623a OvmfPkg/AmdSev: update the fdf to use new workarea PCD 91a978ce7e UefiPayloadPkg: Replace MEMROY_ENTRY by MEMORY_ENTRY 6ef5797447 UefiPayloadPkg: Fix ECC reported issues 90246a6d9f UefiPayloadPkg: Fix the build failure for non-universal payload 37a33f02aa UefiCpuPkg: Cpu feature data stored in memory may be migrated 4fdf843c75 DynamicTablesPkg: Fix unitialized variable use 6893865b30 DynamicTablesPkg: Fix void pointer arithmetic 99325a8b65 MdeModulePkg/SortLib: Add QuickSort function on BaseLib 305fd6bee0 UefiCpuPkg/CpuCacheInfoLib: Add QuickSort function on BaseLib 2f286930a8 ShellPkg: Parse I/O APIC and x2APIC structure bd5ec03d87 NetworkPkg/HttpBootDxe: make file extension check case-insensitive 6254037223 ArmPkg: Implement PlatformBootManagerLib for LinuxBoot f079e9b450 OvmfPkg: Copy Main.asm from UefiCpuPkg to OvmfPkg\'s ResetVector 5a2411784b OvmfPkg: Clear WORK_AREA_GUEST_TYPE in Main.asm c9ec74a198 OvmfPkg: Add IntelTdxMetadata.asm 8b76f23534 OvmfPkg: Enable TDX in ResetVector 87a34ca0cf UefiPayloadPkg: Add a common SmmAccessDxe module e7e8ea27d4 UefiPayloadPkg: Add a common SMM control Runtime DXE module bed990aae6 UefiPayloadPkg: Add bootloader SMM support module 1d66480aa4 UefiPayloadPkg: Add SpiFlashLib 04714cef46 UefiPayloadPkg: Add FlashDeviceLib ae8acce8ae UefiPayloadPkg: Add a common FVB SMM module 242dcfe30f UefiPayloadPkg: Add a SMM dispatch module b80c17b62d UefiPayloadPkg: Add SMM support and SMM variable support 2f6f3329ad FmpDevicePkg/FmpDxe: Use new Variable Lock interface 9a95d11023 IntelFsp2Pkg/SplitFspBin.py: adopt FSP 2.3 specification. bb146ce32d MdePkg Cpuid.h: Define CPUID.(EAX=7,ECX=0):EDX[30] 1bc232aae3 RedfishPkg: Update link to staging/RedfishClientPkg in Readme.md e7663fdd82 UefiPayloadPkg: Remove SystemTableInfo GUID. 91b772ab62 RedfishPkg: Add more information to Readme.md c8594a5311 SecurityPkg/FvReportPei: Remove the ASSERT to allow neither M nor V 939c2355da IntelFsp2Pkg SplitFspBin.py: Correct file name in file header 6f9e83f757 NetworkPkg/HttpDxe: Enable wildcard host name matching for HTTP+TLS. b258f12889 BaseTools/VrfCompile: Fix uninitialized field from unnamed field 0f4cdad25b DynamicTablesPkg: Add missing BaseStackCheckLib instance e13e53cb2f NetworkPkg/NetworkPkg.dsc: Add RngLib mapping for ARM and RISCV64 c1f2287635 SecurityPkg/SecurityPkg.dsc: Add missing RngLib for ARM and RISCV64 b0a03ca4a9 SignedCapsulePkg/SignedCapsulePkg.dsc: Add RngLib mapping 15e635d1b5 UefiCpuPkg/MtrrLib/UnitTest: Fix 32-bit GCC build issues 4050c873b5 MdeModulePkg/Variable/RuntimeDxeUnitTest: Fix 32-bit GCC builds d79df34beb BaseTools: Fix StructurePcd offset error. b5d4a35d90 MdeModulePkg/XhciSched: Fix missing DEBUG arguments 48452993ad MdePkg/Include: Enhance DebugLib to support reproduce builds 5948ec3647 MdePkg: Reproduce builds across source format changes f331310a10 ArmPkg: Reproduce builds across source format changes 77dcd03ecf MdeModulePkg: Reproduce builds across source format changes 45137bca2f NetworkPkg: Reproduce builds across source format changes d939a25d41 SecurityPkg: Reproduce builds across source format changes fd42dcb1fc OvmfPkg: Reproduce builds across source format changes 8c1b1fe634 ShellPkg: Add comment that ItemPtr is set after validation d6e6337cd6 MdePkg: Fix ACPI memory aggregator/device type mismatch c974257821 MdeModulePkg AtaAtapiPassThru: Always do S.M.A.R.T. check if device support aab6bb3d32 MdeModulePkg/DxeCapsuleLibFmp: Capsule on Disk file name capsule a7b35aae13 MdeModulePkg\\UfsBlockIoPei: UFS MMIO address size support both 32/64 bits f826b20811 UefiCpuPkg/UefiCpuLib: Add GetCpuFamilyModel and GetCpuSteppingId 8c8867c5da MdeModulePkg/DxeCapsuleLibFmp: Use new Variable Lock interface 22c3b5a865 BaseTools: Add authenticated variable store support a92559671a OvmfPkg/Xen: Fix VS2019 build issues 4c495e5e3d OvmfPkg/Bhyve/PlatformPei: Fix VS2019 X64 NOOPT build issue 466ebdd2e0 MdeModulePkg/FPDT: Lock boot performance table address variable at EndOfDxe 455b0347a7 UefiCpuPkg/PiSmmCpuDxeSmm: Use SMM Interrupt Shadow Stack e1e7306b54 OvmfPkg/Library/ResetSystemLib: Fix Microvm VS2019 NOOPT build issue 4c7ce0d285 MdeModulePkg AtaAtapiPassThru: Skip the potential NULL pointer access bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error - Removed patches which are merged to mainline: - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch to fix the S3 detection in ovmf-xen - cb0d24637d edk2-stable202111-rc1~220 - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch to add QemuKernelLoaderFsDxe to ovmf-xen to load kernel from qemu fw_cfg - 9f3eda177a edk2-stable202111-rc1~216 - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch - 4473834e7d edk2-stable202111-rc1~203 - The edk2-stable202111 includes the following patches for bsc#1192126 to fix unlimited reset. (bsc#1192126) 80e67af9af OvmfPkg: introduce a common work area ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm * Wed Dec 08 2021 jleeAATTsuse.com- For preparing push to SLE15-SP4, add more notes: - Drop upstreamed ovmf-jscSLE-16075-SEV-ES-fixes.patch from 15-SP4 - All patches in the above big patch are in edk2-stable202011 - Some changes in ovmf.spec file of 15-SP4: - brotli-v1.0.7-17-g666c328-c.tar.xz and \"add brotli\" section be removed because ovmf-disable-brotli.patch. - Using %{_prefix} instead of /usr hard code. - Redundant %defattr(-,root,root) are removed. - BuildRoot be removed because factory doesn\'t have it. - Sync some differences in the change log between 15-SP3 with openSUSE TW since \"Wed Jan 24 06:31:21 UTC 2018\": - Add TLS and IPv6 supports for ArmVirtQemu. - ovmf-bsc1119454-additional-scsi-drivers.patch to support more SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454) - already in edk2-stable202008 - Drop the build requirement of python2 * Mon Dec 06 2021 Guillaume GARDET - cross-i386-binutils and cross-i386-gcc have been dropped from Factory, so use only cross-x86_64- * - boo#1193424 * Fri Dec 03 2021 jleeAATTsuse.com- Merge the difference from SLE for pushing back to SLE15-SP4 - Add/Update 50-xen-hvm-x86_64.json in descriptors.tar.xz - Add the json descriptor for xen-hvm (bsc#1180050) - Add \"nvram-template\" and change the firmware file to ovmf-x86_64-ms-4m.bin (bsc#1180050, bsc#1181264) - The following patches in SLE are already in edk2-edk2-stable202108 in factory, so they will be removed from 15-SP4 - ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix the potential NULL dereference in AuthenticodeVerify() (bsc#1177789, CVE-2019-14584) - 26442d11e620a9 edk2-stable202011~124 - ovmf-bsc1180079-amd-sev-es-mitigation.patch to mitigate the potential AMD SEV-ES security issues (bsc#1180079) - a91b700e385e74 edk2-stable202102~181 - ovmf-jscSLE-16075-SEV-ES-use-physical-address.patch as the follow-up patch for SEV-ES to fix the flash writing (jsc#SLE-16075) - 3a3501862f7309 edk2-stable202102~105 - ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible heap corruption (bsc#1183578, CVE-2021-28211) - e7bd0dd26db7e5 edk2-stable202011~7 - ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV recursion (bsc#1183579, CVE-2021-28210) - b9bdfc72853fe9 edk2-stable202011~9 - Add ovmf-bsc1186151-fix-iscsi-overflows.patch to fix the possible overflows in IScsiDxe (bsc#1186151) - 83761337ec91fb edk2-stable202108-rc0~171 * Mon Nov 08 2021 Guillaume GARDET - Update rpmlintrc (fixes aarch64 build) * Tue Oct 26 2021 jleeAATTsuse.com- Removed patches which are merged to mainline: ovmf-bsc1186151-fix-iscsi-overflows.patch ovmf-xen-relocate-shared_info_page-map.patch- Removed patches because replaced: ovmf-fix-xen-s3-detection.patch -> ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch ovmf-xen-add-qemu-kernel-loader-fs.patch -> ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch * Fri Oct 22 2021 jleeAATTsuse.com- Removed edk2-stable202105.tar.gz because we updated to edk2-stable202108 * Thu Oct 14 2021 jleeAATTsuse.com- Update to edk2-stable202108 - Features (https://github.com/tianocore/edk2/releases): OvmfPkg: remove Xen support from OvmfPkg *.dsc, in favor of OvmfXen.dsc Add CLANGDWARF toolchain for generating ELF+DWARF NetworkPkg/IScsiDxe: remotely exploitable buffer overflows NetworkPkg/IScsiDxe: add sha256 support to CHAP Create header files and multiple Hobs for Universal Payload Add search feature in config editor Add additional build option to treat Dynamic Pcd as DynamicEx Pcd Add a new MicrocodeLib for microcode loading Implement key enrolment from default key variables StandaloneMm support for 32bit Arm machines Add firmware support for Cloud Hypervisor on arm64 Support architecture-specific openssl acceleration Support measured AMD SEV boot with kernel/initrd/cmdline Add ACPI 6.4 header Add new BootDiscoveryPolicyUiLib - Patches (git log --oneline --reverse edk2-stable202105~..edk2-stable202108): e1999b264f ArmPkg/ArmGic: Fix maximum number of interrupts in GICv3 b8ed8c0fb2 Maintainers.txt: add Sami Mujawar as top-level ArmVirtPkg reviewer dbc22a1785 UefiCpuPkg/MpInitLib: Allocate a separate SEV-ES AP reset stack area 0095070e70 MdePkg/Register/Amd: expand the SEV MSR to include the SNP definition f828fc9876 MdePkg/Register/Amd: realign macros with more space for future expansion 34e16ff883 MdePkg/Register/Amd: define GHCB macros for hypervisor feature detection f0983b2074 MdePkg/Register/Amd: define GHCB macro for Register GPA structure 4665fa6503 MdePkg/Register/Amd: define GHCB macro for the Page State Change dfd41aef78 MdePkg/Register/Amd: define GHCB macros for SNP AP creation 5a7cbd54a1 MdePkg/BaseLib: add support for PVALIDATE instruction 2b5b2ff04d MdePkg/BaseLib: add support for RMPADJUST instruction 901a9bfc3a OvmfPkg/BaseMemEncryptSevLib: introduce MemEncryptSevClearMmioPageEncMask() c394fa4c9e OvmfPkg/AmdSevDxe: use MemEncryptSevClearMmioPageEncMask() to clear EncMask 8ee4e52ba8 OvmfPkg/QemuFlashFvbServicesRuntimeDxe: use Mmio helper to clear enc mask b4a8de5d27 OvmfPkg/TpmMmioSevDecryptPei: use MemEncryptSevClearMmioPageEncMask() adfa3327d4 OvmfPkg/BaseMemEncryptSevLib: remove Flush parameter fe5da0927a IntelFsp2WrapperPkg: Remove microcode related PCDs d3ff5dbe1d MdePkg: MmControl: Fix function and structure definition mismatches 197e27c90a MdePkg: Add new 16550-compatible Serial Port Subtypes to DBG2 fdf3666f01 MdePkg: Update DBG2 and SPCR header with NVIDIA 16550 Subtype b233eb1849 EmbeddedPkg/RealTimeClockRuntimeDxe: Improve GetWakeupTime b5379899b3 MdeModulePkg/Xhci: Fix TRT when data length is 0 039e07f626 MdePkg/MdeModulePkg: Move AML_NAME_SEG_SIZE definition 1f515342d8 DynamicTablesPkg: Use AML_NAME_SEG_SIZE define 75e9154f81 OvmfPkg/VirtioMmioDeviceLib: Add EFIAPI to VirtioMmioSetQueueAddress c410ad4da4 MdePkg/BaseLib: Fix AsmReadSs() with GCC toolchain c1aa3bab12 BaseTools: Add