efi-boot-shim.git, branch 0.8

Bump version to 0.8

2014-10-13T20:41:51+00:00

Correctly reject bad tftp addresses earlier, rather than later.

2014-10-02T05:01:54+00:00

This check is for end == NULL but was meant to be *end == '\0'. Without this change, we'll pass a plausibly bad address (i.e. one with no ']' at the end) to Mtftp(... READ_FILE ...), which should fail correctly, but our error messaging will be inconsistent. Signed-off-by: Peter Jones

Use -Werror=sign-compare .

2014-10-02T05:01:54+00:00

I'm going to have to fix any errors that have this anyway, so may as well do it here properly. Signed-off-by: Peter Jones

Make another integer compare be signed/unsigned safe as well.

2014-10-02T05:01:54+00:00

Signed-off-by: Peter Jones

OOB access when parsing MOK List/Certificates on MOK enrollment

2014-10-02T05:01:54+00:00

shim buffer overflow on ipv6 option parsing

2014-10-02T05:01:54+00:00

Another testplan error.

2014-10-02T05:01:46+00:00

Signed-off-by: Peter Jones

Cryptlib: remove the unused files

2014-10-02T04:10:47+00:00

I mistakenly added CryptPkcs7VerifyNull.c which may make Pkcs7Verify always return FALSE. Besides CryptPkcs7VerifyNull.c, there are some functions we would never use. This commit removes those files to avoid any potential trouble. Signed-off-by: Gary Ching-Pang Lin

Don't verify images with the empty build key

2014-10-02T04:08:50+00:00

We replaced the build key with an empty file while compiling shim for our distro. Skip the verification with the empty build key since this makes no sense. Signed-off-by: Gary Ching-Pang Lin

Fix some minor testplan errors.

2014-10-02T04:02:43+00:00

Signed-off-by: Peter Jones