summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2023-06-21Work around malformed path delimiters in file paths from DHCPAlberto Perez
2023-06-06Add a security contact email address in README.mdPeter Jones
2023-05-02SBAT-related documents formatting and spellingKamil Aronowski
2023-05-02Further improve load_certs() for non-compliant drivers/firmwaresPete Batard
2023-05-02Block Debian grub binaries with SBAT < 4Steve McIntyre
2023-05-02test-sbat: Fix exit codeNicholas Bishop
2023-05-02Drop invalid calls to `CRYPTO_set_mem_functions`Nicholas Bishop
2023-05-02Optionally allow to keep shim protocol installedLuca Boccassi
2023-02-01Don't loop forever in load_certs() with buggy firmwareRenaud Métrich
2023-01-27pe: Add IS_PAGE_ALIGNED macroNicholas Bishop
2023-01-27pe: Align section size up to page size for mem attrsNicholas Bishop
2023-01-27CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc wrapperLong Qin
2023-01-27Enable the NX compatibility flag by default.Peter Jones
2022-12-07Make sbat_var.S parse right with buggy gcc/binutilsPeter Jones
2022-11-16Update version to 15.715.7Peter Jones
2022-11-16Bump grub's sbat requirement to grub,3Peter Jones
2022-11-16Update shim's .sbat to sbat,3Peter Jones
2022-11-16More coverity modelingPeter Jones
2022-11-15CryptoPkg/BaseCryptLib: fix NULL dereferenceJian J Wang
2022-11-14mok: remove MokListTrusted from PCR 7Arthur Gautier
2022-11-14make-archive: Build reproducible tarballJulian Andres Klode
2022-11-14pe: Fix image section entry-point validationIlya Okomin
2022-11-14Add -malign-double to IA32 compiler flagsNicholas Bishop
2022-11-08load_cert_file: Use EFI RT memory functionEric Snowberg
2022-11-08load_cert_file: Fix stack issueEric Snowberg
2022-10-04shim: Flush the memory region from i-cache before executiondann frazier
2022-09-01Discard load-options that start with a NULRobbie Harwood
2022-08-16Enable TDX measurement to RTMR registerLu Ken
2022-08-04Add a link to the test plan in the readme.Peter Jones
2022-08-03Reference MokListRT instead of MokListEric Snowberg
2022-08-03Make SBAT variable payload introspectableChris Coulson
2022-06-01bump version to shim-15.615.6Peter Jones
2022-06-01sbat: add the parsed SBAT variable entries to the debug logPeter Jones
2022-05-31shim-15.6~rc215.6-rc2Peter Jones
2022-05-24Also avoid CVE-2022-28737 in verify_image()Peter Jones
2022-05-24Update SBAT generation requirements for 05/24/22Jan Setje-Eilers
2022-05-24Update advertised sbat generation number for shimJan Setje-Eilers
2022-05-24pe: Perform image verification earlier when loading grubChris Coulson
2022-05-24pe: Fix a buffer overflow when SizeOfRawData > VirtualSizeChris Coulson
2022-05-24SBAT Policy latest should be a one-shotJan Setje-Eilers
2022-05-24shim-15.6~rc1Peter Jones
2022-05-23sbat: Make nth_sbat_field() honor the size limitPeter Jones
2022-05-23mok import: handle OOM casePeter Jones
2022-05-23load_cert_file(): don't defererence NULLPeter Jones
2022-05-23Give the Coverity scanner some more GCC blinders...Peter Jones
2022-05-23Fix preserve_sbat_uefi_variable() logicJan Setje-Eilers
2022-05-18mok.c: fix a trivial dead assignmentPeter Jones
2022-05-18load_certs: trust dir->Read() slightly less.Peter Jones
2022-05-18sbat policy: make our policy change actions symbolicPeter Jones
2022-05-18Always initialize data/datasize before calling read_image()Peter Jones