ClangBase.lds for CLANG8 tool chain with max-page-size c6b872c6ab BaseTools GenFw: Support CLANG8ELF with conversion ELF to PE/COFF image cf9959adff BaseTools: Update build_rule to skip CLANG resource section generation 4b56ad2049 BaseTools: Add new CLANG8ELF tool chain for new LLVM/CLANG8 e1636fe18f BaseTools: Update ClangBase.lds to keep dynamic section 924c2b847f BaseTools: Change CLANG8ELF to CLANGDWARF e25566cd2b OvmfPkg: remove the Xen drivers from the IA32, IA32X64, and X64 platforms aa7f19f480 OvmfPkg: remove the Xen drivers from the AmdSev platform 7bc04a75a7 OvmfPkg: switch IA32, IA32X64, X64 to the fw_cfg-only ACPI platform driver d697037446 OvmfPkg: switch the AmdSev platform to the fw_cfg-only ACPI platform driver ae4aa4a346 OvmfPkg/README: bump minimum QEMU version to 1.7.1, machine types to 1.7 2a85d9b07e OvmfPkg/AcpiPlatformDxe: fix header file warts 180f1908b3 OvmfPkg/AcpiPlatformDxe: sort #includes and [LibraryClasses] 6d1e56e715 OvmfPkg/AcpiPlatformDxe/QemuLoader.h: remove QemuFwCfgLib class dependency 747b1ef725 OvmfPkg/AcpiPlatformDxe: move \"QemuLoader.h\" to IndustryStandard cc302b799e OvmfPkg/AcpiPlatformDxe: consolidate #includes and [LibraryClasses] c9bba52fc7 OvmfPkg/XenAcpiPlatformDxe: create from AcpiPlatformDxe a31fcb5096 OvmfPkg/AcpiPlatformDxe: remove the \"AcpiPlatformDxe.inf\" driver 4115840c28 OvmfPkg/XenAcpiPlatformDxe: remove the QEMU ACPI linker/loader client d6ba8aa6ef OvmfPkg/XenAcpiPlatformDxe: remove QEMU fw_cfg dependency 3f975ee570 OvmfPkg/XenAcpiPlatformDxe: remove the InstallAcpiTable() helper function 8f8d3d90c5 OvmfPkg/XenAcpiPlatformDxe: remove OVMF\'s built-in ACPI tables 4174c5c787 OvmfPkg/Bhyve/AcpiPlatformDxe: fix file path typo in comment d491c88a0c OvmfPkg/AcpiTables: remove unused module e7641171b6 OvmfPkg/OvmfXen: make \"PcdPciDisableBusEnumeration\" Fixed-at-Build 3357ac7380 OvmfPkg/XenAcpiPlatformDxe: remove delayed ACPI table installation d06eb2d1d9 OvmfPkg/PlatformPei: remove Xen support 8899e3fe6a OvmfPkg: drop PcdPciDisableBusEnumeration from the IA32, IA32X64, X64 DSCs 2833589ad0 OvmfPkg: drop PcdPciDisableBusEnumeration from the AmdSev platform e43cca74ad OvmfPkg/Bhyve: make \"PcdPciDisableBusEnumeration\" Fixed-at-Build b005f9f1f5 OvmfPkg/OvmfXen: remove IncompatiblePciDeviceSupport DXE driver 8c8f886f27 OvmfPkg/Bhyve: remove IncompatiblePciDeviceSupport DXE driver 984c93ece3 OvmfPkg/IncompatiblePciDeviceSupportDxe: remove PcdPciDisableBusEnumeration 32fef03563 OvmfPkg/PciHostBridgeLib: consolidate #includes and INF file sections e120c962f5 OvmfPkg/PciHostBridgeLibScan: create from PciHostBridgeLib c2f24ba321 OvmfPkg/Bhyve: consume PciHostBridgeLibScan 307763c3da OvmfPkg/OvmfXen: consume PciHostBridgeLibScan 242678da2a OvmfPkg/PciHostBridgeLib: remove Bhyve and Xen support 33d4f3e39e OvmfPkg/PciHostBridgeLibScan: remove QEMU (fw_cfg) support 4c81178cf0 OvmfPkg/PciHostBridgeLibScan: remove PcdOvmfHostBridgePciDevId 8af38170b5 OvmfPkg/PciHostBridgeLibScan: clean up file names and file-top comments 7e25086a00 OvmfPkg/SmbiosPlatformDxe: clean up #includes and INF 5072593738 OvmfPkg/SmbiosPlatformDxe: return EFI_NOT_FOUND if there is no SMBIOS data 4db374562f OvmfPkg/SmbiosPlatformDxe: locate SMBIOS protocol in InstallAllStructures() a8ab14424e OvmfPkg/SmbiosPlatformDxe: split GetXenSmbiosTables() decl. to new header 9d84e74ca0 OvmfPkg/SmbiosPlatformDxe: declare InstallAllStructures() in header file d4a8aaee73 OvmfPkg/SmbiosPlatformDxe: create Xen-specific module INF file ce270905bf OvmfPkg/SmbiosPlatformDxe: split Xen entry point from QEMU entry point 51adb689e1 OvmfPkg: restrict XenPlatformLib to BdsDxe in the IA32, IA32X64, X64 DSCs ddb3fdbef3 BaseTools GenFw: Fix regression issue to convert the image to ACPI data 558d83ab1a OvmfPkg/README: Fix typo in README beb443fde0 ShellPkg: Fix typo 702ba436ed OvmfPkg/PlatformCI: bump QEMU choco package version to 2021.5.5 83761337ec NetworkPkg/IScsiDxe: wrap IScsiCHAP source files to 80 characters 29cab43bb7 NetworkPkg/IScsiDxe: simplify \"ISCSI_CHAP_AUTH_DATA.InChallenge\" size 95616b8661 NetworkPkg/IScsiDxe: clean up \"ISCSI_CHAP_AUTH_DATA.OutChallengeLength\" e8f28b09e6 NetworkPkg/IScsiDxe: clean up library class dependencies cf01b2dc8f NetworkPkg/IScsiDxe: fix potential integer overflow in IScsiBinToHex() d90fff40cb NetworkPkg/IScsiDxe: assert that IScsiBinToHex() always succeeds dc469f1371 NetworkPkg/IScsiDxe: reformat IScsiHexToBin() leading comment block 47b76780b4 NetworkPkg/IScsiDxe: fix IScsiHexToBin() hex parsing 54e90edaed NetworkPkg/IScsiDxe: fix IScsiHexToBin() buffer overflow b8649cf2a3 NetworkPkg/IScsiDxe: check IScsiHexToBin() return values 288bd74a22 Pytool: SpellCheck: Fix incorrect file mask across package matrices 1ad794b627 MdeModulePkg: Fix device path when boot manager menu is from different FV 11b1c1d4b9 SecurityPkg: TcgStorageOpalLib: Initialize SupportedAttributes parameter. d58016b768 UefiPayloadPkg: Get platform specific logic via protocol for BDS d8c18ba3f4 MdeModulePkg: Add Universal Payload general definition header file b597b6e24c MdeModulePkg: Add new structure for the PCI Root Bridge Info Hob 99de2e7e03 UefiPayloadPkg: UefiPayload retrieve PCI root bridge from Guid Hob 9d53e01efe MdeModulePkg: Add new structure for the Universal Payload SMBios Table Hob 70e8c9c3bc MdeModulePkg/Universal/SmbiosDxe: Scan for existing tables 302a8f353c UefiPayloadPkg: Create gUniversalPayloadSmbiosTableGuid Hob 75293330ea MdeModulePkg: Add new structure for the Universal Payload ACPI Table Hob 761329ee27 MdeModulePkg/ACPI: Install ACPI table from HOB. 8c0d678063 UefiPayloadPkg: Create gUniversalPayloadAcpiTableGuid Hob fa24b6ed26 UefiPayloadPkg: Use DynamicEx instead of Dynamic to pass PCD across binary c511426abe MdeModulePkg/UniversalPayload: Add definition for extra info in payload fe471d4a57 UefiPayloadPkg: Add PayloadLoaderPeim which can load ELF payload ab2b389e7a PeiCore: Remove assertion when failing to load PE image 1b380aa603 BaseTools GenFw: Keep read only alloc section as text when convert ELF 9cf9de668f StandaloneMmPkg: Core: Spelling error in comment 610385fa3b ArmPlatformPkg: SpellCheck: Switch spellcheck CI to AuditOnly 04ddd1271e ArmPkg: SpellCheck: Update valid acronyms in ExtendedWords cdf7544703 MdeModulePkg PciBusDxe: Increase the width of data read during oprom shadow 2847c72fda Maintainers.txt: Add Reviewers for Universal Payload definitions 1162ae8297 Maintainers.txt: Add reviewers for ACPI and SMBIOS modules a63914d3f6 ArmPkg: Move cache defs used in Universal/Smbios into ArmCache.h 6cfeeb71c4 UefiCpuPkg/CpuCommonFeaturesLib: Correct the CPU location check d9a7612f8d MdeModulePkg/BdsDxe: Update BdsEntry to use Variable Policy 5959879e92 ArmVirtPkg: Add PCIe host bridge utility lib for ArmVirtPkg 4dda0f7ab4 ArmVirtPkg: Enable PCIe support for Kvmtool 1e5e58d39b UefiPayloadPkg/UefiPayloadEntry: Improve bootloader memrange parsing 7471751a4d UefiPayloadPkg/UefiPayloadEntry: Remove 4GB memory WA 20ca528828 CryptoPkg: BaseCryptLib: Update Salt length requirement for RSA-PSS scheme. 18b2272e4d Azurepipeline: SpellCheck: Enforce Node dependency to use version 14.x eba32695ee CryptoPkg/BaseCryptLib: Enabled CryptSha512 for Smm/Runtime drivers 12e34cd2f7 OvmfPkg/Bhyve: clean up TPM_ENABLE remnants 82f727c4af UefiPayloadPkg: Add HobLib for UniversalPayload ea0bd5f6a7 MdeModulePkg: Add new structure for the Universal Payload Serial Port Info a75c029f60 UefiPayloadPkg: Add a separate PlatformHookLib for Universal Payload d63595c3c9 UefiPayloadPkg: Update the function definition of HobConstructor 0ff6de9358 UefiPayloadPkg: Create separate Payload Entry for UniversalPayload b208d37c73 UefiPayloadPkg: Get and enter DxeCore for Universal Payload 27cb64fffc UefiPayloadPkg: Fix up UPL Pcd database 6b69f73b59 UefiPayloadPkg: Include UniversalPayLoad modules in UefiPayloadPkg.dsc 86e6948cfb UefiPayloadPkg: Remove assert when reserve MMIO/IO resource for devices 2db0ed93ff UefiPayloadPkg: Add macro to enable and disable some drivers 3eb72b308a UefiPayloadPkg: Add PcdInstallAcpiSdtProtocol feature in UefiPayloadPkg caa139fe17 UefiPayloadPkg: Add PcdResetOnMemoryTypeInformationChange in UefiPayloadPkg 8efd912baf UefiPayloadPkg: Add new structure for BootManagerMenuFile HOB 19a541d70e UefiPayloadPkg: consume the BootManagerMenuFile HOB 333a866106 BaseTools: Remove check for Split.exe in toolset.bat f0a3f6d9c3 BaseTools: Fix spelling of \"overwrite\" and \"overwriting\" in toolset.bat 17143c4837 BaseTools: Reset ERRORLEVEL in toolsetup.bat after edk2basetools check abfff7c45d BaseTools GenFw: Add support for RISCV GOT/PLT relocations 27b8a52957 MdePkg: MmConfiguration: Move definition of EFI_MM_RESERVED_MMRAM_REGION d1fc3d7ef3 MdePkg: MmConfiguration: Added definition of MM Configuration PPI 5a2e030f73 OvmfPkg/GenericQemuLoadImageLib: plug cmdline blob leak on success 932449710c OvmfPkg/X86QemuLoadImageLib: plug cmdline blob leak on success 24b0e9d128 Revert \"OvmfPkg/QemuKernelLoaderFsDxe: don\'t expose kernel command line\" cf20302474 OvmfPkg/GenericQemuLoadImageLib: Read cmdline from QemuKernelLoaderFs 9421f5ab8d OvmfPkg/X86QemuLoadImageLib: State fw_cfg dependency in file header b37cfdd280 OvmfPkg/XenPlatformPei: Relocate shared_info page mapping 55dee4947b MdePkg : Add IPMI Macro and Structure Defintions to resolve build errors 580b11201e IntelFsp2Pkg: Add Config Editor tool support 939ed3a592 UefiPayloadPkg/PayloadLoader: Fix bug in locating relocation section 3cde0d553d UefiPayloadPkg/PayloadLoader: Remove assertion 49eeda113a NetworkPkg/IScsiDxe: re-set session-level authentication state before login 7eba9f698e NetworkPkg/IScsiDxe: add horizontal whitespace to IScsiCHAP files 7b6c2b2a26 NetworkPkg/IScsiDxe: distinguish \"maximum\" and \"selected\" CHAP digest sizes 903ce1d8f8 NetworkPkg/IScsiDxe: support multiple hash algorithms for CHAP 47fea2abcb NetworkPkg/IScsiDxe: support SHA256 in CHAP bb33c27fbe NetworkPkg: introduce the NETWORK_ISCSI_MD5_ENABLE feature test macro 8697dc60cc Maintainers.txt: Update Maintainers and reviewers for UefiPayloadPkg fea7901dba UefiPayloadPkg: Fix the build failure 1e0c441c92 OvmfPkg/Bhyve: add USB support 44ced03798 OvmfPkg/Bhyve: use static PCI32Base address b3db0cb1f8 MdeModulePkg/PartitionDxe: Ignore PMBR BootIndicator per UEFI spec 0a6b303dce UefiCpuPkg/ExceptionLib: Conditionally clear shadow stack token busy bit d10e058016 MdeModulePkg/RegularExpressionDxe: Fix memory assert in FreePool() 4c051c2c65 MdeModulePkg: Update YAML file to fix CI error 31fcee6d99 ArmVirtPkg: Add PlatformHasAcpiDtDxe for Cloud Hypervisor c28fc8ab3b ArmVirtPkg: Install Acpi tables for Cloud Hypervisor 0e3b6bd0ee ArmVirtPkg: support Cloud Hypervisor in edk2 b560e9d9b6 IntelFsp2Pkg: PatchFv parseInfFile function modification f47c4676dd