Commits

Branch selector

 main

User selector

All users

Datepicker

All time

Commit History

Commits on Apr 8, 2024

• cmac.c: optimize make_kn and move zero_iv to const segment.

  Show description for 7aee873
  ffontaine

  committed
  7aee873

  Copy full SHA for 7aee873

Commits on Mar 19, 2024

• Validate that a supplied vendor cert is not in PEM format

  Show description for 126a07e
  

  Steve McIntyre

  authored and

  steve-mcintyre

  committed
  126a07e

  Copy full SHA for 126a07e

Commits on Jan 22, 2024

• Bump version to 15.8

  Show description for 5914984
  vathpela

  committed
  5914984

  Copy full SHA for 5914984

• gitmodules: use shim-15.8 for gnu-efi branch

  Show description for 1770a03
  vathpela

  committed
  1770a03

  Copy full SHA for 1770a03

• Try to load revocations.efi even if directory read fails

  Show description for 993a345
  

  jsetje

  authored and

  vathpela

  committed
  993a345

  Copy full SHA for 993a345

• netboot read_image() should not hardcode DEFAULT_LOADER

  Show description for a23e2f0
  

  jsetje

  authored and

  vathpela

  committed
  a23e2f0

  Copy full SHA for a23e2f0

• Build time selectable automatic SBATLevel revocations

  Show description for 6f395c2
  

  jsetje

  authored and

  vathpela

  committed
  6f395c2

  Copy full SHA for 6f395c2

• Rename "previous" revocations to "automatic"

  Show description for 30a4f37
  

  jsetje

  authored and

  vathpela

  committed
  30a4f37

  Copy full SHA for 30a4f37

• Suppress "Failed to open <..>\revocations.efi" when file does not exist

  Show description for c46c975
  

  jsetje

  authored and

  vathpela

  committed
  c46c975

  Copy full SHA for c46c975

• pe-relocate: Avoid __builtin_add_overflow() on GCC < 5

  Show description for 13abd9f
  vathpela

  committed
  13abd9f

  Copy full SHA for 13abd9f

• post-process-pe: Don't set the NX_COMPAT flag by default after all.

  Show description for be8ff7c
  vathpela

  committed
  be8ff7c

  Copy full SHA for be8ff7c

• Fix some minor ia32 build issues.

  Show description for 49c6d95
  vathpela

  committed
  49c6d95

  Copy full SHA for 49c6d95

Commits on Jan 17, 2024

• Updated Revocations for January 2024 CVEs

  Show description for 57c0eed
  jsetje

  committed
  57c0eed

  Copy full SHA for 57c0eed

Commits on Dec 5, 2023

• Print errors when setting/clearing memory attrs

  Show description for 6f0c8d2
  vathpela

  committed
  6f0c8d2

  Copy full SHA for 6f0c8d2

• CVE-2023-40547 - avoid incorrectly trusting HTTP headers

  Show description for 0226b56
  vathpela

  committed
  0226b56

  Copy full SHA for 0226b56

• sbat revocations: check the full section name

  Show description for e801b0d
  vathpela

  committed
  e801b0d

  Copy full SHA for e801b0d

• Print message when refusing to apply SbatLevel

  Show description for 577cedd
  

  jsetje

  authored and

  vathpela

  committed
  577cedd

  Copy full SHA for 577cedd

• shim should not self revoke

  Show description for a967c0e
  

  jsetje

  authored and

  vathpela

  committed
  a967c0e

  Copy full SHA for a967c0e

• BS Variables for bootmgr revocations

  Show description for 7dfb687
  

  jsetje

  authored and

  vathpela

  committed
  7dfb687

  Copy full SHA for 7dfb687

• Always clear SbatLevel when Secure Boot is disabled

  Show description for b078ef2
  

  jsetje

  authored and

  vathpela

  committed
  b078ef2

  Copy full SHA for b078ef2

• Allow SbatLevel data from external binary

  Show description for ea0f9df
  

  jsetje

  authored and

  vathpela

  committed
  ea0f9df

  Copy full SHA for ea0f9df

• Further mitigations against CVE-2023-40546 as a class

  Show description for dae82f6
  vathpela

  committed
  dae82f6

  Copy full SHA for dae82f6

• CVE-2023-40548 Fix integer overflow on SBAT section size on 32-bit system

  Show description for 96dccc2
  vathpela

  committed
  96dccc2

  Copy full SHA for 96dccc2

• CVE-2023-40549 Authenticode: verify that the signature header is in bounds.

  Show description for afdc503
  vathpela

  committed
  afdc503

  Copy full SHA for afdc503

• pe-relocate: Ensure nothing else implements CVE-2023-40550

  Show description for e7f5fdf
  vathpela

  committed
  e7f5fdf

  Copy full SHA for e7f5fdf

• CVE-2023-40550 pe: Fix an out-of-bound read in verify_buffer_sbat()

  Show description for 93ce255
  vathpela

  committed
  93ce255

  Copy full SHA for 93ce255

• pe-relocate: make read_header() use checked arithmetic operations.

  Show description for e912071
  vathpela

  committed
  e912071

  Copy full SHA for e912071

• CVE-2023-40551: pe-relocate: Fix bounds check for MZ binaries

  Show description for 5a5147d
  vathpela

  committed
  5a5147d

  Copy full SHA for 5a5147d

• pe-relocate: Add a fuzzer for read_header()

  Show description for 8372147
  vathpela

  committed
  8372147

  Copy full SHA for 8372147

• Add primitives for overflow-checked arithmetic operations.

  Show description for f271826
  vathpela

  committed
  f271826

  Copy full SHA for f271826

Commits on Oct 19, 2023

• CVE-2023-40546 mok: fix LogError() invocation

  Show description for 66e6579
  

  vathpela

  authored and

  steve-mcintyre

  committed
  66e6579

  Copy full SHA for 66e6579

Commits on Aug 25, 2023

• compile_commands.json: remove stuff clang doesn't like

  Show description for 7ba7440
  vathpela

  committed
  7ba7440

  Copy full SHA for 7ba7440

• Make some of the static analysis tools a little easier to run

  Show description for 04111d4
  vathpela

  committed
  04111d4

  Copy full SHA for 04111d4

Commits on Jul 19, 2023

• mok: Avoid underflow in maximum variable size calculation

  Show description for dbbe3c8
  

  alpernebbi

  authored and

  vathpela

  committed
  dbbe3c8

  Copy full SHA for dbbe3c8

• Correctly free memory allocated in handle_image()

  Show description for 1e985a3
  

  dennis-tseng99

  authored and

  vathpela

  committed
  1e985a3

  Copy full SHA for 1e985a3

Pagination

Previous

Next