1. 387208a MdeModulePkg/SecurityPkg: Update TreePei to handle FvInfo2 and update FwVol of PeiCore to always install both FvInfo and FvInfo2. by Star Zeng · 11 years ago
  2. e3ff137 Add missing parameter comment in AddPubKeyInStore() by Dong Guo · 11 years ago
  3. cbbac2e Remove unused [PcdsDynamic, PcdsDynamicEx] section. by Dong Guo · 11 years ago
  4. 7a1f792 Check the input file pointer before use it. by Eric Dong · 11 years ago
  5. 3a4b498 SecurityPkg Variable: Add NULL pointer check. by Star Zeng · 11 years ago
  6. 2bc3637 Remove hide TPM support. by Dong Guo · 11 years ago
  7. 9a12e58 Calculate enough space for 2 variables (public key and variable data) instead of directly setting them 1 by 1. by Dong Guo · 11 years ago
  8. b2bd493 MdeModulePkg/SecurityPkg Variable: Calculate enough space for PlatformLang and Lang variables and use PcdUefiVariableDefaultLangDeprecate to turn off auto update between PlatformLang and Lang variables. by Star Zeng · 11 years ago
  9. 2001537 Comment PwdCredential driver. by Dong Guo · 11 years ago
  10. 5437d45 Fix current TPM device string missing. Use efivarstore instead of varstor, remove TPM disable. by Jiewen Yao · 11 years ago
  11. 68d151b Force UID modules build error to warn user that currently it is just a sample. by Dong Guo · 11 years ago
  12. 9bc5dab MdeModulePkg/SecurityPkg Variable: Return error status to avoid inconsistency between PlatformLang and Lang. by Star Zeng · 11 years ago
  13. 25da08c Fix the return value bug when updating public key database variable failure. by Dong Guo · 11 years ago
  14. 560b2fb Add comments for PcdHideTpmSupport. by Dong Guo · 11 years ago
  15. 4345d16 Remove unnecessary dependency in variable driver. by Dong Guo · 11 years ago
  16. 8a8c6c9 Fix the return status when physical presence variable and MemoryOverwriteRequestControl variable are corrupt. by Dong Guo · 11 years ago
  17. 207256b Remove unused variable attribute flag. by jyao1 · 11 years ago
  18. c2fcbc8 Add description information for the GUID and Library class defined in DEC file by Dong Guo · 11 years ago
  19. 201edad Update Module BaseName to avoid the same name. by Gao, Liming · 11 years ago
  20. 675723c Fix PCD help information format and a typo. by Dong Guo · 11 years ago
  21. 7cf7822 Fix typo in PCD description in SecurityPkg. by jyao1 · 11 years ago
  22. 7527b53 Upgrade package version to 0.93 by Dong Guo · 11 years ago
  23. c93bcb7 Return to BMM page if parse the file info failed. by Eric Dong · 11 years ago
  24. 0b716fd Rollback the patch 15054. by Eric Dong · 11 years ago
  25. eff0779 Not update the status until parse the file info success. by Eric Dong · 11 years ago
  26. 4db0b65 Correct INF file to make module pass ICC compiler. by Liming Gao · 11 years ago
  27. 68fc0c7 Update DEC file and DxeImageVerificationLib to note user that ALLOW_EXECUTE_ON_SECURITY_VIOLATION is no longer supported. by Fu Siyuan · 11 years ago
  28. 8b7d84c Upgrade TPM SSDT version from ACPI version 1 (ACPI 1.0 compatible) to version 2 (ACPI 5.0 compatible). by Dong Guo · 11 years ago
  29. 5ec61d4 Makes DxeDeferImageLoadLib not depend on by Dong Guo · 11 years ago
  30. 742d9b3 Refine the Secure Boot UI driver to input the GUID and varstroe name when using HiiSetBrowserData/HiiGetBrowserData. by Fu Siyuan · 11 years ago
  31. b6023fb Fix coding style problem in RngDxe driver. by Long, Qin · 11 years ago
  32. 3aa8dc6 Add UEFI RNG Protocol support. The driver will leverage Intel Secure Key technology to produce the Random Number Generator protocol, which is used to provide high-quality random numbers for use in applications, or entropy for seeding other random number generators. Refer to http://software.intel.com/en-us/articles/intel-digital-random-number-generator-drng-software-implementation-guide/ for more information about Intel Secure Key technology. by Long, Qin · 11 years ago
  33. fddbbc6 SecurityPkg Variable: Remove mStorageData buffer allocation and use Scratch buffer instead to reduce SMRAM consumption. by Star Zeng · 11 years ago
  34. 128ef09 MdeModulePkg and SecurityPkg Variable: Optimize the code to reduce some SMRAM consumption during variable reclaiming. by Star Zeng · 11 years ago
