diff --git a/.edk2.metadata b/.edk2.metadata index f2c28cd..3eda5c0 100644 --- a/.edk2.metadata +++ b/.edk2.metadata @@ -1,3 +1,4 @@ -de143fc38b339d982079517b6f01bcec5246cf5e SOURCES/DBXUpdate-20230509.x64.bin -6da44cf37c27ab03f2940769c58515b07271e047 SOURCES/edk2-3e722403cd.tar.xz +a0cdc45f583976eda09dd85740264e57333b3df2 SOURCES/edk2-0f3867fa6ef0.tar.xz +02db663d1d7a27012f1b1abbf9b9b790e6bb3aa3 SOURCES/DBXUpdate-20250224.x64.bin +19a95204dd787b4809886db15655082cb28718e9 SOURCES/dtc-1.7.0.tar.xz 0a9cfae889c6436333fab963250b069058eec6cf SOURCES/openssl-rhel-0205b589887203b065154ddc8e8107c4ac8625a1.tar.xz diff --git a/.gitignore b/.gitignore index 59a36ae..d96a465 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,4 @@ -SOURCES/DBXUpdate-20230509.x64.bin -SOURCES/edk2-3e722403cd.tar.xz +SOURCES/edk2-0f3867fa6ef0.tar.xz +SOURCES/DBXUpdate-20250224.x64.bin +SOURCES/dtc-1.7.0.tar.xz SOURCES/openssl-rhel-0205b589887203b065154ddc8e8107c4ac8625a1.tar.xz diff --git a/SOURCES/0003-Remove-paths-leading-to-submodules.patch b/SOURCES/0003-Remove-paths-leading-to-submodules.patch index d22a3b7..31c4f9e 100644 --- a/SOURCES/0003-Remove-paths-leading-to-submodules.patch +++ b/SOURCES/0003-Remove-paths-leading-to-submodules.patch @@ -1,4 +1,4 @@ -From de9f92d118c1374243d9d3f006088a29ec7dcf8d Mon Sep 17 00:00:00 2001 +From 7c992488db69cd0f5f4e26eb7819907f3bb3b5b4 Mon Sep 17 00:00:00 2001 From: Miroslav Rezanina Date: Thu, 24 Mar 2022 03:23:02 -0400 Subject: [PATCH] Remove paths leading to submodules @@ -27,7 +27,7 @@ index 5275f657ef..39d7199753 100644 EfiRom \ GenFfs \ diff --git a/MdeModulePkg/MdeModulePkg.dec b/MdeModulePkg/MdeModulePkg.dec -index f7339f0aec..badb93238f 100644 +index b9bc7041f2..168f224d4b 100644 --- a/MdeModulePkg/MdeModulePkg.dec +++ b/MdeModulePkg/MdeModulePkg.dec @@ -26,9 +26,6 @@ @@ -41,7 +41,7 @@ index f7339f0aec..badb93238f 100644 ## @libraryclass Defines a set of methods to reset whole system. ResetSystemLib|Include/Library/ResetSystemLib.h diff --git a/MdePkg/MdePkg.dec b/MdePkg/MdePkg.dec -index bf94549cbf..605b0f1be8 100644 +index 624f626360..46ce26916b 100644 --- a/MdePkg/MdePkg.dec +++ b/MdePkg/MdePkg.dec @@ -29,7 +29,6 @@ diff --git a/SOURCES/0004-MdeModulePkg-TerminalDxe-set-xterm-resolution-on-mod.patch b/SOURCES/0004-MdeModulePkg-TerminalDxe-set-xterm-resolution-on-mod.patch index 0a57269..3fbb2b4 100644 --- a/SOURCES/0004-MdeModulePkg-TerminalDxe-set-xterm-resolution-on-mod.patch +++ b/SOURCES/0004-MdeModulePkg-TerminalDxe-set-xterm-resolution-on-mod.patch @@ -1,4 +1,4 @@ -From 5c48211bdce4b30c86e92636e852e9da4ede4c1e Mon Sep 17 00:00:00 2001 +From 36fd1664301ede2fb27811f03db77333170bcf05 Mon Sep 17 00:00:00 2001 From: Laszlo Ersek Date: Tue, 25 Feb 2014 22:40:01 +0100 Subject: [PATCH] MdeModulePkg: TerminalDxe: set xterm resolution on mode @@ -99,10 +99,10 @@ Signed-off-by: Laszlo Ersek 3 files changed, 36 insertions(+) diff --git a/MdeModulePkg/MdeModulePkg.dec b/MdeModulePkg/MdeModulePkg.dec -index badb93238f..3a67acc090 100644 +index 168f224d4b..5b6287341f 100644 --- a/MdeModulePkg/MdeModulePkg.dec +++ b/MdeModulePkg/MdeModulePkg.dec -@@ -2222,6 +2222,10 @@ +@@ -2275,6 +2275,10 @@ # @Prompt The value is use for Usb Network rate limiting supported. gEfiMdeModulePkgTokenSpaceGuid.PcdUsbNetworkRateLimitingFactor|100|UINT32|0x10000028 diff --git a/SOURCES/0005-OvmfPkg-take-PcdResizeXterm-from-the-QEMU-command-li.patch b/SOURCES/0005-OvmfPkg-take-PcdResizeXterm-from-the-QEMU-command-li.patch index 16da78e..17dbb63 100644 --- a/SOURCES/0005-OvmfPkg-take-PcdResizeXterm-from-the-QEMU-command-li.patch +++ b/SOURCES/0005-OvmfPkg-take-PcdResizeXterm-from-the-QEMU-command-li.patch @@ -1,4 +1,4 @@ -From 0976965c3dd6ac841f59dc09220a6637060ba901 Mon Sep 17 00:00:00 2001 +From 384f25e733e073e3641c7e1889cd423f9f038298 Mon Sep 17 00:00:00 2001 From: Laszlo Ersek Date: Wed, 14 Oct 2015 15:59:06 +0200 Subject: [PATCH] OvmfPkg: take PcdResizeXterm from the QEMU command line (RH @@ -83,7 +83,7 @@ Signed-off-by: Laszlo Ersek 9 files changed, 21 insertions(+), 1 deletion(-) diff --git a/OvmfPkg/AmdSev/AmdSevX64.dsc b/OvmfPkg/AmdSev/AmdSevX64.dsc -index 8eb6f4f24f..627fded641 100644 +index 40553c0019..b51eba71fc 100644 --- a/OvmfPkg/AmdSev/AmdSevX64.dsc +++ b/OvmfPkg/AmdSev/AmdSevX64.dsc @@ -484,6 +484,7 @@ @@ -95,7 +95,7 @@ index 8eb6f4f24f..627fded641 100644 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageFtwWorkingBase64|0 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageFtwSpareBase64|0 diff --git a/OvmfPkg/CloudHv/CloudHvX64.dsc b/OvmfPkg/CloudHv/CloudHvX64.dsc -index 4996885301..51a49c09ad 100644 +index 38137d8c13..542ca013e2 100644 --- a/OvmfPkg/CloudHv/CloudHvX64.dsc +++ b/OvmfPkg/CloudHv/CloudHvX64.dsc @@ -581,6 +581,7 @@ @@ -107,7 +107,7 @@ index 4996885301..51a49c09ad 100644 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64|0 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageFtwWorkingBase64|0 diff --git a/OvmfPkg/IntelTdx/IntelTdxX64.dsc b/OvmfPkg/IntelTdx/IntelTdxX64.dsc -index 0931ce061a..9f49b60ff0 100644 +index fc1332598e..4b7e1596fc 100644 --- a/OvmfPkg/IntelTdx/IntelTdxX64.dsc +++ b/OvmfPkg/IntelTdx/IntelTdxX64.dsc @@ -477,6 +477,7 @@ @@ -119,7 +119,7 @@ index 0931ce061a..9f49b60ff0 100644 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageFtwWorkingBase64|0 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageFtwSpareBase64|0 diff --git a/OvmfPkg/Microvm/MicrovmX64.dsc b/OvmfPkg/Microvm/MicrovmX64.dsc -index 69de4dd3f1..fb73f2e089 100644 +index bc9be1c5c2..d76fa4269f 100644 --- a/OvmfPkg/Microvm/MicrovmX64.dsc +++ b/OvmfPkg/Microvm/MicrovmX64.dsc @@ -590,7 +590,7 @@ @@ -132,10 +132,10 @@ index 69de4dd3f1..fb73f2e089 100644 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageFtwWorkingBase64|0 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageFtwSpareBase64|0 diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc -index 2ca005d768..dddef5ed0e 100644 +index 7ab6af3a69..c56d24a676 100644 --- a/OvmfPkg/OvmfPkgIa32.dsc +++ b/OvmfPkg/OvmfPkgIa32.dsc -@@ -599,6 +599,7 @@ +@@ -600,6 +600,7 @@ # ($(SMM_REQUIRE) == FALSE) gEfiMdeModulePkgTokenSpaceGuid.PcdEmuVariableNvStoreReserved|0 @@ -144,7 +144,7 @@ index 2ca005d768..dddef5ed0e 100644 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64|0 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageFtwWorkingBase64|0 diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc -index a39070a626..933abb258f 100644 +index e7fff78df9..b560fb7718 100644 --- a/OvmfPkg/OvmfPkgIa32X64.dsc +++ b/OvmfPkg/OvmfPkgIa32X64.dsc @@ -611,6 +611,7 @@ @@ -156,7 +156,7 @@ index a39070a626..933abb258f 100644 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64|0 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageFtwWorkingBase64|0 diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc -index 1b90aa8f57..04157ab14b 100644 +index 556984bdaa..c46a8e05d6 100644 --- a/OvmfPkg/OvmfPkgX64.dsc +++ b/OvmfPkg/OvmfPkgX64.dsc @@ -629,6 +629,7 @@ @@ -168,12 +168,12 @@ index 1b90aa8f57..04157ab14b 100644 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64|0 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageFtwWorkingBase64|0 diff --git a/OvmfPkg/PlatformPei/Platform.c b/OvmfPkg/PlatformPei/Platform.c -index df35726ff6..6c786bfc1e 100644 +index dc81ce9e2b..05b924f99f 100644 --- a/OvmfPkg/PlatformPei/Platform.c +++ b/OvmfPkg/PlatformPei/Platform.c -@@ -41,6 +41,18 @@ - +@@ -43,6 +43,18 @@ #include "Platform.h" + #include "PlatformId.h" +#define UPDATE_BOOLEAN_PCD_FROM_FW_CFG(TokenName) \ + do { \ @@ -190,7 +190,7 @@ index df35726ff6..6c786bfc1e 100644 EFI_PEI_PPI_DESCRIPTOR mPpiBootMode[] = { { EFI_PEI_PPI_DESCRIPTOR_PPI | EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST, -@@ -355,6 +367,7 @@ InitializePlatform ( +@@ -361,6 +373,7 @@ InitializePlatform ( MemTypeInfoInitialization (PlatformInfoHob); MemMapInitialization (PlatformInfoHob); NoexecDxeInitialization (PlatformInfoHob); @@ -199,10 +199,10 @@ index df35726ff6..6c786bfc1e 100644 InstallClearCacheCallback (); diff --git a/OvmfPkg/PlatformPei/PlatformPei.inf b/OvmfPkg/PlatformPei/PlatformPei.inf -index e036018eab..a2f59e8fc8 100644 +index 0bb1a46291..9185c2398c 100644 --- a/OvmfPkg/PlatformPei/PlatformPei.inf +++ b/OvmfPkg/PlatformPei/PlatformPei.inf -@@ -103,6 +103,7 @@ +@@ -106,6 +106,7 @@ gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageFtwSpareSize gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdEmuVariableNvStoreReserved diff --git a/SOURCES/0006-ArmVirtPkg-take-PcdResizeXterm-from-the-QEMU-command.patch b/SOURCES/0006-ArmVirtPkg-take-PcdResizeXterm-from-the-QEMU-command.patch index 47be70d..605aba8 100644 --- a/SOURCES/0006-ArmVirtPkg-take-PcdResizeXterm-from-the-QEMU-command.patch +++ b/SOURCES/0006-ArmVirtPkg-take-PcdResizeXterm-from-the-QEMU-command.patch @@ -1,4 +1,4 @@ -From 4c45a397402f58a67b1d4ea1348bb79f3716c7a5 Mon Sep 17 00:00:00 2001 +From e7d683517880eb66faf1c54d0afe396f87a62a60 Mon Sep 17 00:00:00 2001 From: Laszlo Ersek Date: Sun, 26 Jul 2015 08:02:50 +0000 Subject: [PATCH] ArmVirtPkg: take PcdResizeXterm from the QEMU command line @@ -96,10 +96,10 @@ Signed-off-by: Laszlo Ersek create mode 100644 ArmVirtPkg/Library/TerminalPcdProducerLib/TerminalPcdProducerLib.inf diff --git a/ArmVirtPkg/ArmVirtQemu.dsc b/ArmVirtPkg/ArmVirtQemu.dsc -index 64aa4e96e5..c37c4ba61e 100644 +index 1ba63d2e16..fa98980acf 100644 --- a/ArmVirtPkg/ArmVirtQemu.dsc +++ b/ArmVirtPkg/ArmVirtQemu.dsc -@@ -311,6 +311,8 @@ +@@ -313,6 +313,8 @@ gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress|0x0 !endif @@ -108,7 +108,7 @@ index 64aa4e96e5..c37c4ba61e 100644 [PcdsDynamicHii] gUefiOvmfPkgTokenSpaceGuid.PcdForceNoAcpi|L"ForceNoAcpi"|gOvmfVariableGuid|0x0|FALSE|NV,BS -@@ -416,7 +418,10 @@ +@@ -422,7 +424,10 @@ MdeModulePkg/Universal/Console/ConPlatformDxe/ConPlatformDxe.inf MdeModulePkg/Universal/Console/ConSplitterDxe/ConSplitterDxe.inf MdeModulePkg/Universal/Console/GraphicsConsoleDxe/GraphicsConsoleDxe.inf diff --git a/SOURCES/0007-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch b/SOURCES/0007-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch index c8fc3b2..ce2d90a 100644 --- a/SOURCES/0007-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch +++ b/SOURCES/0007-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch @@ -1,4 +1,4 @@ -From 3dbb4913b3e1c0413dd3016681aca3a3d12edd0d Mon Sep 17 00:00:00 2001 +From 7d24bd2c35d2fc0109c33854b79683e60ac75836 Mon Sep 17 00:00:00 2001 From: Paolo Bonzini Date: Tue, 21 Nov 2017 00:57:45 +0100 Subject: [PATCH] OvmfPkg: enable DEBUG_VERBOSE (RHEL only) @@ -65,7 +65,7 @@ Signed-off-by: Paolo Bonzini 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/OvmfPkg/AmdSev/AmdSevX64.dsc b/OvmfPkg/AmdSev/AmdSevX64.dsc -index 627fded641..cef43b34b7 100644 +index b51eba71fc..1128968857 100644 --- a/OvmfPkg/AmdSev/AmdSevX64.dsc +++ b/OvmfPkg/AmdSev/AmdSevX64.dsc @@ -429,7 +429,7 @@ @@ -78,10 +78,10 @@ index 627fded641..cef43b34b7 100644 !if $(SOURCE_DEBUG_ENABLE) == TRUE gEfiMdePkgTokenSpaceGuid.PcdDebugPropertyMask|0x17 diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc -index dddef5ed0e..270bd612e5 100644 +index c56d24a676..9ff998dda5 100644 --- a/OvmfPkg/OvmfPkgIa32.dsc +++ b/OvmfPkg/OvmfPkgIa32.dsc -@@ -535,7 +535,7 @@ +@@ -536,7 +536,7 @@ # DEBUG_VERBOSE 0x00400000 // Detailed debug messages that may # // significantly impact boot performance # DEBUG_ERROR 0x80000000 // Error @@ -91,7 +91,7 @@ index dddef5ed0e..270bd612e5 100644 !if $(SOURCE_DEBUG_ENABLE) == TRUE gEfiMdePkgTokenSpaceGuid.PcdDebugPropertyMask|0x17 diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc -index 933abb258f..269a4b2b21 100644 +index b560fb7718..162f0cf385 100644 --- a/OvmfPkg/OvmfPkgIa32X64.dsc +++ b/OvmfPkg/OvmfPkgIa32X64.dsc @@ -542,7 +542,7 @@ @@ -104,7 +104,7 @@ index 933abb258f..269a4b2b21 100644 !if $(SOURCE_DEBUG_ENABLE) == TRUE gEfiMdePkgTokenSpaceGuid.PcdDebugPropertyMask|0x17 diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc -index 04157ab14b..9614cc1c56 100644 +index c46a8e05d6..d97ccb44cc 100644 --- a/OvmfPkg/OvmfPkgX64.dsc +++ b/OvmfPkg/OvmfPkgX64.dsc @@ -561,7 +561,7 @@ diff --git a/SOURCES/0008-OvmfPkg-silence-DEBUG_VERBOSE-0x00400000-in-QemuVide.patch b/SOURCES/0008-OvmfPkg-silence-DEBUG_VERBOSE-0x00400000-in-QemuVide.patch index d433969..d4733fe 100644 --- a/SOURCES/0008-OvmfPkg-silence-DEBUG_VERBOSE-0x00400000-in-QemuVide.patch +++ b/SOURCES/0008-OvmfPkg-silence-DEBUG_VERBOSE-0x00400000-in-QemuVide.patch @@ -1,4 +1,4 @@ -From ac8f2a85bad100eaf42d3537b6fcb37fa3db5fd9 Mon Sep 17 00:00:00 2001 +From f473e531dd0f912326aa0c559bcc8a17556cfbb6 Mon Sep 17 00:00:00 2001 From: Paolo Bonzini Date: Tue, 21 Nov 2017 00:57:46 +0100 Subject: [PATCH] OvmfPkg: silence DEBUG_VERBOSE (0x00400000) in @@ -86,10 +86,10 @@ Signed-off-by: Paolo Bonzini 4 files changed, 32 insertions(+), 8 deletions(-) diff --git a/OvmfPkg/AmdSev/AmdSevX64.dsc b/OvmfPkg/AmdSev/AmdSevX64.dsc -index cef43b34b7..f53380aca2 100644 +index 1128968857..0b29aa1157 100644 --- a/OvmfPkg/AmdSev/AmdSevX64.dsc +++ b/OvmfPkg/AmdSev/AmdSevX64.dsc -@@ -691,8 +691,14 @@ +@@ -690,8 +690,14 @@ MdeModulePkg/Universal/SetupBrowserDxe/SetupBrowserDxe.inf MdeModulePkg/Universal/DisplayEngineDxe/DisplayEngineDxe.inf @@ -107,10 +107,10 @@ index cef43b34b7..f53380aca2 100644 # diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc -index 270bd612e5..d942c7354a 100644 +index 9ff998dda5..92f5fd0850 100644 --- a/OvmfPkg/OvmfPkgIa32.dsc +++ b/OvmfPkg/OvmfPkgIa32.dsc -@@ -828,8 +828,14 @@ +@@ -830,8 +830,14 @@ MdeModulePkg/Universal/SetupBrowserDxe/SetupBrowserDxe.inf MdeModulePkg/Universal/DisplayEngineDxe/DisplayEngineDxe.inf @@ -128,10 +128,10 @@ index 270bd612e5..d942c7354a 100644 OvmfPkg/VirtHstiDxe/VirtHstiDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc -index 269a4b2b21..d915b847cb 100644 +index 162f0cf385..feac55d1dd 100644 --- a/OvmfPkg/OvmfPkgIa32X64.dsc +++ b/OvmfPkg/OvmfPkgIa32X64.dsc -@@ -842,8 +842,14 @@ +@@ -843,8 +843,14 @@ MdeModulePkg/Universal/SetupBrowserDxe/SetupBrowserDxe.inf MdeModulePkg/Universal/DisplayEngineDxe/DisplayEngineDxe.inf @@ -149,10 +149,10 @@ index 269a4b2b21..d915b847cb 100644 OvmfPkg/VirtHstiDxe/VirtHstiDxe.inf diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc -index 9614cc1c56..12ee5510bd 100644 +index d97ccb44cc..1c925296a2 100644 --- a/OvmfPkg/OvmfPkgX64.dsc +++ b/OvmfPkg/OvmfPkgX64.dsc -@@ -910,8 +910,14 @@ +@@ -908,8 +908,14 @@ MdeModulePkg/Universal/SetupBrowserDxe/SetupBrowserDxe.inf MdeModulePkg/Universal/DisplayEngineDxe/DisplayEngineDxe.inf diff --git a/SOURCES/0009-ArmVirtPkg-silence-DEBUG_VERBOSE-0x00400000-in-QemuR.patch b/SOURCES/0009-ArmVirtPkg-silence-DEBUG_VERBOSE-0x00400000-in-QemuR.patch index 4de197b..1277c03 100644 --- a/SOURCES/0009-ArmVirtPkg-silence-DEBUG_VERBOSE-0x00400000-in-QemuR.patch +++ b/SOURCES/0009-ArmVirtPkg-silence-DEBUG_VERBOSE-0x00400000-in-QemuR.patch @@ -1,4 +1,4 @@ -From 511531fe074c28dd8139f722b25979df1995e492 Mon Sep 17 00:00:00 2001 +From 1e26f3bcdfab0f2f61675eb351fecc4624e074fd Mon Sep 17 00:00:00 2001 From: Laszlo Ersek Date: Wed, 27 Jan 2016 03:05:18 +0100 Subject: [PATCH] ArmVirtPkg: silence DEBUG_VERBOSE (0x00400000) in @@ -61,10 +61,10 @@ Signed-off-by: Laszlo Ersek 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/ArmVirtPkg/ArmVirtQemu.dsc b/ArmVirtPkg/ArmVirtQemu.dsc -index c37c4ba61e..00e656d0c9 100644 +index fa98980acf..8735d2881e 100644 --- a/ArmVirtPkg/ArmVirtQemu.dsc +++ b/ArmVirtPkg/ArmVirtQemu.dsc -@@ -546,7 +546,10 @@ +@@ -552,7 +552,10 @@ # # Video support # @@ -77,10 +77,10 @@ index c37c4ba61e..00e656d0c9 100644 OvmfPkg/PlatformDxe/Platform.inf diff --git a/ArmVirtPkg/ArmVirtQemuKernel.dsc b/ArmVirtPkg/ArmVirtQemuKernel.dsc -index 2cf96accbd..c7918c8cf3 100644 +index 9927bdae0e..c15d51dab0 100644 --- a/ArmVirtPkg/ArmVirtQemuKernel.dsc +++ b/ArmVirtPkg/ArmVirtQemuKernel.dsc -@@ -450,7 +450,10 @@ +@@ -457,7 +457,10 @@ # # Video support # diff --git a/SOURCES/0010-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch b/SOURCES/0010-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch index 08fcb0b..fa2e195 100644 --- a/SOURCES/0010-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch +++ b/SOURCES/0010-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch @@ -1,4 +1,4 @@ -From 3bf394bd43a4cf00c2b52b965b47b8194a406166 Mon Sep 17 00:00:00 2001 +From bb0c1a69e72906992dbb41145dc30217ed80a4bf Mon Sep 17 00:00:00 2001 From: Philippe Mathieu-Daude Date: Thu, 1 Aug 2019 20:43:48 +0200 Subject: [PATCH] OvmfPkg: QemuRamfbDxe: Do not report DXE failure on Aarch64 diff --git a/SOURCES/0011-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch b/SOURCES/0011-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch index d81f03a..380d848 100644 --- a/SOURCES/0011-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch +++ b/SOURCES/0011-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch @@ -1,4 +1,4 @@ -From b9ac7e96d76caa161d1689c0436551e95728ac0e Mon Sep 17 00:00:00 2001 +From b788c5310578081342d178819b2b6c48fb4007a3 Mon Sep 17 00:00:00 2001 From: Paolo Bonzini Date: Tue, 21 Nov 2017 00:57:47 +0100 Subject: [PATCH] OvmfPkg: silence EFI_D_VERBOSE (0x00400000) in NvmExpressDxe @@ -63,10 +63,10 @@ Signed-off-by: Paolo Bonzini 4 files changed, 16 insertions(+), 4 deletions(-) diff --git a/OvmfPkg/AmdSev/AmdSevX64.dsc b/OvmfPkg/AmdSev/AmdSevX64.dsc -index f53380aca2..32f47704bc 100644 +index 0b29aa1157..4160d8d752 100644 --- a/OvmfPkg/AmdSev/AmdSevX64.dsc +++ b/OvmfPkg/AmdSev/AmdSevX64.dsc -@@ -686,7 +686,10 @@ +@@ -685,7 +685,10 @@ MdeModulePkg/Bus/Pci/SataControllerDxe/SataControllerDxe.inf MdeModulePkg/Bus/Ata/AtaAtapiPassThru/AtaAtapiPassThru.inf MdeModulePkg/Bus/Ata/AtaBusDxe/AtaBusDxe.inf @@ -79,10 +79,10 @@ index f53380aca2..32f47704bc 100644 MdeModulePkg/Universal/SetupBrowserDxe/SetupBrowserDxe.inf MdeModulePkg/Universal/DisplayEngineDxe/DisplayEngineDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc -index d942c7354a..49540d54d0 100644 +index 92f5fd0850..ae4ca08e32 100644 --- a/OvmfPkg/OvmfPkgIa32.dsc +++ b/OvmfPkg/OvmfPkgIa32.dsc -@@ -823,7 +823,10 @@ +@@ -825,7 +825,10 @@ MdeModulePkg/Bus/Pci/SataControllerDxe/SataControllerDxe.inf MdeModulePkg/Bus/Ata/AtaAtapiPassThru/AtaAtapiPassThru.inf MdeModulePkg/Bus/Ata/AtaBusDxe/AtaBusDxe.inf @@ -95,10 +95,10 @@ index d942c7354a..49540d54d0 100644 MdeModulePkg/Universal/SetupBrowserDxe/SetupBrowserDxe.inf MdeModulePkg/Universal/DisplayEngineDxe/DisplayEngineDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc -index d915b847cb..1c4e0514ed 100644 +index feac55d1dd..7f88e89d0f 100644 --- a/OvmfPkg/OvmfPkgIa32X64.dsc +++ b/OvmfPkg/OvmfPkgIa32X64.dsc -@@ -837,7 +837,10 @@ +@@ -838,7 +838,10 @@ MdeModulePkg/Bus/Pci/SataControllerDxe/SataControllerDxe.inf MdeModulePkg/Bus/Ata/AtaAtapiPassThru/AtaAtapiPassThru.inf MdeModulePkg/Bus/Ata/AtaBusDxe/AtaBusDxe.inf @@ -111,10 +111,10 @@ index d915b847cb..1c4e0514ed 100644 MdeModulePkg/Universal/SetupBrowserDxe/SetupBrowserDxe.inf MdeModulePkg/Universal/DisplayEngineDxe/DisplayEngineDxe.inf diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc -index 12ee5510bd..e50e63b3f6 100644 +index 1c925296a2..50af72adb2 100644 --- a/OvmfPkg/OvmfPkgX64.dsc +++ b/OvmfPkg/OvmfPkgX64.dsc -@@ -905,7 +905,10 @@ +@@ -903,7 +903,10 @@ MdeModulePkg/Bus/Pci/SataControllerDxe/SataControllerDxe.inf MdeModulePkg/Bus/Ata/AtaAtapiPassThru/AtaAtapiPassThru.inf MdeModulePkg/Bus/Ata/AtaBusDxe/AtaBusDxe.inf diff --git a/SOURCES/0012-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch b/SOURCES/0012-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch index 8f928ba..fa7beaa 100644 --- a/SOURCES/0012-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch +++ b/SOURCES/0012-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch @@ -1,4 +1,4 @@ -From 8c67b1b96e42c39a3562c8790ae5985a240edfce Mon Sep 17 00:00:00 2001 +From b34701a562571a8d03c3e9609dea1abafc65d18b Mon Sep 17 00:00:00 2001 From: Laszlo Ersek Date: Wed, 24 Jun 2020 11:31:36 +0200 Subject: [PATCH] OvmfPkg/QemuKernelLoaderFsDxe: suppress error on no "-kernel" @@ -32,7 +32,7 @@ Signed-off-by: Miroslav Rezanina 2 files changed, 18 insertions(+) diff --git a/OvmfPkg/QemuKernelLoaderFsDxe/QemuKernelLoaderFsDxe.c b/OvmfPkg/QemuKernelLoaderFsDxe/QemuKernelLoaderFsDxe.c -index 3c12085f6c..e192809198 100644 +index cf58c97cd2..023eece6d9 100644 --- a/OvmfPkg/QemuKernelLoaderFsDxe/QemuKernelLoaderFsDxe.c +++ b/OvmfPkg/QemuKernelLoaderFsDxe/QemuKernelLoaderFsDxe.c @@ -19,6 +19,7 @@ @@ -43,7 +43,7 @@ index 3c12085f6c..e192809198 100644 #include #include #include -@@ -1081,6 +1082,22 @@ QemuKernelLoaderFsDxeEntrypoint ( +@@ -1080,6 +1081,22 @@ QemuKernelLoaderFsDxeEntrypoint ( if (KernelBlob->Data == NULL) { Status = EFI_NOT_FOUND; diff --git a/SOURCES/0013-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch b/SOURCES/0013-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch index 02d0290..64aa888 100644 --- a/SOURCES/0013-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch +++ b/SOURCES/0013-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch @@ -1,4 +1,4 @@ -From de3d6fb999bd464f08c11b879cb4587295f3c0b1 Mon Sep 17 00:00:00 2001 +From b185c171fa05b8b366dfdbe8c1ae6a057ef42fd1 Mon Sep 17 00:00:00 2001 From: Laszlo Ersek Date: Wed, 24 Jun 2020 11:40:09 +0200 Subject: [PATCH] SecurityPkg/Tcg2Dxe: suppress error on no swtpm in silent @@ -31,7 +31,7 @@ Signed-off-by: Miroslav Rezanina 2 files changed, 18 insertions(+) diff --git a/SecurityPkg/Tcg/Tcg2Dxe/Tcg2Dxe.c b/SecurityPkg/Tcg/Tcg2Dxe/Tcg2Dxe.c -index b55b6c12d2..0be885c391 100644 +index 4d0c241f4d..e228d5f39f 100644 --- a/SecurityPkg/Tcg/Tcg2Dxe/Tcg2Dxe.c +++ b/SecurityPkg/Tcg/Tcg2Dxe/Tcg2Dxe.c @@ -29,6 +29,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent @@ -42,7 +42,7 @@ index b55b6c12d2..0be885c391 100644 #include #include #include -@@ -2743,6 +2744,22 @@ DriverEntry ( +@@ -2754,6 +2755,22 @@ DriverEntry ( CompareGuid (PcdGetPtr (PcdTpmInstanceGuid), &gEfiTpmDeviceInstanceTpm12Guid)) { DEBUG ((DEBUG_INFO, "No TPM2 instance required!