|
[PATCH v4 1/9] MdeModulePkg: Add new PCD to control the evacuate temporary memory feature (CVE-2019-11098)
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
The security researcher found that we can get control after NEM disable.
The reason is that the flash content reside in NEM at startup and
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
The security researcher found that we can get control after NEM disable.
The reason is that the flash content reside in NEM at startup and
|
By
Guomin Jiang
·
#62219
·
|
|
[PATCH v4 0/9] Add new feature that evacuate temporary to permanent memory (CVE-2019-11098)
The TOCTOU vulnerability allow that the physical present person to replace the code with the normal BootGuard check and PCR0 value.
The issue occur when BootGuard measure IBB and access flash code
The TOCTOU vulnerability allow that the physical present person to replace the code with the normal BootGuard check and PCR0 value.
The issue occur when BootGuard measure IBB and access flash code
|
By
Guomin Jiang
·
#62218
·
|
|
Re: [PATCH 11/11] Maintainers.txt: Add myself as the reviewer for LsiScsi driver
Will fix this commit in v2.
Thanks,
Gary Lin
Will fix this commit in v2.
Thanks,
Gary Lin
|
By
Gary Lin
·
#62217
·
|
|
Re: [PATCH 10/11] OvmfPkg/LsiScsiDxe: Process the SCSI Request Packet
Will fix it.
Oops. Will fix it.
Ok, will add an assert for MaxLun.
Will fix them in v2.
Ok. Will remove DUAL_ADDRESS_CYCLE.
Urghhh, it should be "jump to 7". LSI_INS_TC_RA stands for
Will fix it.
Oops. Will fix it.
Ok, will add an assert for MaxLun.
Will fix them in v2.
Ok. Will remove DUAL_ADDRESS_CYCLE.
Urghhh, it should be "jump to 7". LSI_INS_TC_RA stands for
|
By
Gary Lin
·
#62216
·
|
|
[PATCH edk2-platforms 3/3] Silicon/NXP: Add Support for git commit info print
From: Pankaj Bansal <pankaj.bansal@...>
This patch adds the Support for printing the git commit information
in linux build environment.
Ideal place of retrieving this information should be
From: Pankaj Bansal <pankaj.bansal@...>
This patch adds the Support for printing the git commit information
in linux build environment.
Ideal place of retrieving this information should be
|
By
Pankaj Bansal
·
#62215
·
|
|
[PATCH edk2-platforms 2/3] Silicon/NXP: Add support for reserving a chunk from RAM
From: Pankaj Bansal <pankaj.bansal@...>
Some NXP SOCs have some specialized IP blocks (like MC), which
require DDR memory to operate. This DDR memory should not be managed
by OS or
From: Pankaj Bansal <pankaj.bansal@...>
Some NXP SOCs have some specialized IP blocks (like MC), which
require DDR memory to operate. This DDR memory should not be managed
by OS or
|
By
Pankaj Bansal
·
#62214
·
|
|
[PATCH edk2-platforms 1/3] Silicon/NXP: Use runtime safe version of DebugLib
From: Pankaj Bansal <pankaj.bansal@...>
For DXE_RUNTIME_DRIVER runtime safe version of DebugLib should be
used. Otherwise, any DEBUG print in code can result in abort in OS.
Signed-off-by:
From: Pankaj Bansal <pankaj.bansal@...>
For DXE_RUNTIME_DRIVER runtime safe version of DebugLib should be
used. Otherwise, any DEBUG print in code can result in abort in OS.
Signed-off-by:
|
By
Pankaj Bansal
·
#62213
·
|
|
[PATCH edk2-platforms 0/3] Add Features to NXP Platforms
From: Pankaj Bansal <pankaj.bansal@...>
This patch series adds some useful features to NXP platforms.
- runtime safe version of DebugLib
- Add support for reserving a chunk from RAM
- Add Support
From: Pankaj Bansal <pankaj.bansal@...>
This patch series adds some useful features to NXP platforms.
- runtime safe version of DebugLib
- Add support for reserving a chunk from RAM
- Add Support
|
By
Pankaj Bansal
·
#62212
·
|
|
[PATCH edk2-platforms v3 5/5] Platform/NXP/LS1046aFrwyPkg: Add VarStore
From: Pankaj Bansal <pankaj.bansal@...>
Add VarStore Fd. This Fd is used to store non volatile variables in
flash.
Signed-off-by: Pankaj Bansal <pankaj.bansal@...>
Reviewed-by: Leif Lindholm
From: Pankaj Bansal <pankaj.bansal@...>
Add VarStore Fd. This Fd is used to store non volatile variables in
flash.
Signed-off-by: Pankaj Bansal <pankaj.bansal@...>
Reviewed-by: Leif Lindholm
|
By
Pankaj Bansal
·
#62211
·
|
|
[PATCH edk2-platforms v3 4/5] Platform/NXP: Add LS1046AFRWY Platform
From: Pankaj Bansal <pankaj.bansal@...>
LS1046A Freeway (FRWY) is a high-performance development
platform that supports the QorIQ LS1046A Layerscape Architecture SOCs.
Co-authored-by: Pramod
From: Pankaj Bansal <pankaj.bansal@...>
LS1046A Freeway (FRWY) is a high-performance development
platform that supports the QorIQ LS1046A Layerscape Architecture SOCs.