  35. 7baf3c6 MdeModulePkg and SecurityPkg Variable: Enhance code to use the new variable data instead of old variable data when variable reclaim. by Star Zeng · 11 years ago
  36. 9318b08 Add TPM1.2 SaveState API. by jyao1 · 11 years ago
  37. c793510 1. Enable use-cases in PEI using SecurityPPI co-equal to the use-cases in DXE using the Security Arch Protocol by Star Zeng · 11 years ago
  38. 5ecc20b Fix coding style issue. by Fu Siyuan · 11 years ago
  39. 22f8964 TrEEPhysicalPresenceLib|Include/Library/TrEEPhysicalPresenceLib.h by jyao1 · 11 years ago
  40. 44446d1 Fix a bug about the “VendorKey” variable update logic. by Fu Siyuan · 11 years ago
  41. 15d73df Add missing comments for function parameters. by gdong1 · 11 years ago
  42. c1d9324 Add TPM2 implementation. by jyao1 · 11 years ago
  43. e84f07b Create PCDs in MdeModulePkg for ACPI table OEM_ID/OEM_TABLE_ID/OEM_REVISION/CREATOR_ID/CREATOR_REVISION customization. by Star Zeng · 11 years ago
  44. 3a186b0 Return EFI_WRITE_PROTECTED when setting KEKDefault, PKDefault, dbDefault, dbxDefault and dbtDefault variable. by Fu Siyuan · 11 years ago
  45. 74b5fd7 Update the chaining requirements with regards to the Platform Key. by Fu Siyuan · 11 years ago
  46. a555940 Add “VendorKeys” variable for indicating out of band key modification. by Fu Siyuan · 11 years ago
  47. ed09456 Enhance TPM driver to protect TPM physical presence flags. by Dong Guo · 11 years ago
  48. db44ea6 1. Change default PCD in SecurityPkg to 4 (DENY_EXECUTE) in DEC file. by Fu Siyuan · 11 years ago
  49. a365eed Fix a bug in secure boot configuration driver: Enroll DB/KEK will disable Attempt Secure Boot option. by Fu Siyuan · 11 years ago
  50. 6675a21 MdePkg/MdeModulePkg/SecurityPkg Variable: Forbid creation of non-spec variables in EFI_GLOBAL_VARIABLE namespace. by Star Zeng · 11 years ago
  51. 6e67fec MdeModulePkg/SecurityPkg Variable: If a preexisting variable is rewritten with different attributes, SetVariable() shall not modify the variable and shall return EFI_INVALID_PARAMETER. by Star Zeng · 11 years ago
  52. 301c867 Change EFI_TCG_EVENT_HOB_GUID value to avoid the duplicated GUID value with EFI_LEGACY_BIOS_GUID. by Shumin Qiu · 11 years ago
  53. fd64f84 Checks the length of the file name to avoid illegal access. by Gary Ching-Pang Lin · 11 years ago
  54. 863986b Update all the code to consume the ConvertDevicePathToText, ConvertDevicePathNodeToText, ConvertTextToDevicePath and ConvertTextToDeviceNode APIs in DevicePathLib. by Ruiyu Ni · 11 years ago
  55. 41982eb SecurityPkg Variable: Add the check for PcdFlashNvStorageVariableSize <= PcdFlashNvStorageFtwSpareSize. by Star Zeng · 11 years ago
  56. 039a40a SecurityPkg: Variable drivers robustly handle crashes during Reclaim(). by Star Zeng · 11 years ago
  57. 328e5d8 The list of locked variables is traversed at runtime, hence we must by Laszlo Ersek · 12 years ago
  58. e4b7e2c Revert the changes made in 14403 because it incorrectly changed the EOL. by Ruiyu Ni · 12 years ago
  59. 9199cb9 The list of locked variables is traversed at runtime, hence we must by Laszlo Ersek · 12 years ago
  60. 443bd74 Fix overflow issue in TcgProtocol by Chao Zhang · 12 years ago
  61. 164a9b6 Fix the TOCTOU issue of CommBufferSize itself for SMM communicate handler input. by lzeng14 · 12 years ago
  62. 6ab9f44 Add the EDKII_VARIABLE_LOCK_PROTOCOL implementation in SecurityPkg variable drivers. by niruiyu · 12 years ago
  63. 0ba17ad Fix a bug that “SecureBoot” varaible will be updated to NV+AT attribute incorrectly. by sfu5 · 12 years ago
  64. ee79ac8 Pop up error message when user tries to enroll an invalid certificate file into KEK/DB/DBX. by sfu5 · 12 years ago
  65. cbcccd2 Update Code to pass EBC compiler. by lgao4 · 12 years ago
  66. 5e5bb2a 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue. by lzeng14 · 12 years ago
  67. 732d199 Fix memory overflow & VariableSize check issue for SetVariable append write. by czhang46 · 12 years ago
