Pull request efi-2022-07-rc7
Heinrich Schuchardt
xypron.glpk at gmx.de
Wed Jul 6 12:03:24 CEST 2022
Dear Tom,
The following changes since commit 0cc846dafcf6f6270c6587d6fe79011834d6e49a:
Prepare v2022.07-rc6 (2022-07-04 08:18:33 -0400)
are available in the Git repository at:
https://source.denx.de/u-boot/custodians/u-boot-efi.git
tags/efi-2022-07-rc7
for you to fetch changes up to 8fb9dbdea716ab764c7a3c544569f903cbfdd744:
test/py: efi_secboot: add a test for a forged signed image
(2022-07-05 14:37:16 +0200)
Gitlab-CI showed no issues:
https://source.denx.de/u-boot/custodians/u-boot-efi/-/pipelines/12623
----------------------------------------------------------------
Pull request efi-2022-07-rc7
UEFI:
* correct verification of signed UEFI binaries
----------------------------------------------------------------
AKASHI Takahiro (5):
lib: crypto: add mscode_parser
efi_loader: signature: export efi_hash_regions()
efi_loader: image_loader: replace EFI_PRINT with log macros
efi_loader: image_loader: add a missing digest verification for
signed PE image
test/py: efi_secboot: add a test for a forged signed image
include/crypto/mscode.h | 43 ++++++++
include/efi_loader.h | 2 +
lib/crypto/Kconfig | 9 ++
lib/crypto/Makefile | 12 +++
lib/crypto/mscode.asn1 | 28 ++++++
lib/crypto/mscode_parser.c | 135
++++++++++++++++++++++++++
lib/efi_loader/Kconfig | 1 +
lib/efi_loader/efi_image_loader.c | 114 ++++++++++++++++------
lib/efi_loader/efi_signature.c | 4 +-
test/py/tests/test_efi_secboot/conftest.py | 3 +
test/py/tests/test_efi_secboot/forge_image.sh | 5 +
test/py/tests/test_efi_secboot/test_signed.py | 35 +++++++
12 files changed, 361 insertions(+), 30 deletions(-)
create mode 100644 include/crypto/mscode.h
create mode 100644 lib/crypto/mscode.asn1
create mode 100644 lib/crypto/mscode_parser.c
create mode 100644 test/py/tests/test_efi_secboot/forge_image.sh
More information about the U-Boot
mailing list