- 301c867 Change EFI_TCG_EVENT_HOB_GUID value to avoid the duplicated GUID value with EFI_LEGACY_BIOS_GUID. by Shumin Qiu · 11 years ago
- fd64f84 Checks the length of the file name to avoid illegal access. by Gary Ching-Pang Lin · 11 years ago
- 863986b Update all the code to consume the ConvertDevicePathToText, ConvertDevicePathNodeToText, ConvertTextToDevicePath and ConvertTextToDeviceNode APIs in DevicePathLib. by Ruiyu Ni · 11 years ago
- 41982eb SecurityPkg Variable: Add the check for PcdFlashNvStorageVariableSize <= PcdFlashNvStorageFtwSpareSize. by Star Zeng · 12 years ago
- 039a40a SecurityPkg: Variable drivers robustly handle crashes during Reclaim(). by Star Zeng · 12 years ago
- 328e5d8 The list of locked variables is traversed at runtime, hence we must by Laszlo Ersek · 12 years ago
- e4b7e2c Revert the changes made in 14403 because it incorrectly changed the EOL. by Ruiyu Ni · 12 years ago
- 9199cb9 The list of locked variables is traversed at runtime, hence we must by Laszlo Ersek · 12 years ago
- 443bd74 Fix overflow issue in TcgProtocol by Chao Zhang · 12 years ago
- 164a9b6 Fix the TOCTOU issue of CommBufferSize itself for SMM communicate handler input. by lzeng14 · 12 years ago
- 6ab9f44 Add the EDKII_VARIABLE_LOCK_PROTOCOL implementation in SecurityPkg variable drivers. by niruiyu · 12 years ago
- 0ba17ad Fix a bug that “SecureBoot” varaible will be updated to NV+AT attribute incorrectly. by sfu5 · 12 years ago
- ee79ac8 Pop up error message when user tries to enroll an invalid certificate file into KEK/DB/DBX. by sfu5 · 12 years ago
- cbcccd2 Update Code to pass EBC compiler. by lgao4 · 12 years ago
- 5e5bb2a 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue. by lzeng14 · 12 years ago
- 732d199 Fix memory overflow & VariableSize check issue for SetVariable append write. by czhang46 · 12 years ago
- 9d00d20 1. Use the check IsAddressValid() to prevent SMM communication buffer overflow in SmmVariable, FtwSmm, FpdtSmm, SmmCorePerformance and SmmBaseHelper, and add check to prevent InfoSize overflows in SmmVariableHandler. by lzeng14 · 12 years ago
- 968e143 Check for NULL pointer before free it. by sfu5 · 12 years ago
- 56251c6 Fix potential overflow for SetVariable interface by czhang46 · 12 years ago
- d17c4ea Fix a potential SMM memory dump issue. If pass communication buffer with DataBuffer to SMM SetVariable which is big enough to cover SMM range. Then GetVariable can dump SMM memory contents. Add more range check for SetVariable by czhang46 · 12 years ago
- 772b601 Update code not to block application/driver load when event log is full. by gdong1 · 12 years ago
- 3a146f2 Fix SMM Variable driver stack GetVariable return INVALID_PARAMETER when DataSize is bigger than SMM communication buffer. by czhang46 · 12 years ago
- 0c55190 Update SMM variable DXE driver GetNextVariable interface to comply with UEFI spec by czhang46 · 12 years ago
- a2f2c25 Update secure boot UI driver to handle “reset to default” hot key. by sfu5 · 12 years ago
- 3588bb3 If DataSize or VariableNameSize is near MAX_ADDRESS, this can cause the computed PayLoadSize to overflow to a small value and pass the check in InitCommunicateBuffer(). To protect against this vulnerability, check DataSize and VariableNameSize to make sure PayloadSize doesn't overflow. by lzeng14 · 12 years ago
- 7403ff5 Fix a bug that IsSignatureFoundInDatabase() incorrectly computes CertCount. by sfu5 · 12 years ago
- 6de4c35 Update the DxeImageVerificationLib to support for Authenticode-signed UEFI images with multiple signatures. by sfu5 · 12 years ago
- ca5a7d8 Add error handling code to prevent variable store corruption in release build. by sfu5 · 12 years ago
- 5767f22 Check the input VaraibleName for db/dbx when appending variables with formatted as EFI_SIGNATURE_LIST. by sfu5 · 12 years ago
