edk2/SecurityPkg
Richard Lyu 7c12d4359a SecurityPkg/DxeTpm2MeasureBootLib: Use GptLib parser
The previous commit introduced GptLib by extracting PartitionDxe's GPT
parsing and validation code. It provides a shared implementation for edk2
components that need to parse and validate GPT data consistently.

Update DxeTpm2MeasureBootLib to use GptLib when selecting on-disk GPT
data for measurement. Validate the current primary GPT or, when it is
invalid, validate the backup and the header at its AlternateLBA. Do not
extend PCR[5] if no valid header can be selected. The measurement therefore
uses GPT data read from disk at measurement time and applies the shared
parser and validation logic.

Ref: https://seclists.org/oss-sec/2026/q2/727
Signed-off-by: Richard Lyu <richard.lyu@suse.com>
2026-07-20 21:50:57 +00:00
..
DeviceSecurity SecurityPkg: Remove duplicate file name in INF file 2026-04-29 11:18:10 +02:00
EnrollFromDefaultKeysApp SecurityPkg: Secure Boot Drivers: Added common header files 2022-07-07 01:07:00 +00:00
FvReportPei SecurityPkg: Replace include guards with #pragma once 2026-02-23 21:01:28 +00:00
Hash2DxeCrypto SecurityPkg: Replace include guards with #pragma once 2026-02-23 21:01:28 +00:00
HddPassword SecurityPkg: Replace include guards with #pragma once 2026-02-23 21:01:28 +00:00
Include SecurityPkg/Tpm2ServiceFfa.h: fix typo 2026-07-07 19:57:18 +00:00
Library SecurityPkg/DxeTpm2MeasureBootLib: Use GptLib parser 2026-07-20 21:50:57 +00:00
Pkcs7Verify/Pkcs7VerifyDxe SecurityPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
RandomNumberGenerator SecurityPkg/RngDxe: Support RISCV64 2026-07-17 05:23:45 +00:00
Tcg SecurityPkg: Tpm over FFA: FFA_RUN command should use the returned ID 2026-07-20 19:13:15 +00:00
Test SecurityPkg: Add Google Test MockSecureBootVariableLib 2026-07-16 17:50:01 +00:00
VariableAuthenticated SecurityPkg: Add support for LOONGARCH64 and RISCV64 when parsing PE image 2026-06-24 17:31:06 +00:00
SecurityFixes.yaml SecurityPkg: Update SecurityFixes.yaml for CVE-2024-38797 2025-04-09 00:13:21 +00:00
SecurityPkg.ci.yaml SecurityPkg: added image verification test using DB hash 2026-07-16 02:33:17 +00:00
SecurityPkg.dec SecurityPkg: Introduce Tpm2HelpLib 2026-06-17 19:16:45 +00:00
SecurityPkg.dsc SecurityPkg/DxeTpm2MeasureBootLib: Use GptLib parser 2026-07-20 21:50:57 +00:00
SecurityPkg.uni SecurityPkg: SubClassTpm: Updated default value 2023-06-23 16:28:24 +00:00
SecurityPkgExtra.uni SecurityPkg: Replace BSD License with BSD+Patent License 2019-04-09 10:58:23 -07:00