Pytool: SpellCheck: Defer path expansion in cspell parameters cc89d245f9 Maintainers.txt: remove Laszlo Ersek\'s entries 84af6ea320 BaseTools/Scripts: Ignore Mergify merge commits in PatchCheck.py b491eace37 .mergify: Simplify Mergify rules using GitHub status checks 5ef08a49e3 .azurepipelines: Remove FINISHED and FAILED states ad1009ec62 MdePkg/Include: Add STATIC_ASSERT for L\'\' and L\"\" strings 3de3c24755 BaseTools: Remove non-ascii character of StructurePcd comment 40a9066439 BaseTools: Enable the flag to treat dynamic pcd as dynamicEx 22fe311bd2 .pytool/EccCheck: Locate BaseTools dir with EDK_TOOLS_PATH a050c599df .pytool/EccCheck: Rename edk2_path as workspace_path 50672d2692 .pytool/EccCheck: Check ecc_csv exists fb5b6220a9 .pytool/EccCheck: Set PACKAGES_PATH env var in Ecc fda5226aa3 UefiPayloadPkg: Dump hob information from boot loader 7d748705b1 MdeModulePkg: Change the PldHeader to Header in ExtraData.h 9bf4aee734 UefiPayloadPkg: Assign the length of UniversalPayload ExtraData d0b6596b8e MdeModulePkg/RamDiskDxe: Init list head before registering RamDisk protocol 91f5d3b410 IntelFsp2Pkg: BaseCacheLib EfiProgramMtrr MtrrNumber Should be UINT32 be282b1493 UefiPayloadPkg: Add PCD_DYNAMIC_AS_DYNAMICEX and set to True cac83b6f3b IntelFsp2Pkg: Add search function for Config Editor 4bac086e8e UefiPayloadPkg: Add FV Guid for DXEFV and PLDFV fddb8d24ec ArmPlatformPkg/Scripts: Infer dll load address from console output 885efcd3f9 MdePkg/Include: Smbios Specification 3.4.0 changes 83b43c4cb1 MdeModulePkg PCD: Print which PCD was unable to be found c32c5911c4 BaseTools GenFw: Add support for R_RISCV_PCREL_LO12_S relocation 097aeeb119 MdePkg/BaseLib: Add MemoryFence implementation for RiscV64 391cffcb61 MdeModulePkg PiSmmCore: Change MemoryAttributes message to DEBUG_VERBOSE 8781b143de BaseTools/Scripts: Fix GetMaintainer.py line endings 28ef05ce10 BaseTools/Scripts: Allow GitHub ID at end Maintainers.txt lines 2f5ad3f451 Maintainers.txt: Add GitHub IDs 332632abf3 Maintainers.txt: Add Jiewen Yao as OvmfPkg Maintainer 4d28a1c2fd BaseTools: Remove COMMON section from the GCC discard list 878a92a887 CryptoPkg/OpensslLib: Add native instruction support for X64 147f34b56c CryptoPkg/OpensslLib: Commit the auto-generated assembly files for X64 ac70e71b1f NetworkPkg: Making the HTTP IO timeout value programmable with PCD ab796d3e2a NetworkPkg: Add HTTP Additional Event Notifications b461d67639 OvmfPkg/ResetVector: move SEV specific code in a separate file 7f05102f65 OvmfPkg/ResetVector: add the macro to invoke MSR protocol based VMGEXIT dc485c556d OvmfPkg/ResetVector: add the macro to request guest termination f05eb2dfe5 OvmfPkg/AmdSev/SecretDxe: fix header comment to generic naming 35e267cb34 OvmfPkg/AmdSev: use GenericQemuLoadImageLib in AmdSev builds a26a08dc1f OvmfPkg: PlatformBootManagerLibGrub: Allow executing kernel via fw_cfg 0cb48007f7 OvmfPkg: add library class BlobVerifierLib with null implementation c73e31f54d OvmfPkg: add BlobVerifierLibNull to DSC 6bf5580a3d ArmVirtPkg: add BlobVerifierLibNull to DSC d10ad8444f OvmfPkg/QemuKernelLoaderFsDxe: call VerifyBlob after fetch from fw_cfg 5ace477f34 OvmfPkg/AmdSev/SecretPei: build hob for full page 0deeab36d1 OvmfPkg/AmdSev: reserve MEMFD space for for firmware config hashes 385b9d80a0 OvmfPkg/AmdSev: add BlobVerifierLibSevHashes 514b3aa08e OvmfPkg/AmdSev: Enforce hash verification of kernel blobs 8e6bb64fe4 EmbeddedPkg/VirtualRealTimeClockLib: Fix SetTime issues 610bcc69ed ArmVirtPkg: Remove meaningless comment 3445058aea MdeModulePkg/CapsuleApp: Fix typo in error message 2e1fb41339 build: Fix python3.10 threading DeprecationWarnings 0b1b0a9674 python: Replace distutils.utils.split_quotes with shlex.split fc50df0d8e BaseTools: Drop check for distutils.utils 03e77558d4 BaseTools: use shutil.copyfile instead shutil.copy2 2b47aaecef MdeModulePkg: Add BootDiscoveryPolicyUiLib. bb806a6e88 SecurityPkg: Create SecureBootVariableLib. 9732659698 SecurityPkg: Create library for enrolling Secure Boot variables. 12a4d0cb9d ArmVirtPkg: add SecureBootVariableLib class resolution 3d427c5f83 OvmfPkg: add SecureBootVariableLib class resolution b926956418 EmulatorPkg: add SecureBootVariableLib class resolution db959018b6 SecurityPkg: Remove duplicated functions from SecureBootConfigDxe. a97e9e327e ArmPlatformPkg: Create include file for default key content. 94e065582b SecurityPkg: Add SecureBootDefaultKeysDxe driver 19107590b6 SecurityPkg: Add EnrollFromDefaultKeys application. 45f3dd2ce9 SecurityPkg: Add new modules to Security package. 55266a9b8a SecurityPkg: Add option to reset secure boot keys. 6355287206 Maintainers.txt: Add new maintainer and reviewer to EmbeddedPkg/ 9abc60f9f7 EmbeddedPkg/libfdt: Add strcmp and strncpy to libfdt_env.h 0856cdc89e MdePkg: add definition of LINUX_EFI_INITRD_MEDIA_GUID 97fdcbda4e OvmfPkg: Remove Initrd LINUX_EFI_INITRD_MEDIA_GUID 4de77ae989 UefiCpuPkg/CpuCacheInfoLib: Sort CpuCacheInfo array 3c6107758b SecurityPkg: Fix GetSupportedAndActivePcrs counter calculation b40bdd6ecd UefiPayloadPkg: Add Fixed PCDs and use Macro to define the default value. d497eace3b UefiPayloadPkg: define some PCD as DynamicEX PCD ac6e5d6b41 UefiPayloadPkg: change the default value of some PCDs. 672bd1c711 UefiPayloadPkg: Add a macro to enable or diable the serial driver. d02dbb53cd UefiPayloadPkg: Fix the non-ascii character in UniversalPayloadEntry.c a7ddc7847c RedfishPkg/JsonLib: Add more JsonLib functions 5963ce5d28 MdePkg: Add ACPI 6.4 header file 4d7137f261 MdePkg: Increment FADT version d910e83299 MdePkg: Rename SBSA Generic Watchdog to Arm Generic Watchdog ad3dea9861 MdePkg: Update PMTT to ACPI 6.4 ced4cb7609 MdePkg: Add SPA Location Cookie field to SPA Range structure c82d6dd4a3 MdePkg: Remove DPPT table 357383bc4f MdePkg: Add flags and MinTransferSize to Generic Initiator 7b17bcd9a0 MdePkg: Add \'Type 5\' PCC structure 0938f9235c MdePkg: Add Multiprocessor Wakeup structure 75c4a8e10d MdePkg: Add the Platform Health Assessment Table (PHAT) 1803757a9b MdePkg: Add Secure Access Components in the SDEV table 605c4a1ff2 MdePkg: Add Cache ID to PPTT 3d359ff905 MdePkg: Fix broken coding style in Acpi64.h 7311e96417 RedfishPkg/RefishCrtLib: Public RefishCrtLib 03e19e6bc8 ArmPkg/IndustryStandard: 32b/64b agnostic FF-A, Mm SVC and Std SMC IDs aee0098faf ArmPkg: prepare 32bit ARM build of StandaloneMmPkg ca1773878d GenFv: Arm: support images entered in Thumb mode b7f0226a46 StandaloneMmPkg: fix pointer/int casts against 32bit architectures a776bbabd9 StandaloneMmPkg: build for 32bit arm machines ac826886c9 MdeModulePkg/UefiSortLib:Add UefiSortLib unit test 6fdd1c13a7 MdeModulePkg PCD: Reinstall PCD service PPIS when memory available ef56f55d19 EmbeddedPkg/NonCoherentDmaLib: Avoid dereferencing unset Map field 8dd4fc5be6 UefiCpuPkg/CpuCacheInfoLib: Correct logical for identifying cache type 7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order - Removed patches which are merged to mainline: ovmf-bsc1186151-fix-iscsi-overflows.patch ovmf-xen-relocate-shared_info_page-map.patch - Updated patches ovmf-fix-xen-s3-detection.patch -> ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch ovmf-xen-add-qemu-kernel-loader-fs.patch -> ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch - Added patches ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch * Fri Jul 09 2021 Gary Ching-Pang Lin - Add ovmf-fix-xen-s3-detection.patch to fix the S3 detection in ovmf-xen- Add ovmf-xen-add-qemu-kernel-loader-fs.patch to add QemuKernelLoaderFsDxe to ovmf-xen to load kernel from qemu fw_cfg * Fri Jul 02 2021 Gary Ching-Pang Lin - Add ovmf-xen-relocate-shared_info_page-map.patch to fix the save/restore/migrate in ovmf-xen * Wed Jun 09 2021 Gary Ching-Pang Lin - Add ovmf-bsc1186151-fix-iscsi-overflows.patch to fix the possible overflows in IScsiDxe (bsc#1186151) * Thu Jun 03 2021 Gary Ching-Pang Lin - Correct the path to copy the Xen flavor * Mon May 31 2021 Gary Ching-Pang Lin - Update to edk2-stable202105 * MdeModulePkg/UfsPassThruDxe: Improve Device initialization polling Loop * MdePkg: MmUnblockMemoryLib: Added definition and null instance * OvmfPkg: resolve MmUnblockMemoryLib (mainly for VariableSmmRuntimeDxe) * MdeModulePkg: VariableSmmRuntimeDxe: Added request unblock memory interface * SecurityPkg: Tcg2Smm: Switching from gSmst to gMmst * SecurityPkg: Tcg2Smm: Separate Tcg2Smm into 2 modules * SecurityPkg: Tcg2Smm: Added support for Standalone Mm * SecurityPkg: Tcg2Acpi: Added unblock memory interface for NVS region * UefiCpuPkg/MpInitLib: Use NASM struc to avoid hardcode offset * UefiCpuPkg/MpInitLib: Remove unused Lock from MP_CPU_EXCHANGE_INFO * UefiCpuPkg/SmmCpuFeaturesLib: Move multi-instance function decl to header * UefiCpuPkg/SmmCpuFeaturesLib: Rename SmmCpuFeaturesLib.c * UefiCpuPkg/SmmCpuFeaturesLib: Cleanup library constructors * UefiCpuPkg/SmmCpuFeaturesLib: Abstract PcdCpuMaxLogicalProcessorNumber * UefiCpuPkg/SmmCpuFeaturesLib: Add Standalone MM support * UefiCpuPkg/PiSmmCpu: Don\'t allocate Token for SmmStartupThisAp * RedfishPkg/Library: RedfishLib * OvmfPkg/CpuHotplugSmm: refactor hotplug logic * OvmfPkg/CpuHotplugSmm: collect hot-unplug events * OvmfPkg/CpuHotplugSmm: add Qemu Cpu Status helper * OvmfPkg/CpuHotplugSmm: introduce UnplugCpus() * OvmfPkg: define CPU_HOT_EJECT_DATA * OvmfPkg/SmmCpuFeaturesLib: init CPU ejection state * OvmfPkg/SmmCpuFeaturesLib: call CPU hot-eject handler * OvmfPkg/CpuHotplugSmm: add EjectCpu() * OvmfPkg/CpuHotplugSmm: do actual CPU hot-eject * OvmfPkg/SmmControl2Dxe: negotiate CPU hot-unplug * EmbeddedPkg/PrePiHobLib: replace duplicate GUID * MdePkg/UefiLib: Correct the arguments passed to IsLanguageSupported() * UefiCpuPkg/CpuCacheInfoLib: Collect cache associative type * UefiCpuPkg/MpInitLib: avoid printing debug messages in AP * UefiCpuPkg/CpuDxe: Rename variables to follow EDKII coding standard * UefiCpuPkg/CpuDxe: Guarantee GDT is below 4GB * BaseTools/Ecc: Make Ecc only check first include guard * ShellPkg/SmbiosView: add more items for smbiosview -t 3 * MdePkg: Support standalone MM Driver Unload capability * OvmfPkg/X86QemuLoadImageLib: Handle allocation failure for CommandLine * ShellPkg/Pci: Add valid check for PCI extended config space parser * CryptoPkg/OpensslLib: Upgrade OpenSSL to 1.1.1j * OvmfPkg: strip build paths in release builds * MdeModulePkg: Initialize local variable value before they are used * UefiCpuPkg/SmmCommunication: Remove out-dated comments * MdePkg: use CpuPause() in CpuDeadLoop() * MdePkg/Include: EFI Redfish Discover protocol * ShellPkg/UefiHandleParsingLib: Support EFI Redfish protocols * MdePkg/Include/Protocol: EFI_HII POPUP_PROTOCOL duplicate declaration * MdePkg/Include/Protocol: EFI_RESET_NOTIFICATION_PROTOCOL duplicate * CryptoPkg/Private/Protocol/Crypto.h: Remove duplicate function type * MdePkg/BaseLib: Add support for the XSETBV instruction * MdeModulePkg/PiDxeS3BootScriptLib: Rename mAcpiS3Enable to avoid dup symbol * MdePkg/IoLib: Filter/trace port IO/MMIO access * MdePkg/Baseib: Filter/trace MSR access for IA32/X64 * UefiCpuPkg: Remove PEI/DXE instances of CpuTimerLib. * UefiCpuPkg: Add MicrocodeLib for loading microcode * OvmfPkg: Add MicrocodeLib in DSC files. * UefiPayloadPkg/UefiPayloadPkg.dsc: Consume MicrocodeLib * UefiCpuPkg/MpInitLib: Consume MicrocodeLib to remove duplicated code * UefiCpuPkg/PiSmmCpuDxeSmm: Support detect SMM shadow stack overflow * ShellPkg: Fix smbiosview system enclosure type table * UefiCpuPkg/CpuTimerLib: Update LIBRARY_CLASS of Base instance. * RedfishPkg/RedfishDiscoverDxe: EFI Redfish Discover Protocol * RedfishPkg/RedfishConfigHandler: EDKII RedfishConfigHandler Protocol * UefiCpuPkg: PiSmmCpuDxeSmm: Check buffer size before accessing * BaseTools/Conf: Fix MAKE_FLAGS typos in tools_def.template * MdeModulePkg: Initialize temp variable in VarCheckPolicyLib * SecurityPkg/Tcg2Smm: Initialize local Status variable * DynamicTablesPkg: add validation for PcdNonBsaCompliant16550SerialHid * OvmfPkg/XenResetVector: Silent a warning from nasm * MdePkg: Allow PcdFSBClock to by Dynamic * OvmfPkg/IndustryStandard/Xen: Apply EDK2 coding style to XEN_VCPU_TIME_INFO * OvmfPkg/IndustryStandard: Introduce PageTable.h * OvmfPkg/XenPlatformPei: Map extra physical address * OvmfPkg/XenPlatformPei: Calibrate APIC timer frequency * OvmfPkg/OvmfXen: Set PcdFSBClock * DynamicTablesPkg: Re-order GicItsIdentifierArray struct * DynamicTablesPkg: Remove EArmObjExtendedInterruptInfo * MdePkg: Fix AsmReadMsr64() and AsmWriteMsr64() with GCC toolchain * BaseTools/PlatformAutoGen: MAKE_FLAGS and MAKE_PATH fixes * RedfishPkg/RestJsonStructureDxe: Fix typo in function header * MdePkg/Include: Allow CPU specific defines to be predefined * CryptoPkg/Library/Include: Allow CPU specific defines to be predefined * ArmPlatformPkg: Fix Ecc error 8001 * ArmPlatformPkg: Fix Ecc error 9001 * ArmPlatformPkg: Remove package dependency in NorFlashStandaloneMm * ArmPkg: Fix Ecc error 8001 in Chipset * ArmPkg: Fix Ecc error 8001 in SemihostLib * ArmPkg: Fix Ecc error 8001 in ArmArchTimerLib * ArmPkg: Fix Ecc error 9005 in CpuDxe * ArmPkg: Fix Ecc error 10006 in ArmPkg.dsc * ArmPkg: Fix Ecc error 10016 in StandaloneMmMmuLib * ArmPkg: Fix Ecc error 10014 in ArmScmiDxe * ArmPkg: Fix Ecc error 10014 in GenericWatchdogDxe * ArmPkg: Fix Ecc error 10014 in MmCommunicationDxe * ArmPkg: Fix Ecc error 10014 in SemihostLib * ArmPkg: Remove ArmGic/ArmGicSecLib.c * ArmPkg: Fix Ecc error 5003 in ArmExceptionLib * ArmPkg: Fix Ecc error 6001 in MmCommunicationDxe * ArmPkg: Fix Ecc error 6001 in ArmSoftFloatLib * ArmPkg: Rename include guard in ArmGicLib.h * ArmPkg: Fix Ecc error 7008 for SCMI_CLOCK_RATE * ArmPkg: Fix Ecc error 7008 for OPTEE_MESSAGE_PARAM * ArmPkg: Fix Ecc error 8005/8007 in ArmDisassemblerLib * ArmPkg: Fix Ecc error 8005 for SCMI_PROTOCOL_ID * ArmPkg: Fix Ecc error 8005 for SCMI_MESSAGE_TYPE * ArmPkg: Fix Ecc error 8005 for SCMI_STATUS * ArmPkg: Fix Ecc error 8005 for SCMI_MESSAGE_ID * ArmPkg: Fix Ecc error 8005 for SCMI_MESSAGE_ID_BASE * ArmPkg: Fix Ecc error 8005 for SCMI_MESSAGE_ID_CLOCK * ArmPkg: Fix Ecc error 8005 for SCMI_CLOCK_RATE_FORMAT * ArmPkg: Fix Ecc error 8005 for SCMI_MESSAGE_ID_PERFORMANCE * RedfishPkg: Add EDK2 Redfish Foundation diagrams * SecurityPkg/FvReportPei: remove redundant sizeof * ShellPkg: Rename Address Size to Access size * DynamicTablesPkg: Add access size to CM_ARM_SERIAL_PORT_INFO * DynamicTablesPkg: Set the Access size for the SPCR table * DynamicTablesPkg: Set the Access size for the DBG2 table * UefiCpuPkg: PiSmmCpuDxeSmm: Not to Change Bitwidth During Static Paging * MdePkg/Cpuid.h: Define new element in CPUID Leaf(07h) data structure. * SecurityPkg: Add constraints on PK strength * ArmPkg: Allow platforms to supply more data for SMBIOS Type3 record * ArmPkg: Allow platforms to report their boot status via OemMiscLib call * ArmPkg: Fix calculation of offset of chassis SKU Number in SmbiosMiscDxe * ArmPkg: Fix typo of Manufacturer in comment in SmbiosMiscDxe * ArmPkg: Fix Ecc error 8003 * ArmPkg: Fix Ecc error 3002 in StandaloneMmMmuLib * ArmPkg: Add missing library headers to ArmPkg.dec * ArmPlatformPkg: Document libraries in ArmPlatformPkg.dec * ArmPkg: Add OemMiscLibNull library to ArmPkg.dsc * ArmPkg: Correct small typos * ArmPlatformPkg: Add ArmPlatformPkg.ci.yaml * OvfmPkg/VmgExitLib: Properly decode MMIO MOVZX and MOVSX opcodes * OvmfPkg/VmgExitLib: Add support for new MMIO MOV opcodes * OvmfPkg: Define a new PPI GUID to signal TPM MMIO accessability * OvmfPkg/TpmMmioSevDecryptPei: Mark TPM MMIO range as unencrypted for SEV-ES * OvmfPkg/Tcg2ConfigPei: Update Depex for IA32 and X64 * ArmPkg: Update SCMI Base Protocol version to 0x20000 * MdePkg/BaseRngLib: Add support for ARMv8.5 RNG instructions * SecurityPkg: Add support for RngDxe on AARCH64 * UefiCpuPkg/MpInitLib: Properly cast from PCD to SEV-ES jump table pointer * BaseTools: Add support for version 3 of FMP Image Header structure * CryptoPkg: BaseCryptLib: Add RSA PSS verify support * ShellPkg/UefiShellCommandLib: suppress incorrect gcc warning * OvmfPkg/VirtioFsDxe: suppress incorrect gcc warnings * UefiCpuPkg/CpuExceptionHandler: Add missing comma to exception name array * UefiCpuPkg/PiSmmCpu: Remove hardcode 48 address size limitation * MdeModulePkg: Retrieve boot manager menu from any fv * ShellPkg/HttpDynamicCommand: Fix possible uninitialized use * MdeModulePkg/PciBusDxe: Fix possible uninitialized use * CryptoPkg/BaseCryptLib: Fix possible uninitialized use * MdeModulePkg/PlatformDriOverrideDxe: Fix overflow condition check * MdeModulePkg/VariableLock: downgrade compatibility warnings to DEBUG_WARN * ArmPkg/ArmGic: Fix maximum number of interrupts in GICv3- Update openssl to 1.1.1j- Drop upstreamed patch: ovmf-bsc1184801-fix-sev-with-tpm.patch- Add the new Xen flavor for x86_64 + Update 50-xen-hvm-x86_64.json to use ovmf-x86_64-xen-4m.bin as the default firmware for Xen * Tue May 04 2021 Gary Ching-Pang Lin - Update the descriptors to add \"acpi-s4\" tag to allow libvirt enable hibernation (bsc#1182886#c31) * Mon May 03 2021 Gary Ching-Pang Lin - Add ovmf-bsc1184801-fix-sev-with-tpm.patch to fix SEV-ES guest crash with TPM (bsc#1184801) * Mon Apr 19 2021 Gary Ching-Pang Lin - Build ovmf-x86_64-smm against Ia32X64 to enable S3 support (bsc#1184938)- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64 * Tue Apr 06 2021 Gary Ching-Pang Lin - Add ovmf-disable-brotli.patch to remove brotli since there is no real user and it requires extra effort to maintain the brotli submodule tarball + Drop ovmf-bsc1183713-fix-gcc10-brotli-errors.patch and brotli-v1.0.7-17-g666c328-c.tar.xz * Fri Mar 26 2021 Gary Ching-Pang Lin - Add ovmf-bsc1183713-fix-gcc10-brotli-errors.patch to fix the gcc10 error from brotli (bsc#1183713) * Thu Mar 11 2021 Gary Ching-Pang Lin - Update to edk2-stable202102 * ArmVirtPkg: support extra pci root bridges (pxb) * SEV Encrypted Boot for Ovmf (remote attestation) * virtio-fs driver for OvmfPkg and ArmVirtPkg * Apply SEV-ES mitigations for encryption bit position and MMIO * Add Core CI support for StandaloneMmPkg * Update LZMA module to LZMA SDK latest version 19.00 * Port open source JSON library (jansson) * add file buffering to the UEFI shell\'s COMP command * Shell: pathname / filename sorting * Extend support of peripheral x64 MM_STANDALONE drivers * BaseTools: Convert the Split tool from C language to Python * ArmPkg: Add Universal/Smbios * Move to Pip based Basetools python * Add support for use of FF-A callsw- Drop upstreamed patches: + ovmf-jscSLE-16075-SEV-ES-use-physical-address.patch + ovmf-bsc1180079-amd-sev-es-mitigation.patch * Thu Jan 28 2021 Gary Ching-Pang Lin - Add ovmf-jscSLE-16075-SEV-ES-use-physical-address.patch as the follow-up patch for SEV-ES to fix the flash writing (jsc#SLE-16075)- Update 50-xen-hvm-x86_64.json to add \"nvram-template\" and change the firmware file to ovmf-x86_64-ms-4m.bin (bsc#1180050, bsc#1181264)- Refresh ovmf-bsc1180079-amd-sev-es-mitigation.patch + Use \"git format-patch --no-renames\" to generate the patch to avoid confusing quilt with the renamed files * Mon Jan 11 2021 Gary Ching-Pang Lin - Add ovmf-bsc1180079-amd-sev-es-mitigation.patch to mitigate the potential AMD SEV-ES security issues (bsc#1180079)- Add the json descriptor for xen-hvm (bsc#1180050) * Fri Nov 27 2020 Gary Ching-Pang Lin - Update to edk2-stable202011 * MdeModulePkg/VariablePolicyLib: Fix runtime panic in ValidateSetVariable() * CryptoPkg: BaseCryptLib: Fix buffer double free in CryptPkcs7VerifyEku * Revert \"SecurityPkg: Add RPMC Index to the RpmcLib\" * MdeModulePkg/LzmaCustomDecompressLib: catch 4GB+ uncompressed buffer sizes (bsc#1183578, CVE-2021-28211) * MdeModulePkg/Core/Dxe: limit FwVol encapsulation section recursion (bsc#1183579, CVE-2021-28210) * MdeModulePkg/Core/Dxe: assert SectionInstance invariant in FindChildNode() (bsc#1183579, CVE-2021-28210) * SecurityPkg: Add RPMC Index to the RpmcLib * BaseTools: Resolve index out of range errors. * UefiCpuPkg/PiSmmCpuDxeSmm: Reflect page table depth with page table address * UefiCpuPkg/PiSmmCpuDxeSmm: Correct the Cr3 typo * CryptoPkg: Make the MD5 disable as default for security * NetworkPkg/Defines: Make iSCSI disable as default * OvmfPkg/OvmfXen.dsc: Enable MD5 while enable iSCSI * OvmfPkg/OvmfPkgX64.dsc: Enable MD5 while enable iSCSI * OvmfPkg/OvmfPkgIa32X64.dsc: Enable MD5 while enable iSCSI * OvmfPkg/OvmfPkgIa32.dsc: Enable MD5 while enable iSCSI * ArmVirtPkg/ArmVirtQemuKernel.dsc: Enable MD5 while enable iSCSI * ArmVirtPkg/ArmVirtQemu.dsc: Enable MD5 while enable iSCSI * NetworkPkg: Enable MD5 while enable iSCSI * CryptoPkg/dsc: Enable MD5 when CRYPTO_SERVICES enable MD5 * SecurityPkg/Hash2DxeCrypto: Remove SHA1 support * SecurityPkg/Hash2DxeCrypto: Remove MD5 support * MdeModulePkg: Drop VarLock from RuntimeDxe variable driver * MdeModulePkg: Change TCG MOR variables to use VariablePolicy * SecurityPkg: Allow VariablePolicy state to delete authenticated variables * MdeModulePkg: Allow VariablePolicy state to delete protected variables * MdeModulePkg: Connect VariablePolicy business logic to VariableServices * ArmVirtPkg: Add VariablePolicy engine to ArmVirtPkg platform * OvmfPkg: Add VariablePolicy engine to OvmfPkg platform * BaseTools: Fix BrotliCompress tool issue * MdePkg/BaseRngLibDxe: Add DXE_RUNTIME_DRIVER class to RngLib * MdeModulePkg DisplayEngineDxe: Correct the local variable name. * MdeModulePkg/AtaAtapiPassThru: Trace ATA packets * MdeModulePkg/AtaAtapiPassThru: Restart failed packets * MdeModulePkg/AtaAtapiPassThru: