mirror of
https://github.com/tianocore/edk2
synced 2026-08-27 00:23:19 -04:00
b65fd21591
TcgMeasureGptTable() reads the primary GPT header directly from LBA 1 and validates it with field checks only: no header CRC32, no partition-entry-array CRC32 and no backup fallback. This is the same divergence between the measured and the parsed partition table that CVE-2024-13745 reports against DxeTpm2MeasureBootLib, and the tracking issue lists both libraries as affected. Mirror the DxeTpm2MeasureBootLib fix: select the GPT header to measure via the shared GptLib parser. Validate the current primary GPT or, when it is invalid, validate the backup and the header at its AlternateLBA. Do not extend PCR[5] if no valid header can be selected. Signed-off-by: Richard Lyu <richard.lyu@suse.com> |
||
|---|---|---|
| .. | ||
| DeviceSecurity | ||
| EnrollFromDefaultKeysApp | ||
| FvReportPei | ||
| Hash2DxeCrypto | ||
| HddPassword | ||
| Include | ||
| Library | ||
| Pkcs7Verify/Pkcs7VerifyDxe | ||
| RandomNumberGenerator | ||
| Tcg | ||
| Test | ||
| VariableAuthenticated | ||
| SecurityFixes.yaml | ||
| SecurityPkg.ci.yaml | ||
| SecurityPkg.dec | ||
| SecurityPkg.dsc | ||
| SecurityPkg.uni | ||
| SecurityPkgExtra.uni | ||