summaryrefslogtreecommitdiff
path: root/shim.c
AgeCommit message (Expand)Author
2018-04-04read_header(): fix the case where signatures have been removed.Peter Jones
2018-03-23Revert "Allow shim to handle multiple trusted certificates"Peter Jones
2018-03-19Fix i386 pointer type error.Peter Jones
2018-03-15Avoid a minor scan-build complaint.Peter Jones
2018-03-14Allow shim to handle multiple trusted certificatesMichael Brown
2018-03-14Allow memory allocated by handle_image() to be freedMichael Brown
2018-03-14Remove global entry_point variableMichael Brown
2018-03-14Do not modify original imageMichael Brown
2018-03-12console: Do not set EFI console to textmode until something is printedHans de Goede
2018-03-12console: Add console_print and console_print_at helpersHans de Goede
2018-03-12shim: Don't overwrite EFI_LOADED_IMAGE's LoadOptions when not neededTamas K Lengyel
2018-03-12Fix a minor merge error.Peter Jones
2018-03-12shim: Make our variable validation and mirroring table driven.Peter Jones
2018-03-12shim: make everything use a common perror() call.Peter Jones
2018-03-12shim: Improve the bounds checking of ImageAddress()Peter Jones
2018-03-12shim: main(): Don't save the value from mok_ignore_db()Peter Jones
2018-03-12shim: generate_hash(): make clang-analyzer not get confused.Peter Jones
2018-03-12shim: Mitigate a minor clang-analyzer complaint.Peter Jones
2018-03-12Don't use uefi_call_wrapper(), ever.Peter Jones
2018-03-12shim: Use EFI_ERROR() instead of comparing to EFI_SUCCESS everywhere.Peter Jones
2018-03-12shim: relocate_coff(): get rid of "FixupData" stuffPeter Jones
2018-03-12shim: check_db_cert_in_ram(): clear openssl errors /before/ returning.Peter Jones
2018-03-12shim: ensure generate_hash() never operates on a negative (signed) number.Peter Jones
2018-03-12Don't have tons of local guid definitions for no reason at all.Peter Jones
2018-03-12Rename generate_path() because we have 2 of it.Peter Jones
2018-03-08Fix failure to boot on systems without a TPMHans de Goede
2018-03-06shim: Ignore UEFI LoadOptions that are just NUL characters.Peter Jones
2018-03-06Install shim_lock protocol even when SecureBoot is offTamas K Lengyel
2018-03-06Add REQUIRE_TPM flag to treat TPM related errors as criticalTamas K Lengyel
2018-03-06Measure into the TPM even if SecureBoot is off in shim_lock verifyTamas K Lengyel
2018-03-06Log measurements in PCR4 for applications being verified through shim_lockTamas K Lengyel
2018-02-01Uninstall shim protocols before re-installing themMathieu Trudel-Lapierre
2017-12-19"in_protocol" is used in more than shim.o; make it not static.Peter Jones
2017-09-13try to show errors more usefully.Peter Jones
2017-09-13Add some debugging data to the last malformed binary check...Peter Jones
2017-08-31Revert lots of Cryptlib updates.Peter Jones
2017-08-31Drain the OpenSSL error stack and report crypto verification errorsPeter Jones
2017-08-31Init openssl so we can use its debug facilities.Peter Jones
2017-08-31Make msleep() be a thingPeter Jones
2017-08-11Add ENABLE_SHIM_CERT to make MokManager/fallback signing optional.Peter Jones
2017-08-03Always measure all of MokSBState, MokList, and MokListXPeter Jones
2017-08-03Measure stage 2 according to specMatthew Garrett
2017-08-01Extend PCR 7Matthew Garrett
2017-06-15update verification_method if the loaded image is signed by shim/vendor certLans Zhang
2017-06-15skip the error message when creating MokListRT if vendor cert is emptyLans Zhang
2017-04-27Fix buffer overrun / damaged options passed to second_stage.John S. Gruber
2017-04-11shim: Remove the obsolete OBJ_cleanupGary Lin
2017-04-03generate_hash(): fix the regressionLans Zhang
2017-04-03Ignore BDS when it tells us we got our own path on the command line.Peter Jones
2017-03-27Fix some i386 type casting errorsPeter Jones