Add SATA error recovery flow * MdeModulePkg/AtaAtapiPassThru: Check IS to check for command completion * MdeModulePkg/DriverSampleDxe: Add HII sample options * MdeModulePkg/Library: Revise HiiLib to check REST_STYLE * BaseTools/VfrCompile: VFR compiler supports REST_STYLE in HII option * MdePkg: Add GUID for REST Style Formset * UefiCpuPkg/MpInitLib: For SEV-ES guest, set stack based on processor number * UefiCpuPkg, OvmfPkg: Disable interrupts when using the GHCB * OvmfPkg/QemuFlashFvbServicesRuntimeDxe: Fix erase blocks for SEV-ES * OvmfPkg/QemuFlashFvbServicesRuntimeDxe: Set the SwScratch valid bit * UefiCpuPkg/MpInitLib: Set the SW exit fields when performing VMGEXIT * OvmfPkg/VmgExitLib: Set the SwScratch valid bit for MMIO events * OvmfPkg/VmgExitLib: Set the SwScratch valid bit for IOIO events * OvmfPkg/VmgExitLib: Set the SW exit fields when performing VMGEXIT * OvmfPkg/VmgExitLib: Implement new VmgExitLib interfaces * UefiCpuPkg/VmgExitLib: Add interfaces to set/read GHCB ValidBitmap bits * MdePkg: Clean up GHCB field offsets and save area * BaseTools: Limit command line length. * BaseTools: Update report map file format * BaseTools: Add image type into generate map file * BaseTools: Incremental build issue for included ASI file\'s deletion. * MdeModulePkg/Core/Dxe: log memory base and length, after lib ctors again * BaseTools: Fix BaseTools nmake cleanall hang issue * ShellPkg:Fix bug in FileBuffer.c * BaseTools: Enable Module Scope Structure Pcd * MdeModulePkg/Gcd: Check memory allocation when initializing memory * BaseTools: Remove the dependency on the build intermediate file * DynamicTablesPkg: Add SSDT CMN-600 Table generator * MdePkg: Definitions for Extended Interrupt Flags * BaseTools: Update the FV Space Information to display decimal and Hex * MdePkg/Include: Definitions of EFI REST JSON Structure Protocol * MdeModulePkg/XhciDxe: Retry device slot init on failure * MdeModulePkg/AcpiTableDxe: use pool allocation for RSDP if possible * MdeModulePkg/AcpiTableDxe: use pool allocation for RSDT/XSDT if possible * MdeModulePkg/AcpiTableDxe: use pool allocations when possible * MdePkg: Fix SmBios.h PROCESSOR_CHARACTERISTIC_FLAGS to be UINT16 * MdePkg: Update SmBios.h to add SMBIOS 3.4.0 ARM64 SoC ID field * ShellPkg: Add ARM64 SoC ID to Processor Characteristics in smbiosview * ShellPkg: Fix smbiosview string definition name for \"boot from CD\" * ShellPkg: Fix a couple of typos in smbiosview * MdeModulePkg/Core: Support standalone MM in FV2 protocol GetNextFile(). * MdePkg/SystemResourceTable.h: Add vendor range values * MdePkg/Include: Fix wrong spelling in http11.h * BaseTools/Ecc: Fix ECC check MetaFile Copyright information issue * MdeModulePkg/XhciDxe: Error handle for USB slot initialization failure * ArmPkg/ArmMmuLib: Explicitly cast function pointer argument * ArmPkg/ArmMmuLib: Explicitly cast UINT32 data conversions * DynamicTablesPkg: SsdtSerialPortFixupLib fix ECC errors * DynamicTablesPkg: AmlEncoding change debug macro * DynamicTablesPkg: AmlLib\\AmlDbgPrint fix ECC error * DynamicTablesPkg: AmlLib fix ECC errors * DynamicTablesPkg: AcpiSratLibArm fix ECC error * DynamicTablesPkg: SsdtSerialPortLibArm fix ECC error * DynamicTablesPkg: Fix order of assert checks * CryptoPkg/BaseCryptLib: fix NULL dereference (CVE-2019-14584) (bsc#1177789) * Revert \"MdeModulePkg/PartitionDxe: Fix the incorrect LBA size in child ...\" * UefiCpuPkg/MpInitLib: Reduce reset vector memory pressure * SecurityPkg/Tcg2PhysicalPresenceLib: Fix incorrect TCG VER comparision * CryptoPkg: BaseCryptLib: Add unit tests (Host and Shell based) * ArmVirtPkg: Add kvmtool to package dictionary * ArmVirtPkg: Package dependency for MC146818 RTC * ArmVirtPkg: Support for kvmtool virtual platform * ArmVirtPkg: Add Kvmtool Platform Pei Lib * ArmVirtPkg: 16550 UART Platform hook library * ArmVirtPkg: GUID Hob for 16550 UART base address * MdeModulePkg: Fix constructor invocation ordering * ArmVirtPkg: Add Kvmtool NOR flash lib * ArmVirtPkg: kvmtool platform memory map * ArmVirtPkg: Add kvmtool platform driver * ArmPlatformPkg: Dynamic flash variable base * ArmVirtPkg: Add Kvmtool RTC Fdt Client Library * PcAtChipsetPkg: Add MMIO Support to RTC driver * MdePkg/Include: Add HTTP definitions * BaseMemoryLibSse2: Take advantage of write combining buffers * RedfishPkg/Include: PCD definitions of Host Interface EFI device path * MdePkg/Include: Definitions of EFI REST EX Protocol * ShellPkg/SmbiosView: Add DDR5 support * MdePkg/BaseLib: Fix invalid memory access in AArch64 SetJump/LongJump * BaseTools: Add EDKII_DSC_PLATFORM_GUID MACRO * MdeModulePkg: Remove code wrapped by DISABLE_NEW_DEPRECATED_INTERFACES * MdePkg: Remove code wrapped by DISABLE_NEW_DEPRECATED_INTERFACES * BaseTools Build_Rule: Add the missing ASM16_FLAGS for ASM16 source file * BaseTools: Move C tool flags before the common flags * BaseTools: Copy PACKED definition from MdePkg Base.h * MdeModulePkg/Core/Dxe: expose SP and CRYPTO capabilities in UEFI memmap * MdePkg/UefiSpec: separate page access bitmask from SP and CRYPTO caps * MdePkg: SMBIOS 3.4.0 Update \"adding DDR5 definitions\". * NetworkPkg: Fix possible infinite loop in HTTP msg body parser * NetworkPkg/HttpDxe: TlsChildHandle is not cleared when reset * NetworkPkg: Add RngLib entry to .dsc file. * MdeModulePkg/HiiDatabase: Do not modify CONST string * OvmfPkg: enable HttpDynamicCommand * ArmVirtPkg: enable HttpDynamiCommand * ShellPkg/DynamicCommand: add HttpDynamicCommand * CryptoPkg/BaseCryptLib: add crypto algorithms needed by variable protection * BaseTools: Add RISCV64 binding * MdeModulePkg/XhciDxe: Fix Broken Timeouts * BaseTools: Set section alignment as zero if its type is Auto * BaseTools: Remove CanSkip calling for incremental build * BaseTools: Normalize case of pathname when evaluating Macros. * BaseTools: Clean the ffs folder before generating files in it * BaseTools: Add included files to deps_target file. * OvmfPkg/README: HTTPS Boot: describe host-side TLS cipher suites forwarding * MdeModulePkg/NonDiscoverablePciDeviceDxe: Add NULL pointer check * CryptoPkg: OpensslLib: Use RngLib to generate entropy in rand_pool * ArmVirtPkg: Add RngLib based on TimerLib for CryptoPkg * OvmfPkg: Add RngLib based on TimerLib for Crypto * MdePkg: BaseRngLibDxe: Add RngLib that uses RngDxe * MdePkg: TimerRngLib: Added RngLib that uses TimerLib * MdePkg: Correct EFI_BLOCK_IO_PROTOCOL_REVISION3 value * OvmfPkg: drop redundant VendorID check in VirtioMmioDeviceLib * MdePkg: PciExpressLib support variable size MMCONF * UefiPayloadPkg: Store the size of the MMCONF window * SecurityPkg/PeiTpmMeasurementLib: remove gEfiTpmDeviceSelectedGuid * BaseTools: update IASL extdep to more modern version * UefiCpuPkg/RegisterCpuFeaturesLib: Support MpServices2 only case. * BaseTools: Sort the Pcd set when generating the VPD binary * SecurityPkg/DxeImageVerificationLib: Disable SHA1 base on MACRO- Refresh ovmf-add-exclude-shell-flag.patch- Drop upstreamed ovmf-jscSLE-16075-SEV-ES-fixes.patch * Thu Nov 26 2020 Gary Ching-Pang Lin - Cosmetic changes in the spec file suggested by spec-cleaner * Tue Nov 17 2020 Gary Ching-Pang Lin - Add ovmf-jscSLE-16075-SEV-ES-fixes.patch to merge upstream SEV-ES fixes (jsc#SLE-16075) * Thu Nov 05 2020 Gary Ching-Pang Lin - Update the json descriptors to address all x86_64 firmware files (jsc#SLE-15915)- Remove the executable bit from brotli source code files * Fri Oct 30 2020 Gary Ching-Pang Lin - Add _constraints to request at least 6GB disk (bsc#1178244)- Remove the build files after finishing the build to reduce the disk usage (bsc#1178244) * Mon Sep 07 2020 Gary Ching-Pang Lin - Update to edk2-stable202008 + MdeModulePkg/Library: add PEIM and SEC module type to TpmMeasurementLibNull + SecurityPkg/DxeImageVerificationLib: catch alignment overflow (CVE-2019-14562) (bsc#1175476) + OvmfPkg/CpuHotplugSmm: fix CPU hotplug race before and after SMI broadcast + SecurityPkg/Tcg2: handle PRE HASH and LOG ONLY + MdePkg/Include: Add missing definition of SMBIOS type 42h in SmBios.h + MdePkg: UefiFileHandleLib: fix buffer overrun in FileHandleReadLine() + OvmfPkg: Add SEV-ES support + MdeModulePkg/PartitionDxe: Fix the incorrect LBA size in child hander + MdeModulePkg/PartitionDxe: Revert changes for the special MBR + MdeModulePkg/PartitionDxe: Put the UDF check ahead of MBR + ShellPkg: smbiosview - Change some type 17 field values format + CryptoPkg/OpensslLib: Upgrade OpenSSL to 1.1.1g + MdeModulePkg: Upon BootOption failure, Destroy RamDisk memory before RSC. + OvmfPkg/LsiScsiDxe: Add support for LSI 53C895A + MdeModulePkg/DisplayEngine: Add Debug message to show mismatch menu info + Add New Memory Attributes + MdeModulePkg/PartitionDxe: Add already start check for child hanldes + MdeModulePkg/PartitionDxe: Skip the MBR that add for CD-ROM + MdeModulePkg/PartitionDxe: Correct the MBR last block value + MdeModulePkg/Variable/RuntimeDxe: Fix return status from Reclaim() + SecurityPkg/Tcg2Pei: Add missing PCRIndex in FvBlob event. + SecurityPkg/Tcg2Dxe: Add PcdTcgPfpMeasurementRevision in SpecId event. + CryptoPkg/BaseCryptLib: Add MARCO to disable the deprecated SHA1 and MD5 + ArmVirtPkg/NorFlashQemuLib: disable NOR flash DT nodes upon discovery + UefiCpuPkg/SecCore: Add pre-memory AP vector + OvmfPkg: End timer interrupt later to avoid stack overflow under load + ArmPkg/PlatformBootManagerLib: regenerate boot options on boot failure + MdeModulePkg/StatusCodeHandler: do not output \ \\r for string data + Revert \"OvmfPkg: use generic QEMU image loader for secure boot enabled ...\" + ArmVirtPkg/PrePi: use standard PeCoff routines for self-relocation + ArmVirtPkg: add FDF rule for self-relocating PrePi + ArmPkg/ArmExceptionLib: use static buffer for sp_el0 + MdeModulePkg/SetupBrowserDxe: Do not reconnect driver with form-update + OvmfPkg/X86QemuLoadImageLib: handle EFI_ACCESS_DENIED from LoadImage() + OvmfPkg/Tcg2ConfigPei: generalize TPM2-only file-top comments + ArmPkg: only attempt buildin MmCommunicationDxe for AArch64 + ArmPkg/PlatformBootManagerLib: don\'t connect all devices on each boot + ArmPkg/PlatformBootManagerLib: hide UEFI Shell as a regular boot option + MdeModulePkg/BootManagerUiLib: show inactive boot options + ArmPkg/PlatformBootManagerLib: fall back to the UiApp on boot failure + ArmPkg/PlatformBootManagerLib: register \'s\' as UEFI Shell hotkey + ArmPkg/PlatformBootManagerLib: connect non-discoverable USB hosts + ArmPkg/ArmSvcLib: prevent speculative execution beyond svc + ArmPkg/PlatformBootManagerLib: reject \'default\' parity and stop bit count + ArmPkg/PlatformBootManagerLib: use static assertion for console type- Update openssl to 1.1.1g- Drop openssl-fix-syntax-error.patch + The new openssl already includes the fix.