- 12cbe23 Check for NULL pointer before dereference it. by sfu5 · 12 years ago
- 932e0f6 Variables with state VAR_ADDED&VAR_IN_DELETED_TRANSITION should be considered as valid variables if there is no duplicated ones with VAR_ADDED state. by lzeng14 · 12 years ago
- 0cc565d Add NULL pointer check. by lzeng14 · 12 years ago
- b7d269e Fix infinite loop bug in secure boot UI driver. by sfu5 · 12 years ago
- 03ecb57 Fix TPM may be locked twice issue in normal boot. by gdong1 · 12 years ago
- 23b0693 1. Update the logic of UpdateVariable() for updating variable from: by lzeng14 · 12 years ago
- aab9212 Fix the issue that RuntimeServiceQueryVariableInfo() in VariableSmmRuntimeDxe always return EFI_SUCCESS. by lzeng14 · 12 years ago
- f71ed83 1. Set the secure boot state to Standard Mode when user leaving secure boot setup page. by sfu5 · 12 years ago
- 83758cd Fix a bug that the invalid public key will never be removed from public key database. by sfu5 · 12 years ago
- 6ed1ec5 Add the TPL raise/restore code for VariableSmmRuntimeDxe to avoid variable services reentry. by lzeng14 · 12 years ago
- 335e268 1. Don't assume that flush the HOB variable to flash must be successful. by lzeng14 · 12 years ago
- 3f5c168 Use SMM_VARIABLE_COMMUNICATE_HEADER_SIZE instead of OFFSET_OF (SMM_VARIABLE_COMMUNICATE_HEADER, Data). by lzeng14 · 12 years ago
- b3d4217 Add a NULL string to the Image Execution Information Table if the Name is NULL in function AddImageExeInfo(). by sfu5 · 12 years ago
- bcb7667 Fix Gcc build error by czhang46 · 12 years ago
- f3ac87a Fix coding style issue by czhang46 · 12 years ago
- c11d47b Move the declaration of gEfiCertDbGuid to the package's Include folder. by sfu5 · 12 years ago
- b25380e Measure Processor location as system identity to PCR[1] according to Tcg server spec by czhang46 · 12 years ago
- a332cfd 1.Measure ACPI table data comes from flash event type EV_POST_CODE ACPI DATA to PCR[0] by czhang46 · 12 years ago
- 275beb2 1. Correct the counter-based hash algorithm according to UEFI spec. by sfu5 · 12 years ago
- 8c3883b Fix ECC issue by czhang46 · 12 years ago
- 4821140 Add Physical Presence request UI detection logic. Refine UIConfirm ReadKey logic by czhang46 · 12 years ago
- 6f6c785 Remove TPM selftest on S3 boot path to save time by czhang46 · 12 years ago
- 64470c1 Remove useless MD5 OID ASN.1 value from DxeImageVerificationLib. by tye1 · 12 years ago
- f941bec Change TPM ACCESS_X.activeLocality test timeout to TIMEOUT_A by czhang46 · 12 years ago
- 89be2b0 Fix time-based and count-based authenticated variable can be updated by each other without verification. by gdong1 · 12 years ago
- 0758c83 Rename Trusted Hob to Measured FV hob and add Guided Hob layout structure by czhang46 · 12 years ago
- 0357efe Add a dialog box with help message when user changes the state of "Attempt Secure Boot" check box. by sfu5 · 12 years ago
- 42ed760 1. Fix a bug when comparing two timestamp in auth-variable driver. by sfu5 · 12 years ago
- 89799ec Fix coding style issue by czhang46 · 12 years ago
- d0043e4 Add ImageAuthenticationStatusLib to SAP to check Authentication Status returned from by czhang46 · 12 years ago
- 504dfa9 Add Tper Reset Logic by using MOR bit. by qianouyang · 12 years ago
- ad84df7 SecurityPkg/VariableSmm: Fix a VariableSmm bug when reading variable with size 0. by erictian · 12 years ago
- 6dbdb19 Fix compile error by czhang46 · 12 years ago
- 2aadc92 Enable TPM measurement lib to measure all PE image from a FV unmeasured by TcgPei by czhang46 · 12 years ago
- 59f968c TcgPei is a generic module, so move PcdFirmwareVersionString to generic Pcd list by czhang46 · 12 years ago
- 84bce75 Check the value of Hdr.dwLength for signed EFI image before image validation. by sfu5 · 12 years ago
- 8cc0681 fix compile error in TcgPei by czhang46 · 12 years ago