Co-authored-by: Pramod
|
By
Pankaj Bansal
·
#62210
·
|
|
[PATCH edk2-platforms v3 3/5] Silicon/NXP: Add LS1046A Soc package
From: Pankaj Bansal <pankaj.bansal@...>
LS1046A is QorIq Layerscape multicore communications processor with
four Arm Cortex-A72 cores.
This SOC is based on Layerscape Chassis v2.
Co-authored-by:
From: Pankaj Bansal <pankaj.bansal@...>
LS1046A is QorIq Layerscape multicore communications processor with
four Arm Cortex-A72 cores.
This SOC is based on Layerscape Chassis v2.
Co-authored-by:
|
By
Pankaj Bansal
·
#62209
·
|
|
[PATCH edk2-platforms v3 2/5] Silicon/NXP/LS1043A: Fix the RCW bits' parsing
From: Pankaj Bansal <pankaj.bansal@...>
For LS1043A SOC the DCFG registers are read in big endian format.
After Reading the registers in code we have the registers in Little
Endian Bit format
From: Pankaj Bansal <pankaj.bansal@...>
For LS1043A SOC the DCFG registers are read in big endian format.
After Reading the registers in code we have the registers in Little
Endian Bit format
|
By
Pankaj Bansal
·
#62208
·
|
|
[PATCH edk2-platforms v3 1/5] Silicon/NXP: Add comments explaining RCW bits' parsing
From: Pankaj Bansal <pankaj.bansal@...>
RCW bits parsing and their interpretation varies between various SOCs.
Add the comments that explain this parsing scheme.
Based on this explanation, fix
From: Pankaj Bansal <pankaj.bansal@...>
RCW bits parsing and their interpretation varies between various SOCs.
Add the comments that explain this parsing scheme.
Based on this explanation, fix
|
By
Pankaj Bansal
·
#62207
·
|
|
[PATCH edk2-platforms v3 0/5] Add LS1046AFRWY Platform
From: Pankaj Bansal <pankaj.bansal@...>
The Layerscape LS1046A Freeway (FRWY-LS1046A) board is a high-performance
development platform that supports the QorIQ LS1046A architecture
processor.
The
From: Pankaj Bansal <pankaj.bansal@...>
The Layerscape LS1046A Freeway (FRWY-LS1046A) board is a high-performance
development platform that supports the QorIQ LS1046A architecture
processor.
The
|
By
Pankaj Bansal
·
#62206
·
|
|
[PATCH v3 11/11] UefiCpuPkg: Correct some typos.
Correct some typos.
Cc: Ray Ni <ray.ni@...>
Cc: Laszlo Ersek <lersek@...>
Cc: Rahul Kumar <rahul1.kumar@...>
Signed-off-by: Guomin Jiang <guomin.jiang@...>
---
Correct some typos.
Cc: Ray Ni <ray.ni@...>
Cc: Laszlo Ersek <lersek@...>
Cc: Rahul Kumar <rahul1.kumar@...>
Signed-off-by: Guomin Jiang <guomin.jiang@...>
---
|
By
Guomin Jiang
·
#62205
·
|
|
[PATCH v3 10/11] UefiCpuPkg/CpuMpPei: Enable paging and set NP flag to avoid TOCTOU (CVE-2019-11098)
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
To avoid the TOCTOU, enable paging and set Not Present flag so when
access any code in the flash range, it will trigger #NP exception.
Cc: Ray
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
To avoid the TOCTOU, enable paging and set Not Present flag so when
access any code in the flash range, it will trigger #NP exception.
Cc: Ray
|
By
Guomin Jiang
·
#62204
·
|
|
[PATCH v3 09/11] SecurityPkg/Tcg2Pei: Use Migrated FV Info Hob for calculating hash (CVE-2019-11098)
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
When we allocate pool to save rebased the PEIMs, the address will change
randomly, therefore the hash will change and result PCR0 change as
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
When we allocate pool to save rebased the PEIMs, the address will change
randomly, therefore the hash will change and result PCR0 change as
|
By
Guomin Jiang
·
#62203
·
|
|
[PATCH v3 08/11] MdeModulePkg/Core: Create Migrated FV Info Hob for calculating hash (CVE-2019-11098)
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
When we allocate pool to save the rebased PEIMs, the address will change
randomly, therefore the hash will change and result PCR0 change as
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
When we allocate pool to save the rebased PEIMs, the address will change
randomly, therefore the hash will change and result PCR0 change as
|
By
Guomin Jiang
·
#62202
·
|
|
[PATCH v3 07/11] UefiCpuPkg/SecMigrationPei: Add initial PEIM (CVE-2019-11098)
From: Michael Kubacki <michael.a.kubacki@...>
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
Adds a PEIM that republishes structures produced in SEC. This
is done because SEC modules
From: Michael Kubacki <michael.a.kubacki@...>
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
Adds a PEIM that republishes structures produced in SEC. This
is done because SEC modules
|
By
Guomin Jiang
·
#62201
·
|
|
[PATCH v3 06/11] UefiCpuPkg/CpuMpPei: Add GDT and IDT migration support (CVE-2019-11098)
From: Michael Kubacki <michael.a.kubacki@...>
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
Moves the GDT and IDT to permanent memory in a memory discovered
callback. This is done to
From: Michael Kubacki <michael.a.kubacki@...>
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1614
Moves the GDT and IDT to permanent memory in a memory discovered
callback. This is done to
|
By
Guomin Jiang
·
#62200
·
|