\n")); diff --git a/SOURCES/0014-OvmfPkg-Remove-EbcDxe-RHEL-only.patch b/SOURCES/0014-OvmfPkg-Remove-EbcDxe-RHEL-only.patch index 24bdc73..6137900 100644 --- a/SOURCES/0014-OvmfPkg-Remove-EbcDxe-RHEL-only.patch +++ b/SOURCES/0014-OvmfPkg-Remove-EbcDxe-RHEL-only.patch @@ -1,4 +1,4 @@ -From 3208551a4a7934a905ba33dde70bfea37c9a95af Mon Sep 17 00:00:00 2001 +From 763877f2bd3bc2e6bb00095c47915a3fb1f8b406 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:28:49 +0200 Subject: [PATCH] OvmfPkg: Remove EbcDxe (RHEL only) @@ -29,7 +29,7 @@ Signed-off-by: Miroslav Rezanina 8 files changed, 8 deletions(-) diff --git a/OvmfPkg/AmdSev/AmdSevX64.dsc b/OvmfPkg/AmdSev/AmdSevX64.dsc -index 32f47704bc..6b6e108d11 100644 +index 4160d8d752..0d21eb795e 100644 --- a/OvmfPkg/AmdSev/AmdSevX64.dsc +++ b/OvmfPkg/AmdSev/AmdSevX64.dsc @@ -611,7 +611,6 @@ @@ -41,7 +41,7 @@ index 32f47704bc..6b6e108d11 100644 UefiCpuPkg/CpuDxe/CpuDxe.inf OvmfPkg/LocalApicTimerDxe/LocalApicTimerDxe.inf diff --git a/OvmfPkg/AmdSev/AmdSevX64.fdf b/OvmfPkg/AmdSev/AmdSevX64.fdf -index 595945181c..c176043482 100644 +index 42178701fc..3dea9b36f8 100644 --- a/OvmfPkg/AmdSev/AmdSevX64.fdf +++ b/OvmfPkg/AmdSev/AmdSevX64.fdf @@ -212,7 +212,6 @@ INF MdeModulePkg/Universal/PCD/Dxe/Pcd.inf @@ -53,10 +53,10 @@ index 595945181c..c176043482 100644 INF UefiCpuPkg/CpuDxe/CpuDxe.inf INF OvmfPkg/LocalApicTimerDxe/LocalApicTimerDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc -index 49540d54d0..d368aa11fe 100644 +index ae4ca08e32..cbe9a503e8 100644 --- a/OvmfPkg/OvmfPkgIa32.dsc +++ b/OvmfPkg/OvmfPkgIa32.dsc -@@ -746,7 +746,6 @@ +@@ -749,7 +749,6 @@ !include OvmfPkg/Include/Dsc/OvmfTpmSecurityStub.dsc.inc } @@ -65,7 +65,7 @@ index 49540d54d0..d368aa11fe 100644 UefiCpuPkg/CpuDxe/CpuDxe.inf OvmfPkg/LocalApicTimerDxe/LocalApicTimerDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32.fdf b/OvmfPkg/OvmfPkgIa32.fdf -index 0d4abb50a8..ef933def99 100644 +index bc7bb678b4..59d15bb77d 100644 --- a/OvmfPkg/OvmfPkgIa32.fdf +++ b/OvmfPkg/OvmfPkgIa32.fdf @@ -216,7 +216,6 @@ INF MdeModulePkg/Universal/PCD/Dxe/Pcd.inf @@ -77,10 +77,10 @@ index 0d4abb50a8..ef933def99 100644 INF UefiCpuPkg/CpuDxe/CpuDxe.inf INF OvmfPkg/LocalApicTimerDxe/LocalApicTimerDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc -index 1c4e0514ed..cf09bdf785 100644 +index 7f88e89d0f..315ecf7d89 100644 --- a/OvmfPkg/OvmfPkgIa32X64.dsc +++ b/OvmfPkg/OvmfPkgIa32X64.dsc -@@ -760,7 +760,6 @@ +@@ -762,7 +762,6 @@ !include OvmfPkg/Include/Dsc/OvmfTpmSecurityStub.dsc.inc } @@ -89,7 +89,7 @@ index 1c4e0514ed..cf09bdf785 100644 UefiCpuPkg/CpuDxe/CpuDxe.inf OvmfPkg/LocalApicTimerDxe/LocalApicTimerDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32X64.fdf b/OvmfPkg/OvmfPkgIa32X64.fdf -index 23a825a012..0cd98ada5a 100644 +index 98c05e491d..048fda9f16 100644 --- a/OvmfPkg/OvmfPkgIa32X64.fdf +++ b/OvmfPkg/OvmfPkgIa32X64.fdf @@ -217,7 +217,6 @@ INF MdeModulePkg/Universal/PCD/Dxe/Pcd.inf @@ -101,10 +101,10 @@ index 23a825a012..0cd98ada5a 100644 INF UefiCpuPkg/CpuDxe/CpuDxe.inf INF OvmfPkg/LocalApicTimerDxe/LocalApicTimerDxe.inf diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc -index e50e63b3f6..098d569381 100644 +index 50af72adb2..156e52e430 100644 --- a/OvmfPkg/OvmfPkgX64.dsc +++ b/OvmfPkg/OvmfPkgX64.dsc -@@ -805,7 +805,6 @@ +@@ -804,7 +804,6 @@ !include OvmfPkg/Include/Dsc/OvmfTpmSecurityStub.dsc.inc } @@ -113,7 +113,7 @@ index e50e63b3f6..098d569381 100644 UefiCpuPkg/CpuDxe/CpuDxe.inf { diff --git a/OvmfPkg/OvmfPkgX64.fdf b/OvmfPkg/OvmfPkgX64.fdf -index 4dcd6a033c..b201505214 100644 +index 489d03b60e..ef01da45e6 100644 --- a/OvmfPkg/OvmfPkgX64.fdf +++ b/OvmfPkg/OvmfPkgX64.fdf @@ -245,7 +245,6 @@ INF MdeModulePkg/Universal/PCD/Dxe/Pcd.inf diff --git a/SOURCES/0015-OvmfPkg-Remove-VirtioGpu-device-driver-RHEL-only.patch b/SOURCES/0015-OvmfPkg-Remove-VirtioGpu-device-driver-RHEL-only.patch index c07086a..c154355 100644 --- a/SOURCES/0015-OvmfPkg-Remove-VirtioGpu-device-driver-RHEL-only.patch +++ b/SOURCES/0015-OvmfPkg-Remove-VirtioGpu-device-driver-RHEL-only.patch @@ -1,4 +1,4 @@ -From 42becc4c97abe443d06bb128a4b7d5e279842715 Mon Sep 17 00:00:00 2001 +From 6d6f5919b81d40e46ee18d1a3e54f183c220c91d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:28:59 +0200 Subject: [PATCH] OvmfPkg: Remove VirtioGpu device driver (RHEL only) @@ -29,10 +29,10 @@ Signed-off-by: Miroslav Rezanina 8 files changed, 8 deletions(-) diff --git a/OvmfPkg/AmdSev/AmdSevX64.dsc b/OvmfPkg/AmdSev/AmdSevX64.dsc -index 6b6e108d11..5461c1290d 100644 +index 0d21eb795e..89c9b610d1 100644 --- a/OvmfPkg/AmdSev/AmdSevX64.dsc +++ b/OvmfPkg/AmdSev/AmdSevX64.dsc -@@ -701,7 +701,6 @@ +@@ -700,7 +700,6 @@ gEfiMdePkgTokenSpaceGuid.PcdDebugPrintErrorLevel|0x8000004F } @@ -41,10 +41,10 @@ index 6b6e108d11..5461c1290d 100644 # # ISA Support diff --git a/OvmfPkg/AmdSev/AmdSevX64.fdf b/OvmfPkg/AmdSev/AmdSevX64.fdf -index c176043482..10538a0465 100644 +index 3dea9b36f8..899f02981f 100644 --- a/OvmfPkg/AmdSev/AmdSevX64.fdf +++ b/OvmfPkg/AmdSev/AmdSevX64.fdf -@@ -300,7 +300,6 @@ INF MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf +@@ -299,7 +299,6 @@ INF MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf INF OvmfPkg/QemuVideoDxe/QemuVideoDxe.inf INF OvmfPkg/QemuRamfbDxe/QemuRamfbDxe.inf @@ -53,10 +53,10 @@ index c176043482..10538a0465 100644 INF OvmfPkg/AmdSevDxe/AmdSevDxe.inf INF OvmfPkg/IoMmuDxe/IoMmuDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc -index d368aa11fe..40e78014c4 100644 +index cbe9a503e8..d35d04b39a 100644 --- a/OvmfPkg/OvmfPkgIa32.dsc +++ b/OvmfPkg/OvmfPkgIa32.dsc -@@ -838,7 +838,6 @@ +@@ -840,7 +840,6 @@ gEfiMdePkgTokenSpaceGuid.PcdDebugPrintErrorLevel|0x8000004F } @@ -65,10 +65,10 @@ index d368aa11fe..40e78014c4 100644 # diff --git a/OvmfPkg/OvmfPkgIa32.fdf b/OvmfPkg/OvmfPkgIa32.fdf -index ef933def99..68d59968ec 100644 +index 59d15bb77d..7fd9203427 100644 --- a/OvmfPkg/OvmfPkgIa32.fdf +++ b/OvmfPkg/OvmfPkgIa32.fdf -@@ -317,7 +317,6 @@ INF MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf +@@ -316,7 +316,6 @@ INF MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf INF OvmfPkg/QemuVideoDxe/QemuVideoDxe.inf INF OvmfPkg/QemuRamfbDxe/QemuRamfbDxe.inf @@ -77,10 +77,10 @@ index ef933def99..68d59968ec 100644 INF OvmfPkg/IoMmuDxe/IoMmuDxe.inf INF OvmfPkg/VirtHstiDxe/VirtHstiDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc -index cf09bdf785..6ade9aa0ef 100644 +index 315ecf7d89..5710183135 100644 --- a/OvmfPkg/OvmfPkgIa32X64.dsc +++ b/OvmfPkg/OvmfPkgIa32X64.dsc -@@ -852,7 +852,6 @@ +@@ -853,7 +853,6 @@ gEfiMdePkgTokenSpaceGuid.PcdDebugPrintErrorLevel|0x8000004F } @@ -89,10 +89,10 @@ index cf09bdf785..6ade9aa0ef 100644 # diff --git a/OvmfPkg/OvmfPkgIa32X64.fdf b/OvmfPkg/OvmfPkgIa32X64.fdf -index 0cd98ada5a..8891d96422 100644 +index 048fda9f16..a15cd72f13 100644 --- a/OvmfPkg/OvmfPkgIa32X64.fdf +++ b/OvmfPkg/OvmfPkgIa32X64.fdf -@@ -323,7 +323,6 @@ INF MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf +@@ -322,7 +322,6 @@ INF MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf INF OvmfPkg/QemuVideoDxe/QemuVideoDxe.inf INF OvmfPkg/QemuRamfbDxe/QemuRamfbDxe.inf @@ -101,10 +101,10 @@ index 0cd98ada5a..8891d96422 100644 INF OvmfPkg/AmdSevDxe/AmdSevDxe.inf INF OvmfPkg/IoMmuDxe/IoMmuDxe.inf diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc -index 098d569381..8563835ae5 100644 +index 156e52e430..11a05298b6 100644 --- a/OvmfPkg/OvmfPkgX64.dsc +++ b/OvmfPkg/OvmfPkgX64.dsc -@@ -920,7 +920,6 @@ +@@ -918,7 +918,6 @@ gEfiMdePkgTokenSpaceGuid.PcdDebugPrintErrorLevel|0x8000004F } @@ -113,10 +113,10 @@ index 098d569381..8563835ae5 100644 # diff --git a/OvmfPkg/OvmfPkgX64.fdf b/OvmfPkg/OvmfPkgX64.fdf -index b201505214..06ac4423da 100644 +index ef01da45e6..e8562442d3 100644 --- a/OvmfPkg/OvmfPkgX64.fdf +++ b/OvmfPkg/OvmfPkgX64.fdf -@@ -356,7 +356,6 @@ INF MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf +@@ -355,7 +355,6 @@ INF MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf INF OvmfPkg/QemuVideoDxe/QemuVideoDxe.inf INF OvmfPkg/QemuRamfbDxe/QemuRamfbDxe.inf diff --git a/SOURCES/0016-OvmfPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL-on.patch b/SOURCES/0016-OvmfPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL-on.patch index 9aec177..73f9104 100644 --- a/SOURCES/0016-OvmfPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL-on.patch +++ b/SOURCES/0016-OvmfPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL-on.patch @@ -1,4 +1,4 @@ -From 67e5739ca9ba906914aade6b5ad84c420ad9af29 Mon Sep 17 00:00:00 2001 +From ede6f8b9c357dc1c711a49201459538b265c65dc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:29:13 +0200 Subject: [PATCH] OvmfPkg: Remove VirtioFsDxe filesystem driver (RHEL only) @@ -27,10 +27,10 @@ Signed-off-by: Miroslav Rezanina 6 files changed, 6 deletions(-) diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc -index 40e78014c4..afd2a3c5c0 100644 +index d35d04b39a..5a1c7058c8 100644 --- a/OvmfPkg/OvmfPkgIa32.dsc +++ b/OvmfPkg/OvmfPkgIa32.dsc -@@ -816,7 +816,6 @@ +@@ -818,7 +818,6 @@ MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf FatPkg/EnhancedFatDxe/Fat.inf MdeModulePkg/Universal/Disk/UdfDxe/UdfDxe.inf @@ -39,10 +39,10 @@ index 40e78014c4..afd2a3c5c0 100644 MdeModulePkg/Bus/Scsi/ScsiDiskDxe/ScsiDiskDxe.inf MdeModulePkg/Bus/Pci/SataControllerDxe/SataControllerDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32.fdf b/OvmfPkg/OvmfPkgIa32.fdf -index 68d59968ec..c392b96470 100644 +index 7fd9203427..7e09e3aac9 100644 --- a/OvmfPkg/OvmfPkgIa32.fdf +++ b/OvmfPkg/OvmfPkgIa32.fdf -@@ -290,7 +290,6 @@ INF MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResour +@@ -289,7 +289,6 @@ INF MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResour INF FatPkg/EnhancedFatDxe/Fat.inf INF MdeModulePkg/Universal/Disk/UdfDxe/UdfDxe.inf @@ -51,10 +51,10 @@ index 68d59968ec..c392b96470 100644 INF MdeModulePkg/Logo/LogoDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc -index 6ade9aa0ef..f5a4c57c8e 100644 +index 5710183135..4fb8b9ba39 100644 --- a/OvmfPkg/OvmfPkgIa32X64.dsc +++ b/OvmfPkg/OvmfPkgIa32X64.dsc -@@ -830,7 +830,6 @@ +@@ -831,7 +831,6 @@ MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf FatPkg/EnhancedFatDxe/Fat.inf MdeModulePkg/Universal/Disk/UdfDxe/UdfDxe.inf @@ -63,10 +63,10 @@ index 6ade9aa0ef..f5a4c57c8e 100644 MdeModulePkg/Bus/Scsi/ScsiDiskDxe/ScsiDiskDxe.inf MdeModulePkg/Bus/Pci/SataControllerDxe/SataControllerDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32X64.fdf b/OvmfPkg/OvmfPkgIa32X64.fdf -index 8891d96422..6278daeeee 100644 +index a15cd72f13..8ba0ce211d 100644 --- a/OvmfPkg/OvmfPkgIa32X64.fdf +++ b/OvmfPkg/OvmfPkgIa32X64.fdf -@@ -291,7 +291,6 @@ INF MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResour +@@ -290,7 +290,6 @@ INF MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResour INF FatPkg/EnhancedFatDxe/Fat.inf INF MdeModulePkg/Universal/Disk/UdfDxe/UdfDxe.inf @@ -75,10 +75,10 @@ index 8891d96422..6278daeeee 100644 INF MdeModulePkg/Logo/LogoDxe.inf diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc -index 8563835ae5..08b73a64c9 100644 +index 11a05298b6..21c6a5b3c0 100644 --- a/OvmfPkg/OvmfPkgX64.dsc +++ b/OvmfPkg/OvmfPkgX64.dsc -@@ -898,7 +898,6 @@ +@@ -896,7 +896,6 @@ MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf FatPkg/EnhancedFatDxe/Fat.inf MdeModulePkg/Universal/Disk/UdfDxe/UdfDxe.inf @@ -87,10 +87,10 @@ index 8563835ae5..08b73a64c9 100644 MdeModulePkg/Bus/Scsi/ScsiDiskDxe/ScsiDiskDxe.inf MdeModulePkg/Bus/Pci/SataControllerDxe/SataControllerDxe.inf diff --git a/OvmfPkg/OvmfPkgX64.fdf b/OvmfPkg/OvmfPkgX64.fdf -index 06ac4423da..fc4b6dd3a4 100644 +index e8562442d3..f3cb0ea40c 100644 --- a/OvmfPkg/OvmfPkgX64.fdf +++ b/OvmfPkg/OvmfPkgX64.fdf -@@ -322,7 +322,6 @@ INF MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResour +@@ -321,7 +321,6 @@ INF MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResour INF FatPkg/EnhancedFatDxe/Fat.inf INF MdeModulePkg/Universal/Disk/UdfDxe/UdfDxe.inf diff --git a/SOURCES/0017-ArmVirtPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL.patch b/SOURCES/0017-ArmVirtPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL.patch index 7936459..b978892 100644 --- a/SOURCES/0017-ArmVirtPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL.patch +++ b/SOURCES/0017-ArmVirtPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL.patch @@ -1,4 +1,4 @@ -From 9827ce562f432da36410ef0e9ce6d7971e502b99 Mon Sep 17 00:00:00 2001 +From 7b3630372e0ab0b86a94ca7250c791cbe67947c0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:29:16 +0200 Subject: [PATCH] ArmVirtPkg: Remove VirtioFsDxe filesystem driver (RHEL only) @@ -24,10 +24,10 @@ Signed-off-by: Miroslav Rezanina 3 files changed, 3 deletions(-) diff --git a/ArmVirtPkg/ArmVirtQemu.dsc b/ArmVirtPkg/ArmVirtQemu.dsc -index 00e656d0c9..d1deccaadc 100644 +index 8735d2881e..44bee7c339 100644 --- a/ArmVirtPkg/ArmVirtQemu.dsc +++ b/ArmVirtPkg/ArmVirtQemu.dsc -@@ -464,7 +464,6 @@ +@@ -470,7 +470,6 @@ MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf FatPkg/EnhancedFatDxe/Fat.inf MdeModulePkg/Universal/Disk/UdfDxe/UdfDxe.inf @@ -48,10 +48,10 @@ index 38906004d7..7205274bed 100644 # # Status Code Routing diff --git a/ArmVirtPkg/ArmVirtQemuKernel.dsc b/ArmVirtPkg/ArmVirtQemuKernel.dsc -index c7918c8cf3..9643fd5427 100644 +index c15d51dab0..e0bc37ac7c 100644 --- a/ArmVirtPkg/ArmVirtQemuKernel.dsc +++ b/ArmVirtPkg/ArmVirtQemuKernel.dsc -@@ -368,7 +368,6 @@ +@@ -375,7 +375,6 @@ MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf FatPkg/EnhancedFatDxe/Fat.inf MdeModulePkg/Universal/Disk/UdfDxe/UdfDxe.inf diff --git a/SOURCES/0018-OvmfPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch b/SOURCES/0018-OvmfPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch index 33be900..0d285fa 100644 --- a/SOURCES/0018-OvmfPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch +++ b/SOURCES/0018-OvmfPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch @@ -1,4 +1,4 @@ -From 98e35df340a8a5cd18cb386361c7da6350c54800 Mon Sep 17 00:00:00 2001 +From b8e59f096ab5cebccdd712839cc2fcd8c185ffdb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:29:19 +0200 Subject: [PATCH] OvmfPkg: Remove UdfDxe filesystem driver (RHEL only) @@ -29,10 +29,10 @@ Signed-off-by: Miroslav Rezanina 8 files changed, 8 deletions(-) diff --git a/OvmfPkg/AmdSev/AmdSevX64.dsc b/OvmfPkg/AmdSev/AmdSevX64.dsc -index 5461c1290d..cf1ad83e09 100644 +index 89c9b610d1..4edc2a9069 100644 --- a/OvmfPkg/AmdSev/AmdSevX64.dsc +++ b/OvmfPkg/AmdSev/AmdSevX64.dsc -@@ -679,7 +679,6 @@ +@@ -678,7 +678,6 @@ MdeModulePkg/Universal/Disk/RamDiskDxe/RamDiskDxe.inf MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf FatPkg/EnhancedFatDxe/Fat.inf @@ -41,10 +41,10 @@ index 5461c1290d..cf1ad83e09 100644 MdeModulePkg/Bus/Scsi/ScsiDiskDxe/ScsiDiskDxe.inf MdeModulePkg/Bus/Pci/SataControllerDxe/SataControllerDxe.inf diff --git a/OvmfPkg/AmdSev/AmdSevX64.fdf b/OvmfPkg/AmdSev/AmdSevX64.fdf -index 10538a0465..c56c98dc85 100644 +index 899f02981f..2fe05eccdd 100644 --- a/OvmfPkg/AmdSev/AmdSevX64.fdf +++ b/OvmfPkg/AmdSev/AmdSevX64.fdf -@@ -280,7 +280,6 @@ INF MdeModulePkg/Universal/Acpi/BootScriptExecutorDxe/BootScriptExecutorDxe.inf +@@ -279,7 +279,6 @@ INF MdeModulePkg/Universal/Acpi/BootScriptExecutorDxe/BootScriptExecutorDxe.inf INF MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResourceTableDxe.inf INF FatPkg/EnhancedFatDxe/Fat.inf @@ -53,10 +53,10 @@ index 10538a0465..c56c98dc85 100644 INF OvmfPkg/AmdSev/SecretDxe/SecretDxe.inf INF OvmfPkg/AmdSev/Grub/Grub.inf diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc -index afd2a3c5c0..d8ae542686 100644 +index 5a1c7058c8..5333708216 100644 --- a/OvmfPkg/OvmfPkgIa32.dsc +++ b/OvmfPkg/OvmfPkgIa32.dsc -@@ -815,7 +815,6 @@ +@@ -817,7 +817,6 @@ MdeModulePkg/Universal/Disk/RamDiskDxe/RamDiskDxe.inf MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf FatPkg/EnhancedFatDxe/Fat.inf @@ -65,10 +65,10 @@ index afd2a3c5c0..d8ae542686 100644 MdeModulePkg/Bus/Scsi/ScsiDiskDxe/ScsiDiskDxe.inf MdeModulePkg/Bus/Pci/SataControllerDxe/SataControllerDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32.fdf b/OvmfPkg/OvmfPkgIa32.fdf -index c392b96470..0ffa3be750 100644 +index 7e09e3aac9..30649699cd 100644 --- a/OvmfPkg/OvmfPkgIa32.fdf +++ b/OvmfPkg/OvmfPkgIa32.fdf -@@ -289,7 +289,6 @@ INF MdeModulePkg/Universal/Acpi/BootScriptExecutorDxe/BootScriptExecutorDxe.inf +@@ -288,7 +288,6 @@ INF MdeModulePkg/Universal/Acpi/BootScriptExecutorDxe/BootScriptExecutorDxe.inf INF MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResourceTableDxe.inf INF FatPkg/EnhancedFatDxe/Fat.inf @@ -77,10 +77,10 @@ index c392b96470..0ffa3be750 100644 INF MdeModulePkg/Logo/LogoDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc -index f5a4c57c8e..52ac2c96fc 100644 +index 4fb8b9ba39..9e6f35607d 100644 --- a/OvmfPkg/OvmfPkgIa32X64.dsc +++ b/OvmfPkg/OvmfPkgIa32X64.dsc -@@ -829,7 +829,6 @@ +@@ -830,7 +830,6 @@ MdeModulePkg/Universal/Disk/RamDiskDxe/RamDiskDxe.inf MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf FatPkg/EnhancedFatDxe/Fat.inf @@ -89,10 +89,10 @@ index f5a4c57c8e..52ac2c96fc 100644 MdeModulePkg/Bus/Scsi/ScsiDiskDxe/ScsiDiskDxe.inf MdeModulePkg/Bus/Pci/SataControllerDxe/SataControllerDxe.inf diff --git a/OvmfPkg/OvmfPkgIa32X64.fdf b/OvmfPkg/OvmfPkgIa32X64.fdf -index 6278daeeee..c4f3ec0735 100644 +index 8ba0ce211d..8ef8519cfe 100644 --- a/OvmfPkg/OvmfPkgIa32X64.fdf +++ b/OvmfPkg/OvmfPkgIa32X64.fdf -@@ -290,7 +290,6 @@ INF MdeModulePkg/Universal/Acpi/BootScriptExecutorDxe/BootScriptExecutorDxe.inf +@@ -289,7 +289,6 @@ INF MdeModulePkg/Universal/Acpi/BootScriptExecutorDxe/BootScriptExecutorDxe.inf INF MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResourceTableDxe.inf INF FatPkg/EnhancedFatDxe/Fat.inf @@ -101,10 +101,10 @@ index 6278daeeee..c4f3ec0735 100644 INF MdeModulePkg/Logo/LogoDxe.inf diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc -index 08b73a64c9..f76d0ef7bc 100644 +index 21c6a5b3c0..c127ace963 100644 --- a/OvmfPkg/OvmfPkgX64.dsc +++ b/OvmfPkg/OvmfPkgX64.dsc -@@ -897,7 +897,6 @@ +@@ -895,7 +895,6 @@ MdeModulePkg/Universal/Disk/RamDiskDxe/RamDiskDxe.inf MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf FatPkg/EnhancedFatDxe/Fat.inf @@ -113,10 +113,10 @@ index 08b73a64c9..f76d0ef7bc 100644 MdeModulePkg/Bus/Scsi/ScsiDiskDxe/ScsiDiskDxe.inf MdeModulePkg/Bus/Pci/SataControllerDxe/SataControllerDxe.inf diff --git a/OvmfPkg/OvmfPkgX64.fdf b/OvmfPkg/OvmfPkgX64.fdf -index fc4b6dd3a4..bedd85ef7a 100644 +index f3cb0ea40c..c0da2672a3 100644 --- a/OvmfPkg/OvmfPkgX64.fdf +++ b/OvmfPkg/OvmfPkgX64.fdf -@@ -321,7 +321,6 @@ INF MdeModulePkg/Universal/Acpi/BootScriptExecutorDxe/BootScriptExecutorDxe.inf +@@ -320,7 +320,6 @@ INF MdeModulePkg/Universal/Acpi/BootScriptExecutorDxe/BootScriptExecutorDxe.inf INF MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResourceTableDxe.inf INF FatPkg/EnhancedFatDxe/Fat.inf diff --git a/SOURCES/0019-ArmVirtPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch b/SOURCES/0019-ArmVirtPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch index a0c6376..913c480 100644 --- a/SOURCES/0019-ArmVirtPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch +++ b/SOURCES/0019-ArmVirtPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch @@ -1,4 +1,4 @@ -From 9b039f2eb195f37b724f86efc31c8a4d6abd217d Mon Sep 17 00:00:00 2001 +From d394876cac9e91d30858f20b6c5abb2ade4aabbb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:29:22 +0200 Subject: [PATCH] ArmVirtPkg: Remove UdfDxe filesystem driver (RHEL only) @@ -24,10 +24,10 @@ Signed-off-by: Miroslav