u-boot.git/lib/efi_loader/efi_boottime.c, branch v2020.07-rc2

efi_loader: image_loader: support image authentication

2020-04-16T06:12:46Z

With this commit, image validation can be enforced, as UEFI specification section 32.5 describes, if CONFIG_EFI_SECURE_BOOT is enabled. Currently we support * authentication based on db and dbx, so dbx-validated image will always be rejected. * following signature types: EFI_CERT_SHA256_GUID (SHA256 digest for unsigned images) EFI_CERT_X509_GUID (x509 certificate for signed images) Timestamp-based certificate revocation is not supported here. Internally, authentication data is stored in one of certificates tables of PE image (See efi_image_parse()) and will be verified by efi_image_authenticate() before loading a given image. It seems that UEFI specification defines the verification process in a bit ambiguous way. I tried to implement it as closely to as EDK2 does. Signed-off-by: AKASHI Takahiro

efi_loader: export a couple of protocol related functions

2020-03-17T07:29:52Z

This is a preparatory patch. Those functions will be used in an implementation of UEFI firmware management protocol as part of my capsule update patch. Signed-off-by: AKASHI Takahiro

efi_loader: unnecessary assignment in efi_queue_event

2020-03-11T07:23:05Z

The assigned value NULL is never used. Signed-off-by: Heinrich Schuchardt

efi_loader: describe returning of control

2020-01-14T23:51:51Z

Provide a sober description of how control can be returned by a UEFI binary. Signed-off-by: Heinrich Schuchardt

efi_loader: Add guidcpy function

2020-01-07T17:08:20Z

Add guidcpy function to copy the source guid to the destination guid. Use this function instead of memcpy for copying to the destination guid. Signed-off-by: Sughosh Ganu Use void * instead of efi_guid_t * for arguments to allow copying unaligned GUIDs. The GUIDs of configuration tables are __packed. Signed-off-by: Heinrich Schuchardt

common: Move enable/disable_interrupts out of common.h

2019-12-02T23:25:01Z

Move these two functions into the irq_funcs.h header file. Also move interrupt_handler_t as this is used by the irq_install_handler() function. Signed-off-by: Simon Glass Reviewed-by: Tom Rini

common: Move get_ticks() function out of common.h

2019-12-02T23:23:13Z

This function belongs in time.h so move it over and add a comment. Signed-off-by: Simon Glass Reviewed-by: Tom Rini

crc32: Use the crc.h header for crc functions

2019-12-02T23:23:08Z

Drop inclusion of crc.h in common.h and use the correct header directly instead. With this we can drop the conflicting definition in fw_env.h and rely on the crc.h header, which is already included. Signed-off-by: Simon Glass Reviewed-by: Tom Rini

efi_loader: incorrect return value form DisconnectController

2019-09-20T18:09:18Z

DisconnectController() should never return EFI_NOT_FOUND. If EFI_DRIVER_BINDING_PROTOCOL.Stop() fails, return EFI_DEVICE_ERROR. If the driver handle does not expose the EFI_DRIVER_BINDING_PROTOCOL return EFI_INVALID_PARAMETER. Signed-off-by: Heinrich Schuchardt

env: Drop environment.h header file where not needed

2019-08-11T20:43:41Z

This header file is now only used by files that access internal environment features. Drop it from various places where it is not needed. Acked-by: Joe Hershberger Signed-off-by: Simon Glass