- 4dbb98a Add check for DevicePathNode. by lgao4 · 12 years ago
- 055c829 TcgPei need to measure anything to PCR in S3 bootpath, so skip shadow logic. by czhang46 · 12 years ago
- 333a53e Use firmware version instead of hardcode string for S-CRTM version identifier by czhang46 · 12 years ago
- db999bd Remove MOR check box feature. should not have a switch to turn off MOR. by czhang46 · 12 years ago
- f6f9031 Update the DxeImageVerificationLib to handle the signed image which CertType is set to EFI_CERT_TYPE_PKCS7_GUID. by sfu5 · 12 years ago
- f6e2335 1. Initialize certdb variable with correct value of list size. by sfu5 · 12 years ago
- 15f2d73 Add TcgDxeHashLogExtendEvent EventLogLastEntry parameter update logic by czhang46 · 12 years ago
- 5db28a6 Add PI1.2.1 SAP2 support and UEFI231B mantis 896 by lgao4 · 12 years ago
- 677e5c0 Fix TCG protocol TcgDxeHashLogExtendEvent and TcgDxeLogEvent SDL issue by czhang46 · 12 years ago
- be02dce Fix TCG protocol PassThroughToTpm() SDL issue by czhang46 · 12 years ago
- 50fe73a 1. Remove the code path which use X509 cert in KEK to validate PKCS7 signed image. by sfu5 · 12 years ago
- 8f3a9e5 LastVariableOffset is wrongly set to 0 when FtwVariableSpace() fails. Recalculate the HwErrVariableTotalSize, HwErrVariableTotalSize and LastVariableOffset when FtwVariableSpace() fails. by lzeng14 · 12 years ago
- 477be7c Fix physical presence request failure for PHYSICAL_PRESENCE_SET_NO_PPI_PROVISION_TRUE, PHYSICAL_PRESENCE_SET_NO_PPI_CLEAR_TRUE and PHYSICAL_PRESENCE_SET_NO_PPI_MAINTENANCE_TRUE. by gdong1 · 12 years ago
- 9e945f7 Measure ExitBootServices failure case by czhang46 · 12 years ago
- f5af77a Fix a failure in TCG HashAll interface. by gdong1 · 12 years ago
- 5a50033 Enhance TCG driver to provide TPM physical presence lifetime lock capability. by gdong1 · 12 years ago
- e77f9ef Use RsaGetPublicKeyFromX509() to validate the given X.509 certificate for PK/KEK/db/dbx database. by sfu5 · 12 years ago
- e4d7370 Update the secure boot configuration UI to accept *.crt certificate file. by sfu5 · 12 years ago
- 3b947ef Adjust library instances used in SecurityPkg by proper module type. by tye1 · 12 years ago
- 05a643f 1. Remove extra attribute for SetupMode, SignatureSupport and SecureBoot variable. by sfu5 · 12 years ago
- 876ac39 Return EFI_UNSUPPORTED if READY_TO_BOOT function is invoked at SMM runtime. by sfu5 · 12 years ago
- 785d84e Verify the provided PKpub is signed with its private key when enrolling a new PK variable in setup mode. by sfu5 · 12 years ago
- 3277a4e Fix a bug in DxeImageVerificationLib which will pass incorrect trust cert size to AuthenticodeVerify() function. by sfu5 · 12 years ago
- cf7409f Update the secure boot configuration UI to accept *.der certificate file as the Platform Key. by sfu5 · 12 years ago
- 0fb450f Reset the platform when user choose to enroll/delete the PK variable. by sfu5 · 13 years ago
- 25a4e71 Add SMRAM range check to variable SMM SMI handler. by czhang46 · 13 years ago
- 627c396 Defer TCG table publish after LASA/LAML in the table got updated. by gdong1 · 13 years ago
- 96277f7 Include read data buffer in CommBufferSize when calculate the buffer size. by ydong10 · 13 years ago
- 8f8ca22 1. Reset system when user changes secure boot state in secure boot configuration form. by sfu5 · 13 years ago
- 12373f2 Fix a buffer overflow bug in VariableSmm driver. by sfu5 · 13 years ago
- dc204d5 Add comment for modules which have external input. by jyao1 · 13 years ago
- de2447d Fix compatibility issue when using IPF image with PE32 magic value in the OptionalHeader. by sfu5 · 13 years ago
- 2ea3b92 Enhance GPT measurement to be able to handle different partition entry size. by gdong1 · 13 years ago
- 1f728ac Fix TCG PPI request EnableActivateClear failure. by gdong1 · 13 years ago