Rezanina 3 files changed, 3 deletions(-) diff --git a/ArmVirtPkg/ArmVirtQemu.dsc b/ArmVirtPkg/ArmVirtQemu.dsc -index d1deccaadc..f91bb09fa3 100644 +index 44bee7c339..e7e9df3b42 100644 --- a/ArmVirtPkg/ArmVirtQemu.dsc +++ b/ArmVirtPkg/ArmVirtQemu.dsc -@@ -463,7 +463,6 @@ +@@ -469,7 +469,6 @@ MdeModulePkg/Universal/Disk/PartitionDxe/PartitionDxe.inf MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf FatPkg/EnhancedFatDxe/Fat.inf @@ -48,10 +48,10 @@ index 7205274bed..24a9dac2fd 100644 # # Status Code Routing diff --git a/ArmVirtPkg/ArmVirtQemuKernel.dsc b/ArmVirtPkg/ArmVirtQemuKernel.dsc -index 9643fd5427..c2825aa4c2 100644 +index e0bc37ac7c..ee2459e31d 100644 --- a/ArmVirtPkg/ArmVirtQemuKernel.dsc +++ b/ArmVirtPkg/ArmVirtQemuKernel.dsc -@@ -367,7 +367,6 @@ +@@ -374,7 +374,6 @@ MdeModulePkg/Universal/Disk/PartitionDxe/PartitionDxe.inf MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf FatPkg/EnhancedFatDxe/Fat.inf diff --git a/SOURCES/0020-OvmfPkg-Remove-TftpDynamicCommand-from-shell-RHEL-on.patch b/SOURCES/0020-OvmfPkg-Remove-TftpDynamicCommand-from-shell-RHEL-on.patch index 5c57a7d..b798e18 100644 --- a/SOURCES/0020-OvmfPkg-Remove-TftpDynamicCommand-from-shell-RHEL-on.patch +++ b/SOURCES/0020-OvmfPkg-Remove-TftpDynamicCommand-from-shell-RHEL-on.patch @@ -1,4 +1,4 @@ -From d417cfeb0ed76b3187b44e2491611f55d6de33b3 Mon Sep 17 00:00:00 2001 +From 96eac5543ee94478cec9db044bea2903adb8940b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:29:25 +0200 Subject: [PATCH] OvmfPkg: Remove TftpDynamicCommand from shell (RHEL only) diff --git a/SOURCES/0021-ArmVirtPkg-Remove-TftpDynamicCommand-from-shell-RHEL.patch b/SOURCES/0021-ArmVirtPkg-Remove-TftpDynamicCommand-from-shell-RHEL.patch index ff09c46..96a3f12 100644 --- a/SOURCES/0021-ArmVirtPkg-Remove-TftpDynamicCommand-from-shell-RHEL.patch +++ b/SOURCES/0021-ArmVirtPkg-Remove-TftpDynamicCommand-from-shell-RHEL.patch @@ -1,4 +1,4 @@ -From b548dd4acf23412e9266be15d65d7f8cfccbf028 Mon Sep 17 00:00:00 2001 +From bd961e984e6e4dc70e88b38e7277f086405360c6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:29:28 +0200 Subject: [PATCH] ArmVirtPkg: Remove TftpDynamicCommand from shell (RHEL only) @@ -23,10 +23,10 @@ Signed-off-by: Miroslav Rezanina 2 files changed, 3 insertions(+), 5 deletions(-) diff --git a/ArmVirtPkg/ArmVirt.dsc.inc b/ArmVirtPkg/ArmVirt.dsc.inc -index 7044790a1e..ee98673e98 100644 +index 5384a41818..2a8236e520 100644 --- a/ArmVirtPkg/ArmVirt.dsc.inc +++ b/ArmVirtPkg/ArmVirt.dsc.inc -@@ -391,10 +391,9 @@ +@@ -393,10 +393,9 @@ # MdeModulePkg/Universal/Disk/RamDiskDxe/RamDiskDxe.inf diff --git a/SOURCES/0022-OvmfPkg-Remove-HttpDynamicCommand-from-shell-RHEL-on.patch b/SOURCES/0022-OvmfPkg-Remove-HttpDynamicCommand-from-shell-RHEL-on.patch index 9e5ba58..e0e1c1a 100644 --- a/SOURCES/0022-OvmfPkg-Remove-HttpDynamicCommand-from-shell-RHEL-on.patch +++ b/SOURCES/0022-OvmfPkg-Remove-HttpDynamicCommand-from-shell-RHEL-on.patch @@ -1,4 +1,4 @@ -From 8a68c775e8ba00da3d725396fd8c78f67fbc8697 Mon Sep 17 00:00:00 2001 +From 1176f49c73da2d2bd607dcd565f3bc1d59029209 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:29:31 +0200 Subject: [PATCH] OvmfPkg: Remove HttpDynamicCommand from shell (RHEL only) diff --git a/SOURCES/0023-ArmVirtPkg-Remove-HttpDynamicCommand-from-shell-RHEL.patch b/SOURCES/0023-ArmVirtPkg-Remove-HttpDynamicCommand-from-shell-RHEL.patch index 331cf73..63a9d40 100644 --- a/SOURCES/0023-ArmVirtPkg-Remove-HttpDynamicCommand-from-shell-RHEL.patch +++ b/SOURCES/0023-ArmVirtPkg-Remove-HttpDynamicCommand-from-shell-RHEL.patch @@ -1,4 +1,4 @@ -From 1f15cf34691e2f9604ee6efe142c2d710aad579c Mon Sep 17 00:00:00 2001 +From dc68c045087e771dac52733d6b64feb3db38ece0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:29:34 +0200 Subject: [PATCH] ArmVirtPkg: Remove HttpDynamicCommand from shell (RHEL only) @@ -27,10 +27,10 @@ Signed-off-by: Miroslav Rezanina 2 files changed, 5 deletions(-) diff --git a/ArmVirtPkg/ArmVirt.dsc.inc b/ArmVirtPkg/ArmVirt.dsc.inc -index ee98673e98..996b4ddfc4 100644 +index 2a8236e520..5bfb16c27e 100644 --- a/ArmVirtPkg/ArmVirt.dsc.inc +++ b/ArmVirtPkg/ArmVirt.dsc.inc -@@ -394,10 +394,6 @@ +@@ -396,10 +396,6 @@ # # UEFI application (Shell Embedded Boot Loader) # diff --git a/SOURCES/0024-OvmfPkg-Remove-LinuxInitrdDynamicShellCommand-RHEL-o.patch b/SOURCES/0024-OvmfPkg-Remove-LinuxInitrdDynamicShellCommand-RHEL-o.patch index c457ccc..f0c49af 100644 --- a/SOURCES/0024-OvmfPkg-Remove-LinuxInitrdDynamicShellCommand-RHEL-o.patch +++ b/SOURCES/0024-OvmfPkg-Remove-LinuxInitrdDynamicShellCommand-RHEL-o.patch @@ -1,4 +1,4 @@ -From cd1746c9920e93bf40994172881bc13cf185991c Mon Sep 17 00:00:00 2001 +From d140a278bde8ed85efd41f228c471c5d89971ce9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:29:39 +0200 Subject: [PATCH] OvmfPkg: Remove LinuxInitrdDynamicShellCommand (RHEL only) diff --git a/SOURCES/0025-ArmVirtPkg-Remove-LinuxInitrdDynamicShellCommand-RHE.patch b/SOURCES/0025-ArmVirtPkg-Remove-LinuxInitrdDynamicShellCommand-RHE.patch index 2eb4418..0d6126b 100644 --- a/SOURCES/0025-ArmVirtPkg-Remove-LinuxInitrdDynamicShellCommand-RHE.patch +++ b/SOURCES/0025-ArmVirtPkg-Remove-LinuxInitrdDynamicShellCommand-RHE.patch @@ -1,4 +1,4 @@ -From ec9c5e512252964f28c493d10b9f484b88c87c13 Mon Sep 17 00:00:00 2001 +From 0abc22a0a5f8d38e31b7e6356de46a2e55e63785 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= Date: Thu, 1 Jul 2021 20:29:46 +0200 Subject: [PATCH] ArmVirtPkg: Remove LinuxInitrdDynamicShellCommand (RHEL only) @@ -28,10 +28,10 @@ Signed-off-by: Miroslav Rezanina 2 files changed, 3 insertions(+), 8 deletions(-) diff --git a/ArmVirtPkg/ArmVirt.dsc.inc b/ArmVirtPkg/ArmVirt.dsc.inc -index 996b4ddfc4..2561e10ff5 100644 +index 5bfb16c27e..49e3bf9de4 100644 --- a/ArmVirtPkg/ArmVirt.dsc.inc +++ b/ArmVirtPkg/ArmVirt.dsc.inc -@@ -391,17 +391,13 @@ +@@ -393,17 +393,13 @@ # MdeModulePkg/Universal/Disk/RamDiskDxe/RamDiskDxe.inf diff --git a/SOURCES/0027-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch b/SOURCES/0026-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch similarity index 87% rename from SOURCES/0027-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch rename to SOURCES/0026-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch index 8148351..cfe8783 100644 --- a/SOURCES/0027-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch +++ b/SOURCES/0026-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch @@ -1,4 +1,4 @@ -From c916516d37fb50c187020bd01da21cca85c8e83a Mon Sep 17 00:00:00 2001 +From ca812e951cc824d6d7db16ec04a23a4b7fbb6830 Mon Sep 17 00:00:00 2001 From: Oliver Steffen Date: Wed, 16 Aug 2023 12:09:40 +0200 Subject: [PATCH] OvmfPkg/AmdSevDxe: Shim Reboot workaround (RHEL only) @@ -22,12 +22,12 @@ patch_name: edk2-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch present_in_specfile: true location_in_specfile: 44 --- - OvmfPkg/AmdSevDxe/AmdSevDxe.c | 42 +++++++++++++++++++++++++++++++++ + OvmfPkg/AmdSevDxe/AmdSevDxe.c | 43 +++++++++++++++++++++++++++++++++ OvmfPkg/AmdSevDxe/AmdSevDxe.inf | 2 ++ - 2 files changed, 44 insertions(+) + 2 files changed, 45 insertions(+) diff --git a/OvmfPkg/AmdSevDxe/AmdSevDxe.c b/OvmfPkg/AmdSevDxe/AmdSevDxe.c -index d497a343d3..0eb88e50ff 100644 +index d497a343d3..ca345e95da 100644 --- a/OvmfPkg/AmdSevDxe/AmdSevDxe.c +++ b/OvmfPkg/AmdSevDxe/AmdSevDxe.c @@ -19,6 +19,7 @@ @@ -90,10 +90,11 @@ index d497a343d3..0eb88e50ff 100644 // // Do nothing when SEV is not enabled -@@ -361,5 +393,15 @@ AmdSevDxeEntryPoint ( - ); +@@ -211,6 +243,17 @@ AmdSevDxeEntryPoint ( + return EFI_UNSUPPORTED; } ++ // Shim fallback reboot workaround + Status = gBS->CreateEventEx ( + EVT_NOTIFY_SIGNAL, + TPL_CALLBACK, @@ -104,8 +105,9 @@ index d497a343d3..0eb88e50ff 100644 + ); + ASSERT_EFI_ERROR (Status); + - return EFI_SUCCESS; - } + // + // Iterate through the GCD map and clear the C-bit from MMIO and NonExistent + // memory space. The NonExistent memory space will be used for mapping the diff --git a/OvmfPkg/AmdSevDxe/AmdSevDxe.inf b/OvmfPkg/AmdSevDxe/AmdSevDxe.inf index e7c7d526c9..09cbd2b0ca 100644 --- a/OvmfPkg/AmdSevDxe/AmdSevDxe.inf diff --git a/SOURCES/0026-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch b/SOURCES/0026-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch deleted file mode 100644 index 97dd035..0000000 --- a/SOURCES/0026-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch +++ /dev/null @@ -1,49 +0,0 @@ -From 3d02fb6da82331176952e480160223136679ce74 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Tue, 28 Feb 2023 15:47:00 +0100 -Subject: [PATCH] UefiCpuPkg/MpInitLib: fix apic mode for cpu hotplug - -RH-Author: Gerd Hoffmann -RH-MergeRequest: 42: UefiCpuPkg/MpInitLib: fix apic mode for cpu hotplug -RH-Bugzilla: 2124143 -RH-Acked-by: Laszlo Ersek -RH-Commit: [1/1] 5168501c31541a57aaeb3b3bd7c3602205eb7cdf (kraxel/centos-edk2) - -In case the number of CPUs can in increase beyond 255 -due to CPU hotplug choose x2apic mode. - -Signed-off-by: Gerd Hoffmann - -patch_name: edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch -present_in_specfile: true -location_in_specfile: 38 ---- - UefiCpuPkg/Library/MpInitLib/MpLib.c | 8 +++++++- - 1 file changed, 7 insertions(+), 1 deletion(-) - -diff --git a/UefiCpuPkg/Library/MpInitLib/MpLib.c b/UefiCpuPkg/Library/MpInitLib/MpLib.c -index d724456502..c478878bb0 100644 ---- a/UefiCpuPkg/Library/MpInitLib/MpLib.c -+++ b/UefiCpuPkg/Library/MpInitLib/MpLib.c -@@ -534,7 +534,9 @@ CollectProcessorCount ( - // - // Enable x2APIC mode if - // 1. Number of CPU is greater than 255; or -- // 2. There are any logical processors reporting an Initial APIC ID of 255 or greater. -+ // 2. The platform exposed the exact *boot* CPU count to us in advance, and -+ // more than 255 logical processors are possible later, with hotplug; or -+ // 3. There are any logical processors reporting an Initial APIC ID of 255 or greater. - // - X2Apic = FALSE; - if (CpuMpData->CpuCount > 255) { -@@ -542,6 +544,10 @@ CollectProcessorCount ( - // If there are more than 255 processor found, force to enable X2APIC - // - X2Apic = TRUE; -+ } else if ((PcdGet32 (PcdCpuBootLogicalProcessorNumber) > 0) && -+ (PcdGet32 (PcdCpuMaxLogicalProcessorNumber) > 255)) -+ { -+ X2Apic = TRUE; - } else { - CpuInfoInHob = (CPU_INFO_IN_HOB *)(UINTN)CpuMpData->CpuInfoInHob; - for (Index = 0; Index < CpuMpData->CpuCount; Index++) { diff --git a/SOURCES/0028-CryptoPkg-CrtLib-add-stat.h-include-file.patch b/SOURCES/0027-CryptoPkg-CrtLib-add-stat.h-include-file.patch similarity index 92% rename from SOURCES/0028-CryptoPkg-CrtLib-add-stat.h-include-file.patch rename to SOURCES/0027-CryptoPkg-CrtLib-add-stat.h-include-file.patch index 8b0a962..e7045ba 100644 --- a/SOURCES/0028-CryptoPkg-CrtLib-add-stat.h-include-file.patch +++ b/SOURCES/0027-CryptoPkg-CrtLib-add-stat.h-include-file.patch @@ -1,4 +1,4 @@ -From 7a07b2f16eabf460891a21c05b30cd9c2f875a2a Mon Sep 17 00:00:00 2001 +From 0454b8eaabf7fa0240b6d7c4f6409584161552d4 Mon Sep 17 00:00:00 2001 From: Gerd Hoffmann Date: Mon, 28 Aug 2023 13:11:02 +0200 Subject: [PATCH] CryptoPkg/CrtLib: add stat.h include file. diff --git a/SOURCES/0029-CryptoPkg-CrtLib-add-access-open-read-write-close-sy.patch b/SOURCES/0028-CryptoPkg-CrtLib-add-access-open-read-write-close-sy.patch similarity index 84% rename from SOURCES/0029-CryptoPkg-CrtLib-add-access-open-read-write-close-sy.patch rename to SOURCES/0028-CryptoPkg-CrtLib-add-access-open-read-write-close-sy.patch index b32c5bd..0394403 100644 --- a/SOURCES/0029-CryptoPkg-CrtLib-add-access-open-read-write-close-sy.patch +++ b/SOURCES/0028-CryptoPkg-CrtLib-add-access-open-read-write-close-sy.patch @@ -1,4 +1,4 @@ -From 168cfe83b250d3166817549c1e96e6b1f02bcab4 Mon Sep 17 00:00:00 2001 +From b9adc98473593da055c45f036219a469ceddbc34 Mon Sep 17 00:00:00 2001 From: Gerd Hoffmann Date: Mon, 28 Aug 2023 13:27:09 +0200 Subject: [PATCH] CryptoPkg/CrtLib: add access/open/read/write/close syscalls @@ -15,10 +15,10 @@ Signed-off-by: Gerd Hoffmann 2 files changed, 87 insertions(+) diff --git a/CryptoPkg/Library/BaseCryptLib/SysCall/CrtWrapper.c b/CryptoPkg/Library/BaseCryptLib/SysCall/CrtWrapper.c -index 37cdecc9bd..dfdb635536 100644 +index b114cc069a..6ba751c1f1 100644 --- a/CryptoPkg/Library/BaseCryptLib/SysCall/CrtWrapper.c +++ b/CryptoPkg/Library/BaseCryptLib/SysCall/CrtWrapper.c -@@ -550,6 +550,52 @@ fread ( +@@ -589,6 +589,52 @@ fread ( return 0; } @@ -72,10 +72,10 @@ index 37cdecc9bd..dfdb635536 100644 getuid ( void diff --git a/CryptoPkg/Library/Include/CrtLibSupport.h b/CryptoPkg/Library/Include/CrtLibSupport.h -index f36fe08f0c..7d98496af8 100644 +index cd51e197e7..b1616a7b4c 100644 --- a/CryptoPkg/Library/Include/CrtLibSupport.h +++ b/CryptoPkg/Library/Include/CrtLibSupport.h -@@ -78,6 +78,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent +@@ -79,6 +79,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent // // Definitions for global constants used by CRT library routines // @@ -83,7 +83,7 @@ index f36fe08f0c..7d98496af8 100644 #define EINVAL 22 /* Invalid argument */ #define EAFNOSUPPORT 47 /* Address family not supported by protocol family */ #define INT_MAX 0x7FFFFFFF /* Maximum (signed) int value */ -@@ -102,6 +103,15 @@ SPDX-License-Identifier: BSD-2-Clause-Patent +@@ -103,6 +104,15 @@ SPDX-License-Identifier: BSD-2-Clause-Patent #define NS_INADDRSZ 4 /*%< IPv4 T_A */ #define NS_IN6ADDRSZ 16 /*%< IPv6 T_AAAA */ @@ -99,7 +99,7 @@ index f36fe08f0c..7d98496af8 100644 // // Basic types mapping // -@@ -324,6 +334,37 @@ fprintf ( +@@ -329,6 +339,37 @@ fprintf ( ... ); diff --git a/SOURCES/edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch b/SOURCES/0029-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch similarity index 71% rename from SOURCES/edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch rename to SOURCES/0029-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch index 415a914..1812ab5 100644 --- a/SOURCES/edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch +++ b/SOURCES/0029-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch @@ -1,12 +1,13 @@ -From c5f142e26ea5e892a63ed35ca952c8b583a9f8c1 Mon Sep 17 00:00:00 2001 +From 2837b67434701fc5e3d2ef846e0e3c7d409df631 Mon Sep 17 00:00:00 2001 From: Oliver Steffen Date: Wed, 14 Aug 2024 09:53:49 +0200 -Subject: [PATCH 2/2] NetworkPkg/DxeNetLib: Reword PseudoRandom error logging +Subject: [PATCH] NetworkPkg/DxeNetLib: Reword PseudoRandom error logging RH-Author: Oliver Steffen -RH-MergeRequest: 67: NetworkPkg/DxeNetLib: adjust PseudoRandom error logging -RH-Jira: RHEL-45899 -RH-Commit: [2/2] 0d465ca0ea00598e6826446cd08e890c2ae4bea7 (osteffen/edk2) +RH-MergeRequest: 66: NetworkPkg/DxeNetLib: adjust PseudoRandom error logging +RH-Jira: RHEL-45829 +RH-Acked-by: Miroslav Rezanina +RH-Commit: [2/2] d1f24c14ccea7346d395c263ed577039f91debfd (osteffen/edk2) The word "Failed" is used when logging tired Rng algorithms. These mostly non-critical messages confused some users. @@ -15,15 +16,19 @@ Reword it and also add a message confirming eventual success to deescalate the importance somewhat. Signed-off-by: Oliver Steffen + +patch_name: edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch +present_in_specfile: true +location_in_specfile: 41 --- NetworkPkg/Library/DxeNetLib/DxeNetLib.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/NetworkPkg/Library/DxeNetLib/DxeNetLib.c b/NetworkPkg/Library/DxeNetLib/DxeNetLib.c -index 4dfbe91a55..905a944975 100644 +index 9acc21caeb..73ddf8b0fb 100644 --- a/NetworkPkg/Library/DxeNetLib/DxeNetLib.c +++ b/NetworkPkg/Library/DxeNetLib/DxeNetLib.c -@@ -946,12 +946,13 @@ PseudoRandom ( +@@ -952,12 +952,13 @@ PseudoRandom ( // // Secure Algorithm was supported on this platform // @@ -38,6 +43,3 @@ index 4dfbe91a55..905a944975 100644 // // Try the next secure algorithm --- -2.39.3 - diff --git a/SOURCES/edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch b/SOURCES/0030-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch similarity index 94% rename from SOURCES/edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch rename to SOURCES/0030-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch index c564bbe..9120a07 100644 --- a/SOURCES/edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch +++ b/SOURCES/0030-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch @@ -1,13 +1,13 @@ -From ff9baf5bf0ef960b9f1bb9668cfe6f3d66b288d0 Mon Sep 17 00:00:00 2001 +From 24da4bc42a6f16094ea589ffb2a9326cf8a596cc Mon Sep 17 00:00:00 2001 From: Oliver Steffen Date: Mon, 4 Nov 2024 12:40:12 +0100 Subject: [PATCH] OvmfPkg: Add a Fallback RNG (RH only) RH-Author: Oliver Steffen -RH-MergeRequest: 80: OvmfPkg: Add a Fallback RNG (RH only) -RH-Jira: RHEL-65725 +RH-MergeRequest: 82: Add a Fallback RNG (RH only) +RH-Jira: RHEL-66234 RH-Acked-by: Gerd Hoffmann -RH-Commit: [1/1] 2865ef247c476418c88ba988449841aee4a93bea (osteffen/edk2) +RH-Commit: [1/2] bb62ac9e3f1cd5eae1bb94e047fb6ebada57cd24 (osteffen/edk2) Since the pixiefail CVE fix, the network stack requires a random number generator. @@ -16,6 +16,10 @@ have the Platform Boot Manager install a pseudo RNG to ensure the network can be used. Signed-off-by: Oliver Steffen + +patch_name: edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch +present_in_specfile: true +location_in_specfile: 48 --- .../PlatformBootManagerLib/BdsPlatform.c | 7 + .../PlatformBootManagerLib/FallbackRng.c | 222 ++++++++++++++++++ @@ -345,6 +349,3 @@ index c6ffc1ed9e..211716e30d 100644 gUefiShellFileGuid gGrubFileGuid + gEfiRngAlgorithmRaw --- -2.39.3 - diff --git a/SOURCES/0030-OvmfPkg-Sec-Setup-MTRR-early-in-the-boot-process.patch b/SOURCES/0030-OvmfPkg-Sec-Setup-MTRR-early-in-the-boot-process.patch deleted file mode 100644 index 63facbb..0000000 --- a/SOURCES/0030-OvmfPkg-Sec-Setup-MTRR-early-in-the-boot-process.patch +++ /dev/null @@ -1,194 +0,0 @@ -From 4c49c1bcb2db128cc4d2ebb29b1ac53fe3ef6b18 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Tue, 30 Jan 2024 14:04:38 +0100 -Subject: [PATCH] OvmfPkg/Sec: Setup MTRR early in the boot process. - -RH-Author: Gerd Hoffmann -RH-MergeRequest: 55: OvmfPkg/Sec: Setup MTRR early in the boot process. -RH-Jira: RHEL-21704 -RH-Acked-by: Laszlo Ersek -RH-Commit: [1/4] c4061788d34f409944898b48642d610c259161f3 (kraxel.rh/centos-src-edk2) - -Specifically before running lzma uncompress of the main firmware volume. -This is needed to make sure caching is enabled, otherwise the uncompress -can be extremely slow. - -Adapt the ASSERTs and MTRR setup in PlatformInitLib to the changes. - -Background: Depending on virtual machine configuration kvm may uses EPT -memory types to apply guest MTRR settings. In case MTRRs are disabled -kvm will use the uncachable memory type for all mappings. The -vmx_get_mt_mask() function in the linux kernel handles this and can be -found here: - -https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/arch/x86/kvm/vmx/vmx.c?h=v6.7.1#n7580 - -In most VM configurations kvm uses MTRR_TYPE_WRBACK unconditionally. In -case the VM has a mdev device assigned that is not the case though. - -Before commit e8aa4c6546ad ("UefiCpuPkg/ResetVector: Cache Disable -should not be set by default in CR0") kvm also ended up using -MTRR_TYPE_WRBACK due to KVM_X86_QUIRK_CD_NW_CLEARED. After that commit -kvm evaluates guest mtrr settings, which why setting up MTRRs early is -important now. - -Reviewed-by: Laszlo Ersek -Signed-off-by: Gerd Hoffmann -Message-ID: <20240130130441.772484-2-kraxel@redhat.com> - -[ kraxel: Downstream-only for now. Timely upstream merge is unlikely - due to chinese holidays and rhel-9.4 deadlines are close. - QE regression testing passed. So go with upstream posted - series v3 ] - -patch_name: edk2-OvmfPkg-Sec-Setup-MTRR-early-in-the-boot-process.patch -present_in_specfile: true -location_in_specfile: 49 ---- - OvmfPkg/IntelTdx/Sec/SecMain.c | 32 +++++++++++++++++++++ - OvmfPkg/Library/PlatformInitLib/MemDetect.c | 10 +++---- - OvmfPkg/Sec/SecMain.c | 32 +++++++++++++++++++++ - 3 files changed, 69 insertions(+), 5 deletions(-) - -diff --git a/OvmfPkg/IntelTdx/Sec/SecMain.c b/OvmfPkg/IntelTdx/Sec/SecMain.c -index 4e750755bf..7094d86159 100644 ---- a/OvmfPkg/IntelTdx/Sec/SecMain.c -+++ b/OvmfPkg/IntelTdx/Sec/SecMain.c -@@ -26,6 +26,8 @@ - #include - #include - #include -+#include -+#include - - #define SEC_IDT_ENTRY_COUNT 34 - -@@ -47,6 +49,31 @@ IA32_IDT_GATE_DESCRIPTOR mIdtEntryTemplate = { - } - }; - -+// -+// Enable MTRR early, set default type to write back. -+// Needed to make sure caching is enabled, -+// without this lzma decompress can be very slow. -+// -+STATIC -+VOID -+SecMtrrSetup ( -+ VOID -+ ) -+{ -+ CPUID_VERSION_INFO_EDX Edx; -+ MSR_IA32_MTRR_DEF_TYPE_REGISTER DefType; -+ -+ AsmCpuid (CPUID_VERSION_INFO, NULL, NULL, NULL, &Edx.Uint32); -+ if (!Edx.Bits.MTRR) { -+ return; -+ } -+ -+ DefType.Uint64 = AsmReadMsr64 (MSR_IA32_MTRR_DEF_TYPE); -+ DefType.Bits.Type = 6; /* write back */ -+ DefType.Bits.E = 1; /* enable */ -+ AsmWriteMsr64 (MSR_IA32_MTRR_DEF_TYPE, DefType.Uint64); -+} -+ - VOID - EFIAPI - SecCoreStartupWithStack ( -@@ -203,6 +230,11 @@ SecCoreStartupWithStack ( - InitializeApicTimer (0, MAX_UINT32, TRUE, 5); - DisableApicTimerInterrupt (); - -+ // -+ // Initialize MTRR -+ // -+ SecMtrrSetup (); -+ - PeilessStartup (&SecCoreData); - - ASSERT (FALSE); -diff --git a/OvmfPkg/Library/PlatformInitLib/MemDetect.c b/OvmfPkg/Library/PlatformInitLib/MemDetect.c -index e64c0ee324..b6ba63ef95 100644 ---- a/OvmfPkg/Library/PlatformInitLib/MemDetect.c -+++ b/OvmfPkg/Library/PlatformInitLib/MemDetect.c -@@ -1164,18 +1164,18 @@ PlatformQemuInitializeRam ( - MtrrGetAllMtrrs (&MtrrSettings); - - // -- // MTRRs disabled, fixed MTRRs disabled, default type is uncached -+ // See SecMtrrSetup(), default type should be write back - // -- ASSERT ((MtrrSettings.MtrrDefType & BIT11) == 0); -+ ASSERT ((MtrrSettings.MtrrDefType & BIT11) != 0); - ASSERT ((MtrrSettings.MtrrDefType & BIT10) == 0); -- ASSERT ((MtrrSettings.MtrrDefType & 0xFF) == 0); -+ ASSERT ((MtrrSettings.MtrrDefType & 0xFF) == MTRR_CACHE_WRITE_BACK); - - // - // flip default type to writeback - // -- SetMem (&MtrrSettings.Fixed, sizeof MtrrSettings.Fixed, 0x06); -+ SetMem (&MtrrSettings.Fixed, sizeof MtrrSettings.Fixed, MTRR_CACHE_WRITE_BACK); - ZeroMem (&MtrrSettings.Variables, sizeof MtrrSettings.Variables); -- MtrrSettings.MtrrDefType |= BIT11 | BIT10 | 6; -+ MtrrSettings.MtrrDefType |= BIT10; - MtrrSetAllMtrrs (&MtrrSettings); - - // -diff --git a/OvmfPkg/Sec/SecMain.c b/OvmfPkg/Sec/SecMain.c -index 60dfa61842..725b57e2fa 100644 ---- a/OvmfPkg/Sec/SecMain.c -+++ b/OvmfPkg/Sec/SecMain.c -@@ -29,6 +29,8 @@ - #include - #include - #include -+#include -+#include - #include "AmdSev.h" - - #define SEC_IDT_ENTRY_COUNT 34 -@@ -743,6 +745,31 @@ FindAndReportEntryPoints ( - return; - } - -+// -+// Enable MTRR early, set default type to write back. -+// Needed to make sure caching is enabled, -+// without this lzma decompress can be very slow. -+// -+STATIC -+VOID -+SecMtrrSetup ( -+ VOID -+ ) -+{ -+ CPUID_VERSION_INFO_EDX Edx; -+ MSR_IA32_MTRR_DEF_TYPE_REGISTER DefType; -+ -+ AsmCpuid (CPUID_VERSION_INFO, NULL, NULL, NULL, &Edx.Uint32); -+ if (!Edx.Bits.MTRR) { -+ return; -+ } -+ -+ DefType.Uint64 = AsmReadMsr64 (MSR_IA32_MTRR_DEF_TYPE); -+ DefType.Bits.Type = 6; /* write back */ -+ DefType.Bits.E = 1; /* enable */ -+ AsmWriteMsr64 (MSR_IA32_MTRR_DEF_TYPE, DefType.Uint64); -+} -+ - VOID - EFIAPI - SecCoreStartupWithStack ( -@@ -942,6 +969,11 @@ SecCoreStartupWithStack ( - InitializeApicTimer (0, MAX_UINT32, TRUE, 5); - DisableApicTimerInterrupt (); - -+ // -+ // Initialize MTRR -+ // -+ SecMtrrSetup (); -+ - // - // Initialize Debug Agent to support source level debug in SEC/PEI phases before memory ready. - // diff --git a/SOURCES/0031-MdePkg-ArchitecturalMsr.h-add-defines-for-MTRR-cache.patch b/SOURCES/0031-MdePkg-ArchitecturalMsr.h-add-defines-for-MTRR-cache.patch deleted file mode 100644 index 1b439a4..0000000 --- a/SOURCES/0031-MdePkg-ArchitecturalMsr.h-add-defines-for-MTRR-cache.patch +++ /dev/null @@ -1,41 +0,0 @@ -From 3124da27dc460926f40477d247e021ceeabe0be3 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Tue, 30 Jan 2024 14:04:39 +0100 -Subject: [PATCH] MdePkg/ArchitecturalMsr.h: add #defines for MTRR cache types - -RH-Author: Gerd Hoffmann -RH-MergeRequest: 55: OvmfPkg/Sec: Setup MTRR early in the boot process. -RH-Jira: RHEL-21704 -RH-Acked-by: Laszlo Ersek -RH-Commit: [2/4] a568bc2793d677462a2971aae9566a9bbc64b063 (kraxel.rh/centos-src-edk2) - -Reviewed-by: Michael D Kinney -Reviewed-by: Laszlo Ersek -Signed-off-by: Gerd Hoffmann -Message-ID: <20240130130441.772484-3-kraxel@redhat.com> - -patch_name: edk2-MdePkg-ArchitecturalMsr.h-add-defines-for-MTRR-cache.patch -present_in_specfile: true -location_in_specfile: 50 ---- - MdePkg/Include/Register/Intel/ArchitecturalMsr.h | 7 +++++++ - 1 file changed, 7 insertions(+) - -diff --git a/MdePkg/Include/Register/Intel/ArchitecturalMsr.h b/MdePkg/Include/Register/Intel/ArchitecturalMsr.h -index 756e7c86ec..08ba949cf7 100644 ---- a/MdePkg/Include/Register/Intel/ArchitecturalMsr.h -+++ b/MdePkg/Include/Register/Intel/ArchitecturalMsr.h -@@ -2103,6 +2103,13 @@ typedef union { - #define MSR_IA32_MTRR_PHYSBASE9 0x00000212 - /// @} - -+#define MSR_IA32_MTRR_CACHE_UNCACHEABLE 0 -+#define MSR_IA32_MTRR_CACHE_WRITE_COMBINING 1 -+#define MSR_IA32_MTRR_CACHE_WRITE_THROUGH 4 -+#define MSR_IA32_MTRR_CACHE_WRITE_PROTECTED 5 -+#define MSR_IA32_MTRR_CACHE_WRITE_BACK 6 -+#define MSR_IA32_MTRR_CACHE_INVALID_TYPE 7 -+ - /** - MSR information returned for MSR indexes #MSR_IA32_MTRR_PHYSBASE0 to - #MSR_IA32_MTRR_PHYSBASE9 diff --git a/SOURCES/edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch b/SOURCES/0031-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch similarity index 85% rename from SOURCES/edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch rename to SOURCES/0031-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch index f526e0d..f23ef7a 100644 --- a/SOURCES/edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch +++ b/SOURCES/0031-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch @@ -1,13 +1,13 @@ -From 9c180326056f489b55999586f3bc1d225eda985e Mon Sep 17 00:00:00 2001 +From 14ce76be0e92a9926a7f2b33d64b13966c6bfaf2 Mon Sep 17 00:00:00 2001 From: Oliver Steffen Date: Thu, 7 Nov 2024 11:36:22 +0100 Subject: [PATCH] OvmfPkg/ArmVirtPkg: Add a Fallback RNG (RH only) RH-Author: Oliver Steffen -RH-MergeRequest: 81: OvmfPkg/ArmVirtPkg: Add a Fallback RNG (RH only) -RH-Jira: RHEL-66230 +RH-MergeRequest: 82: Add a Fallback RNG (RH only) +RH-Jira: RHEL-66234 RH-Acked-by: Gerd Hoffmann -RH-Commit: [1/1] 1c2135c76fa4eb3d64000d3b0161393703dd5dd6 (osteffen/edk2) +RH-Commit: [2/2] ae2c04680e6420e096c667a22c52ec6f6fb46935 (osteffen/edk2) Since the pixiefail CVE fix, the network stack requires a random number generator. @@ -15,10 +15,14 @@ In case there is no hardware random number generator available, have the Platform Boot Manager install a pseudo RNG to ensure the network can be used. -This patch adds the fallback rng (added on ae9be39436) -also to the PlatformBootManagerLibLight, which is used by ArmVirtPkg. +This patch adds the fallback rng which was introduced in a +previous commit also to the ArmVirtPkg PlatformBootManagerLib. Signed-off-by: Oliver Steffen + +patch_name: edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch +present_in_specfile: true +location_in_specfile: 49 --- OvmfPkg/Library/PlatformBootManagerLibLight/PlatformBm.c | 6 ++++++ .../PlatformBootManagerLibLight/PlatformBootManagerLib.inf | 5 +++++ @@ -96,6 +100,3 @@ index 8e7cd5605f..4583c05ef4 100644 gEfiPciRootBridgeIoProtocolGuid gVirtioDeviceProtocolGuid + gEfiRngProtocolGuid --- -2.39.3 - diff --git a/SOURCES/0032-OvmfPkg-QemuFlashFvbServicesRuntimeDxe-Do-not-use-fl.patch b/SOURCES/0032-OvmfPkg-QemuFlashFvbServicesRuntimeDxe-Do-not-use-fl.patch new file mode 100644 index 0000000..9e64e58 --- /dev/null +++ b/SOURCES/0032-OvmfPkg-QemuFlashFvbServicesRuntimeDxe-Do-not-use-fl.patch @@ -0,0 +1,37 @@ +From ee75d5f03a473eb4007f7aaa58a41719adca0429 Mon Sep 17 00:00:00 2001 +From: Tom Lendacky +Date: Mon, 18 Nov 2024 12:59:32 -0600 +Subject: [PATCH] OvmfPkg/QemuFlashFvbServicesRuntimeDxe: Do not use flash with + SEV-SNP + +SEV-SNP does not support the use of the Qemu flash device as SEV-SNP +guests are started using the Qemu -bios option instead of the Qemu -drive +if=pflash option. Perform runtime detection of SEV-SNP and exit early from +the Qemu flash device initialization, indicating the Qemu flash device is +not present. SEV-SNP guests will use the emulated variable support. + +Signed-off-by: Tom Lendacky +(cherry picked from commit f0d2bc3ab268c8e3c6da4158208df38bc9d3677e) +--- + OvmfPkg/QemuFlashFvbServicesRuntimeDxe/QemuFlash.c | 8 ++++++++ + 1 file changed, 8 insertions(+) + +diff --git a/OvmfPkg/QemuFlashFvbServicesRuntimeDxe/QemuFlash.c b/OvmfPkg/QemuFlashFvbServicesRuntimeDxe/QemuFlash.c +index a577aea556..5e393e98ed 100644 +--- a/OvmfPkg/QemuFlashFvbServicesRuntimeDxe/QemuFlash.c ++++ b/OvmfPkg/QemuFlashFvbServicesRuntimeDxe/QemuFlash.c +@@ -259,6 +259,14 @@ QemuFlashInitialize ( + VOID + ) + { ++ // ++ // The SNP model does not provide for QEMU flash device support, so exit ++ // early before attempting to initialize any QEMU flash device support. ++ // ++ if (MemEncryptSevSnpIsEnabled ()) { ++ return EFI_UNSUPPORTED; ++ } ++ + mFlashBase = (UINT8 *)(UINTN)PcdGet32 (PcdOvmfFdBaseAddress); + mFdBlockSize = PcdGet32 (PcdOvmfFirmwareBlockSize); + ASSERT (PcdGet32 (PcdOvmfFirmwareFdSize) % mFdBlockSize == 0); diff --git a/SOURCES/0032-UefiCpuPkg-MtrrLib.h-use-cache-type-defines-from-Arc.patch b/SOURCES/0032-UefiCpuPkg-MtrrLib.h-use-cache-type-defines-from-Arc.patch deleted file mode 100644 index 89772d7..0000000 --- a/SOURCES/0032-UefiCpuPkg-MtrrLib.h-use-cache-type-defines-from-Arc.patch +++ /dev/null @@ -1,70 +0,0 @@ -From f015a541308b2d752c399b9ef9597c4585218032 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Tue, 30 Jan 2024 14:04:40 +0100 -Subject: [PATCH] UefiCpuPkg/MtrrLib.h: use cache type #defines from - ArchitecturalMsr.h - -RH-Author: Gerd Hoffmann -RH-MergeRequest: 55: OvmfPkg/Sec: Setup MTRR early in the boot process. -RH-Jira: RHEL-21704 -RH-Acked-by: Laszlo Ersek -RH-Commit: [3/4] 8b766c97b247a8665662697534455c19423ff23c (kraxel.rh/centos-src-edk2) - -Reviewed-by: Michael D Kinney -Reviewed-by: Laszlo Ersek -Signed-off-by: Gerd Hoffmann -Message-ID: <20240130130441.772484-4-kraxel@redhat.com> - -patch_name: edk2-UefiCpuPkg-MtrrLib.h-use-cache-type-defines-from-Arc.patch -present_in_specfile: true -location_in_specfile: 51 ---- - UefiCpuPkg/Include/Library/MtrrLib.h | 26 ++++++++++++++------------ - 1 file changed, 14 insertions(+), 12 deletions(-) - -diff --git a/UefiCpuPkg/Include/Library/MtrrLib.h b/UefiCpuPkg/Include/Library/MtrrLib.h -index 86cc1aab3b..287d249a99 100644 ---- a/UefiCpuPkg/Include/Library/MtrrLib.h -+++ b/UefiCpuPkg/Include/Library/MtrrLib.h -@@ -9,6 +9,8 @@ - #ifndef _MTRR_LIB_H_ - #define _MTRR_LIB_H_ - -+#include -+ - // - // According to IA32 SDM, MTRRs number and MSR offset are always consistent - // for IA32 processor family -@@ -82,20 +84,20 @@ typedef struct _MTRR_SETTINGS_ { - // Memory cache types - // - typedef enum { -- CacheUncacheable = 0, -- CacheWriteCombining = 1, -- CacheWriteThrough = 4, -- CacheWriteProtected = 5, -- CacheWriteBack = 6, -- CacheInvalid = 7 -+ CacheUncacheable = MSR_IA32_MTRR_CACHE_UNCACHEABLE, -+ CacheWriteCombining = MSR_IA32_MTRR_CACHE_WRITE_COMBINING, -+ CacheWriteThrough = MSR_IA32_MTRR_CACHE_WRITE_THROUGH, -+ CacheWriteProtected = MSR_IA32_MTRR_CACHE_WRITE_PROTECTED, -+ CacheWriteBack = MSR_IA32_MTRR_CACHE_WRITE_BACK, -+ CacheInvalid = MSR_IA32_MTRR_CACHE_INVALID_TYPE, - } MTRR_MEMORY_CACHE_TYPE; - --#define MTRR_CACHE_UNCACHEABLE 0 --#define MTRR_CACHE_WRITE_COMBINING 1 --#define MTRR_CACHE_WRITE_THROUGH 4 --#define MTRR_CACHE_WRITE_PROTECTED 5 --#define MTRR_CACHE_WRITE_BACK 6 --#define MTRR_CACHE_INVALID_TYPE 7 -+#define MTRR_CACHE_UNCACHEABLE MSR_IA32_MTRR_CACHE_UNCACHEABLE -+#define MTRR_CACHE_WRITE_COMBINING MSR_IA32_MTRR_CACHE_WRITE_COMBINING -+#define MTRR_CACHE_WRITE_THROUGH MSR_IA32_MTRR_CACHE_WRITE_THROUGH -+#define MTRR_CACHE_WRITE_PROTECTED MSR_IA32_MTRR_CACHE_WRITE_PROTECTED -+#define MTRR_CACHE_WRITE_BACK MSR_IA32_MTRR_CACHE_WRITE_BACK -+#define MTRR_CACHE_INVALID_TYPE MSR_IA32_MTRR_CACHE_INVALID_TYPE - - typedef struct { - UINT64 BaseAddress; diff --git a/SOURCES/0033-OvmfPkg-PlatformPei-Move-NV-vars-init-to-after-SEV-S.patch b/SOURCES/0033-OvmfPkg-PlatformPei-Move-NV-vars-init-to-after-SEV-S.patch new file mode 100644 index 0000000..c53bcf6 --- /dev/null +++ b/SOURCES/0033-OvmfPkg-PlatformPei-Move-NV-vars-init-to-after-SEV-S.patch @@ -0,0 +1,52 @@ +From 6fc76f3572566a83a34bb26d21e16c0e75de3609 Mon Sep 17 00:00:00 2001 +From: Tom Lendacky +Date: Mon, 18 Nov 2024 12:59:32 -0600 +Subject: [PATCH] OvmfPkg/PlatformPei: Move NV vars init to after SEV-SNP + memory acceptance + +When OVMF is built with the SECURE_BOOT_ENABLE set to true, reserving and +initializing the emulated variable store happens before memory has been +accepted under SEV-SNP. This results in a #VC exception for accessing +memory that hasn't been validated (error code 0x404). The #VC handler +treats this error code as a fatal error, causing the OVMF boot to fail. + +Move the call to ReserveEmuVariableNvStore() to after memory has been +accepted by AmdSevInitialize(). + +Signed-off-by: Tom Lendacky +(cherry picked from commit 52fa7e78d282f8434b41aff24b3a5a745611ff87) +--- + OvmfPkg/PlatformPei/Platform.c | 14 ++++++++++---- + 1 file changed, 10 insertions(+), 4 deletions(-) + +diff --git a/OvmfPkg/PlatformPei/Platform.c b/OvmfPkg/PlatformPei/Platform.c +index 05b924f99f..54903cfca2 100644 +--- a/OvmfPkg/PlatformPei/Platform.c ++++ b/OvmfPkg/PlatformPei/Platform.c +@@ -365,10 +365,6 @@ InitializePlatform ( + InitializeRamRegions (PlatformInfoHob); + + if (PlatformInfoHob->BootMode != BOOT_ON_S3_RESUME) { +- if (!PlatformInfoHob->SmmSmramRequire) { +- ReserveEmuVariableNvStore (); +- } +- + PeiFvInitialization (PlatformInfoHob); + MemTypeInfoInitialization (PlatformInfoHob); + MemMapInitialization (PlatformInfoHob); +@@ -391,5 +387,15 @@ InitializePlatform ( + RelocateSmBase (); + } + ++ // ++ // Performed after CoCo (SEV/TDX) initialization to allow the memory ++ // used to be validated before being used. ++ // ++ if (PlatformInfoHob->BootMode != BOOT_ON_S3_RESUME) { ++ if (!PlatformInfoHob->SmmSmramRequire) { ++ ReserveEmuVariableNvStore (); ++ } ++ } ++ + return EFI_SUCCESS; + } diff --git a/SOURCES/0033-OvmfPkg-Sec-use-cache-type-defines-from-Architectura.patch b/SOURCES/0033-OvmfPkg-Sec-use-cache-type-defines-from-Architectura.patch deleted file mode 100644 index 4b65bd4..0000000 --- a/SOURCES/0033-OvmfPkg-Sec-use-cache-type-defines-from-Architectura.patch +++ /dev/null @@ -1,49 +0,0 @@ -From dd543686c34fc3c6ddfafc0104066889ad9d1813 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Tue, 30 Jan 2024 14:04:41 +0100 -Subject: [PATCH] OvmfPkg/Sec: use cache type #defines from ArchitecturalMsr.h - -RH-Author: Gerd Hoffmann -RH-MergeRequest: 55: OvmfPkg/Sec: Setup MTRR early in the boot process. -RH-Jira: RHEL-21704 -RH-Acked-by: Laszlo Ersek -RH-Commit: [4/4] 55f00e3e153ca945ca458e7abc26780a8d83ac85 (kraxel.rh/centos-src-edk2) - -Reviewed-by: Laszlo Ersek -Signed-off-by: Gerd Hoffmann -Message-ID: <20240130130441.772484-5-kraxel@redhat.com> - -patch_name: edk2-OvmfPkg-Sec-use-cache-type-defines-from-Architectura.patch -present_in_specfile: true -location_in_specfile: 52 ---- - OvmfPkg/IntelTdx/Sec/SecMain.c | 2 +- - OvmfPkg/Sec/SecMain.c | 2 +- - 2 files changed, 2 insertions(+), 2 deletions(-) - -diff --git a/OvmfPkg/IntelTdx/Sec/SecMain.c b/OvmfPkg/IntelTdx/Sec/SecMain.c -index 7094d86159..1a19f26178 100644 ---- a/OvmfPkg/IntelTdx/Sec/SecMain.c -+++ b/OvmfPkg/IntelTdx/Sec/SecMain.c -@@ -69,7 +69,7 @@ SecMtrrSetup ( - } - - DefType.Uint64 = AsmReadMsr64 (MSR_IA32_MTRR_DEF_TYPE); -- DefType.Bits.Type = 6; /* write back */ -+ DefType.Bits.Type = MSR_IA32_MTRR_CACHE_WRITE_BACK; - DefType.Bits.E = 1; /* enable */ - AsmWriteMsr64 (MSR_IA32_MTRR_DEF_TYPE, DefType.Uint64); - } -diff --git a/OvmfPkg/Sec/SecMain.c b/OvmfPkg/Sec/SecMain.c -index 725b57e2fa..26963b924d 100644 ---- a/OvmfPkg/Sec/SecMain.c -+++ b/OvmfPkg/Sec/SecMain.c -@@ -765,7 +765,7 @@ SecMtrrSetup ( - } - - DefType.Uint64 = AsmReadMsr64 (MSR_IA32_MTRR_DEF_TYPE); -- DefType.Bits.Type = 6; /* write back */ -+ DefType.Bits.Type = MSR_IA32_MTRR_CACHE_WRITE_BACK; - DefType.Bits.E = 1; /* enable */ - AsmWriteMsr64 (MSR_IA32_MTRR_DEF_TYPE, DefType.Uint64); - } diff --git a/SOURCES/0034-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch b/SOURCES/0034-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch deleted file mode 100644 index 557b11d..0000000 --- a/SOURCES/0034-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch +++ /dev/null @@ -1,54 +0,0 @@ -From bbd537bc6560494b0b08886364c38406b1e8107a Mon Sep 17 00:00:00 2001 -From: Sam -Date: Wed, 29 May 2024 07:46:03 +0800 -Subject: [PATCH] NetworkPkg TcpDxe: Fixed system stuck on PXE boot flow in - iPXE environment -MIME-Version: 1.0 -Content-Type: text/plain; charset=UTF-8 -Content-Transfer-Encoding: 8bit - -This bug fix is based on the following commit "NetworkPkg TcpDxe: SECURITY PATCH" -REF: 1904a64 - -Issue Description: -An "Invalid handle" error was detected during runtime when attempting to destroy a child instance of the hashing protocol. The problematic code segment was: - -NetworkPkg\TcpDxe\TcpDriver.c -Status = Hash2ServiceBinding->DestroyChild(Hash2ServiceBinding, ​&mHash2ServiceHandle); - -Root Cause Analysis: -The root cause of the error was the passing of an incorrect parameter type, a pointer to an EFI_HANDLE instead of an EFI_HANDLE itself, to the DestroyChild function. This mismatch resulted in the function receiving an invalid handle. - -Implemented Solution: -To resolve this issue, the function call was corrected to pass mHash2ServiceHandle directly: - -NetworkPkg\TcpDxe\TcpDriver.c -Status = Hash2ServiceBinding->DestroyChild(Hash2ServiceBinding, mHash2ServiceHandle); - -This modification ensures the correct handle type is used, effectively rectifying the "Invalid handle" error. - -Verification: -Testing has been conducted, confirming the efficacy of the fix. Additionally, the BIOS can boot into the OS in an iPXE environment. - -Cc: Doug Flick [MSFT] - -Signed-off-by: Sam Tsai [Wiwynn] -Reviewed-by: Saloni Kasbekar -(cherry picked from commit ced13b93afea87a8a1fe6ddbb67240a84cb2e3d3) ---- - NetworkPkg/TcpDxe/TcpDriver.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/NetworkPkg/TcpDxe/TcpDriver.c b/NetworkPkg/TcpDxe/TcpDriver.c -index 40bba4080c..c6e7c0df54 100644 ---- a/NetworkPkg/TcpDxe/TcpDriver.c -+++ b/NetworkPkg/TcpDxe/TcpDriver.c -@@ -509,7 +509,7 @@ TcpDestroyService ( - // - // Destroy the instance of the hashing protocol for this controller. - // -- Status = Hash2ServiceBinding->DestroyChild (Hash2ServiceBinding, &mHash2ServiceHandle); -+ Status = Hash2ServiceBinding->DestroyChild (Hash2ServiceBinding, mHash2ServiceHandle); - if (EFI_ERROR (Status)) { - return EFI_UNSUPPORTED; - } diff --git a/SOURCES/0034-OvmfPkg-PlatformInitLib-Retry-NV-vars-FV-check-as-sh.patch b/SOURCES/0034-OvmfPkg-PlatformInitLib-Retry-NV-vars-FV-check-as-sh.patch new file mode 100644 index 0000000..9604e05 --- /dev/null +++ b/SOURCES/0034-OvmfPkg-PlatformInitLib-Retry-NV-vars-FV-check-as-sh.patch @@ -0,0 +1,103 @@ +From 3ae6cb5329ce5e48efc29989943e19cfccbfb38b Mon Sep 17 00:00:00 2001 +From: Tom Lendacky +Date: Mon, 18 Nov 2024 12:59:32 -0600 +Subject: [PATCH] OvmfPkg/PlatformInitLib: Retry NV vars FV check as shared + +When OVMF is built with SECURE_BOOT_ENABLE, the variable store will be +populated and validated in PlatformValidateNvVarStore(). When an SEV +or an SEV-ES guest is running, this may be encrypted or unencrypted +depending on how the guest was started. If the guest was started with the +combined code and variable contents (OVMF.fd), then the variable store +will be encrypted. If the guest was started with the separate code and +variables contents (OVMF_CODE.fd and OVMF_VARS.fd), then the variable +store will be unencrypted. + +When PlatformValidateNvVarStore() is first invoked, the variable store +area is initially mapped encrypted, which may or may not pass the variable +validation step depending how the guest was launched. To accomodate this, +retry the validation step on failure after remapping the variable store +area as unencrypted. + +Signed-off-by: Tom Lendacky +(cherry picked from commit d502cc7702e4d537c2bcbe5256e26cba6d4ca8c6) +--- + OvmfPkg/Library/PlatformInitLib/Platform.c | 32 +++++++++++++++++-- + .../PlatformInitLib/PlatformInitLib.inf | 1 + + 2 files changed, 31 insertions(+), 2 deletions(-) + +diff --git a/OvmfPkg/Library/PlatformInitLib/Platform.c b/OvmfPkg/Library/PlatformInitLib/Platform.c +index 10fc17355f..715533b1f2 100644 +--- a/OvmfPkg/Library/PlatformInitLib/Platform.c ++++ b/OvmfPkg/Library/PlatformInitLib/Platform.c +@@ -34,6 +34,7 @@ + #include + #include + #include ++#include + + #include + +@@ -774,6 +775,8 @@ PlatformValidateNvVarStore ( + EFI_FIRMWARE_VOLUME_HEADER *NvVarStoreFvHeader; + VARIABLE_STORE_HEADER *NvVarStoreHeader; + AUTHENTICATED_VARIABLE_HEADER *VariableHeader; ++ BOOLEAN Retry; ++ EFI_STATUS Status; + + static EFI_GUID FvHdrGUID = EFI_SYSTEM_NV_DATA_FV_GUID; + static EFI_GUID VarStoreHdrGUID = EFI_AUTHENTICATED_VARIABLE_GUID; +@@ -792,6 +795,15 @@ PlatformValidateNvVarStore ( + // + NvVarStoreFvHeader = (EFI_FIRMWARE_VOLUME_HEADER *)NvVarStoreBase; + ++ // ++ // SEV and SEV-ES can use separate flash devices for OVMF code and ++ // OVMF variables. In this case, the OVMF variables will need to be ++ // mapped unencrypted. If the initial validation fails, remap the ++ // NV variable store as unencrypted and retry the validation. ++ // ++ Retry = MemEncryptSevIsEnabled (); ++ ++RETRY: + if ((!IsZeroBuffer (NvVarStoreFvHeader->ZeroVector, 16)) || + (!CompareGuid (&FvHdrGUID, &NvVarStoreFvHeader->FileSystemGuid)) || + (NvVarStoreFvHeader->Signature != EFI_FVH_SIGNATURE) || +@@ -801,8 +813,24 @@ PlatformValidateNvVarStore ( + (NvVarStoreFvHeader->FvLength != NvVarStoreSize) + ) + { +- DEBUG ((DEBUG_ERROR, "NvVarStore FV headers were invalid.