  68. 9d00d20 1. Use the check IsAddressValid() to prevent SMM communication buffer overflow in SmmVariable, FtwSmm, FpdtSmm, SmmCorePerformance and SmmBaseHelper, and add check to prevent InfoSize overflows in SmmVariableHandler. by lzeng14 · 12 years ago
  69. 968e143 Check for NULL pointer before free it. by sfu5 · 12 years ago
  70. 56251c6 Fix potential overflow for SetVariable interface by czhang46 · 12 years ago
  71. d17c4ea Fix a potential SMM memory dump issue. If pass communication buffer with DataBuffer to SMM SetVariable which is big enough to cover SMM range. Then GetVariable can dump SMM memory contents. Add more range check for SetVariable by czhang46 · 12 years ago
  72. 772b601 Update code not to block application/driver load when event log is full. by gdong1 · 12 years ago
  73. 3a146f2 Fix SMM Variable driver stack GetVariable return INVALID_PARAMETER when DataSize is bigger than SMM communication buffer. by czhang46 · 12 years ago
  74. 0c55190 Update SMM variable DXE driver GetNextVariable interface to comply with UEFI spec by czhang46 · 12 years ago
  75. a2f2c25 Update secure boot UI driver to handle “reset to default” hot key. by sfu5 · 12 years ago
  76. 3588bb3 If DataSize or VariableNameSize is near MAX_ADDRESS, this can cause the computed PayLoadSize to overflow to a small value and pass the check in InitCommunicateBuffer(). To protect against this vulnerability, check DataSize and VariableNameSize to make sure PayloadSize doesn't overflow. by lzeng14 · 12 years ago
  77. 7403ff5 Fix a bug that IsSignatureFoundInDatabase() incorrectly computes CertCount. by sfu5 · 12 years ago
  78. 6de4c35 Update the DxeImageVerificationLib to support for Authenticode-signed UEFI images with multiple signatures. by sfu5 · 12 years ago
  79. ca5a7d8 Add error handling code to prevent variable store corruption in release build. by sfu5 · 12 years ago
  80. 5767f22 Check the input VaraibleName for db/dbx when appending variables with formatted as EFI_SIGNATURE_LIST. by sfu5 · 12 years ago
  81. 12cbe23 Check for NULL pointer before dereference it. by sfu5 · 12 years ago
  82. 932e0f6 Variables with state VAR_ADDED&VAR_IN_DELETED_TRANSITION should be considered as valid variables if there is no duplicated ones with VAR_ADDED state. by lzeng14 · 12 years ago
  83. 0cc565d Add NULL pointer check. by lzeng14 · 12 years ago
  84. b7d269e Fix infinite loop bug in secure boot UI driver. by sfu5 · 12 years ago
  85. 03ecb57 Fix TPM may be locked twice issue in normal boot. by gdong1 · 12 years ago
  86. 23b0693 1. Update the logic of UpdateVariable() for updating variable from: by lzeng14 · 12 years ago
  87. aab9212 Fix the issue that RuntimeServiceQueryVariableInfo() in VariableSmmRuntimeDxe always return EFI_SUCCESS. by lzeng14 · 12 years ago
  88. f71ed83 1. Set the secure boot state to Standard Mode when user leaving secure boot setup page. by sfu5 · 12 years ago
  89. 83758cd Fix a bug that the invalid public key will never be removed from public key database. by sfu5 · 12 years ago
  90. 6ed1ec5 Add the TPL raise/restore code for VariableSmmRuntimeDxe to avoid variable services reentry. by lzeng14 · 12 years ago
  91. 335e268 1. Don't assume that flush the HOB variable to flash must be successful. by lzeng14 · 12 years ago
  92. 3f5c168 Use SMM_VARIABLE_COMMUNICATE_HEADER_SIZE instead of OFFSET_OF (SMM_VARIABLE_COMMUNICATE_HEADER, Data). by lzeng14 · 12 years ago
  93. b3d4217 Add a NULL string to the Image Execution Information Table if the Name is NULL in function AddImageExeInfo(). by sfu5 · 12 years ago
  94. bcb7667 Fix Gcc build error by czhang46 · 12 years ago
  95. f3ac87a Fix coding style issue by czhang46 · 12 years ago
  96. c11d47b Move the declaration of gEfiCertDbGuid to the package's Include folder. by sfu5 · 12 years ago
  97. b25380e Measure Processor location as system identity to PCR[1] according to Tcg server spec by czhang46 · 12 years ago
  98. a332cfd 1.Measure ACPI table data comes from flash event type EV_POST_CODE ACPI DATA to PCR[0] by czhang46 · 12 years ago
  99. 275beb2 1. Correct the counter-based hash algorithm according to UEFI spec. by sfu5 · 12 years ago
  100. 8c3883b Fix ECC issue by czhang46 · 12 years ago