- Refresh ovmf-pie.patch and ovmf-disable-ia32-firmware-piepic.patch * Wed Jul 22 2020 Kai Liu - Fixed TPM support. TPM2_ENABLE & TPM2_CONFIG_ENABLE build flags were changed to TPM_ * since upstream commit 07952a962a40. * Tue Jun 09 2020 Gary Ching-Pang Lin - Use the reduced source tarballs since ovmf only needs a portion of the code. + brotli-v1.0.7-17-g666c328.tar.xz -> brotli-v1.0.7-17-g666c328-c.tar.xz - We only need the \"c\" directory, not the whole tarball. + oniguruma-v6.9.4_mark1.tar.xz -> oniguruma-v6.9.4_mark1-src.tar.xz - We only need the \"src\" directory, not the whole tarball. * Fri Jun 05 2020 Gary Ching-Pang Lin - Update to edk2-stable202005 + RegularExpressionDxe: Use submodule way to access third party Oniguruma + BrotliCustomDecompressLib: Use submodule way to access third party brotli + BaseTools: Use submodule way to access third party brotli + RISC-V architecture on EDK2 + Disabling safe string constraint assertions + ArmVirtPkg Implement support for TPM2 measured boot + OVMF Implement support for Linux v5.7+ initrd and mixed mode loading + OVMF Use loadimage/startimage for loading the kernel passed via the QEMU command line + OVMF Support booting from Fusion-MPT SCSI controllers + OVMF Support booting from VMware PVSCSI controllers + OVMF RFE: VCPU hotplug with SMM + OVMF PEI phase variable driver / MemoryTypeInfo tracking + ArmVirtPkg, OvmfPkg: Pass parameter from QEMU to control PXE IPv4/v6 boot + Remove deprecate APIs in BaseCryptLib + Add UEFI 2.8/2.8a definition in MdePkg + Add PI1.7/PI1.7a definition into MdePkg + BaseCryptoLib MD4, ARC4, TDES, AES ECB MODE, HMAC MD5, HMAC SHA1 API have been deprecated. + SecurityPkg Tcg2PhysicalPresenceLib library class removes two macros TCG2_BIOS_TPM_MANAGEMENT_FLAG_DEFAULT and TCG2_BIOS_STORAGE_MANAGEMENT_FLAG_DEFAULT.- Add 2 tarballs from the submodules of edk2: + brotli-v1.0.7-17-g666c328.tar.xz + oniguruma-v6.9.4_mark1.tar.xz- Refresh patches: + ovmf-add-exclude-shell-flag.patch + ovmf-gdb-symbols.patch- Drop upstream patch: ovmf-bsc1163927-fix-ping-and-ip6dxe.patch- Drop ovmf-bsc1171643-workaround-outline-atomics.patch since upstream fixed it in another way. * Thu May 21 2020 Gary Ching-Pang Lin - Add ovmf-bsc1171643-workaround-outline-atomics.patch to disable gcc10 outline-atomics in AArch64 (bsc#1171643) * Mon Apr 20 2020 Gary Ching-Pang Lin - Build all non-native firmware files on x86_64 and aarch64 with cross-compilers (bsc#1159134) + Exclude i586 and armv7hl due to the availability of cross-compilers + Move some bash functions to ovmf-build-funcs.sh- Clean up PKG_TO_REMOVE + Only EmulatorPkg still exists. * Mon Apr 06 2020 Gary Ching-Pang Lin - Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559) * Fri Mar 06 2020 Gary Ching-Pang Lin - Update to edk2-stable202002 + UefiCpuPkg/MpInitLib: Skip reading PlatformId on AMD processors. + BaseTools: Remove invalid leading space before !INCLUDE in Makefile + OvmfPkg/QemuVideoDxe: unbreak \"secondary-vga\" and \"bochs-display\" support + NetworkPkg/ArpDxe: Recycle invalid ARP packets (CVE-2019-14559) + ShellPkg: acpiview: Prevent infinite loop if structure length is 0 + CryptoPkg/BaseHashApiLib: Change PcdHashApiLibPolicy type to FixedAtBuild + CryptoPkg/BaseHashApiLib: Align BaseHashApiLib with TPM 2.0 Implementation + MdeModulePkg: Make retval in UninstallMultipleProtocol follow Spec + SecurityPkg/DxeImageVerificationLib: change IsCertHashFoundInDatabase name (CVE-2019-14575) + SecurityPkg/DxeImageVerificationLib: Differentiate error/search result (2) (CVE-2019-14575) + SecurityPkg/DxeImageVerificationLib: plug Data leak in IsForbiddenByDbx() (CVE-2019-14575) + SecurityPkg/DxeImageVerificationLib: tighten default result (CVE-2019-14575) + SecurityPkg/DxeImageVerificationLib: Differentiate error/search result (1) (CVE-2019-14575) + SecurityPkg/DxeImageVerificationLib: refactor db/dbx fetching code (CVE-2019-14575) + SecurityPkg/DxeImageVerificationLib: avoid bypass in fetching dbx (CVE-2019-14575) + SecurityPkg/DxeImageVerificationLib: fix wrong fetch dbx in IsAllowedByDb (CVE-2019-14575) + SecurityPkg/DxeImageVerificationLib: reject CertStack.CertNumber==0 per DBX (CVE-2019-14575) + SecurityPkg/DxeImageVerificationLib: Fix memory leaks (CVE-2019-14575) + NetworkPkg/Ip4Dxe: Check the received package length (CVE-2019-14559). + ShellPkg: acpiview: Validate ACPI table \'Length\' field + ShellPkg: acpiview: Remove duplicate ACPI structure size definitions + UefiCpuPkg RegisterCpuFeaturesLib: Match data type and format specifier + MdeModulePkg/SdMmcPciHcDxe: Fix double PciIo Unmap in TRB creation (CVE-2019-14587) + MdeModulePkg/DisplayEngine: Zero memory before free (CVE-2019-14558) + MdeModulePkg/String.c: Zero memory before free (CVE-2019-14558) + MdeModulePkg/HiiDB: Remove configuration table when it\'s freed (CVE-2019-14586) + MdePkg: Remove FIT table industry standard header file. + UefiCpuPkg: Remove FIT based microcode shadow logic from MpInitLib. + UefiCpuPkg/CpuFeature: Introduce First to indicate 1st unit. + UefiCpuPkg/RegisterCpuFeaturesLib: Rename [Before|After]FeatureBitMask + UefiCpuPkg/RegisterCpuFeaturesLib: Delete CPU_FEATURE_[BEFORE|AFTER] + MdePkg: Add PCCT table signature definition + BaseTools: Fixed build failure when using python38 + BaseTools:fix Ecc tool issue for check StructPcd + BaseTools: Remove caret in NASM_INC macro + BaseTools: Rationalise makefile generation + MdePkg: Add PCI Express 5.0 Header File + MdePkg: Disable EBC for unit tests in MdePkg.dsc + MdePkg/SmBios.h: Add two additional DWORD for smbios 3.3.0 type17 + UefiCpuPkg/MpInitLib: Not pass microcode info between archs in CPU_MP_DATA + Revert UefiCpuPkg/MpInitLib: Relocate microcode patch fields in CPU_MP_DATA + ShellPkg: acpiview: Validate global pointers before use + ShellPkg: acpiview: Validate System Locality count + ShellPkg: acpiview: Set ItemPtr to NULL for unprocessed table fields + ShellPkg: Document UpdateArgcArgv returns EFI_INVALID_PARAMETER + ShellPkg: Document ParseCommandLineToArgs returns EFI_INVALID_PARAMETER + ShellPkg/UefiShellAcpiViewCommandLib: Fix FADT Parser + SecurityPkg: Fix incorrect return value when File is NULL + BaseTools: Fixed a Incremental build issue + CryptoPkg/CryptoPkg.dsc: Add build of Crypto libraries/modules + CryptoPkg/Library: Add BaseCryptLibOnProtocolPpi instances + CryptoPkg/Driver: Add Crypto PEIM, DXE, and SMM modules + CryptoPkg: Add EDK II Crypto Protocols/PPIs/PCDs + CryptoPkg/BaseCryptLib: Add X509ConstructCertificateStackV(). + MdeModulePkg/PiDxeS3BootScriptLib: Fix potential numeric truncation (CVE-2019-14563) + MdeModulePkg/Capsule: Remove RT restriction in UpdateCapsule service. + SecurityPkg/TcgPhysicalPresenceLib: Replace the ASSERT with error code + BaseTools/PcdValueCommon: Fix 64-bit host compiler error + BaseTools/Build: Do not use Common.lib in Structured PCD app + MdeModulePkg/BaseSerialPortLib16550: Fix Serial Port Ready + BaseTools: Script for converting .aml to .hex + MdeModulePkg: Perform test only if not ignore memory test + UefiCpuPkg/MpInitLib: Always get CPUID & PlatformID in MicrocodeDetect() + OvmfPkg/PlatformPei: detect SMRAM at default SMBASE (for real) + OvmfPkg: introduce PcdCsmEnable feature flag + OvmfPkg/SmmAccess: close and lock SMRAM at default SMBASE + OvmfPkg/SEV: don\'t manage the lifecycle of the SMRAM at the default SMBASE + OvmfPkg/PlatformPei: reserve the SMRAM at the default SMBASE, if it exists + OvmfPkg/PlatformPei: assert there\'s no permanent PEI RAM at default SMBASE + OvmfPkg/PlatformPei: detect SMRAM at default SMBASE (skeleton) + OvmfPkg/PlatformPei: factor out Q35BoardVerification() + OvmfPkg/IndustryStandard: add MCH_DEFAULT_SMBASE * register macros + OvmfPkg/IndustryStandard: increase vertical whitespace in Q35 macro defs + OvmfPkg: introduce PcdQ35SmramAtDefaultSmbase + CryptoPkg/BaseCryptLibNull: Add missing HkdfSha256ExtractAndExpand() + BaseTools/DscBuildData: Fix PCD autogen include file conflict + CryptoPkg/BaseHashApiLib: Implement Unified Hash Calculation API + CryptoPkg: Add CryptoPkg Token Space GUID + BaseTools/Conf/gitattributes: fix \"--function-context\" for C source code + SecurityPkg/DxeImageVerificationHandler: fix \"defer\" vs. \"deny\" policies + SecurityPkg/DxeImageVerificationHandler: fix imgexec info on memalloc fail + SecurityPkg/DxeImageVerificationHandler: fix retval for (FileBuffer==NULL) + SecurityPkg/DxeImageVerificationHandler: eliminate \"Status\" variable + SecurityPkg/DxeImageVerificationHandler: unnest AddImageExeInfo() call + SecurityPkg/DxeImageVerificationHandler: remove superfluous Status setting + SecurityPkg/DxeImageVerificationHandler: fix retval on memalloc failure + SecurityPkg/DxeImageVerificationHandler: narrow down PE/COFF hash status + SecurityPkg/DxeImageVerificationHandler: keep PE/COFF info status internal + SecurityPkg/DxeImageVerificationHandler: remove \"else\" after return/break + SecurityPkg/DxeImageVerificationHandler: simplify \"VerifyStatus\" + OvmfPkg/PlatformPei: rewrite MaxCpuCountInitialization() for CPU hotplug + OvmfPkg/IndustryStandard: define macros for QEMU\'s CPU hotplug registers + OvmfPkg/OvmfXen.dsc: remove PcdCpu * dynamic defaults + CryptoPkg/BaseCryptLib: remove HmacXxxGetContextSize interface + CryptoPkg/BaseCryptLib: replace HmacXxxInit API with HmacXxxSetKey + BaseTools: Fixed a incremental build bug + UefiCpuPkg/MpInitLib: Fix possible uninitialized \'InitFlag\' field + FmdDevicePkg/FmpDxe: Support Fmp Capsule Dependency. + MdeModulePkg/CapsuleApp: Enhance CapsuleApp for Fmp Capsule Dependency + MdePkg: Add definition for Fmp Capsule Dependency. + MdeModulePkg/SdMmcPciHcDxe: Add retries for async commands + MdeModulePkg/SdMmcPciHcDxe: Add retries for sync commands + MdeModulePkg/SdMmcPciHcDxe: Refactor command error detection + MdeModulePkg/SdMmcPciHcDxe: Fix DAT lane SW reset + UefiCpuPkg/PiSmmCpuDxeSmm: fix 2M->4K page splitting regression for PDEs + MdeModulePkg/Variable: Fix VarErrorFlag RT cache offset calculation + MdePkg Base.h: Use correct style to check the defined macro + ShellPkg: acpiview: Update SRAT parser to ACPI 6.3 + BaseTools/Capsule: Add capsule dependency support + MdeModulePkg/Setup: Update opcode number variable type to UINTN + ArmPlatformPkg/PrePeiCore: enable VFP at startup + ArmPkg/ArmSmcPsciResetSystemLib: remove EnterS3WithImmediateWake () + NetworkPkg/HttpDxe: fix 32-bit truncation in HTTPS download + MdeModulePkg/UefiBootManagerLib: log reserved mem allocation failure + BaseTools/Scripts/PatchCheck: Address false error conditions + BaseTools:Fix GenFds issue for BuildOption replace GenFdsOption + BaseTools:Change the case rules for ECC check pointer names + MdeModulePkg/SdMmcPciHcDxe: Fix unknown doxygen tag error + ArmVirtPkg: remove EnterS3WithImmediateWake () from ResetSystemLib + OvmfPkg: remove EnterS3WithImmediateWake () from ResetSystemLib + UefiPayloadPkg: remove EnterS3WithImmediateWake () from ResetSystemLib + PcAtChipsetPkg: remove EnterS3WithImmediateWake () from ResetSystemLib + MdeModulePkg: remove EnterS3WithImmediateWake () from ResetSystemLib + UefiCpuPkg: Shadow microcode patch according to FIT microcode entry. + MdePkg: Add header file for Firmware Interface Table specification. + UefiCpuPkg/CpuCommonFeaturesLib: SMXE bit of CR4 should set + MdePkg BaseLib.h: Update IA32_CR4 strut to include all public fields + MdePkg: Do not use CreateEventEx unless required + UefiCpuPkg/PiSmmCpuDxeSmm: Add missed comments for parameter. + OvmfPkg: use HII type PCDs for TPM2 config related variables + OvmfPkg: reorganize TPM2 support in DSC/FDF files + BaseTools/PatchCheck.py: Ignore CR and LF characters in subject length + MdeModulePkg: Add EDK2 Platform Boot Manager Protocol + CryptoPkg: Support for SHA384 & SHA512 RSA signing schemes + UefiCpuPkg: Always load microcode patch on AP processor. + UefiCpuPkg: Remove alignment check when calculate microcode size. + Revert \"UefiCpuPkg/PiSmmCpuDxeSmm: Fix buffer overflow issue.