\n")); +- return FALSE; ++ if (!Retry) { ++ DEBUG ((DEBUG_ERROR, "NvVarStore FV headers were invalid.\n")); ++ return FALSE; ++ } ++ ++ DEBUG ((DEBUG_INFO, "Remapping NvVarStore as shared\n")); ++ Status = MemEncryptSevClearMmioPageEncMask ( ++ 0, ++ (UINTN)NvVarStoreBase, ++ EFI_SIZE_TO_PAGES (NvVarStoreSize) ++ ); ++ if (EFI_ERROR (Status)) { ++ DEBUG ((DEBUG_ERROR, "Failed to map NvVarStore as shared\n")); ++ return FALSE; ++ } ++ ++ Retry = FALSE; ++ goto RETRY; + } + + // +diff --git a/OvmfPkg/Library/PlatformInitLib/PlatformInitLib.inf b/OvmfPkg/Library/PlatformInitLib/PlatformInitLib.inf +index 3e63ef4423..fb179e6791 100644 +--- a/OvmfPkg/Library/PlatformInitLib/PlatformInitLib.inf ++++ b/OvmfPkg/Library/PlatformInitLib/PlatformInitLib.inf +@@ -48,6 +48,7 @@ + HobLib + QemuFwCfgLib + QemuFwCfgSimpleParserLib ++ MemEncryptSevLib + MemoryAllocationLib + MtrrLib + PcdLib diff --git a/SOURCES/0035-OvmfPkg-EmuVariableFvbRuntimeDxe-Issue-NV-vars-initi.patch b/SOURCES/0035-OvmfPkg-EmuVariableFvbRuntimeDxe-Issue-NV-vars-initi.patch new file mode 100644 index 0000000..43e371b --- /dev/null +++ b/SOURCES/0035-OvmfPkg-EmuVariableFvbRuntimeDxe-Issue-NV-vars-initi.patch @@ -0,0 +1,28 @@ +From 6944acabf2aa916e7f321c28f19e7d95b155df99 Mon Sep 17 00:00:00 2001 +From: Tom Lendacky +Date: Mon, 18 Nov 2024 12:59:32 -0600 +Subject: [PATCH] OvmfPkg/EmuVariableFvbRuntimeDxe: Issue NV vars + initializitation message + +Add a debug message that indicates when the NV variables are being +initialized through the template structure. + +Signed-off-by: Tom Lendacky +(cherry picked from commit 6142f0a8a53557ba50300c762a15bf3c18382162) +--- + OvmfPkg/EmuVariableFvbRuntimeDxe/Fvb.c | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/OvmfPkg/EmuVariableFvbRuntimeDxe/Fvb.c b/OvmfPkg/EmuVariableFvbRuntimeDxe/Fvb.c +index c07e38966e..cc476c7df2 100644 +--- a/OvmfPkg/EmuVariableFvbRuntimeDxe/Fvb.c ++++ b/OvmfPkg/EmuVariableFvbRuntimeDxe/Fvb.c +@@ -692,6 +692,8 @@ InitializeFvAndVariableStoreHeaders ( + // + Fv = (EFI_FIRMWARE_VOLUME_HEADER *)Ptr; + Fv->Checksum = CalculateCheckSum16 (Ptr, Fv->HeaderLength); ++ ++ DEBUG ((DEBUG_INFO, "EMU Variable FVB: Initialized FV using template structure\n")); + } + + /** diff --git a/SOURCES/0035-OvmfPkg-add-morlock-support.patch b/SOURCES/0035-OvmfPkg-add-morlock-support.patch deleted file mode 100644 index 1ad1a30..0000000 --- a/SOURCES/0035-OvmfPkg-add-morlock-support.patch +++ /dev/null @@ -1,127 +0,0 @@ -From 3f8eab199430de18c1c6a98d1d0772499b17cc86 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Wed, 8 May 2024 13:14:26 +0200 -Subject: [PATCH] OvmfPkg: add morlock support - -Add dsc + fdf include files to add the MorLock drivers to the build. -Add the include files to OVMF build configurations. - -Signed-off-by: Gerd Hoffmann -(cherry picked from commit b45aff0dc9cb87f316eb17a11e5d4438175d9cca) ---- - OvmfPkg/Include/Dsc/MorLock.dsc.inc | 10 ++++++++++ - OvmfPkg/Include/Fdf/MorLock.fdf.inc | 10 ++++++++++ - OvmfPkg/OvmfPkgIa32.dsc | 1 + - OvmfPkg/OvmfPkgIa32.fdf | 1 + - OvmfPkg/OvmfPkgIa32X64.dsc | 1 + - OvmfPkg/OvmfPkgIa32X64.fdf | 1 + - OvmfPkg/OvmfPkgX64.dsc | 1 + - OvmfPkg/OvmfPkgX64.fdf | 1 + - 8 files changed, 26 insertions(+) - create mode 100644 OvmfPkg/Include/Dsc/MorLock.dsc.inc - create mode 100644 OvmfPkg/Include/Fdf/MorLock.fdf.inc - -diff --git a/OvmfPkg/Include/Dsc/MorLock.dsc.inc b/OvmfPkg/Include/Dsc/MorLock.dsc.inc -new file mode 100644 -index 0000000000..a8c5fb24b8 ---- /dev/null -+++ b/OvmfPkg/Include/Dsc/MorLock.dsc.inc -@@ -0,0 +1,10 @@ -+## -+# SPDX-License-Identifier: BSD-2-Clause-Patent -+# -+# MorLock support -+## -+ -+ SecurityPkg/Tcg/MemoryOverwriteControl/TcgMor.inf -+!if $(SMM_REQUIRE) == TRUE -+ SecurityPkg/Tcg/MemoryOverwriteRequestControlLock/TcgMorLockSmm.inf -+!endif -diff --git a/OvmfPkg/Include/Fdf/MorLock.fdf.inc b/OvmfPkg/Include/Fdf/MorLock.fdf.inc -new file mode 100644 -index 0000000000..20b7d6619a ---- /dev/null -+++ b/OvmfPkg/Include/Fdf/MorLock.fdf.inc -@@ -0,0 +1,10 @@ -+## -+# SPDX-License-Identifier: BSD-2-Clause-Patent -+# -+# MorLock support -+## -+ -+INF SecurityPkg/Tcg/MemoryOverwriteControl/TcgMor.inf -+!if $(SMM_REQUIRE) == TRUE -+INF SecurityPkg/Tcg/MemoryOverwriteRequestControlLock/TcgMorLockSmm.inf -+!endif -diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc -index d8ae542686..65a866ae0c 100644 ---- a/OvmfPkg/OvmfPkgIa32.dsc -+++ b/OvmfPkg/OvmfPkgIa32.dsc -@@ -887,6 +887,7 @@ - MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf - - !include OvmfPkg/Include/Dsc/ShellComponents.dsc.inc -+!include OvmfPkg/Include/Dsc/MorLock.dsc.inc - - !if $(SECURE_BOOT_ENABLE) == TRUE - SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf -diff --git a/OvmfPkg/OvmfPkgIa32.fdf b/OvmfPkg/OvmfPkgIa32.fdf -index 0ffa3be750..10eb6fe72b 100644 ---- a/OvmfPkg/OvmfPkgIa32.fdf -+++ b/OvmfPkg/OvmfPkgIa32.fdf -@@ -355,6 +355,7 @@ INF MdeModulePkg/Universal/Variable/RuntimeDxe/VariableRuntimeDxe.inf - !include OvmfPkg/Include/Fdf/OvmfTpmDxe.fdf.inc - - !include OvmfPkg/Include/Fdf/ShellDxe.fdf.inc -+!include OvmfPkg/Include/Fdf/MorLock.fdf.inc - - !if $(LOAD_X64_ON_IA32_ENABLE) == TRUE - INF OvmfPkg/CompatImageLoaderDxe/CompatImageLoaderDxe.inf -diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc -index 52ac2c96fc..679e25501b 100644 ---- a/OvmfPkg/OvmfPkgIa32X64.dsc -+++ b/OvmfPkg/OvmfPkgIa32X64.dsc -@@ -901,6 +901,7 @@ - MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf - - !include OvmfPkg/Include/Dsc/ShellComponents.dsc.inc -+!include OvmfPkg/Include/Dsc/MorLock.dsc.inc - - !if $(SECURE_BOOT_ENABLE) == TRUE - SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf -diff --git a/OvmfPkg/OvmfPkgIa32X64.fdf b/OvmfPkg/OvmfPkgIa32X64.fdf -index c4f3ec0735..ff06bbfc6f 100644 ---- a/OvmfPkg/OvmfPkgIa32X64.fdf -+++ b/OvmfPkg/OvmfPkgIa32X64.fdf -@@ -362,6 +362,7 @@ INF MdeModulePkg/Universal/Variable/RuntimeDxe/VariableRuntimeDxe.inf - !include OvmfPkg/Include/Fdf/OvmfTpmDxe.fdf.inc - - !include OvmfPkg/Include/Fdf/ShellDxe.fdf.inc -+!include OvmfPkg/Include/Fdf/MorLock.fdf.inc - - ################################################################################ - -diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc -index f76d0ef7bc..d294fd4625 100644 ---- a/OvmfPkg/OvmfPkgX64.dsc -+++ b/OvmfPkg/OvmfPkgX64.dsc -@@ -969,6 +969,7 @@ - MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf - - !include OvmfPkg/Include/Dsc/ShellComponents.dsc.inc -+!include OvmfPkg/Include/Dsc/MorLock.dsc.inc - - !if $(SECURE_BOOT_ENABLE) == TRUE - SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf -diff --git a/OvmfPkg/OvmfPkgX64.fdf b/OvmfPkg/OvmfPkgX64.fdf -index bedd85ef7a..f3b787201f 100644 ---- a/OvmfPkg/OvmfPkgX64.fdf -+++ b/OvmfPkg/OvmfPkgX64.fdf -@@ -402,6 +402,7 @@ INF OvmfPkg/Tcg/TdTcg2Dxe/TdTcg2Dxe.inf - !include OvmfPkg/Include/Fdf/OvmfTpmDxe.fdf.inc - - !include OvmfPkg/Include/Fdf/ShellDxe.fdf.inc -+!include OvmfPkg/Include/Fdf/MorLock.fdf.inc - - ################################################################################ - diff --git a/SOURCES/0036-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch b/SOURCES/0036-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch deleted file mode 100644 index 653b277..0000000 --- a/SOURCES/0036-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch +++ /dev/null @@ -1,192 +0,0 @@ -From 3899f089b8197f52ca63fe1561f8e5e1341f8198 Mon Sep 17 00:00:00 2001 -From: Pedro Falcato -Date: Tue, 22 Nov 2022 22:31:03 +0000 -Subject: [PATCH] MdePkg/BaseRngLib: Add a smoketest for RDRAND and check CPUID - -RDRAND has notoriously been broken many times over its lifespan. -Add a smoketest to RDRAND, in order to better sniff out potential -security concerns. - -Also add a proper CPUID test in order to support older CPUs which may -not have it; it was previously being tested but then promptly ignored. - -Testing algorithm inspired by linux's arch/x86/kernel/cpu/rdrand.c -:x86_init_rdrand() per commit 049f9ae9.. - -Many thanks to Jason Donenfeld for relicensing his linux RDRAND detection -code to MIT and the public domain. - ->On Tue, Nov 22, 2022 at 2:21 PM Jason A. Donenfeld wrote: - <..> -> I (re)wrote that function in Linux. I hereby relicense it as MIT, and -> also place it into public domain. Do with it what you will now. -> -> Jason - -BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=4163 - -Signed-off-by: Pedro Falcato -Cc: Michael D Kinney -Cc: Liming Gao -Cc: Zhiguang Liu -Cc: Jason A. Donenfeld -(cherry picked from commit c3a8ca7b54a9fd17acdf16c6282a92cc989fa92a) ---- - MdePkg/Library/BaseRngLib/Rand/RdRand.c | 99 +++++++++++++++++++++++-- - 1 file changed, 91 insertions(+), 8 deletions(-) - -diff --git a/MdePkg/Library/BaseRngLib/Rand/RdRand.c b/MdePkg/Library/BaseRngLib/Rand/RdRand.c -index 9bd68352f9..06d2a6f12d 100644 ---- a/MdePkg/Library/BaseRngLib/Rand/RdRand.c -+++ b/MdePkg/Library/BaseRngLib/Rand/RdRand.c -@@ -3,6 +3,7 @@ - to provide high-quality random numbers. - - Copyright (c) 2023, Arm Limited. All rights reserved.
-+Copyright (c) 2022, Pedro Falcato. All rights reserved.
- Copyright (c) 2021, NUVIA Inc. All rights reserved.
- Copyright (c) 2015, Intel Corporation. All rights reserved.
- -@@ -24,6 +25,88 @@ SPDX-License-Identifier: BSD-2-Clause-Patent - - STATIC BOOLEAN mRdRandSupported; - -+// -+// Intel SDM says 10 tries is good enough for reliable RDRAND usage. -+// -+#define RDRAND_RETRIES 10 -+ -+#define RDRAND_TEST_SAMPLES 8 -+ -+#define RDRAND_MIN_CHANGE 5 -+ -+// -+// Add a define for native-word RDRAND, just for the test. -+// -+#ifdef MDE_CPU_X64 -+#define ASM_RDRAND AsmRdRand64 -+#else -+#define ASM_RDRAND AsmRdRand32 -+#endif -+ -+/** -+ Tests RDRAND for broken implementations. -+ -+ @retval TRUE RDRAND is reliable (and hopefully safe). -+ @retval FALSE RDRAND is unreliable and should be disabled, despite CPUID. -+ -+**/ -+STATIC -+BOOLEAN -+TestRdRand ( -+ VOID -+ ) -+{ -+ // -+ // Test for notoriously broken rdrand implementations that always return the same -+ // value, like the Zen 3 uarch (all-1s) or other several AMD families on suspend/resume (also all-1s). -+ // Note that this should be expanded to extensively test for other sorts of possible errata. -+ // -+ -+ // -+ // Our algorithm samples rdrand $RDRAND_TEST_SAMPLES times and expects -+ // a different result $RDRAND_MIN_CHANGE times for reliable RDRAND usage. -+ // -+ UINTN Prev; -+ UINT8 Idx; -+ UINT8 TestIteration; -+ UINT32 Changed; -+ -+ Changed = 0; -+ -+ for (TestIteration = 0; TestIteration < RDRAND_TEST_SAMPLES; TestIteration++) { -+ UINTN Sample; -+ // -+ // Note: We use a retry loop for rdrand. Normal users get this in BaseRng.c -+ // Any failure to get a random number will assume RDRAND does not work. -+ // -+ for (Idx = 0; Idx < RDRAND_RETRIES; Idx++) { -+ if (ASM_RDRAND (&Sample)) { -+ break; -+ } -+ } -+ -+ if (Idx == RDRAND_RETRIES) { -+ DEBUG ((DEBUG_ERROR, "BaseRngLib/x86: CPU BUG: Failed to get an RDRAND random number - disabling\n")); -+ return FALSE; -+ } -+ -+ if (TestIteration != 0) { -+ Changed += Sample != Prev; -+ } -+ -+ Prev = Sample; -+ } -+ -+ if (Changed < RDRAND_MIN_CHANGE) { -+ DEBUG ((DEBUG_ERROR, "BaseRngLib/x86: CPU BUG: RDRAND not reliable - disabling\n")); -+ return FALSE; -+ } -+ -+ return TRUE; -+} -+ -+#undef ASM_RDRAND -+ - /** - The constructor function checks whether or not RDRAND instruction is supported - by the host hardware. -@@ -48,10 +131,13 @@ BaseRngLibConstructor ( - // CPUID. A value of 1 indicates that processor support RDRAND instruction. - // - AsmCpuid (1, 0, 0, &RegEcx, 0); -- ASSERT ((RegEcx & RDRAND_MASK) == RDRAND_MASK); - - mRdRandSupported = ((RegEcx & RDRAND_MASK) == RDRAND_MASK); - -+ if (mRdRandSupported) { -+ mRdRandSupported = TestRdRand (); -+ } -+ - return EFI_SUCCESS; - } - -@@ -70,6 +156,7 @@ ArchGetRandomNumber16 ( - OUT UINT16 *Rand - ) - { -+ ASSERT (mRdRandSupported); - return AsmRdRand16 (Rand); - } - -@@ -88,6 +175,7 @@ ArchGetRandomNumber32 ( - OUT UINT32 *Rand - ) - { -+ ASSERT (mRdRandSupported); - return AsmRdRand32 (Rand); - } - -@@ -106,6 +194,7 @@ ArchGetRandomNumber64 ( - OUT UINT64 *Rand - ) - { -+ ASSERT (mRdRandSupported); - return AsmRdRand64 (Rand); - } - -@@ -122,13 +211,7 @@ ArchIsRngSupported ( - VOID - ) - { -- /* -- Existing software depends on this always returning TRUE, so for -- now hard-code it. -- -- return mRdRandSupported; -- */ -- return TRUE; -+ return mRdRandSupported; - } - - /** diff --git a/SOURCES/0036-OvmfPkg-PlatformInitLib-enable-x2apic-mode-if-needed.patch b/SOURCES/0036-OvmfPkg-PlatformInitLib-enable-x2apic-mode-if-needed.patch new file mode 100644 index 0000000..cbce7af --- /dev/null +++ b/SOURCES/0036-OvmfPkg-PlatformInitLib-enable-x2apic-mode-if-needed.patch @@ -0,0 +1,51 @@ +From 87a3869f6d509e36d8c5dfe5a1bd8dea62195dab Mon Sep 17 00:00:00 2001 +From: Gerd Hoffmann +Date: Fri, 23 Aug 2024 11:55:31 +0200 +Subject: [PATCH] OvmfPkg/PlatformInitLib: enable x2apic mode if needed + +Enable x2apic mode in case the number of possible CPUs (including +hotplug-able CPus which are not (yet) online) is larger than 255. + +Signed-off-by: Gerd Hoffmann +(cherry picked from commit 8c8e05db24d8578cf87669e491f983fbd8357d55) +--- + OvmfPkg/Library/PlatformInitLib/Platform.c | 6 ++++++ + OvmfPkg/Library/PlatformInitLib/PlatformInitLib.inf | 1 + + 2 files changed, 7 insertions(+) + +diff --git a/OvmfPkg/Library/PlatformInitLib/Platform.c b/OvmfPkg/Library/PlatformInitLib/Platform.c +index 715533b1f2..afe8b0abd6 100644 +--- a/OvmfPkg/Library/PlatformInitLib/Platform.c ++++ b/OvmfPkg/Library/PlatformInitLib/Platform.c +@@ -30,6 +30,7 @@ + #include + #include + #include ++#include + #include + #include + #include +@@ -720,6 +721,11 @@ PlatformMaxCpuCountInitialization ( + )); + ASSERT (BootCpuCount <= MaxCpuCount); + ++ if (MaxCpuCount > 255) { ++ DEBUG ((DEBUG_INFO, "%a: enable x2apic mode\n", __func__)); ++ SetApicMode (LOCAL_APIC_MODE_X2APIC); ++ } ++ + PlatformInfoHob->PcdCpuMaxLogicalProcessorNumber = MaxCpuCount; + PlatformInfoHob->PcdCpuBootLogicalProcessorNumber = BootCpuCount; + } +diff --git a/OvmfPkg/Library/PlatformInitLib/PlatformInitLib.inf b/OvmfPkg/Library/PlatformInitLib/PlatformInitLib.inf +index fb179e6791..c79b2ee106 100644 +--- a/OvmfPkg/Library/PlatformInitLib/PlatformInitLib.inf ++++ b/OvmfPkg/Library/PlatformInitLib/PlatformInitLib.inf +@@ -48,6 +48,7 @@ + HobLib + QemuFwCfgLib + QemuFwCfgSimpleParserLib ++ LocalApicLib + MemEncryptSevLib + MemoryAllocationLib + MtrrLib diff --git a/SOURCES/edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch b/SOURCES/0037-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch similarity index 79% rename from SOURCES/edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch rename to SOURCES/0037-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch index c5bf10a..be057b8 100644 --- a/SOURCES/edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch +++ b/SOURCES/0037-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch @@ -1,14 +1,8 @@ -From 47d6a4638ea73965ce1a43248e27b688dddc26ee Mon Sep 17 00:00:00 2001 +From 8f117e06457536a78feeee1e49c43ca435d94842 Mon Sep 17 00:00:00 2001 From: Oliver Steffen Date: Mon, 4 Nov 2024 19:00:11 +0100 Subject: [PATCH] OvmfPkg: Rerun dispatcher after initializing virtio-rng -RH-Author: Oliver Steffen -RH-MergeRequest: 84: OvmfPkg: Rerun dispatcher after initializing virtio-rng -RH-Jira: RHEL-58631 -RH-Acked-by: Gerd Hoffmann -RH-Commit: [1/1] d663321aab28f000c279bfac6dbaaa378678532e (osteffen/edk2) - Since the pixiefail CVE fix the network stack requires a hardware random number generator. This can currently be a modern CPU supporting the RDRAND instruction or a virtio-rng device. @@ -23,6 +17,7 @@ Fixes: 4c4ceb2ceb ("NetworkPkg: SECURITY PATCH CVE-2023-45237") Analysed-by: Stefano Garzarella Suggested-by: Gerd Hoffmann Signed-off-by: Oliver Steffen +(cherry picked from commit 9c4542a0645ac832e22d0c3da0f1ee7b127a316f) --- OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c | 2 ++ 1 file changed, 2 insertions(+) @@ -40,6 +35,3 @@ index 87d1ac3142..1f1298eb0b 100644 } return EFI_SUCCESS; --- -2.45.1 - diff --git a/SOURCES/0037-SecurityPkg-RngDxe-add-rng-test.patch b/SOURCES/0037-SecurityPkg-RngDxe-add-rng-test.patch deleted file mode 100644 index b894821..0000000 --- a/SOURCES/0037-SecurityPkg-RngDxe-add-rng-test.patch +++ /dev/null @@ -1,43 +0,0 @@ -From 4947d363211159647e9266fa20ad9d4c8bc52f71 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Fri, 31 May 2024 09:49:13 +0200 -Subject: [PATCH] SecurityPkg/RngDxe: add rng test - -Check whenever RngLib actually returns random numbers, only return -a non-zero number of Algorithms if that is the case. - -This has the effect that RndDxe loads and installs EFI_RNG_PROTOCOL -only in case it can actually deliver random numbers. - -Signed-off-by: Gerd Hoffmann -(cherry picked from commit a61bc0accb8a76edba4f073fdc7bafc908df045d) ---- - SecurityPkg/RandomNumberGenerator/RngDxe/Rand/RngDxe.c | 8 +++++++- - 1 file changed, 7 insertions(+), 1 deletion(-) - -diff --git a/SecurityPkg/RandomNumberGenerator/RngDxe/Rand/RngDxe.c b/SecurityPkg/RandomNumberGenerator/RngDxe/Rand/RngDxe.c -index 5723ed6957..8b0742bab6 100644 ---- a/SecurityPkg/RandomNumberGenerator/RngDxe/Rand/RngDxe.c -+++ b/SecurityPkg/RandomNumberGenerator/RngDxe/Rand/RngDxe.c -@@ -23,6 +23,7 @@ - - #include - #include -+#include - - #include "RngDxeInternals.h" - -@@ -43,7 +44,12 @@ GetAvailableAlgorithms ( - VOID - ) - { -- mAvailableAlgoArrayCount = RNG_ALGORITHM_COUNT; -+ UINT64 RngTest; -+ -+ if (GetRandomNumber64 (&RngTest)) { -+ mAvailableAlgoArrayCount = RNG_ALGORITHM_COUNT; -+ } -+ - return EFI_SUCCESS; - } - diff --git a/SOURCES/0038-OvmfPkg-wire-up-RngDxe.patch b/SOURCES/0038-OvmfPkg-wire-up-RngDxe.patch deleted file mode 100644 index 71d66be..0000000 --- a/SOURCES/0038-OvmfPkg-wire-up-RngDxe.patch +++ /dev/null @@ -1,301 +0,0 @@ -From 0aa96c512c689426838ec1cf4aa78ff088c03a1e Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Fri, 24 May 2024 12:51:17 +0200 -Subject: [PATCH] OvmfPkg: wire up RngDxe - -Add OvmfRng include snippets with the random number generator -configuration for OVMF. Include RngDxe, build with BaseRngLib, -so the rdrand instruction is used (if available). - -Also move VirtioRng to the include snippets. - -Use the new include snippets for OVMF builds. - -Signed-off-by: Gerd Hoffmann -(cherry picked from commit 712797cf19acd292bf203522a79e40e7e13d268b) ---- - OvmfPkg/AmdSev/AmdSevX64.dsc | 2 +- - OvmfPkg/AmdSev/AmdSevX64.fdf | 2 +- - OvmfPkg/Include/Dsc/OvmfRngComponents.dsc.inc | 9 +++++++++ - OvmfPkg/Include/Fdf/OvmfRngDxe.fdf.inc | 6 ++++++ - OvmfPkg/IntelTdx/IntelTdxX64.dsc | 2 +- - OvmfPkg/IntelTdx/IntelTdxX64.fdf | 2 +- - OvmfPkg/Microvm/MicrovmX64.dsc | 2 +- - OvmfPkg/Microvm/MicrovmX64.fdf | 2 +- - OvmfPkg/OvmfPkgIa32.dsc | 2 +- - OvmfPkg/OvmfPkgIa32.fdf | 2 +- - OvmfPkg/OvmfPkgIa32X64.dsc | 2 +- - OvmfPkg/OvmfPkgIa32X64.fdf | 2 +- - OvmfPkg/OvmfPkgX64.dsc | 2 +- - OvmfPkg/OvmfPkgX64.fdf | 2 +- - 14 files changed, 27 insertions(+), 12 deletions(-) - create mode 100644 OvmfPkg/Include/Dsc/OvmfRngComponents.dsc.inc - create mode 100644 OvmfPkg/Include/Fdf/OvmfRngDxe.fdf.inc - -diff --git a/OvmfPkg/AmdSev/AmdSevX64.dsc b/OvmfPkg/AmdSev/AmdSevX64.dsc -index cf1ad83e09..4edc2a9069 100644 ---- a/OvmfPkg/AmdSev/AmdSevX64.dsc -+++ b/OvmfPkg/AmdSev/AmdSevX64.dsc -@@ -649,7 +649,6 @@ - OvmfPkg/Virtio10Dxe/Virtio10.inf - OvmfPkg/VirtioBlkDxe/VirtioBlk.inf - OvmfPkg/VirtioScsiDxe/VirtioScsi.inf -- OvmfPkg/VirtioRngDxe/VirtioRng.inf - !if $(PVSCSI_ENABLE) == TRUE - OvmfPkg/PvScsiDxe/PvScsiDxe.inf - !endif -@@ -740,6 +739,7 @@ - OvmfPkg/AmdSev/Grub/Grub.inf - - !include OvmfPkg/Include/Dsc/ShellComponents.dsc.inc -+!include OvmfPkg/Include/Dsc/OvmfRngComponents.dsc.inc - - OvmfPkg/PlatformDxe/Platform.inf - OvmfPkg/AmdSevDxe/AmdSevDxe.inf { -diff --git a/OvmfPkg/AmdSev/AmdSevX64.fdf b/OvmfPkg/AmdSev/AmdSevX64.fdf -index c56c98dc85..480837b0fa 100644 ---- a/OvmfPkg/AmdSev/AmdSevX64.fdf -+++ b/OvmfPkg/AmdSev/AmdSevX64.fdf -@@ -227,7 +227,6 @@ INF OvmfPkg/VirtioPciDeviceDxe/VirtioPciDeviceDxe.inf - INF OvmfPkg/Virtio10Dxe/Virtio10.inf - INF OvmfPkg/VirtioBlkDxe/VirtioBlk.inf - INF OvmfPkg/VirtioScsiDxe/VirtioScsi.inf --INF OvmfPkg/VirtioRngDxe/VirtioRng.inf - !if $(PVSCSI_ENABLE) == TRUE - INF OvmfPkg/PvScsiDxe/PvScsiDxe.inf - !endif -@@ -318,6 +317,7 @@ INF MdeModulePkg/Universal/Variable/RuntimeDxe/VariableRuntimeDxe.inf - !include OvmfPkg/Include/Fdf/OvmfTpmDxe.fdf.inc - - !include OvmfPkg/Include/Fdf/ShellDxe.fdf.inc -+!include OvmfPkg/Include/Fdf/OvmfRngDxe.fdf.inc - - ################################################################################ - -diff --git a/OvmfPkg/Include/Dsc/OvmfRngComponents.dsc.inc b/OvmfPkg/Include/Dsc/OvmfRngComponents.dsc.inc -new file mode 100644 -index 0000000000..68839a0caa ---- /dev/null -+++ b/OvmfPkg/Include/Dsc/OvmfRngComponents.dsc.inc -@@ -0,0 +1,9 @@ -+## -+# SPDX-License-Identifier: BSD-2-Clause-Patent -+## -+ -+ SecurityPkg/RandomNumberGenerator/RngDxe/RngDxe.inf { -+ -+ RngLib|MdePkg/Library/BaseRngLib/BaseRngLib.inf -+ } -+ OvmfPkg/VirtioRngDxe/VirtioRng.inf -diff --git a/OvmfPkg/Include/Fdf/OvmfRngDxe.fdf.inc b/OvmfPkg/Include/Fdf/OvmfRngDxe.fdf.inc -new file mode 100644 -index 0000000000..99cb4a32b1 ---- /dev/null -+++ b/OvmfPkg/Include/Fdf/OvmfRngDxe.fdf.inc -@@ -0,0 +1,6 @@ -+## -+# SPDX-License-Identifier: BSD-2-Clause-Patent -+## -+ -+INF SecurityPkg/RandomNumberGenerator/RngDxe/RngDxe.inf -+INF OvmfPkg/VirtioRngDxe/VirtioRng.inf -diff --git a/OvmfPkg/IntelTdx/IntelTdxX64.dsc b/OvmfPkg/IntelTdx/IntelTdxX64.dsc -index 9f49b60ff0..4b7e1596fc 100644 ---- a/OvmfPkg/IntelTdx/IntelTdxX64.dsc -+++ b/OvmfPkg/IntelTdx/IntelTdxX64.dsc -@@ -636,7 +636,6 @@ - OvmfPkg/Virtio10Dxe/Virtio10.inf - OvmfPkg/VirtioBlkDxe/VirtioBlk.inf - OvmfPkg/VirtioScsiDxe/VirtioScsi.inf -- OvmfPkg/VirtioRngDxe/VirtioRng.inf - !if $(PVSCSI_ENABLE) == TRUE - OvmfPkg/PvScsiDxe/PvScsiDxe.inf - !endif -@@ -719,6 +718,7 @@ - MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf - - !include OvmfPkg/Include/Dsc/ShellComponents.dsc.inc -+!include OvmfPkg/Include/Dsc/OvmfRngComponents.dsc.inc - - !if $(SECURE_BOOT_ENABLE) == TRUE - SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf -diff --git a/OvmfPkg/IntelTdx/IntelTdxX64.fdf b/OvmfPkg/IntelTdx/IntelTdxX64.fdf -index ce5d542048..88d0f75ae2 100644 ---- a/OvmfPkg/IntelTdx/IntelTdxX64.fdf -+++ b/OvmfPkg/IntelTdx/IntelTdxX64.fdf -@@ -285,7 +285,6 @@ READ_LOCK_STATUS = TRUE - # - INF MdeModulePkg/Universal/EbcDxe/EbcDxe.inf - INF OvmfPkg/VirtioScsiDxe/VirtioScsi.inf --INF OvmfPkg/VirtioRngDxe/VirtioRng.inf - !if $(PVSCSI_ENABLE) == TRUE - INF OvmfPkg/PvScsiDxe/PvScsiDxe.inf - !endif -@@ -326,6 +325,7 @@ INF OvmfPkg/VirtioGpuDxe/VirtioGpu.inf - INF OvmfPkg/PlatformDxe/Platform.inf - - !include OvmfPkg/Include/Fdf/ShellDxe.fdf.inc -+!include OvmfPkg/Include/Fdf/OvmfRngDxe.fdf.inc - - ################################################################################ - -diff --git a/OvmfPkg/Microvm/MicrovmX64.dsc b/OvmfPkg/Microvm/MicrovmX64.dsc -index fb73f2e089..9206f01816 100644 ---- a/OvmfPkg/Microvm/MicrovmX64.dsc -+++ b/OvmfPkg/Microvm/MicrovmX64.dsc -@@ -760,7 +760,6 @@ - OvmfPkg/Virtio10Dxe/Virtio10.inf - OvmfPkg/VirtioBlkDxe/VirtioBlk.inf - OvmfPkg/VirtioScsiDxe/VirtioScsi.inf -- OvmfPkg/VirtioRngDxe/VirtioRng.inf - OvmfPkg/VirtioSerialDxe/VirtioSerial.inf - MdeModulePkg/Universal/WatchdogTimerDxe/WatchdogTimer.inf - MdeModulePkg/Universal/MonotonicCounterRuntimeDxe/MonotonicCounterRuntimeDxe.inf -@@ -846,6 +845,7 @@ - MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf - - !include OvmfPkg/Include/Dsc/ShellComponents.dsc.inc -+!include OvmfPkg/Include/Dsc/OvmfRngComponents.dsc.inc - - !if $(SECURE_BOOT_ENABLE) == TRUE - SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf -diff --git a/OvmfPkg/Microvm/MicrovmX64.fdf b/OvmfPkg/Microvm/MicrovmX64.fdf -index 055e659a35..c8268d7e8c 100644 ---- a/OvmfPkg/Microvm/MicrovmX64.fdf -+++ b/OvmfPkg/Microvm/MicrovmX64.fdf -@@ -207,7 +207,6 @@ INF OvmfPkg/VirtioPciDeviceDxe/VirtioPciDeviceDxe.inf - INF OvmfPkg/Virtio10Dxe/Virtio10.inf - INF OvmfPkg/VirtioBlkDxe/VirtioBlk.inf - INF OvmfPkg/VirtioScsiDxe/VirtioScsi.inf --INF OvmfPkg/VirtioRngDxe/VirtioRng.inf - INF OvmfPkg/VirtioSerialDxe/VirtioSerial.inf - - !if $(SECURE_BOOT_ENABLE) == TRUE -@@ -299,6 +298,7 @@ INF MdeModulePkg/Universal/FaultTolerantWriteDxe/FaultTolerantWriteDxe.inf - INF MdeModulePkg/Universal/Variable/RuntimeDxe/VariableRuntimeDxe.inf - - !include OvmfPkg/Include/Fdf/ShellDxe.fdf.inc -+!include OvmfPkg/Include/Fdf/OvmfRngDxe.fdf.inc - - ################################################################################ - -diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc -index 65a866ae0c..b64c215585 100644 ---- a/OvmfPkg/OvmfPkgIa32.dsc -+++ b/OvmfPkg/OvmfPkgIa32.dsc -@@ -784,7 +784,6 @@ - OvmfPkg/Virtio10Dxe/Virtio10.inf - OvmfPkg/VirtioBlkDxe/VirtioBlk.inf - OvmfPkg/VirtioScsiDxe/VirtioScsi.inf -- OvmfPkg/VirtioRngDxe/VirtioRng.inf - OvmfPkg/VirtioSerialDxe/VirtioSerial.inf - !if $(PVSCSI_ENABLE) == TRUE - OvmfPkg/PvScsiDxe/PvScsiDxe.inf -@@ -888,6 +887,7 @@ - - !include OvmfPkg/Include/Dsc/ShellComponents.dsc.inc - !include OvmfPkg/Include/Dsc/MorLock.dsc.inc -+!include OvmfPkg/Include/Dsc/OvmfRngComponents.dsc.inc - - !if $(SECURE_BOOT_ENABLE) == TRUE - SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf -diff --git a/OvmfPkg/OvmfPkgIa32.fdf b/OvmfPkg/OvmfPkgIa32.fdf -index 10eb6fe72b..c31276e4a3 100644 ---- a/OvmfPkg/OvmfPkgIa32.fdf -+++ b/OvmfPkg/OvmfPkgIa32.fdf -@@ -231,7 +231,6 @@ INF OvmfPkg/VirtioPciDeviceDxe/VirtioPciDeviceDxe.inf - INF OvmfPkg/Virtio10Dxe/Virtio10.inf - INF OvmfPkg/VirtioBlkDxe/VirtioBlk.inf - INF OvmfPkg/VirtioScsiDxe/VirtioScsi.inf --INF OvmfPkg/VirtioRngDxe/VirtioRng.inf - INF OvmfPkg/VirtioSerialDxe/VirtioSerial.inf - !if $(PVSCSI_ENABLE) == TRUE - INF OvmfPkg/PvScsiDxe/PvScsiDxe.inf -@@ -356,6 +355,7 @@ INF MdeModulePkg/Universal/Variable/RuntimeDxe/VariableRuntimeDxe.inf - - !include OvmfPkg/Include/Fdf/ShellDxe.fdf.inc - !include OvmfPkg/Include/Fdf/MorLock.fdf.inc -+!include OvmfPkg/Include/Fdf/OvmfRngDxe.fdf.inc - - !if $(LOAD_X64_ON_IA32_ENABLE) == TRUE - INF OvmfPkg/CompatImageLoaderDxe/CompatImageLoaderDxe.inf -diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc -index 679e25501b..ececac3757 100644 ---- a/OvmfPkg/OvmfPkgIa32X64.dsc -+++ b/OvmfPkg/OvmfPkgIa32X64.dsc -@@ -798,7 +798,6 @@ - OvmfPkg/Virtio10Dxe/Virtio10.inf - OvmfPkg/VirtioBlkDxe/VirtioBlk.inf - OvmfPkg/VirtioScsiDxe/VirtioScsi.inf -- OvmfPkg/VirtioRngDxe/VirtioRng.inf - OvmfPkg/VirtioSerialDxe/VirtioSerial.inf - !if $(PVSCSI_ENABLE) == TRUE - OvmfPkg/PvScsiDxe/PvScsiDxe.inf -@@ -902,6 +901,7 @@ - - !include OvmfPkg/Include/Dsc/ShellComponents.dsc.inc - !include OvmfPkg/Include/Dsc/MorLock.dsc.inc -+!include OvmfPkg/Include/Dsc/OvmfRngComponents.dsc.inc - - !if $(SECURE_BOOT_ENABLE) == TRUE - SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf -diff --git a/OvmfPkg/OvmfPkgIa32X64.fdf b/OvmfPkg/OvmfPkgIa32X64.fdf -index ff06bbfc6f..a7b4aeac08 100644 ---- a/OvmfPkg/OvmfPkgIa32X64.fdf -+++ b/OvmfPkg/OvmfPkgIa32X64.fdf -@@ -232,7 +232,6 @@ INF OvmfPkg/VirtioPciDeviceDxe/VirtioPciDeviceDxe.inf - INF OvmfPkg/Virtio10Dxe/Virtio10.inf - INF OvmfPkg/VirtioBlkDxe/VirtioBlk.inf - INF OvmfPkg/VirtioScsiDxe/VirtioScsi.inf --INF OvmfPkg/VirtioRngDxe/VirtioRng.inf - INF OvmfPkg/VirtioSerialDxe/VirtioSerial.inf - !if $(PVSCSI_ENABLE) == TRUE - INF OvmfPkg/PvScsiDxe/PvScsiDxe.inf -@@ -363,6 +362,7 @@ INF MdeModulePkg/Universal/Variable/RuntimeDxe/VariableRuntimeDxe.inf - - !include OvmfPkg/Include/Fdf/ShellDxe.fdf.inc - !include OvmfPkg/Include/Fdf/MorLock.fdf.inc -+!include OvmfPkg/Include/Fdf/OvmfRngDxe.fdf.inc - - ################################################################################ - -diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc -index d294fd4625..0ab4d3df06 100644 ---- a/OvmfPkg/OvmfPkgX64.dsc -+++ b/OvmfPkg/OvmfPkgX64.dsc -@@ -866,7 +866,6 @@ - OvmfPkg/Virtio10Dxe/Virtio10.inf - OvmfPkg/VirtioBlkDxe/VirtioBlk.inf - OvmfPkg/VirtioScsiDxe/VirtioScsi.inf -- OvmfPkg/VirtioRngDxe/VirtioRng.inf - OvmfPkg/VirtioSerialDxe/VirtioSerial.inf - !if $(PVSCSI_ENABLE) == TRUE - OvmfPkg/PvScsiDxe/PvScsiDxe.inf -@@ -970,6 +969,7 @@ - - !include OvmfPkg/Include/Dsc/ShellComponents.dsc.inc - !include OvmfPkg/Include/Dsc/MorLock.dsc.inc -+!include OvmfPkg/Include/Dsc/OvmfRngComponents.dsc.inc - - !if $(SECURE_BOOT_ENABLE) == TRUE - SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf -diff --git a/OvmfPkg/OvmfPkgX64.fdf b/OvmfPkg/OvmfPkgX64.fdf -index f3b787201f..ae08ac4fe9 100644 ---- a/OvmfPkg/OvmfPkgX64.fdf -+++ b/OvmfPkg/OvmfPkgX64.fdf -@@ -263,7 +263,6 @@ INF OvmfPkg/VirtioPciDeviceDxe/VirtioPciDeviceDxe.inf - INF OvmfPkg/Virtio10Dxe/Virtio10.inf - INF OvmfPkg/VirtioBlkDxe/VirtioBlk.inf - INF OvmfPkg/VirtioScsiDxe/VirtioScsi.inf --INF OvmfPkg/VirtioRngDxe/VirtioRng.inf - INF OvmfPkg/VirtioSerialDxe/VirtioSerial.inf - !if $(PVSCSI_ENABLE) == TRUE - INF OvmfPkg/PvScsiDxe/PvScsiDxe.inf -@@ -403,6 +402,7 @@ INF OvmfPkg/Tcg/TdTcg2Dxe/TdTcg2Dxe.inf - - !include OvmfPkg/Include/Fdf/ShellDxe.fdf.inc - !include OvmfPkg/Include/Fdf/MorLock.fdf.inc -+!include OvmfPkg/Include/Fdf/OvmfRngDxe.fdf.inc - - ################################################################################ - diff --git a/SOURCES/0039-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch b/SOURCES/0039-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch deleted file mode 100644 index 0194b84..0000000 --- a/SOURCES/0039-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch +++ /dev/null @@ -1,37 +0,0 @@ -From d5d19043e62a268a492f9a1ef6a11380d8f7e784 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Fri, 14 Jun 2024 11:45:49 +0200 -Subject: [PATCH] CryptoPkg/Test: call ProcessLibraryConstructorList - -Needed to properly initialize BaseRngLib. - -Signed-off-by: Gerd Hoffmann -(cherry picked from commit 94961b8817eec6f8d0434555ac50a7aa51c22201) ---- - .../Test/UnitTest/Library/BaseCryptLib/UnitTestMain.c | 7 +++++++ - 1 file changed, 7 insertions(+) - -diff --git a/CryptoPkg/Test/UnitTest/Library/BaseCryptLib/UnitTestMain.c b/CryptoPkg/Test/UnitTest/Library/BaseCryptLib/UnitTestMain.c -index d0c1c7a4f7..48d463b8ad 100644 ---- a/CryptoPkg/Test/UnitTest/Library/BaseCryptLib/UnitTestMain.c -+++ b/CryptoPkg/Test/UnitTest/Library/BaseCryptLib/UnitTestMain.c -@@ -8,6 +8,12 @@ - **/ - #include "TestBaseCryptLib.h" - -+VOID -+EFIAPI -+ProcessLibraryConstructorList ( -+ VOID -+ ); -+ - /** - Initialize the unit test framework, suite, and unit tests for the - sample unit tests and run the unit tests. -@@ -76,5 +82,6 @@ main ( - char *argv[] - ) - { -+ ProcessLibraryConstructorList (); - return UefiTestMain (); - } diff --git a/SOURCES/0040-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch b/SOURCES/0040-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch deleted file mode 100644 index d32e748..0000000 --- a/SOURCES/0040-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch +++ /dev/null @@ -1,43 +0,0 @@ -From 320207a3df995771af36639c7bdf89c4203cf1c2 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Fri, 14 Jun 2024 11:45:53 +0200 -Subject: [PATCH] MdePkg/X86UnitTestHost: set rdrand cpuid bit - -Set the rdrand feature bit when faking cpuid for host test cases. -Needed to make the CryptoPkg test cases work. - -Signed-off-by: Gerd Hoffmann -(cherry picked from commit 5e776299a2604b336a947e68593012ab2cc16eb4) ---- - MdePkg/Library/BaseLib/X86UnitTestHost.c | 11 ++++++++++- - 1 file changed, 10 insertions(+), 1 deletion(-) - -diff --git a/MdePkg/Library/BaseLib/X86UnitTestHost.c b/MdePkg/Library/BaseLib/X86UnitTestHost.c -index 8ba4f54a38..7f7276f7f4 100644 ---- a/MdePkg/Library/BaseLib/X86UnitTestHost.c -+++ b/MdePkg/Library/BaseLib/X86UnitTestHost.c -@@ -66,6 +66,15 @@ UnitTestHostBaseLibAsmCpuid ( - OUT UINT32 *Edx OPTIONAL - ) - { -+ UINT32 RetEcx; -+ -+ RetEcx = 0; -+ switch (Index) { -+ case 1: -+ RetEcx |= BIT30; /* RdRand */ -+ break; -+ } -+ - if (Eax != NULL) { - *Eax = 0; - } -@@ -75,7 +84,7 @@ UnitTestHostBaseLibAsmCpuid ( - } - - if (Ecx != NULL) { -- *Ecx = 0; -+ *Ecx = RetEcx; - } - - if (Edx != NULL) { diff --git a/SOURCES/1000-replace-upstream-references.patch b/SOURCES/1000-replace-upstream-references.patch new file mode 100644 index 0000000..b2eabcd --- /dev/null +++ b/SOURCES/1000-replace-upstream-references.patch @@ -0,0 +1,23 @@ +From a194940b0fc62054430ca36b2bcec473a56745a1 Tue 30 Apr 00:00:00 2001 +From: rpm-build +Date: Tue, 30 Apr 2024 11:58:21 -0700 +Subject: [PATCH] Replace upstream references + +Orabug: 36569119 + +Signed-off-by: John McWalters +Reviewed-by: Laurence Rochfort + +diff --git a/CryptoPkg/Library/OpensslLib/openssl/apps/fipsinstall.c b/CryptoPkg/Library/OpensslLib/openssl/apps/fipsinstall.c +index e978057..67d6957 100644 +--- a/CryptoPkg/Library/OpensslLib/openssl/apps/fipsinstall.c ++++ b/CryptoPkg/Library/OpensslLib/openssl/apps/fipsinstall.c +@@ -311,7 +311,7 @@ int fipsinstall_main(int argc, char **argv) + EVP_MAC *mac = NULL; + CONF *conf = NULL; + +- BIO_printf(bio_err, "This command is not enabled in the Red Hat Enterprise Linux OpenSSL build, please consult Red Hat documentation to learn how to enable FIPS mode\n"); ++ BIO_printf(bio_err, "This command is not enabled in the Oracle Linux OpenSSL build, please consult Oracle Linux documentation to learn how to enable FIPS mode\n"); + return 1; + + if ((opts = sk_OPENSSL_STRING_new_null()) == NULL) diff --git a/SOURCES/60-edk2-ovmf-x64-amdsev.json b/SOURCES/60-edk2-ovmf-x64-amdsev.json index 9a561bc..591bd6a 100644 --- a/SOURCES/60-edk2-ovmf-x64-amdsev.json +++ b/SOURCES/60-edk2-ovmf-x64-amdsev.json @@ -4,12 +4,8 @@ "uefi" ], "mapping": { - "device": "flash", - "mode": "stateless", - "executable": { - "filename": "/usr/share/edk2/ovmf/OVMF.amdsev.fd", - "format": "raw" - } + "device": "memory", + "filename": "/usr/share/edk2/ovmf/OVMF.amdsev.fd" }, "targets": [ { diff --git a/SOURCES/edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch b/SOURCES/edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch deleted file mode 100644 index 8656838..0000000 --- a/SOURCES/edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch +++ /dev/null @@ -1,63 +0,0 @@ -From 481310a21104aba17bc0cddd236ecdf69d4ba662 Mon Sep 17 00:00:00 2001 -From: Oliver Steffen -Date: Mon, 26 Aug 2024 19:25:52 +0200 -Subject: [PATCH] AmdSevDxe: Fix the shim fallback reboot workaround for SNP - -RH-Author: Oliver Steffen -RH-MergeRequest: 68: AmdSevDxe: Fix the shim fallback reboot workaround for SNP -RH-Jira: RHEL-56081 -RH-Acked-by: Gerd Hoffmann -RH-Commit: [1/1] ab8678b61d171f9c19459e034483437b29037b4b (osteffen/edk2) - -The shim fallback reboot workaround (introduced for SEV-ES) does -not always work for SEV-SNP, due to a conditional early return. - -Let's just register the workaround earlier in this function to -fix that. - -Signed-off-by: Oliver Steffen ---- - OvmfPkg/AmdSevDxe/AmdSevDxe.c | 21 +++++++++++---------- - 1 file changed, 11 insertions(+), 10 deletions(-) - -diff --git a/OvmfPkg/AmdSevDxe/AmdSevDxe.c b/OvmfPkg/AmdSevDxe/AmdSevDxe.c -index 0eb88e50ff..ca345e95da 100644 ---- a/OvmfPkg/AmdSevDxe/AmdSevDxe.c -+++ b/OvmfPkg/AmdSevDxe/AmdSevDxe.c -@@ -243,6 +243,17 @@ AmdSevDxeEntryPoint ( - return EFI_UNSUPPORTED; - } - -+ // Shim fallback reboot workaround -+ Status = gBS->CreateEventEx ( -+ EVT_NOTIFY_SIGNAL, -+ TPL_CALLBACK, -+ PopulateVarstore, -+ SystemTable, -+ &gEfiEndOfDxeEventGroupGuid, -+ &PopulateVarstoreEvent -+ ); -+ ASSERT_EFI_ERROR (Status); -+ - // - // Iterate through the GCD map and clear the C-bit from MMIO and NonExistent - // memory space. The NonExistent memory space will be used for mapping the -@@ -393,15 +404,5 @@ AmdSevDxeEntryPoint ( - ); - } - -- Status = gBS->CreateEventEx ( -- EVT_NOTIFY_SIGNAL, -- TPL_CALLBACK, -- PopulateVarstore, -- SystemTable, -- &gEfiEndOfDxeEventGroupGuid, -- &PopulateVarstoreEvent -- ); -- ASSERT_EFI_ERROR (Status); -- - return EFI_SUCCESS; - } --- -2.39.3 - diff --git a/SOURCES/edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch b/SOURCES/edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch deleted file mode 100644 index 2198b6f..0000000 --- a/SOURCES/edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch +++ /dev/null @@ -1,43 +0,0 @@ -From 880c1ca7420b873c5f81563b122d7bd1ebad72cb Mon Sep 17 00:00:00 2001 -From: Oliver Steffen -Date: Mon, 4 Mar 2024 15:32:58 +0100 -Subject: [PATCH] MdeModulePkg: Warn if out of flash space when writing - variables - -RH-Author: Oliver Steffen -RH-MergeRequest: 64: MdeModulePkg: Warn if out of flash space when writing variables -RH-Jira: RHEL-43442 -RH-Acked-by: Gerd Hoffmann -RH-Commit: [1/1] b65130800090192f47f13d67ff14f902a4f5bfb5 (osteffen/edk2) - -Emit a DEBUG_WARN message if there is not enough flash space left to -write/update a variable. This condition is currently not logged -appropriately in all cases, given that full variable store can easily -render the system unbootable. -This new message helps identifying this condition. - -Signed-off-by: Oliver Steffen -Reviewed-by: Laszlo Ersek -Reviewed-by: Gerd Hoffmann -(cherry picked from commit 80b59ff8320d1bd134bf689fe9c0ddf4e0473b88) -Signed-off-by: Oliver Steffen ---- - MdeModulePkg/Universal/Variable/RuntimeDxe/Variable.c | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/MdeModulePkg/Universal/Variable/RuntimeDxe/Variable.c b/MdeModulePkg/Universal/Variable/RuntimeDxe/Variable.c -index d394d237a5..1c7659031d 100644 ---- a/MdeModulePkg/Universal/Variable/RuntimeDxe/Variable.c -+++ b/MdeModulePkg/Universal/Variable/RuntimeDxe/Variable.c -@@ -2364,6 +2364,8 @@ Done: - ); - ASSERT_EFI_ERROR (Status); - } -+ } else if (Status == EFI_OUT_OF_RESOURCES) { -+ DEBUG ((DEBUG_WARN, "UpdateVariable failed: Out of flash space\n")); - } - - return Status; --- -2.39.3 - diff --git a/SOURCES/edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch b/SOURCES/edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch deleted file mode 100644 index bab07f4..0000000 --- a/SOURCES/edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch +++ /dev/null @@ -1,50 +0,0 @@ -From effd0f360ea1186b2b6af0aa2420d4bf779d51ef Mon Sep 17 00:00:00 2001 -From: Jon Maloy -Date: Tue, 1 Oct 2024 18:40:41 -0400 -Subject: [PATCH 3/3] MdePkg: Fix overflow issue in BasePeCoffLib - -RH-Author: Jon Maloy -RH-MergeRequest: 78: MdePkg: Fix overflow issue in BasePeCoffLib -RH-Jira: RHEL-60833 -RH-Acked-by: Oliver Steffen -RH-Commit: [1/1] 812453d5d03bcd92dfa6aea594af6214569c419e - -JIRA: https://issues.redhat.com/browse/RHEL-60833 -CVE: CVE-2024-38796 -Upstream: Merged - -commit c95233b8525ca6828921affd1496146cff262e65 -Author: Doug Flick -Date: Fri Sep 27 12:08:55 2024 -0700 - - MdePkg: Fix overflow issue in BasePeCoffLib - - The RelocDir->Size is a UINT32 value, and RelocDir->VirtualAddress is - also a UINT32 value. The current code does not check for overflow when - adding RelocDir->Size to RelocDir->VirtualAddress. This patch adds a - check to ensure that the addition does not overflow. - - Signed-off-by: Doug Flick - Authored-by: sriraamx gobichettipalayam - -Signed-off-by: Jon Maloy ---- - MdePkg/Library/BasePeCoffLib/BasePeCoff.