efi-boot-shim.git/generate_sbat_var_defs.c, branch rolling

SBAT Level update for February 2025 GRUB CVEs

2025-03-18T22:10:37+00:00

Moves the minimum GRUB SBAT Level to 5 in order to require fixes for the following GRUB CVEs: CVE-2024-45774 CVE-2024-45775 CVE-2024-45776 CVE-2024-45777 CVE-2024-45778 CVE-2024-45779 CVE-2024-45780 CVE-2024-45781 CVE-2024-45782 CVE-2024-45783 CVE-2025-0622 CVE-2025-0624 CVE-2025-0677 CVE-2025-0678 CVE-2025-0684 CVE-2025-0685 CVE-2025-0686 CVE-2025-0689 CVE-2025-0690 CVE-2025-1118 CVE-2025-1125 This also bumps the default SBAT_AUTOMATIC_DATE to 2024040900. Signed-off-by: Jan Setje-Eilers

generate_sbat_var_defs: Ensure revlistentry->revocations is initialized.

2025-03-14T15:05:05+00:00

Resolves: Coverity CID 457507 Signed-off-by: Peter Jones

generate_sbat_var_defs: Fix memory leak on realloc failure and fd leak.

2025-03-14T15:05:05+00:00

Resolves: Coverity CID 457502 Signed-off-by: Peter Jones

generate_sbat_var_defs: run clang-format on readfile()

2025-03-14T15:05:05+00:00

Signed-off-by: Peter Jones

Add generate_sbat_var_defs utility program

2025-02-05T14:10:35+00:00

This adds the utility program generate_sbat_var_defs, which can be used to generate the sbar_var_defs.h header file from the human readable SbatLevel_Variable.txt file. Signed-off-by: Jan Setje-Eilers