u-boot.git/lib, branch v2022.07-rc2

efi_loader: add sha384/512 on certificate revocation

2022-05-07T21:17:26+00:00

Currently we don't support sha384/512 for the X.509 certificate
in dbx.  Moreover if we come across such a hash we skip the check
and approve the image,  although the image might needs to be rejected.

Rework the code a bit and fix it by adding an array of structs with the
supported GUIDs, len and literal used in the U-Boot crypto APIs instead
of hardcoding the GUID types.

It's worth noting here that efi_hash_regions() can now be reused from
efi_signature_lookup_digest() and add sha348/512 support there as well

Signed-off-by: Ilias Apalodimas

efi_loader: Select EVENT as well

2022-05-07T21:17:26+00:00

Fixes

WARNING: unmet direct dependencies detected for EVENT_DYNAMIC
  Depends on [n]: EVENT [=n]
  Selected by [y]:
  - EFI_LOADER [=y] && OF_LIBFDT [=y] && ...

and the succeeding build breakage.

Signed-off-by: Jan Kiszka 
Reviewed-by: Heinrich Schuchardt

lib/date: Make rtc_mktime and mktime64 Y2038-ready

2022-05-05T19:06:02+00:00

We currently overflow due to wrong types used internally in rtc_mktime,
on all platforms, and we return a too small type on 32-bit.

One consumer that directly benefits from this is mktime64. Many others
may still store the result in a wrong type.

While at it, drop the redundant cast of mon in rtc_mktime (obsoleted by
714209832db1).

Signed-off-by: Jan Kiszka

efi_loader: bootmgr: add booting from removable media

2022-05-03T19:39:22+00:00

Under the current implementation, booting from removable media using
a architecture-specific default image name, say BOOTAA64.EFI, is
supported only in distro_bootcmd script. See the commit 74522c898b35
("efi_loader: Add distro boot script for removable media").

This is, however, half-baked implementation because
1) UEFI specification requires this feature to be implemented as part
   of Boot Manager's responsibility:

  3 - Boot Manager
  3.5.1 Boot via the Simple File Protocol
  When booting via the EFI_SIMPLE_FILE_SYSTEM_PROTOCOL, the FilePath will
  start with a device path that points to the device that implements the
  EFI_SIMPLE_FILE_SYSTEM_PROTOCOL or the EFI_BLOCK_IO_PROTOCOL. The next
  part of the FilePath may point to the file name, including
  subdirectories, which contain the bootable image. If the file name is
  a null device path, the file name must be generated from the rules
  defined below.
  ...
  3.5.1.1 Removable Media Boot Behavior
  To generate a file name when none is present in the FilePath, the
  firmware must append a default file name in the form
  \EFI\BOOT\BOOT{machine type short-name}.EFI ...

2) So (1) entails the hehavior that the user's preference of boot media
   order should be determined by Boot#### and BootOrder variables.

With this patch, the semantics mentioned above is fully implemented.
For example, if you want to boot the system from USB and SCSI in this
order,
* define Boot0001 which contains only a device path to the USB device
  (without any file path/name)
* define Boot0002 which contains only a device path to the SCSI device,
and
* set BootOrder to Boot0001:Boot0002

To avoid build error for sandbox, default file name "BOOTSANDBOX.efi"
is defined even if it is out of scope of UEFI specification.

Signed-off-by: AKASHI Takahiro 
Signed-off-by: Masahisa Kojima 
On sandbox use binary name corresponding to host architecture.
Reviewed-by: Heinrich Schuchardt

efi_loader: export efi_locate_device_handle()

2022-05-03T19:39:22+00:00

This function will be used in the next commit where some behavior
of EFI boot manager will be expanded.

Signed-off-by: AKASHI Takahiro 
Reviewed-by: Ilias Apalodimas 
Reviewed-by: Heinrich Schuchardt

lib/charset: add u16_strlcat() function

2022-05-03T19:39:22+00:00

Provide u16 string version of strlcat().

Signed-off-by: Masahisa Kojima 
Reviewed-by: Heinrich Schuchardt

lib: fix selection of CONFIG_CHARSET

2022-05-03T19:39:22+00:00

lib/charset.c is not optional for
EFI_APP || EFI_LOADER || UFS || UT_UNICODE.
These must select CONFIG_CHARSET.

Fixes: 726cd9836db0 ("efi: Make unicode printf available to the app")
Signed-off-by: Heinrich Schuchardt

efi_selftest: error handling in efi_selftest_tcg2

2022-05-03T19:39:22+00:00

If memory allocation fails, write an error message.

Signed-off-by: Heinrich Schuchardt

efi_selftest: clean up unaligned unit test

2022-05-03T19:39:22+00:00

* fix typo %s/give/given/
* don't use void * in pointer arithmetic

Signed-off-by: Heinrich Schuchardt

efi_selftest: buildefi_selftest_unaligned.c

2022-05-03T19:39:22+00:00

The unit test has not been built since CPU_V7 was rename CPU_V7A.

Fixes: acf1500138bb ("arm: v7: Kconfig: Rename CPU_V7 as CPU_V7A")
Signed-off-by: Heinrich Schuchardt