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/MdePkg/Library/BasePeCoffLib/BasePeCoff.c b/MdePkg/Library/BasePeCoffLib/BasePeCoff.c -index 86ff2e769b..128090d98e 100644 ---- a/MdePkg/Library/BasePeCoffLib/BasePeCoff.c -+++ b/MdePkg/Library/BasePeCoffLib/BasePeCoff.c -@@ -1054,7 +1054,7 @@ PeCoffLoaderRelocateImage ( - RelocDir = &Hdr.Te->DataDirectory[0]; - } - -- if ((RelocDir != NULL) && (RelocDir->Size > 0)) { -+ if ((RelocDir != NULL) && (RelocDir->Size > 0) && (RelocDir->Size - 1 < MAX_UINT32 - RelocDir->VirtualAddress)) { - RelocBase = (EFI_IMAGE_BASE_RELOCATION *)PeCoffLoaderImageAddress (ImageContext, RelocDir->VirtualAddress, TeStrippedOffset); - RelocBaseEnd = (EFI_IMAGE_BASE_RELOCATION *)PeCoffLoaderImageAddress ( - ImageContext, --- -2.39.3 - diff --git a/SOURCES/edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch b/SOURCES/edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch deleted file mode 100644 index 18fb2ab..0000000 --- a/SOURCES/edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch +++ /dev/null @@ -1,48 +0,0 @@ -From 7cbd00792445ad50e861e4835cdb5ba60466aae3 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Wed, 19 Jun 2024 09:07:56 +0200 -Subject: [PATCH 1/2] NetworkPkg/DxeNetLib: adjust PseudoRandom error logging - -RH-Author: Oliver Steffen -RH-MergeRequest: 67: NetworkPkg/DxeNetLib: adjust PseudoRandom error logging -RH-Jira: RHEL-45899 -RH-Commit: [1/2] 15135d672cef4310cb29f8a55146f36b2ee1f15d (osteffen/edk2) - -There is a list of allowed rng algorithms, if /one/ of them is not -supported this is not a problem, only /all/ of them failing is an -error condition. - -Downgrade the message for a single unsupported algorithm from ERROR to -VERBOSE. Add an error message in case we finish the loop without -finding a supported algorithm. - -Signed-off-by: Gerd Hoffmann -(cherry picked from commit 6862b9d538d96363635677198899e1669e591259) ---- - NetworkPkg/Library/DxeNetLib/DxeNetLib.c | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/NetworkPkg/Library/DxeNetLib/DxeNetLib.c b/NetworkPkg/Library/DxeNetLib/DxeNetLib.c -index 01c13c08d2..4dfbe91a55 100644 ---- a/NetworkPkg/Library/DxeNetLib/DxeNetLib.c -+++ b/NetworkPkg/Library/DxeNetLib/DxeNetLib.c -@@ -951,7 +951,7 @@ PseudoRandom ( - // - // Secure Algorithm was not supported on this platform - // -- DEBUG ((DEBUG_ERROR, "Failed to generate random data using secure algorithm %d: %r\n", AlgorithmIndex, Status)); -+ DEBUG ((DEBUG_VERBOSE, "Failed to generate random data using secure algorithm %d: %r\n", AlgorithmIndex, Status)); - - // - // Try the next secure algorithm -@@ -971,6 +971,7 @@ PseudoRandom ( - // If we get here, we failed to generate random data using any secure algorithm - // Platform owner should ensure that at least one secure algorithm is supported - // -+ DEBUG ((DEBUG_ERROR, "Failed to generate random data, no supported secure algorithm found\n")); - ASSERT_EFI_ERROR (Status); - return Status; - } --- -2.39.3 - diff --git a/SOURCES/edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch b/SOURCES/edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch deleted file mode 100644 index eff7e1b..0000000 --- a/SOURCES/edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch +++ /dev/null @@ -1,46 +0,0 @@ -From 33ebaa6f0d476008ca6ba264657ac37faf63b723 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Thu, 29 Aug 2024 09:20:29 +0200 -Subject: [PATCH 1/2] OvmfPkg/CpuHotplugSmm: delay SMM exit - -RH-Author: Gerd Hoffmann -RH-MergeRequest: 74: OvmfPkg/CpuHotplugSmm: delay SMM exit -RH-Jira: RHEL-56974 -RH-Acked-by: Oliver Steffen -RH-Commit: [1/1] e1fb3f4db68457ec9f59ca5db47606bf4c34e6c5 (kraxel.rh/centos-src-edk2) - -Let APs wait until the BSP has completed the register updates to remove -the CPU. This makes sure all APs stay in SMM mode until the CPU -hot-unplug operation is complete, which in turn makes sure the ACPI lock -is released only after the CPU hot-unplug operation is complete. - -Some background: The CPU hotplug SMI is triggered from an ACPI function -which is protected by an ACPI lock. The ACPI function is in the ACPI -tables generated by qemu. - -Signed-off-by: Gerd Hoffmann - -upstream: submitted (https://github.com/tianocore/edk2/pull/6138) ---- - OvmfPkg/CpuHotplugSmm/CpuHotplug.c | 5 +++++ - 1 file changed, 5 insertions(+) - -diff --git a/OvmfPkg/CpuHotplugSmm/CpuHotplug.c b/OvmfPkg/CpuHotplugSmm/CpuHotplug.c -index d504163026..5af78211d3 100644 ---- a/OvmfPkg/CpuHotplugSmm/CpuHotplug.c -+++ b/OvmfPkg/CpuHotplugSmm/CpuHotplug.c -@@ -355,6 +355,11 @@ EjectCpu ( - // - QemuSelector = mCpuHotEjectData->QemuSelectorMap[ProcessorNum]; - if (QemuSelector == CPU_EJECT_QEMU_SELECTOR_INVALID) { -+ /* wait until BSP is done */ -+ while (mCpuHotEjectData->Handler != NULL) { -+ CpuPause (); -+ } -+ - return; - } - --- -2.39.3 - diff --git a/SOURCES/edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch b/SOURCES/edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch deleted file mode 100644 index 6e09d72..0000000 --- a/SOURCES/edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch +++ /dev/null @@ -1,142 +0,0 @@ -From c4aa4797fafa3a627205eaa346401e399d4a7146 Mon Sep 17 00:00:00 2001 -From: Gerd Hoffmann -Date: Tue, 27 Aug 2024 12:06:15 +0200 -Subject: [PATCH] UefiCpuPkg/PiSmmCpuDxeSmm: skip PatchInstructionX86 calls if - not needed. - -RH-Author: Oliver Steffen -RH-MergeRequest: 71: UefiCpuPkg/PiSmmCpuDxeSmm: skip PatchInstructionX86 calls if not needed. -RH-Jira: RHEL-45847 -RH-Acked-by: Gerd Hoffmann -RH-Commit: [1/1] 70ceffb2c1e695276af87d3aa334fe9be8e2e90e (osteffen/edk2) - -Add the new global mMsrIa32MiscEnableSupported variable to track -whenever support for the IA32_MISC_ENABLE MSR is present or not. - -Add new local PatchingNeeded variable to CheckFeatureSupported() -to track if patching the SMM setup code is needed or not. - -Issue PatchInstructionX86() calls only if needed, i.e. if one of -the *Supported variables has been updated. - -Result is that on a typical SMP machine where all processors are -identical the PatchInstructionX86() calls are issued only once, -when checking the first processor. Specifically this avoids -PatchInstructionX86() being called in OVMF on CPU hotplug. That -is important because instruction patching at runtime does not not -work and leads to page faults. - -This fixes CPU hotplug on OVMF not working with AMD cpus. - -Fixes: 6b3a89a9fdb5 ("OvmfPkg/PlatformPei: Relocate SmBases in PEI phase") -Signed-off-by: Gerd Hoffmann -(cherry picked from commit 17ff8960848b2cb2e49fffb3dfbacd08865786a4) ---- - UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile.c | 49 +++++++++++++++++++++----- - 1 file changed, 40 insertions(+), 9 deletions(-) - -diff --git a/UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile.c b/UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile.c -index 8142d3ceac..8e299fd29a 100644 ---- a/UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile.c -+++ b/UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile.c -@@ -40,6 +40,11 @@ BOOLEAN mXdEnabled = FALSE; - // - BOOLEAN mBtsSupported = TRUE; - -+// -+// The flag indicates if MSR_IA32_MISC_ENABLE is supported by processor -+// -+BOOLEAN mMsrIa32MiscEnableSupported = TRUE; -+ - // - // The flag indicates if SMM profile starts to record data. - // -@@ -904,18 +909,23 @@ CheckFeatureSupported ( - UINT32 RegEcx; - UINT32 RegEdx; - MSR_IA32_MISC_ENABLE_REGISTER MiscEnableMsr; -+ BOOLEAN PatchingNeeded = FALSE; - - if ((PcdGet32 (PcdControlFlowEnforcementPropertyMask) != 0) && mCetSupported) { - AsmCpuid (CPUID_SIGNATURE, &RegEax, NULL, NULL, NULL); - if (RegEax >= CPUID_STRUCTURED_EXTENDED_FEATURE_FLAGS) { - AsmCpuidEx (CPUID_STRUCTURED_EXTENDED_FEATURE_FLAGS, CPUID_STRUCTURED_EXTENDED_FEATURE_FLAGS_SUB_LEAF_INFO, NULL, NULL, &RegEcx, NULL); - if ((RegEcx & CPUID_CET_SS) == 0) { -- mCetSupported = FALSE; -- PatchInstructionX86 (mPatchCetSupported, mCetSupported, 1); -+ if (mCetSupported) { -+ mCetSupported = FALSE; -+ PatchingNeeded = TRUE; -+ } - } - } else { -- mCetSupported = FALSE; -- PatchInstructionX86 (mPatchCetSupported, mCetSupported, 1); -+ if (mCetSupported) { -+ mCetSupported = FALSE; -+ PatchingNeeded = TRUE; -+ } - } - } - -@@ -925,8 +935,10 @@ CheckFeatureSupported ( - // - // Extended CPUID functions are not supported on this processor. - // -- mXdSupported = FALSE; -- PatchInstructionX86 (gPatchXdSupported, mXdSupported, 1); -+ if (mXdSupported) { -+ mXdSupported = FALSE; -+ PatchingNeeded = TRUE; -+ } - } - - AsmCpuid (CPUID_EXTENDED_CPU_SIG, NULL, NULL, NULL, &RegEdx); -@@ -934,15 +946,20 @@ CheckFeatureSupported ( - // - // Execute Disable Bit feature is not supported on this processor. - // -- mXdSupported = FALSE; -- PatchInstructionX86 (gPatchXdSupported, mXdSupported, 1); -+ if (mXdSupported) { -+ mXdSupported = FALSE; -+ PatchingNeeded = TRUE; -+ } - } - - if (StandardSignatureIsAuthenticAMD ()) { - // - // AMD processors do not support MSR_IA32_MISC_ENABLE - // -- PatchInstructionX86 (gPatchMsrIa32MiscEnableSupported, FALSE, 1); -+ if (mMsrIa32MiscEnableSupported) { -+ mMsrIa32MiscEnableSupported = FALSE; -+ PatchingNeeded = TRUE; -+ } - } - } - -@@ -966,6 +983,20 @@ CheckFeatureSupported ( - } - } - } -+ -+ if (PatchingNeeded) { -+ if (!mCetSupported) { -+ PatchInstructionX86 (mPatchCetSupported, mCetSupported, 1); -+ } -+ -+ if (!mXdSupported) { -+ PatchInstructionX86 (gPatchXdSupported, mXdSupported, 1); -+ } -+ -+ if (!mMsrIa32MiscEnableSupported) { -+ PatchInstructionX86 (gPatchMsrIa32MiscEnableSupported, FALSE, 1); -+ } -+ } - } - - /** --- -2.39.3 - diff --git a/SOURCES/edk2-build.py b/SOURCES/edk2-build.py index cee7541..5f02ecb 100755 --- a/SOURCES/edk2-build.py +++ b/SOURCES/edk2-build.py @@ -248,7 +248,7 @@ def build_one(cfg, build, jobs = None, silent = False, nologs = False): def build_basetools(silent = False, nologs = False): build_message('building: BaseTools', silent = silent) - basedir = os.environ['EDK_TOOLS_PATH'] + basedir = os.environ['EDK_TOOLS_PATH'] + '/Source/C' cmdline = [ 'make', '-C', basedir ] build_run(cmdline, 'BaseTools', 'build.basetools', silent, nologs) diff --git a/SOURCES/edk2-build.rhel-9 b/SOURCES/edk2-build.rhel-9 index 9088bf8..97564a6 100644 --- a/SOURCES/edk2-build.rhel-9 +++ b/SOURCES/edk2-build.rhel-9 @@ -16,14 +16,12 @@ FD_SIZE_4MB = TRUE [opts.ovmf.sb.smm] SECURE_BOOT_ENABLE = TRUE SMM_REQUIRE = TRUE -# old downstream -EXCLUDE_SHELL_FROM_FD = TRUE -# new upstream BUILD_SHELL = FALSE [opts.ovmf.sb.stateless] SECURE_BOOT_ENABLE = TRUE SMM_REQUIRE = FALSE +BUILD_SHELL = FALSE [opts.armvirt.verbose] DEBUG_PRINT_ERROR_LEVEL = 0x8040004F @@ -32,6 +30,9 @@ DEBUG_PRINT_ERROR_LEVEL = 0x8040004F DEBUG_PRINT_ERROR_LEVEL = 0x80000000 +[pcds.la57] +PcdUse5LevelPageTable = TRUE + [pcds.nx.strict] PcdDxeNxMemoryProtectionPolicy = 0xC000000000007FD5 PcdUninstallMemAttrProtocol = FALSE @@ -52,6 +53,7 @@ conf = OvmfPkg/OvmfPkgX64.dsc arch = X64 opts = ovmf.common ovmf.4m +pcds = la57 plat = OvmfX64 dest = RHEL-9/ovmf cpy1 = FV/OVMF_CODE.fd OVMF_CODE.fd @@ -65,6 +67,7 @@ arch = X64 opts = ovmf.common ovmf.4m ovmf.sb.smm +pcds = la57 plat = OvmfX64 dest = RHEL-9/ovmf cpy1 = FV/OVMF_CODE.fd OVMF_CODE.secboot.fd @@ -91,6 +94,7 @@ arch = X64 opts = ovmf.common ovmf.4m ovmf.sb.stateless +pcds = la57 plat = IntelTdx dest = RHEL-9/ovmf cpy1 = FV/OVMF.fd OVMF.inteltdx.fd diff --git a/SPECS/edk2.spec b/SPECS/edk2.spec index e95b9bf..35edbd7 100644 --- a/SPECS/edk2.spec +++ b/SPECS/edk2.spec @@ -1,14 +1,14 @@ ExclusiveArch: x86_64 aarch64 -# edk2-stable202405 -%define GITDATE 20240524 -%define GITCOMMIT 3e722403cd +# edk2-stable202411 +%define GITDATE 20241117 +%define GITCOMMIT 0f3867fa6ef0 %define TOOLCHAIN GCC %define OPENSSL_VER 3.0.7 %define OPENSSL_HASH 0205b589887203b065154ddc8e8107c4ac8625a1 -%define DBXDATE 20230509 +%define DBXDATE 20250224 %define build_ovmf 0 %define build_aarch64 0 @@ -21,7 +21,7 @@ ExclusiveArch: x86_64 aarch64 Name: edk2 Version: %{GITDATE} -Release: 6%{?dist}.3 +Release: 2.0.1%{?dist}.1 Summary: UEFI firmware for 64-bit virtual machines License: BSD-2-Clause-Patent and Apache-2.0 and MIT URL: http://www.tianocore.org @@ -33,6 +33,7 @@ URL: http://www.tianocore.org Source0: edk2-%{GITCOMMIT}.tar.xz Source1: ovmf-whitepaper-c770f8c.txt Source2: openssl-rhel-%{OPENSSL_HASH}.tar.xz +Source3: dtc-1.7.0.tar.xz # json description files Source10: 50-edk2-aarch64-qcow2.json @@ -50,6 +51,9 @@ Source45: 60-edk2-ovmf-x64-inteltdx.json Source80: edk2-build.py Source82: edk2-build.rhel-9 +#Oracle patch +Source1000: 1000-replace-upstream-references.patch + Source90: DBXUpdate-%{DBXDATE}.x64.bin Patch1: 0003-Remove-paths-leading-to-submodules.patch Patch2: 0004-MdeModulePkg-TerminalDxe-set-xterm-resolution-on-mod.patch @@ -74,41 +78,18 @@ Patch20: 0022-OvmfPkg-Remove-HttpDynamicCommand-from-shell-RHEL-on.patch Patch21: 0023-ArmVirtPkg-Remove-HttpDynamicCommand-from-shell-RHEL.patch Patch22: 0024-OvmfPkg-Remove-LinuxInitrdDynamicShellCommand-RHEL-o.patch Patch23: 0025-ArmVirtPkg-Remove-LinuxInitrdDynamicShellCommand-RHE.patch -Patch24: 0026-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch -Patch25: 0027-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch -Patch26: 0028-CryptoPkg-CrtLib-add-stat.h-include-file.patch -Patch27: 0029-CryptoPkg-CrtLib-add-access-open-read-write-close-sy.patch -Patch28: 0030-OvmfPkg-Sec-Setup-MTRR-early-in-the-boot-process.patch -Patch29: 0031-MdePkg-ArchitecturalMsr.h-add-defines-for-MTRR-cache.patch -Patch30: 0032-UefiCpuPkg-MtrrLib.h-use-cache-type-defines-from-Arc.patch -Patch31: 0033-OvmfPkg-Sec-use-cache-type-defines-from-Architectura.patch -Patch32: 0034-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch -Patch33: 0035-OvmfPkg-add-morlock-support.patch -Patch34: 0036-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch -Patch35: 0037-SecurityPkg-RngDxe-add-rng-test.patch -Patch36: 0038-OvmfPkg-wire-up-RngDxe.patch -Patch37: 0039-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch -Patch38: 0040-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch -# For RHEL-43442 - edk2 disconnects abnormally before loading the kernel -Patch39: edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch -# For RHEL-45899 - [RHEL-9.5.0] edk2 hit Failed to generate random data -Patch40: edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch -# For RHEL-45899 - [RHEL-9.5.0] edk2 hit Failed to generate random data -Patch41: edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch -# For RHEL-56081 - [EDK2] Shim fallback reboot workaround might not work on SNP -Patch42: edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch -# For RHEL-45847 - [RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic -Patch43: edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch -# For RHEL-56974 - qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9] -Patch44: edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch -# For RHEL-60833 - CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6] -Patch45: edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch -# For RHEL-65725 - [Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6] -Patch46: edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch -# For RHEL-66230 - [Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6] -Patch47: edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch -# For RHEL-58631 - [Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater -Patch48: edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch +Patch24: 0026-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch +Patch25: 0027-CryptoPkg-CrtLib-add-stat.h-include-file.patch +Patch26: 0028-CryptoPkg-CrtLib-add-access-open-read-write-close-sy.patch +Patch27: 0029-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch +Patch28: 0030-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch +Patch29: 0031-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch +Patch30: 0032-OvmfPkg-QemuFlashFvbServicesRuntimeDxe-Do-not-use-fl.patch +Patch31: 0033-OvmfPkg-PlatformPei-Move-NV-vars-init-to-after-SEV-S.patch +Patch32: 0034-OvmfPkg-PlatformInitLib-Retry-NV-vars-FV-check-as-sh.patch +Patch33: 0035-OvmfPkg-EmuVariableFvbRuntimeDxe-Issue-NV-vars-initi.patch +Patch34: 0036-OvmfPkg-PlatformInitLib-enable-x2apic-mode-if-needed.patch +Patch35: 0037-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch # python3-devel and libuuid-devel are required for building tools. # python3-devel is also needed for varstore template generation and @@ -218,6 +199,10 @@ cp -a -- %{SOURCE40} %{SOURCE41} %{SOURCE43} %{SOURCE44} %{SOURCE45} . cp -a -- %{SOURCE80} %{SOURCE82} . cp -a -- %{SOURCE90} . tar -C CryptoPkg/Library/OpensslLib -a -f %{SOURCE2} -x +tar -xf %{SOURCE3} --strip-components=1 --directory MdePkg/Library/BaseFdtLib/libfdt + +#Apply Oracle patches +patch -p1 < %{SOURCE1000} # Done by %setup, but we do not use it for the auxiliary tarballs chmod -Rf a+rX,u+w,g-w,o-w . @@ -443,1125 +428,86 @@ install -m 0644 \ %changelog -* Fri Nov 22 2024 Jon Maloy - 20240524-6.el9_5.3 -- edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-63094] -- Resolves: RHEL-63094 - ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater [rhel-9.5]) +* Wed Jul 02 2025 Craig Guiller - 20241117-2.0.1.el10_0.1 +- Replace upstream references [Orabug:36569119] -* Mon Nov 11 2024 Miroslav Rezanina - 20240524-6.el9_5.2 -- edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65735] -- edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65735] -- Resolves: RHEL-65735 - ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.5.z]) +* Tue Jul 01 2025 Alan Steinberg - 2024117-2.el10_0.1 +- Resolves: RHEL-82837 + (The newer revocation file and Server 2025 required to update it) -* Wed Oct 16 2024 Miroslav Rezanina - 20240524-6.el9_5.1 -- edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60831] -- Resolves: RHEL-60831 - (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.5]) +* Mon Jan 20 2025 Miroslav Rezanina - 20241117-2 +- edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72446] +- Resolves: RHEL-72446 + ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-10]) -* Fri Sep 13 2024 Miroslav Rezanina - 20240524-6 -- edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974] -- edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336] -- Resolves: RHEL-56974 - (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9]) -- Resolves: RHEL-55336 - (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5]) +* Mon Dec 09 2024 Miroslav Rezanina - 20241117-1 +- Rebase to edk2-stable202411 +- Resolves: RHEL-58062 + ([edk2,rhel-10] rebase to edk2-stable202411) + +* Tue Nov 26 2024 Miroslav Rezanina - 20240524-12 +- edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-64642] +- Resolves: RHEL-64642 + ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater [rhel-10]) + +* Mon Nov 11 2024 Miroslav Rezanina - 20240524-11 +- edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66234] +- edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66234] +- Resolves: RHEL-66234 + ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-10]) + +* Tue Oct 29 2024 Troy Dawson - 20240524-10 +- Bump release for October 2024 mass rebuild: + Resolves: RHEL-64018 + +* Tue Oct 08 2024 Miroslav Rezanina - 20240524-9 +- edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56249] +- edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56249] +- edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60829] +- Resolves: RHEL-56249 + (507x510 display resolution should not crash the firmware [edk2,rhel-10]) +- Resolves: RHEL-60829 + (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-10.0]) + +* Fri Sep 27 2024 Miroslav Rezanina - 20240524-8 +- edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55302] +- Resolves: RHEL-55302 + (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-10.0 beta]) + +* Fri Sep 13 2024 Miroslav Rezanina - 20240524-7 +- edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56154] +- Resolves: RHEL-56154 + (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-10]) * Mon Sep 09 2024 Miroslav Rezanina - 20240524-5 -- edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847] -- Resolves: RHEL-45847 - ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic) +- edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-50185] +- Resolves: RHEL-50185 + ([RHEL10] Hit soft lockup when hotplug vcpu) * Mon Sep 02 2024 Miroslav Rezanina - 20240524-4 -- edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081] -- Resolves: RHEL-56081 - ([EDK2] Shim fallback reboot workaround might not work on SNP) +- edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56082] +- Resolves: RHEL-56082 + ([EDK2] Shim fallback reboot workaround might not work on SNP [rhel-10]) * Tue Aug 20 2024 Miroslav Rezanina - 20240524-3 -- edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45899] -- edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45899] -- Resolves: RHEL-45899 - ([RHEL-9.5.0] edk2 hit Failed to generate random data) +- edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45829] +- edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45829] +- Resolves: RHEL-45829 + ([RHEL-10.0] edk2 hit Failed to generate random data ) -* Thu Jul 25 2024 Miroslav Rezanina - 20240524-2 -- edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch [RHEL-43442] -- Resolves: RHEL-43442 - (edk2 disconnects abnormally before loading the kernel) +* Wed Jul 24 2024 Miroslav Rezanina - 20240524-2 +- edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch [RHEL-45261] +- Resolves: RHEL-45261 + ([RHEL10] edk2 disconnects abnormally before loading the kernel) -* Thu Jun 20 2024 Miroslav Rezanina - 20240524-1 +* Fri Jun 28 2024 Miroslav Rezanina - 20240524-1 - Rebase to edk2-stable202405 -- Bumo openssl to 8e5beb77088b -- Resolves: RHEL-32486 - (rebase to edk2-stable202405 [rhel-9]) -- Resolves: RHEL-36446 - (edk2: enable MOR [rhel-9]) -- Resolves: RHEL-21653 - (CVE-2023-6237 edk2: openssl: Excessive time spent checking invalid RSA public keys [rhel-9]) -- Resolves: RHEL-21150 - (CVE-2023-6129 edk2: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC) -- Resolves: RHEL-22490 - (CVE-2024-0727 edk2: openssl: denial of service via null dereference [rhel-9]) +- Resolves: RHEL-32487 -* Mon Apr 08 2024 Miroslav Rezanina - 20240214-2 -- edk2-OvmfPkg-PlatformPei-log-a-warning-when-memory-is-tig.patch [RHEL-22202] -- edk2-OvmfPkg-PlatformPei-consider-AP-stacks-for-pei-memor.patch [RHEL-22202] -- edk2-OvmfPkg-PlatformPei-rewrite-page-table-calculation.patch [RHEL-22202] -- edk2-OvmfPkg-PlatformPei-log-pei-memory-cap-details.patch [RHEL-22202] -- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.patch [RHEL-22202] -- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p2.patch [RHEL-22202] -- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p3.patch [RHEL-22202] -- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p4.patch [RHEL-22202] -- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p5.patch [RHEL-22202] -- edk2-UefiCpuPkg-MpInitLib-return-early-in-GetBspNumber.patch [RHEL-22202] -- Resolves: RHEL-22202 - ([EDK2] Support booting with 4096 vcpus) +* Mon Jun 24 2024 Troy Dawson - 20240214-2 +- Bump release for June 2024 mass rebuild -* Tue Feb 27 2024 Gerd Hoffmann - 20240214-1 -- Rebase to edk2-stable202302 -- Resolves: RHEL-26879 +* Tue Apr 02 2024 Miroslav Rezanina - 20240214-1 +- Imported edk2-202402 from RHEL 9 +- Resolves: RHEL-30180 -* Thu Feb 22 2024 Miroslav Rezanina - 20231122-6 -- edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- edk2-NetworkPkg-Updating-SecurityFixes.yaml.