Prakash: I don't see the reason for the change of I2CSlaveAddress. Can you help to add it? And, can you create pull request for this patch and make sure it pass open CI? Thanks Liming > -----邮件原件-----

From: Michael Kubacki <michael.kubacki@...> Fixes CodeQL alerts for CWE-457: https://cwe.mitre.org/data/definitions/457.html Cc: Erich McMillan <emcmillan@...> Cc: Michael D Kinney <michael.d.kinney@.

From: Michael Kubacki <michael.kubacki@...> Fixes CodeQL alerts for CWE-457: https://cwe.mitre.org/data/definitions/457.html Cc: Erich McMillan <emcmillan@...> Cc: Michael D Kinney <michael.d.kinney@.

From: Michael Kubacki <michael.kubacki@...> As recommended by CodeQL this change replaces cpp/potential-buffer-overflow with cpp/overrunning-write-with-float and cpp/overrunning-write. Enables: 1. cpp

From: Michael Kubacki <michael.kubacki@...> The previous commits fixed issues with these queries across various packages. Now that those are resolved, enable the queries in the edk2 query set so regre

From: Michael Kubacki <michael.kubacki@...> Fixes CodeQL alerts for CWE-457: https://cwe.mitre.org/data/definitions/457.html Cc: Erich McMillan <emcmillan@...> Cc: Jiaxin Wu <jiaxin.wu@...> Cc: Maciej

From: Michael Kubacki <michael.kubacki@...> Fixes CodeQL alerts for CWE-457: https://cwe.mitre.org/data/definitions/457.html Cc: Erich McMillan <emcmillan@...> Cc: Liming Gao <gaoliming@...> Cc: Micha

From: Michael Kubacki <michael.kubacki@...> Fixes CodeQL alerts for CWE-457: https://cwe.mitre.org/data/definitions/457.html Checks the return value from `ASN1_get_object()` to verify values set by th

From: Erich McMillan <emcmillan@...> Details for these CodeQL alerts can be found here: - Pointer overflow check (cpp/pointer-overflow-check): - https://cwe.mitre.org/data/definitions/758.html - Poten

From: Michael Kubacki <michael.kubacki@...> While more portable methods exist to handle these cases, this change does not attempt to do more than fix the immediate problem and follow the conventions a

From: Michael Kubacki <michael.kubacki@...> Purdue Compiler Construction Tool Set (PCCTS) source code was copied/ pasted into BaseTools/Source/C/VfrCompile/Pccts/. The code contains tab characters ins

From: Michael Kubacki <michael.kubacki@...> Adds queries for the following: 1. cpp/conditionallyuninitializedvariable 2. cpp/pointer-overflow-check 3. cpp/overrunning-write 4. cpp/overrunning-write-wi

This is used for supporting direct kernel boot in CloudHv. CloudHv will store kernel image in system ram and pass kernel info through DT. It's firmware's responsibility to fetch the kernel data and cr

BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=4159 VmgExitLib is renamed as CcExitLib in EDK2. This change should be applied in edk2-platforms as well. The impacted platform pkgs are: - MinPlatfo

As we use memory to pass kernel image, the memory region where kernel image locates should be added into hob as read-only. Signed-off-by: Jianyong Wu <jianyong.wu@...> --- .../CloudHvVirtMemInfoLib.c

RDRAND has notoriously been broken many times over its lifespan. Add a smoketest to RDRAND, in order to better sniff out potential security concerns. Also add a proper CPUID test in order to support o

RDRAND has notoriously been broken many times over its lifespan. Add a smoketest to RDRAND, in order to better sniff out potential security concerns. Also add a proper CPUID test in order to support o

diff --git a/edksetup.sh b/edksetup.sh index 06d2f041e6..46b295c430 100755 --- a/edksetup.sh +++ b/edksetup.sh @@ -105,6 +105,19 @@ function SetupEnv() fi } +# whereis(1) is not a POSIX utility and, f

Expose the EFI_RNG_PROTOCOL based on RdRand, so that we don't have to rely on QEMU providing a virtio-rng device in order to implement this protocol. Signed-off-by: Ard Biesheuvel <ardb@...> --- OvmfP

RDRAND has notoriously been broken many times over its lifespan. Add a smoketest to RDRAND, in order to better sniff out potential security concerns. Also add a proper CPUID test in order to support o