\" + MdeModulePkg/UsbMouseAbsolutePointer: Fix endpoint selection + MdeModulePkg/Usb/UsbMouse: Fix endpoint selection + MdeModulePkg/Usb/EfiKey: Fix endpoint selection + SecurityPkg/Tcg2Pei: Add TCG PFP 105 support. + MdeModulePkg/Smbios: Add TCG PFP rev 105 support. + MdeModulePkg/dec: add PcdTcgPfpMeasurementRevision PCD + MdeModulePkg/Smbios: Done measure Smbios multiple times. + SecurityPkg/Tcg2Dxe: Add Tcg2Dxe to support 800-155 event. + SecurityPkg/Guid: Add TCG 800-155 event GUID definition. + MdeModulePkg/SdMmcPciHcDxe: Add function to start SD clock + MdeModulePkg/SdMmcPciHcDxe: Hook SwitchClockFreq after SD clock start + UefiCpuPkg/PiSmmCpuDxeSmm: Pre-allocate PROCEDURE_TOKEN buffer + UefiPayloadPkg/BootManager: Add PS2 keyboard support + UefiCpuPkg/MpInitLib: Remove redundant microcode fields in CPU_MP_DATA + UefiCpuPkg/MpInitLib: Relocate microcode patch fields in CPU_MP_DATA + UefiCpuPkg/MpInitLib: Produce EDKII microcode patch HOB + UefiCpuPkg: Add definitions for EDKII microcode patch HOB + UefiCpuPkg/MpInitLib: Reduce the size when loading microcode patches + UefiCpuPkg/MpInitLib: Collect processors\' CPUID & Platform ID info + BaseTools/Scripts: Add sendemail.transferEncoding to SetupGit.py + UefiCpuPkg/PiSmmCpuDxeSmm: Fix buffer overflow issue. + UefiCpuPkg/PiSmmCpuDxeSmm: Remove dependence between APs + edksetup.bat stuck on unicode locale Windows + MdePkg/Tcg: Add new definition in TCG PFP spec. + MdePkg: Use __builtin_offset with CLANGPDB toolchain + MdePkg PciExpress21: PCI_REG_PCIE_DEVICE_CONTROL2 struct has 17 bits + ShellPkg/ShellProtocol: Return error code while fail parsing cmd-line + MdePkg/Spdm: fix Nonce structure error. + BaseTools: Resolve a issue of Incremental build + Maintainers.txt: Update email address and role + BaseTools:replaces the two offending quotes by ascii quotes + BaseTools: Fix build failure when multiple build targets given + MdePkg/Include: Add DCC and BCM2835 SPCR UART types + ArmPkg/MmCommunicationDxe: relay architected PI events to MM context + SecurityPkg/Tcg2Smm: Measure the table before patch. + BaseTools: Remove redundant binary cache file + BaseTools: Leverage compiler output to optimize binary cache + BaseTools: enhance the CacheCopyFile method arg names + BaseTools: store more complete output files in binary cache + BaseTools: Enhance Basetool for incremental build + BaseTools: Update build_rule.txt to generate dependent files. + BaseTools: Generate dependent files for ASL and ASM files + BaseTools: Add build option for dependency file generation + UefiCpuPkg/PiSmmCpuDxeSmm: Avoid allocate Token every time + BaseTools: Avoid \"is\" with a literal Python 3.8 warnings + ArmPkg: Dispatch deferred images after EndOfDxe + ShellPkg/UefiHandleParsingLib: Fix error allocate pool + ShellPkg/edit: typo \"%d Lines Wrote\" + ShellPkg: acpiview: IORT Spec Rev D updates + ShellPkg: acpiview: Add support for parsing FACS + MdeModulePkg: Add ARM/Aarch64 support which were missing + MdeModulePkg: LzmaCustomDecompressLib.inf don\'t support EBC anymore + BaseTools:Enhance the way to handling included dsc file + UefiCpuPkg/UefiCpuPkg.uni: Add missing strings for PCD + NetworkPkg/NetworkPkg.uni: Add missing strings for PCD + MdeModulePkg/MdeModulePkg.uni: Add missing strings for PCD + NetworkPkg: Fixes to static code analysis hits + CryptoPkg/OpensslLib.inf: list OpenSSL local header \"ms/uplink.h\" + CryptoPkg/OpensslLib: improve INF file consistency + MdeModulePkg/VariableSmmRuntimeDxe.inf: list local header \"Variable.h\"- Drop upstreamed fixes + ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch + ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch + ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch- Refresh ovmf-gdb-symbols.patch * Mon Feb 24 2020 Gary Ching-Pang Lin - Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix dbx signature check (bsc#1163969, CVE-2019-14575) + Also change the order of several patches to distinguish the openssl patch- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559) * Tue Feb 18 2020 Gary Ching-Pang Lin - Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch to fix the numeric truncation to avoid the potential memory corruption (bsc#1163959, CVE-2019-14563) * Mon Feb 03 2020 Gary Ching-Pang Lin - Build the unified firmware with preloaded keys for backward compatibility (bsc#1159793) * Fri Dec 20 2019 Dirk Mueller - only build -aarch32 Cortex-A15 EFI on armv7hl * Tue Dec 03 2019 Gary Ching-Pang Lin - Update to edk2-stable201911 + SecurityPkg: Fix TPM2 ACPI measurement + MdeModulePkg: Enable variable runtime cache by default + OvmfPkg: Disable variable runtime cache + MdeModulePkg/Variable: Add RT GetVariable() cache support + CryptoPkg: Upgrade OpenSSL to 1.1.1d + MdePkg-UefiSpec.h: Add UEFI 2.8 new memory attributes + MdePkg/UefiFileHandleLib: Fix potential NULL dereference + NetworkPkg/HttpDxe: Set the HostName for the verification (CVE-2019-14553) + NetworkPkg/TlsDxe: Add the support of host validation to TlsDxe driver (CVE-2019-14553) + CryptoPkg/TlsLib: TlsSetVerifyHost: parse IP address literals as such (CVE-2019-14553) + CryptoPkg/TlsLib: Add the new API \"TlsSetVerifyHost\" (CVE-2019-14553) + MdePkg/Include/Protocol/Tls.h: Add the data type of EfiTlsVerifyHost (CVE-2019-14553) + MdeModulePkg/BdsDxe: Fix PlatformRecovery issue + NetworkPkg/SnpDxe: Add PCD to remove ExitBootServices event from SNP driver + MdeModulePkg: Update to support SmBios 3.3.0 + UefiCpuPkg/MpInitLib: honor the platform\'s boot CPU count in AP detection + SecurityPkg/Tcg2: Add Support Laml, Lasa for TPM2 ACPI + OvmfPkg/PlatformDxe: fix EFI_HII_HANDLE parameters of internal functions + OvmfPkg/VirtioNetDxe: fix SignalEvent() call + OvmfPkg/XenBusDxe: fix UninstallMultipleProtocolInterfaces() call + NetworkPkg/Ip4Dxe: fix NetLibDestroyServiceChild() call + MdeModulePkg/ScsiDiskDxe: Support Storage Security Command Protocol + MdePkg: Implement SCSI commands for Security Protocol In/Out + MdeModulePkg/TerminalDxe: Enhance the arrow keys support + MdeModulePkg/UefiBootManager: Unload image on EFI_SECURITY_VIOLATION + MdeModulePkg/DxeCapsuleLibFmp: Unload image on EFI_SECURITY_VIOLATION + MdeModulePkg: Extend the support keyboard type of Terminal console + UefiCpuPkg/CpuExceptionHandlerLib: Fix split lock + UefiCpuPkg: Fix potential spinLock issue in SmmStartupThisAp + UefiCpuPkg/PiSmmCpu: Enable 5L paging only when phy addr line > 48 + OvmfPkg/EnrollDefaultKeys: clean up Base64Decode() retval handling + ArmVirtPkg/PlatformBootManagerLib: unload image on EFI_SECURITY_VIOLATION + ShellPkg/ShellPkg.dsc AARCH64: enable stack protector + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: revert to PIE linking + BaseTools/GenFw AARCH64: fix up GOT based relative relocations + ShellPkg/Pci.c: Update supported link speed to PCI5.0 + PcAtChipsetPkg: add PcdRealTimeClockUpdateTimeout + UefiCpuPkg: Add PcdCpuSmmRestrictedMemoryAccess + ShellPkg/CommandLib: avoid NULL derefence and memory leak + MdePkg/DxeHstiLib: Added checks to improve error handling + BaseTools: Support more file types in build cache + UefiCpuPkg/SecCore: get AllSecPpiList after SecPlatformMain- Update openssl to 1.1.1d + Add openssl-fix-syntax-error.patch to fix a syntax error- Drop ovmf-bsc1153072-fix-invalid-https-cert.patch + Already upstreamed * Fri Nov 08 2019 Gary Ching-Pang Lin - Use the same x86 4MB firmware names as the ones in the previous version (< stable201905) for backward compatibility * Wed Nov 06 2019 Gary Ching-Pang Lin - Disable TLS for IA32(i586) to avoid exceeding the size limitation while using the tool chain from SLE15-SP2/openSUSE Leap 15.2 * Mon Nov 04 2019 Gary Ching-Pang Lin - Add ovmf-bsc1153072-fix-invalid-https-cert.patch to reject the invalid server certificates for HTTPS Boot (bsc#1153072, CVE-2019-14553) * Thu Oct 17 2019 Gary Ching-Pang Lin - Add the firmware descriptors for QEMU- Tweak the install commands * Tue Sep 03 2019 Gary Ching-Pang Lin - Update to edk2-stable201908 + OvmfPkg: Introduce platform OvmfXen + OvmfPkg/ResetSystemLib: Add missing dependency on PciLib + MdeModulePkg DxeCore: Fix for missing Memory Attributes Table (MAT) update + BaseTools: Fixed issue of incorrect Module Unique Name + CryptoPkg/OpensslLib: Add missing header files in INF file + SecurityPkg/SecurityPkg.uni: Add missing strings for new PCDs + MdeModulePkg/DxeIplPeim: Initialize pointer PageMapLevel5Entry + MdeModulePkg/MdeModulePkg.dec: Remove gEfiDpcProtocolGuid + Readme.md: add submodule policy and clone commands + MdeModulePkg/DxeIplPeim: Relocate operation of PageMapLevel5Entry++ + MdeModulePkg: Add missing header files in INF files + MdePkg: Add MmAccess and MmControl definition. + CryptoPkg/BaseCryptLib: Wrap OpenSSL HKDF algorithm + MdeModulePkg/DxeIpl: Create 5-level page table for long mode + MdeModulePkg/DxeIpl: Introduce PCD PcdUse5LevelPageTable + UefiCpuPkg/CpuDxe: Support parsing 5-level page table + UefiCpuPkg/MpInitLib: Enable 5-level paging for AP when BSP\'s enabled + OvmfPkg/PlatformPei: Change referenced MSR name. + UefiCpuPkg/PiSmmCpuDxeSmm: Add check for pointer Pml5Entry + SecurityPkg/SecurityPkg.dec: Remove trailing white space + MdeModulePkg/PiSmmCore: Use unique structure signatures + UefiCpuPkg/MpInitLib: don\'t shadow the microcode patch twice. + ShellPkg: improve acpiview + MdePkg: Add PI 1.5 SmramMemoryReserve HOB file + MdePkg/PciExpress21.h: Fix the PCI industry standard register defines + CryptoPkg/BaseCryptLib: Use cmp-operator for non-Boolean comparisons + ArmPkg: DebugPeCoffExtraActionLib: fix trivial comment typos + ArmPkg: DebugPeCoffExtraActionLib: