efi-boot-shim.git/shim.c, branch Release_3.0.0

Don't close file twice in should_use_fallback error path

2016-07-18T19:28:12+00:00

When fallback.efi is not present, the should_use_fallback error path attempts to close a file that has already been closed, resulting in a hang. This issue only affects certain systems. This is a regression from version 0.8 and was introduced by commit 4794822. Signed-off-by: Benjamin Antin

shim: Fix unused variable error

2016-06-30T20:25:21+00:00

Signed-off-by: Carlo Caione

shim: make the PE loader less overzealous on rejections

2016-06-09T19:32:37+00:00

Measure state and second stage into TPM

2016-05-11T15:11:05+00:00

Add support for measuring the MOK database and secure boot state into a TPM, and do the same for the second stage loader. This avoids a hole in TPM measurement between the firmware and the second stage loader.

shim: dealing with only one string on loadoption

2016-05-11T15:10:17+00:00

The second stage set is not working after commit 3322257e611e2000f79726d295bb4845bbe449e7 for those which load option only have one string. Signed-off-by: Ivan Hu

shim: mirror MokSBState in runtime so the kernel can make use of it.

2016-03-22T15:14:31+00:00

Signed-off-by: Mathieu Trudel-Lapierre

shim: check for EFI\BOOT\BOOT${ARCH}.EFI as well as the leading \ version

2015-11-17T16:40:29+00:00

I found a machine whose BDS gives us relative paths, yay! The rest of the code still works without that leading slash, so just make it one more item we let through our StrnCaseCmp() filter. Signed-off-by: Peter Jones

shim: fix resource leak on should_use_fallback() error path

2015-11-17T16:40:23+00:00

ExitBootServices() and Exit() should both clean these up anyway, but we should do the right thing nonetheless. Signed-off-by: Peter Jones

shim: if generate_path() gets a full path, just return it.

2015-11-17T16:40:01+00:00

We decide if it's a full path by if it starts with \\EFI\\. That's quite lazy, but we can't just check \\ like you'd hope, because we need to stay compatible with what we've set as DEFAULT_LOADER in the past, and I don't feel like writing the full path traversal file test. Signed-off-by: Peter Jones

shim: fix a wrong-abi call to Stall() and ResetSystem()

2015-11-17T16:39:54+00:00

Woops. The net outcome of these is going to be a sleep of unknown duration, followed by either a) ResetSystem() with some random selection of warm/cold boot, or b) ResetSystem() returning an error and shim returning error from efi_main(). Signed-off-by: Peter Jones