efi-boot-shim.git, branch 15.5

Update to version 15.5

2022-02-15T18:06:21+00:00

Mark this officially as shim 15.5 Signed-off-by: Robbie Harwood

pe: missing perror argument

2022-02-03T18:52:45+00:00

perror(L"%d sections contain entry point\n") lacks an argument corresponding to %d. Signed-off-by: Heinrich Schuchardt

Remove post-proccess-pe on 'make clean'

2022-02-03T18:52:28+00:00

This resolves issue #442 Signed-off-by: Peter Jones

Make Mok config table be runtime services memory.

2022-02-03T18:52:15+00:00

Currently, when you boot linux you get a bright red message in the log and the console like: Feb 03 13:18:45 localhost.localdomain kernel: mokvar: EFI MOKvar config table is not in EFI runtime memory We don't like bright red messages on the console, so this patch changes the memory allocation for the mokvar config table so that it's in runtime memory. Signed-off-by: Peter Jones

Fix the version string for -rc2

2022-02-03T18:52:15+00:00

Signed-off-by: Peter Jones

Minor coverity fixes

2021-12-10T22:08:21+00:00

- one missing free - one minor deadcode issue - two unchecked allocations - one debug hexdump of a variable we just freed Signed-off-by: Peter Jones

stdarg: use sysv varargs when we build with coverity

2021-12-10T22:08:21+00:00

cov-analysis-linux64-2020.09 is a lot more successful than the older versions at building, but it still has some... issues. Among them, it is of the belief that this: void foo(char *fmt, ...) { __builtin_va_list ap; __builtin_ms_va_start(ap, fmt); /* <- here */ ... } is an uninitialized use of "ap". This patch adds defined(__COVERITY__) to the list of criteria for using sysv va lists, which it has no such confusion about. Signed-off-by: Peter Jones

shim: Don't stop forever at "Secure Boot not enabled" notification

2021-12-10T19:59:22+00:00

Requesting a keystroke when Secure Boot is not enabled and verbosity is enabled is really annoying. Signed-off-by: Renaud Métrich

fallback: fix fallback not passing arguments of the first boot option

2021-12-10T19:56:54+00:00

The buffer used to read the data in the CSV is declared as a stack variable in the try_boot_csv() function, but a pointer to the arguments field of the first boot option is stored in the global first_new_option_args variable. Later, when is used set the arguments to boot the first entry, the variable points to memory that no longer exists. This leads to booting an entry with garbage as arguments instead of the correct value. Reported-by: Alexander Larsson Signed-off-by: Javier Martinez Canillas

Introduce a new MOK variable called MokListTrustedRT

2021-11-03T15:30:28+00:00

Introduce a new MOK variable called MokListTrustedRT. It allows an end-user to decide if they want to trust MOKList keys within the soon to be booted Linux kernel. This variable does not change any functionality within shim itself. When Linux boots, if MokListTrustedRT is set and EFI_VARIABLE_NON_VOLATILE is not set, keys in MokListRT are loaded into the .machine keyring instead of the .platform keyring. Signed-off-by: Eric Snowberg