uefi-ref/edk2
1
0
Fork 0
mirror of https://github.com/tianocore/edk2 synced 2026-08-27 00:23:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
edk2/SecurityPkg/Library
History
Richard Lyu b65fd21591 SecurityPkg/DxeTpmMeasureBootLib: Use GptLib parser 
TcgMeasureGptTable() reads the primary GPT header directly from LBA 1
and validates it with field checks only: no header CRC32, no
partition-entry-array CRC32 and no backup fallback. This is the same
divergence between the measured and the parsed partition table that
CVE-2024-13745 reports against DxeTpm2MeasureBootLib, and the tracking
issue lists both libraries as affected.

Mirror the DxeTpm2MeasureBootLib fix: select the GPT header to measure
via the shared GptLib parser. Validate the current primary GPT or, when
it is invalid, validate the backup and the header at its AlternateLBA.
Do not extend PCR[5] if no valid header can be selected.

Signed-off-by: Richard Lyu <richard.lyu@suse.com>
2026-07-20 21:50:57 +00:00
..
AuthVariableLib SecurityPkg/AuthVariableLib: harden signature list filtering 2026-06-30 02:35:17 +00:00
DxeImageAuthenticationStatusLib SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
DxeImageVerificationLib SecurityPkg: added image verification tests for signed images 2026-07-16 02:33:17 +00:00
DxeRsa2048Sha256GuidedSectionExtractLib SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
DxeTcg2PhysicalPresenceLib SecurityPkg: align UNI file headers with UNI Spec standard 2026-03-02 19:32:17 +00:00
DxeTcgPhysicalPresenceLib SecurityPkg: align UNI file headers with UNI Spec standard 2026-03-02 19:32:17 +00:00
DxeTpm2MeasureBootLib SecurityPkg/DxeTpm2MeasureBootLib: Use GptLib parser 2026-07-20 21:50:57 +00:00
DxeTpmMeasureBootLib SecurityPkg/DxeTpmMeasureBootLib: Use GptLib parser 2026-07-20 21:50:57 +00:00
DxeTpmMeasurementLib SecurityPkg: Support CcMeasurementProtocol in DxeTpmMeasurementLib 2021-12-11 17:00:53 +00:00
FmpAuthenticationLibPkcs7 SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
FmpAuthenticationLibRsa2048Sha256 SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
HashInstanceLibSha1 Revert "SecurityPkg: CodeQL Fixes." 2025-08-12 03:50:30 +00:00
HashInstanceLibSha256 SecurityPkg/HashInstanceLibSha256: Remove unused Tpm2CommandLib dependency 2026-06-25 16:53:36 +00:00
HashInstanceLibSha384 SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
HashInstanceLibSha512 SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
HashInstanceLibSm3 SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
HashLibBaseCryptoRouter SecurityPkg: Update HashLibBaseCryptoRouter 2026-06-17 19:16:45 +00:00
HashLibTpm2 SecurityPkg/HashLibTpm2: Fix unused variable usage 2025-11-29 18:21:50 +01:00
PeiDxeTpmPlatformHierarchyLib SecurityPkg: Update code to be more C11 compliant by using __func__ 2023-04-10 14:19:57 +00:00
PeiDxeTpmPlatformHierarchyLibNull ArmVirtPkg/TPM: Add a NULL implementation of TpmPlatformHierarchyLib 2021-10-05 09:54:11 +00:00
PeilessSecMeasureLib SecurityPkg: Integrate Tpm2HelpLib 2026-06-17 19:16:45 +00:00
PeiRsa2048Sha256GuidedSectionExtractLib SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
PeiTcg2PhysicalPresenceLib SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
PeiTpmMeasurementLib SecurityPkg/PeiTpmMeasurementLib: Support CC Measurement 2024-12-10 02:09:29 +00:00
PlatformPKProtectionLibVarPolicy SecurityPkg: Update code to be more C11 compliant by using __func__ 2023-04-10 14:19:57 +00:00
PlatformSecureLibNull SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
SecTpmMeasurementLib SecurityPkg/SecTpmMeasurementLib: Fix OverFlow Coverity issue 2025-07-02 07:41:33 +00:00
SecureBootVariableLib SecurityPkg/SecureBootVariableLib: Cleanup debug print readability 2026-05-06 10:43:05 +00:00
SecureBootVariableProvisionLib Revert "SecurityPkg: CodeQL Fixes." 2025-08-12 03:50:30 +00:00
SmmTcg2PhysicalPresenceLib SecurityPkg: Replace include guards with #pragma once 2026-02-23 21:01:28 +00:00
Tcg2PpVendorLibNull SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
TcgEventLogRecordLib Revert "SecurityPkg: CodeQL Fixes." 2025-08-12 03:50:30 +00:00
TcgPpVendorLibNull SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
TcgStorageCoreLib SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
TcgStorageOpalLib MdePkg,SecurityPkg: Fix Spelling Errors in TCG/TPM Definitions 2026-05-08 02:15:34 +00:00
Tpm2CommandLib SecurityPkg: Update Tpm2Help.c Functions 2026-06-17 19:16:45 +00:00
Tpm2DeviceLibDTpm SecurityPkg: Update Tpm2Ptp.h to follow pragma once coding convention 2026-06-25 19:40:31 +00:00
Tpm2DeviceLibFfa SecurityPkg: Tpm over FFA: FFA_RUN command should use the returned ID 2026-07-20 19:13:15 +00:00
Tpm2DeviceLibRouter SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
Tpm2DeviceLibTcg2 SecurityPkg/Tpm2DeviceLibTcg2: Make mTcg2Protocol static 2023-08-30 00:05:52 +00:00
Tpm2HelpLib SecurityPkg: Introduce Tpm2HelpLib 2026-06-17 19:16:45 +00:00
Tpm12CommandLib SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
Tpm12DeviceLibDTpm Revert "SecurityPkg: CodeQL Fixes." 2025-08-12 03:50:30 +00:00
Tpm12DeviceLibTcg SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
TpmCommLib SecurityPkg: Replace include guards with #pragma once 2026-02-23 21:01:28 +00:00