debugger commands are not errors + UefiCpuPkg/RegisterCpuFeaturesLib: Start all processors simultaneously. + UefiCpuPkg: Add new EDKII_PEI_MP_SERVICES2_PPI + list module-internal header files in INF [Sources] + SecurityPkg: introduce the SM3 digest algorithm + BaseTools: Fix python3.8 SyntaxWarning + BaseTools: Add HOST_APPLICATION module type. + UefiCpuPkg/PiSmmCpu: Enable 5 level paging when CPU supports + MdePkg/BaseLib.h: Update IA32_CR4 structure for 5-level paging + UefiCpuPkg RegisterCpuFeaturesLib: Fix an ASSERTION issue + ArmPlatformPkg: Actually disable PL031 interrupts + UefiCpuPkg/PiSmmCpu: Change variable names and comments to follow SDM + OvmfPkg: use DxeTpmMeasurementLib if and only if TPM2_ENABLE + ArmPlatformPkg: Fix various typos + ArmPkg: Fix various typos + Remove IntelFrameworkPkg + Remove IntelFrameworkModulePkg + MdeModulePkg/BdsDxe: Use a pcd to control PlatformRecovery + MdeModulePkg: Add a pcd to set the OS indications bit + SecurityPkg: Remove DxeDeferImageLoadLib in DSC + BaseTools:Linux changes the way the latest version is judged + Fix indentation in edksetup.sh SetupPython3 + MdeModulePkg/SdMmcHcDxe: Implement revision 3 of SdMmcOverrideProtocol + MdeModulePkg/SdMmcOverride: Add GetOperatingParam notify phase + MdeModulePkg/UfsPassThruDxe: Fix unaligned data transfer handling + ArmVirtPkg: handle NETWORK_TLS_ENABLE in ArmVirtQemu * + UefiCpuPkg/MpInitLib: MicrocodeDetect: Ensure checked range is valid + MdeModulePkg/UfsPassThruDxe: Refactor UFS device presence detection + PcAtChipsetPkg: Remove framework modules + SecurityPkg: add FvReportPei.inf in dsc for build validation + SecurityPkg/FvReportPei: implement a common FV verifier and reporter + SecurityPkg: add definitions for OBB verification + OvmfPkg: don\'t assign PCI BARs above 4GiB when CSM enabled + OvmfPkg: Don\'t build in QemuVideoDxe when we have CSM + OvmfPkg/LegacyBbs: Add boot entries for VirtIO and NVME devices + OvmfPkg/LegacyBios: set NumberBbsEntries to the size of BbsTable + SecurityPkg: Add missing instances for build only + BaseTools: Move Build Cache related function out of CreateAsBuiltInf + BaseTools: refine CreateAsBuiltInf function + BaseTools:Add DetectNotUsedItem.py to Edk2\\BaseTools\\Scripts + BaseTools:Add import in FvImageSection + MdeModulePkg/PeiMain: PeiAllocatePool: output NULL if HOB creation fails + MdePkg: Add Generic Initiator Affinity Structure definitions to SRAT + BaseTools:Introduce CopyFileOnChange() function to copy cache files + MdeModulePkg: Add missing instances for build only + SourceLevelDebugPkg: Add missing instances for build only + CryptoPkg: Add missing instance for build only + MdeModulePkg: Introduce EDKII_SERIAL_PORT_LIB_VENDOR_GUID + MdeModulePkg/GraphicsConsoleDxe: Initialize the output mode + MdeModulePkg/ConSplitterDxe: Optimize the ConSplitterTextOutSetMode + BaseTools: add script to configure local git options + BaseTools: add centralized location for git config files + OvmfPkg/QemuVideoDxe: Shouldn\'t assume system in VGA alias mode.- Refresh ovmf-gdb-symbols.patch- Enable NETWORK_TLS_ENABLE for AArch64 * Fri Jul 05 2019 Gary Ching-Pang Lin - Reset BootOrder after enrolling the default keys (boo#1140195) * Mon Jun 17 2019 Gary Ching-Pang Lin - Update to edk2-stable201905 + Update OpenSSL version to upcoming 1.1.1 + Delete EdkCompatibilityPkg from edk2/master + Remove .S assembly code for IA32 and X64 arch + Replace BSD 2-Clause License with BSD + Patent Licence + Recovery PEI BlockIO support for ATA device + Add PCD to Enabled/Disabled IPv4/IPv6 PXE Support in NetworkPkg + Remove NetworkPkg/IpSecDxe + Add api to DebubLib to expose a print routine with VaList parameter + Introduce DebugPpi to save the image size with the debug message + ResetSystemLib Adds a new API ResetSystem + ResetUtilityLib Add a new API ResetSystemWithSubtype + Add support for get organization name to x509 in BaseCryptLib + Add support for checking x509 EKUs in BaseCryptLib + Add support for PKCS 1v2 RSAES-OAEP PKI encryption in BaseCryptLib + Remove ShellBinPkg from edk2/master + Enable multiple thread /MP option for MSVC compiler + Upstream the EnrollDefaultKeys application to OvmfPkg + Share code for BaseUefiDecompressLib in MdePkg and MdeModulePkg + Move network related components from MdeModulePkg to NetworkPkg + Move BeagleBoardPkg and Omap35xxPkg from edk2 to edk2-platforms repo + Move MinnowMax and Quark platform to edk2-platforms repo + Move OptionRomPkg into new Drivers directory edk2-platforms repo + Add ACPI6.3 definition + Remove Nt32Pkg from edk2/master + update ArmSoftFloatLib to latest upstream version (= 3e)- Update openssl to 1.1.1b + Add berkeley-softfloat-3-b64af41c3276f.tar.xz since arm7 needs the softfloat implementation for openssl 1.1.1b- Build the varstore templates with EnrollDefaultKeys.efi + Create the iso files for key enrollment - Add gen-key-enrollment-iso.sh to generate the iso file + Drop the non-upstream ovmf-embed-default-keys.patch - Also drop owner-guid-zero.h + Drop the MS keys and dbx since they are already in EnrollDefaultKeys.efi: MicCorKEKCA2011_2011-06-24.crt, MicCorUEFCA2011_2011-06-27.crt, MicWinProPCA2011_2011-10-19.crt, and dbxupdate.zip - Also drop the related script strip_authinfo.pl + Add ovmf-set-fixed-enroll-time.patch to set the fixed enrolling time to make the varstore template reproducible + Require qemu 3.0.0 for fw_cfg- Update the build flags for network functions + For x86_64, only enable TLS for the 4MB image since the code size exceeds the boundary of 2MB image- Refresh patches: + ovmf-add-exclude-shell-flag.patch + ovmf-disable-ia32-firmware-piepic.patch + ovmf-pie.patch- Drop the requirement of xxd- Update README- Update the License tag to BSD-2-Clause-Patent * Mon May 06 2019 Guillaume GARDET - Build SecureBoot firmwares for aarch64 * Wed Mar 20 2019 Guillaume GARDET - Enable debug for aarch32- Add aavmf-aarch32-code.bin and aavmf-aarch32-vars.bin files * Tue Mar 12 2019 Gary Ching-Pang Lin - Update to 2019+git1552059899.89910a39dcfd (edk2-stable201903) + MdeModulePkg/HiiImage: Fix stack overflow when corrupted BMP is parsed (bsc#1128503, CVE-2018-12181) + MdeModulePkg/HiiDatabase: Fix potential integer overflow (bsc#1128503, CVE-2018-12181) + UefiCpuPkg/Microcode.c: Add verification before calculate CheckSum32 + UefiCpuPkg/Microcode: Fix InComplete CheckSum32 issue + UefiCpuPkg: restore strict page attributes via #DB in nonstop mode only + IntelFrameworkModulePkg/FwVolDxe: Ensure FfsFileHeader 8 bytes aligned (bsc#1127822, CVE-2018-3630) + MdeModulePkg/DxeCore: Ensure FfsFileHeader 8 bytes aligned (bsc#1127822, CVE-2018-3630) + MdeModulePkg/PeiCore: Ensure FfsFileHeader 8 bytes aligned (bsc#1127822, CVE-2018-3630) + NetworkPkg: Add WiFi Connection Manager to NetworkPkg + UefiCpuPkg/PiSmmCpu: Add Shadow Stack Support for X86 SMM + MdePkg/BaseLib: Add Shadow Stack Support for X86 + NetworkPkg/DnsDxe: Check the received packet size before parsing the message (bsc#1127821, CVE-2018-12178) + MdeModulePkg/RamDiskDxe: Restrict on RAM disk size (bsc#1127820, CVE-2018-12180) + MdeModulePkg/PartitionDxe: Ensure blocksize holds MBR (bsc#1127820, CVE-2018-12180) + ArmVirtPkg/PlatformBootManagerLib: display boot option loading/starting + ArmVirtPkg/ArmVirtQemu *: enable minimal Status Code Routing in DXE + OvmfPkg/PlatformBootManagerLib: display boot option loading/starting + OvmfPkg: add library to track boot option loading/starting on the console + MdeModulePkg/UefiBootManagerLib: fix LoadImage/StartImage status code rep + MdeModulePkg/AhciPei: Add AHCI mode ATA device support in PEI + MdeModulePkg: Add definitions for EDKII PEI ATA PassThru PPI + MdeModulePkg: Add definitions for ATA AHCI host controller PPI + MdePkg/UefiDevicePathLib: Add sanity check for FilePath device path + UefiCpuPkg/Microcode: Fix incorrect checksum issue for extended table + SecurityPkg/TcgConfigDxe: Allow enabling TPM 1.2 device from disabled state + UefiCpuPkg/SecCore: Wrong Debug Information for SecCore + Various bug fixes in BaseTools + DynamicTablesPkg: Dynamic Tables Framework + MdeModulePkg: Remove EmuVariableRuntimeDxe + UefiCpuPkg/MtrrLib: Fix a bug that may wrongly set memory <1MB to UC + MdeModulePkg/BmBoot: Report status when fail to load/start boot option + MdeModulePkg/ReportStatusCodeLib: Avoid using AllocatePool if possible + NetworkPkg/Ip6Dxe: Clean the invalid IPv6 configuration during driver start * Thu Feb 21 2019 Gary Ching-Pang Lin - Add TPM2_CONFIG_ENABLE build flag to enable TPM2 config menu * Mon Feb 18 2019 Gary Ching-Pang Lin - Update to 2019+git1550452308.c417c1b33d06 + BaseTools: Fixed an issue about StructurePcd + UefiCpuPkg/SecCore: Support EFI_PEI_CORE_FV_LOCATION_PPI + OvmfPkg: Add TCG2 Configuration menu to the Device Manager menu + FatPkg/FatPei/Gpt.c: Fix uninitialized variable issue + Make BaseTools compatible with python3 + CryptoPkg/BaseCryptLib: split CryptPkcs7Verify.c on behalf of runtime + MdeModulePkg/UefiBootManagerLib: Match the nested partitions + ArmPkg/ArmMmuLib AARCH64: get rid of needless TLB invalidation + Upgrade UEFI supporting TCG spec info + MdeModulePkg Variable: Add emulated variable NV mode support + Code clean-up in the network packages + OvmfPkg: add MmServicesTableLib resolution + ArmPkg/ArmMmuLib AARCH64: fix out of bounds access + BaseTools/VfrCompile: report error for Integer overflow + OvmfPkg: require GCC48 or later + MdePkg/BaseLib: Introduce new SpeculationBarrier API + Remove the obsolete network packages in MdeModulePkg + Upgrade OpenSSL to 1.1.0j + MdePkg/Base: introduce MAX_ALLOC_ADDRESS + MdeModulePkg/PciBus: Fix system hang when no PCI Option ROM exists + BaseTools/tools_def AARCH64 RELEASE: move GCC49/GGC5 to 4 KB alignment + SecurityPkg: Remove dead code and inf redundant definitions + UefiCpuPkg/Cpuid.h: Sync CPUID definition to latest SDM + MdeModulePkg/PciBus: Shadow option ROM after BARs are programmed + ArmVirtPkg/QemuVirtMemInfoLib: trim the MMIO region mapping + ArmVirtPkg/XenVirtMemInfoLib: refactor reading of the PA space size + ArmVirtPkg/QemuVirtMemInfoLib: remove 1:1 mapping of top of PA range + ArmVirtPkg/NorFlashQemuLib: discover NOR flash banks dynamically + ArmPkg/ArmSmcPsciResetSystemLib: add missing call to ExitBootServices() + SecurityPkg: Update TCG PFP spec revision. + OvmfPkg: simply use the Bochs interface for vmsvga + ArmPlatformPkg & ArmVirtPkg: clear frame pointer in startup code + Remove unused DuetPkg, EdkShellBinPkg, and UnixPkg + ArmPkg/ArmGicDxe ARM: fix encoding for GICv3 interrupt acknowledge + MdePkg/BaseIoLibIntrinsicArmVirt ARM: avoid double word loads and stores- Refresh patches + ovmf-add-exclude-shell-flag.patch + ovmf-disable-ia32-firmware-piepic.patch- Enable Python3 support in BaseTools (bsc#1075770)
|
|
|