summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2022-11-16Update version to 15.715.7Peter Jones
2022-11-16Bump grub's sbat requirement to grub,3Peter Jones
2022-11-16Update shim's .sbat to sbat,3Peter Jones
2022-11-16More coverity modelingPeter Jones
2022-11-15CryptoPkg/BaseCryptLib: fix NULL dereferenceJian J Wang
2022-11-14mok: remove MokListTrusted from PCR 7Arthur Gautier
2022-11-14make-archive: Build reproducible tarballJulian Andres Klode
2022-11-14pe: Fix image section entry-point validationIlya Okomin
2022-11-14Add -malign-double to IA32 compiler flagsNicholas Bishop
2022-11-08load_cert_file: Use EFI RT memory functionEric Snowberg
2022-11-08load_cert_file: Fix stack issueEric Snowberg
2022-10-04shim: Flush the memory region from i-cache before executiondann frazier
2022-09-01Discard load-options that start with a NULRobbie Harwood
2022-08-16Enable TDX measurement to RTMR registerLu Ken
2022-08-04Add a link to the test plan in the readme.Peter Jones
2022-08-03Reference MokListRT instead of MokListEric Snowberg
2022-08-03Make SBAT variable payload introspectableChris Coulson
2022-06-01bump version to shim-15.615.6Peter Jones
2022-06-01sbat: add the parsed SBAT variable entries to the debug logPeter Jones
2022-05-31shim-15.6~rc215.6-rc2Peter Jones
2022-05-24Also avoid CVE-2022-28737 in verify_image()Peter Jones
2022-05-24Update SBAT generation requirements for 05/24/22Jan Setje-Eilers
2022-05-24Update advertised sbat generation number for shimJan Setje-Eilers
2022-05-24pe: Perform image verification earlier when loading grubChris Coulson
2022-05-24pe: Fix a buffer overflow when SizeOfRawData > VirtualSizeChris Coulson
2022-05-24SBAT Policy latest should be a one-shotJan Setje-Eilers
2022-05-24shim-15.6~rc1Peter Jones
2022-05-23sbat: Make nth_sbat_field() honor the size limitPeter Jones
2022-05-23mok import: handle OOM casePeter Jones
2022-05-23load_cert_file(): don't defererence NULLPeter Jones
2022-05-23Give the Coverity scanner some more GCC blinders...Peter Jones
2022-05-23Fix preserve_sbat_uefi_variable() logicJan Setje-Eilers
2022-05-18mok.c: fix a trivial dead assignmentPeter Jones
2022-05-18load_certs: trust dir->Read() slightly less.Peter Jones
2022-05-18sbat policy: make our policy change actions symbolicPeter Jones
2022-05-18Always initialize data/datasize before calling read_image()Peter Jones
2022-05-18peimage.h: make our signature macros force the typePeter Jones
2022-05-18sbat.h: minor reformatting for legibilityPeter Jones
2022-05-18make: unbreak scan-build again for gnu-efiPeter Jones
2022-05-17SBAT revocation managementJan Setje-Eilers
2022-05-17post-process-pe: set EFI_IMAGE_DLLCHARACTERISTICS_NX_COMPATPeter Jones
2022-05-17Add MokPolicy variable and MOK_POLICY_REQUIRE_NXPeter Jones
2022-05-17PE Loader: support and require NXPeter Jones
2022-05-17Add some missing PE image flag definitionsPeter Jones
2022-05-17post-process-pe: there is no 's' argument.Peter Jones
2022-05-17Load additional certs from a signed binaryEric Snowberg
2022-05-17Abstract out image readingEric Snowberg
2022-05-17Add verify_imageEric Snowberg
2022-05-17SBAT matching: Break out of the inner sbat loop if we find the entry.Peter Jones
2022-05-17shim: use SHIM_DEVEL_VERBOSE when built in devel modePeter Jones