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] -- Resolves: RHEL-21841 - (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-9]) -- Resolves: RHEL-21843 - (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-9]) -- Resolves: RHEL-21845 - (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-9]) -- Resolves: RHEL-21847 - (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-9]) -- Resolves: RHEL-21849 - (TRIAGE CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-9]) -- Resolves: RHEL-21851 - (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-9]) -- Resolves: RHEL-21853 - (TRIAGE CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-9]) - -* Mon Feb 19 2024 Miroslav Rezanina - 20231122-5 -- edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157] -- edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157] -- edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411-2.patch [RHEL-21157] -- edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-411-3.patch [RHEL-21157] -- edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21157] -- edk2-OvmfPkg-Sec-Setup-MTRR-early-in-the-boot-process.patch [RHEL-21704] -- edk2-MdePkg-ArchitecturalMsr.h-add-defines-for-MTRR-cache.patch [RHEL-21704] -- edk2-UefiCpuPkg-MtrrLib.h-use-cache-type-defines-from-Arc.patch [RHEL-21704] -- edk2-OvmfPkg-Sec-use-cache-type-defines-from-Architectura.patch [RHEL-21704] -- Resolves: RHEL-21157 - (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-9]) -- Resolves: RHEL-21704 - (vGPU VM take several minutes to show tianocore logo if firmware is ovmf) - -* Wed Jan 31 2024 Miroslav Rezanina - 20231122-4 -- edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-20963] -- edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-20963] -- edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-20963] -- edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-20963] -- edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-20963] -- edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-20963] -- Resolves: RHEL-20963 - ([rhel9] guest fails to boot due to ASSERT error) - -* Mon Jan 22 2024 Miroslav Rezanina - 20231122-3 -- edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21155] -- edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21155] -- edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21155] -- Resolves: RHEL-21155 - (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-9]) - -* Mon Jan 15 2024 Miroslav Rezanina - 20231122-2 -- edk2-OvmfPkg-RiscVVirt-use-gEfiAuthenticatedVariableGuid-.patch [RHEL-20963] -- edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-20963] -- edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-20963] -- Resolves: RHEL-20963 - ([rhel9] guest fails to boot due to ASSERT error) - -* Fri Dec 15 2023 Miroslav Rezanina - 20231122-1 -- Rebase to edk2-stable202311 [RHEL-12323] -- Switch to OpenSSL 3.0 [RHEL-49] -- Resolves: RHEL-12323 - (Rebase EDK2 for RHEL 9.4) -- Resolves: RHEL-49 - (consume / bundle RHEL-9 OpenSSL (version 3.0.x) in RHEL-9 edk2) - -* Mon Oct 09 2023 Miroslav Rezanina - 20230524-4 -- edk2-OvmfPkg-ResetVector-Fix-assembler-bit-test-flag-chec.patch [RHEL-9943] -- Resolves: RHEL-9943 - ([EDK2][AMDSERVER Bug] OvmfPkg/ResetVector: Fix assembler bit test flag check [rhel-9.3.0.z]) - -* Thu Aug 24 2023 Miroslav Rezanina - 20230524-3 -- edk2-OvmfPkg-AmdSev-fix-BdsPlatform.c-assertion-failure-d.patch [bz#2190244] -- edk2-OvmfPkg-IoMmuDxe-add-locking-to-IoMmuAllocateBounceB.patch [bz#2211060] -- edk2-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch [bz#2218196] -- Resolves: bz#2190244 - ([EDK2] [AMDSERVER 9.3 Bug] OVMF AP Creation Fixes) -- Resolves: bz#2211060 - (SEV-es guest randomly stuck at boot to hard drive screen from powerdown and boot again) -- Resolves: bz#2218196 - (Add vtpm devices with OVMF.amdsev.fd causes VM reset) - -* Mon Jul 10 2023 Miroslav Rezanina - 20230524-2 -- edk2-ArmVirt-add-VirtioSerialDxe-to-ArmVirtQemu-builds.patch [RHEL-643] -- edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtio.patch [RHEL-643] -- edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtioPc.patch [RHEL-643] -- edk2-ArmVirt-PlatformBootManagerLib-set-up-virtio-serial-.patch [RHEL-643] -- edk2-OvmfPkg-VirtioSerialDxe-use-TPL_NOTIFY.patch [RHEL-643] -- edk2-OvmfPkg-VirtioSerialDxe-Remove-noisy-debug-print-on-.patch [RHEL-643] -- edk2-OvmfPkg-PlatformInitLib-limit-phys-bits-to-46.patch [bz#2174749] -- edk2-Revert-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174749] -- edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2124143] -- edk2-OvmfPkg-PlatformInitLib-check-PcdUse1GPageTable.patch [RHEL-644] -- edk2-OvmfPkg-OvmfPkgIa32X64-enable-1G-pages.patch [RHEL-644] -- edk2-OvmfPkg-MicrovmX64-enable-1G-pages.patch [RHEL-644] -- Resolves: RHEL-643 - (add virtio serial support to armvirt) -- Resolves: bz#2174749 - ([edk2] re-enable dynamic mmio window) -- Resolves: bz#2124143 - (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-9]) -- Resolves: RHEL-644 - (enable gigabyte pages) - -* Tue Jun 27 2023 Oliver Steffen - 20230524-1 -- Rebase to edk2-stable202305 tag [RHEL-585] - Resolves: RHEL-585 - ([rhel-9.3] rebase EDK2 to edk2-stable202305) - -* Mon May 22 2023 Miroslav Rezanina - 20230301gitf80f052277c8-5 -- edk2-dbx-update-2023-05-09-black-lotus-edition.patch [RHEL-470] -- edk2-json-descriptors-explicitly-set-mode-split.patch [RHEL-469] -- Resolves: RHEL-470 - (edk2: update variable store with latest dbx updates (may 9, black lotus edition)) -- Resolves: RHEL-469 - (explicitly set mode = split in firmware json description files) - -* Tue May 16 2023 Miroslav Rezanina - 20230301gitf80f052277c8-4 -- edk2-OvmfPkg-Clarify-invariants-for-NestedInterruptTplLib.patch [bz#2189136] -- edk2-OvmfPkg-Relax-assertion-that-interrupts-do-not-occur.patch [bz#2189136] -- Resolves: bz#2189136 - (windows 11 installation broken with edk2-20230301gitf80f052277c8-1.el9) - -* Mon May 08 2023 Miroslav Rezanina - 20230301gitf80f052277c8-3 -- edk2-add-aarch64-qcow2-images.patch [bz#2186754] -- edk2-update-json-files.patch [bz#2186754] -- edk2-add-libvirt-version-conflict.patch [bz#2186754] -- edk2-add-dbx-update-blob-rh-only.patch [RHEL-377] -- edk2-spec-apply-dbx-update-rh-only.patch [RHEL-377] -- Resolves: bz#2186754 - (edk2: Add firmware images in qcow2 format) -- Resolves: RHEL-377 - (edk2: ship secure build variable store with latest dbx updates) - -* Wed Apr 05 2023 Miroslav Rezanina - 20230301gitf80f052277c8-2 -- edk2-build-script-update.patch [bz#2183230] -- edk2-PcdDxeNxMemoryProtectionPolicy-update.patch [bz#2183230] -- Resolves: bz#2183230 - ([edk2] Instruction abort exception when booting a VM) - -* Wed Mar 22 2023 Miroslav Rezanina - 20230301gitf80f052277c8-1 -- Rebase to edk2-stable202302 [RHEL-266] -- Resolves: RHEL-266 - (rebase edk2 to 2023-02 stable tag) - -* Fri Mar 17 2023 Miroslav Rezanina - 20221207gitfff6d81270b5-9 -- edk2-remove-amd-sev-feature-flag-from-secure-boot-builds-.patch [bz#2169247] -- Resolves: bz#2169247 - ([edk2] Install a sev guest with enrolled secure boot failed) - -* Fri Mar 10 2023 Miroslav Rezanina - 20221207gitfff6d81270b5-8 -- edk2-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174605] -- Resolves: bz#2174605 - ([EDK2] disable dynamic mmio window) - -* Tue Feb 21 2023 Miroslav Rezanina - 20221207gitfff6d81270b5-7 -- edk2-Revert-MdeModulePkg-TerminalDxe-add-other-text-resol.patch [bz#2162307] -- Resolves: bz#2162307 - (Broken GRUB output on a serial console) - -* Mon Feb 13 2023 Miroslav Rezanina - 20221207gitfff6d81270b5-6 -- edk2-update-build-script-rhel-only.patch [bz#2168046] -- edk2-update-build-config-rhel-only.patch [bz#2168046] -- edk2-add-release-date-to-builds-rh-only.patch [bz#2168046] -- edk2-openssl-update.patch [bz#2164534 bz#2164550 bz#2164565 bz#2164583] -- edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164534 bz#2164550 bz#2164565 bz#2164583] -- Resolves: bz#2168046 - ([SVVP] job 'Check SMBIOS Table Specific Requirements' failed on win2022) -- Resolves: bz#2164534 - (CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [rhel-9]) -- Resolves: bz#2164550 - (CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [rhel-9]) -- Resolves: bz#2164565 - (CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [rhel-9]) -- Resolves: bz#2164583 - (CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [rhel-9]) - -* Mon Feb 06 2023 Miroslav Rezanina - 20221207gitfff6d81270b5-5 -- edk2-Revert-ArmVirtPkg-ArmVirtQemu-enable-initial-ID-map-.patch [bz#2157656] -- Resolves: bz#2157656 - ([edk2] [aarch64] Unable to initialize EFI firmware when using edk2-aarch64-20221207gitfff6d81270b5-1.el9 in some hardwares) - -* Wed Jan 18 2023 Miroslav Rezanina - 20221207gitfff6d81270b5-4 -- edk2-ArmVirt-don-t-use-unaligned-CopyMem-on-NOR-flash.patch [bz#2158173] -- Resolves: bz#2158173 - ([aarch64][numa] Failed to create 2 numa nodes in some hardwares) - -* Mon Jan 16 2023 Miroslav Rezanina - 20221207gitfff6d81270b5-3 -- edk2-OvmfPkg-VirtNorFlashDxe-map-flash-memory-as-uncachea.patch [bz#2158173] -- edk2-MdePkg-Remove-Itanium-leftover-data-structure-RH-onl.patch [bz#1983086] -- Resolves: bz#2158173 - ([aarch64][numa] Failed to create 2 numa nodes in some hardwares) -- Resolves: bz#1983086 - (Assertion failure when creating 1024 VCPU VM: [...]UefiCpuPkg/CpuMpPei/CpuBist.c(186): !EFI_ERROR (Status)) - -* Thu Jan 05 2023 Miroslav Rezanina - 20221207gitfff6d81270b5-2 -- edk2-use-rpm-build-flags-rh-only.patch [RHEL-177] -- Resolves: RHEL-177 - (Enable GNU_RELRO security protection) - -* Thu Dec 15 2022 Camilla Conte - 20221207gitfff6d81270b5-1 -- Rebase to edk2-stable202211 tag - Resolves: RHEL-119 - (rebase edk2 to edk2-stable202211) -- Resolves: RHEL-75 - (edk2 builds should show the build version) -- Resolves: bz#2132951 - (edk2: Sort traditional virtualization builds before Confidential Computing builds) - -* Mon Nov 21 2022 Miroslav Rezanina - 20220826gitba0e0e4c6a-2 -- edk2-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch [bz#1989857] -- Resolves: bz#1989857 - (CVE-2021-38578 edk2: integer underflow in SmmEntryPoint function leads to potential SMM privilege escalation [rhel-9.0]) - -* Tue Oct 11 2022 Miroslav Rezanina - 0220826gitba0e0e4c6a-1 -- Rebase to edk2-stable202208 tag [RHELX-59] - Resolves: RHELX-59 - (rebase edk2 to 2022-08 stable tag) - -* Fri Sep 16 2022 Miroslav Rezanina - 20220526git16779ede2d36-4 -- edk2-OvmfPkg-QemuVideoDxe-fix-bochs-mode-init.patch [RHELX-58] -- Resolves: RHELX-58 - (Guest console turns black with uefi rhel guests and stdvga) - -* Mon Aug 01 2022 Miroslav Rezanina - 20220526git16779ede2d36-3 -- edk2-openssl-jump-to-8.7.0-branch-2022-07-22.patch [bz#2074843] -- edk2-ovmf-vars-generator-Use-max-cpu.patch [bz#2111567] -- Resolves: bz#2074843 - (edk2: sync openssl sources with rhel openssl rpm) -- Resolves: bz#2111567 - (EDK2 build stuck with qemu-kvm-7.0.0-8.el9 or newer) - -* Fri Jun 24 2022 Miroslav Rezanina - 20220526git16779ede2d36-2 -- edk2-OvmfPkg-Update-target-machines-config.patch [bz#2090752] -- Resolves: bz#2090752 - (Add RHEL 8.5, 8,6 and 9.x machine types to firmware descriptor files 50-edk2-ovmf-{amdsev,cc}.json) - -* Mon Jun 13 2022 Miroslav Rezanina - 20220526git16779ede2d36-1 -- Rebase to edk2-stable-202205 [bz#2074831] -- Resolves: bz#2074831 - (rebase edk2 to May 2022 release (edk2-stable202205)) - -* Thu May 26 2022 Miroslav Rezanina - 20220221gitb24306f15d-2 -- edk2-Revert-ArmVirtPkg-Remove-QemuRamfbDxe-display-device.patch [bz#2087220] -- edk2-Revert-OvmfPkg-Remove-QemuRamfbDxe-display-device-dr.patch [bz#2087220] -- Resolves: bz#2087220 - (VNC display show "Guest has not initialized the display" when using ramfb + ovmf) - -* Thu Mar 31 2022 Miroslav Rezanina - 20220221gitb24306f15d-1 -- Rebae to edk-stable-202202 [bz#2056910] -- Resolves: bz#2056910 - ([rebase] update edk2 to feb '22 release (edk2-stable202202xx)) - -* Wed Mar 23 2022 Miroslav Rezanina - 20220126gitbb1bba3d77-4 -- edk2-Revert-OvmfPkg-Remove-NvmExpressDxe-device-driver-RH.patch [bz#2044196] -- edk2-Revert-ArmVirtPkg-Remove-NvmExpressDxe-device-driver.patch [bz#2044196] -- Resolves: bz#2044196 - (RFE: [nvme-vfio] The virt-install interface throws info "Failed to set new efi boot target" when install a vm on a hostdev nvme disk) - -* Wed Feb 23 2022 Miroslav Rezanina - 20220126gitbb1bba3d77-3 -- edk2-spec-build-amdsev-variant.patch [bz#2054661] -- edk2-OvmfPkg-AmdSev-SecretPei-Mark-SEV-launch-secret-area.patch [bz#2041755] -- Resolves: bz#2054661 - (RFE: Support measured AMD SEV boot with kernel/initrd/cmdline in OVMF) -- Resolves: bz#2041755 - (Mark SEV launch secret area as reserved) - -* Tue Feb 08 2022 Miroslav Rezanina - 20220126gitbb1bba3d77-2 -- edk2-OvmfPkg-remove-unused-TPM-options-from-MicrovmX64.ds.patch [bz#1935497] -- edk2-OvmfPkg-move-tcg-configuration-to-dsc-and-fdf-includ.patch [bz#1935497] -- edk2-OvmfPkg-drop-TPM_CONFIG_ENABLE.patch [bz#1935497] -- edk2-OvmfPkg-create-Tcg12ConfigPei.inf.patch [bz#1935497] -- edk2-OvmfPkg-rework-TPM-configuration.patch [bz#1935497] -- edk2-spec-adapt-specfile-to-build-option-changes-disable-.patch [bz#1935497] -- Resolves: bz#1935497 - (edk2 implements and/or uses the deprecated MD5 and SHA-1 algorithms by default) - -* Tue Feb 01 2022 Miroslav Rezanina - 20220126gitbb1bba3d77-1 -- Rebase to latest upstream release [bz#2018388] -- Resolves: bz#2018388 - ([rebase] update edk2 to nov '21 release (edk2-stable202111xx)) - -* Fri Jan 14 2022 Miroslav Rezanina - 20210527gite1999b264f1f-8 -- edk2-Revert-advertise-OpenSSL-on-TianoCore-splash-screen-.patch [bz#2027286] -- Resolves: bz#2027286 - (Remove the customized boot splash logo patch) - -* Mon Nov 01 2021 Miroslav Rezanina - 20210527gite1999b264f1f-7 -- edk2-fix-tpm-build-options.patch [bz#2000396] -- Resolves: bz#2000396 - ([aarch64][RHEL9] The lack of TPMFinalLog in efi causes the tpm self-test in the guest to fail) - -* Mon Aug 09 2021 Mohan Boddu - 20210527gite1999b264f1f-6 -- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags - Related: rhbz#1991688 - -* Fri Aug 06 2021 Miroslav Rezanina - 20210527gite1999b264f1f-5 -- edk2-MdeModulePkg-PartitionDxe-Ignore-PMBR-BootIndicator-.patch [bz#1988760] -- Resolves: bz#1988760 - (edk2 does not ignore PMBR protective record BootIndicator as required by UEFI spec) - -* Fri Jul 30 2021 Miroslav Rezanina - 20210527gite1999b264f1f-4 -- edk2-spec-remove-Group-and-defattr.patch [bz#1983789] -- edk2-spec-Add-BuildRequires-make.patch [bz#1983789] -- edk2-spec-don-t-conditionalize-package-definitions.patch [bz#1983789] -- edk2-spec-Use-autosetup-with-our-required-git-config-opti.patch [bz#1983789] -- edk2-spec-Replace-ifarch-else-conditionals-with-build_XXX.patch [bz#1983789] -- edk2-spec-Move-D-TPM_ENABLE-to-common-CC_FLAGS.patch [bz#1983789] -- edk2-spec-Add-qemu_package-and-qemu_binary.patch [bz#1983789] -- edk2-spec-Remove-extra-true-at-end-of-check.patch [bz#1983789] -- edk2-spec-Move-check-to-between-install-and-files.patch [bz#1983789] -- edk2-spec-Add-qosb_testing-macro.patch [bz#1983789] -- edk2-spec-Split-out-build_iso-function.patch [bz#1983789] -- edk2-spec-Replace-RPM_BUILD_ROOT-with-buildroot.patch [bz#1983789] -- edk2-spec-Use-make_build-macro.patch [bz#1983789] -- edk2-spec-Factor-out-OVMF_FLAGS-and-OVMF_SB_FLAGS.patch [bz#1983789] -- edk2-spec-Don-t-put-build-output-in-the-top-directory.patch [bz#1983789] -- edk2-spec-Centralize-non-firmware-install-files-at-the-to.patch [bz#1983789] -- Resolves: bz#1983789 - (Make spec easier to share with Fedora) - -* Mon Jul 12 2021 Miroslav Rezanina - 20210527gite1999b264f1f-3 -- edk2-OvmfPkg-Remove-PrintDxe-RHEL-only.patch [bz#1967747] -- edk2-OvmfPkg-Remove-EbcDxe-RHEL-only.patch [bz#1967747] -- edk2-ArmVirtPkg-Remove-EbcDxe-RHEL-only.patch [bz#1967747] -- edk2-OvmfPkg-Remove-VirtioGpu-device-driver-RHEL-only.patch [bz#1967747] -- edk2-OvmfPkg-Remove-QemuRamfbDxe-display-device-driver-RH.patch [bz#1967747] -- edk2-ArmVirtPkg-Remove-QemuRamfbDxe-display-device-driver.patch [bz#1967747] -- edk2-OvmfPkg-Remove-NvmExpressDxe-device-driver-RHEL-only.patch [bz#1967747] -- edk2-ArmVirtPkg-Remove-NvmExpressDxe-device-driver-RHEL-o.patch [bz#1967747] -- edk2-OvmfPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL-on.patch [bz#1967747] -- edk2-ArmVirtPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL.patch [bz#1967747] -- edk2-OvmfPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch [bz#1967747] -- edk2-ArmVirtPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch [bz#1967747] -- edk2-OvmfPkg-Remove-TftpDynamicCommand-from-shell-RHEL-on.patch [bz#1967747] -- edk2-ArmVirtPkg-Remove-TftpDynamicCommand-from-shell-RHEL.patch [bz#1967747] -- edk2-OvmfPkg-Remove-HttpDynamicCommand-from-shell-RHEL-on.patch [bz#1967747] -- edk2-ArmVirtPkg-Remove-HttpDynamicCommand-from-shell-RHEL.patch [bz#1967747] -- edk2-OvmfPkg-Remove-LinuxInitrdDynamicShellCommand-RHEL-o.patch [bz#1967747] -- edk2-ArmVirtPkg-Remove-LinuxInitrdDynamicShellCommand-RHE.patch [bz#1967747] -- edk2-OvmfPkg-Remove-Xen-Drivers-RHEL-only.patch [bz#1967747] -- Resolves: bz#1967747 - (edk2: review features and drivers shipped in RHEL) - -* Fri Jul 02 2021 Miroslav Rezanina - 20210527gite1999b264f1f-2 -- edk2-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch [bz#1961100] -- edk2-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch [bz#1961100] -- edk2-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch [bz#1961100] -- edk2-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch [bz#1961100] -- edk2-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch [bz#1961100] -- edk2-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch [bz#1961100] -- edk2-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch [bz#1961100] -- edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch [bz#1961100] -- edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch [bz#1961100] -- edk2-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch [bz#1961100] -- edk2-redhat-build-UefiShell.iso-with-xorriso-rather-than-.patch [bz#1971840] -- Resolves: bz#1961100 - (edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe [rhel-9.0]) -- Resolves: bz#1971840 - (Please replace genisoimage with xorriso) - -* Wed Jun 23 2021 Miroslav Rezanina - 20210527gite1999b264f1f-1 -- Rebase to edk2-stable202105 [bz#1938254] -- Sync edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch from RHEL-8 -- Sync edk2-redhat-add-OVMF-binary-that-will-support-SEV-ES.patch from RHEL-8 -- Resolves: bz#1938254 - ((edk2-rebase-rhel-9.0) - rebase edk2 to edk2-stable202105 for RHEL-9-Beta) - -* Fri Jan 08 2021 Miroslav Rezanina - 20200602gitca407c7246bf-1.el9 -- Include fixes to build in RHEL 9 environment (bz#1906468) -- Resolves: bz#1906468 - ([RHEL9][FTBFS] edk2 FTBFS on Red Hat Enterprise Linux 9.0.0 Alpha) - -* Mon Nov 23 2020 Miroslav Rezanina - 20200602gitca407c7246bf-4.el8 -- edk2-OvmfPkg-SmmControl2Dxe-negotiate-ICH9_LPC_SMI_F_CPU_.patch [bz#1849177] -- edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-befo.patch [bz#1849177] -- edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-afte.patch [bz#1849177] -- edk2-CryptoPkg-OpensslLib-Upgrade-OpenSSL-to-1.1.1g.patch [bz#1893806] -- edk2-redhat-bump-OpenSSL-dist-git-submodule-to-1.1.1g-RHE.patch [bz#1893806] -- Resolves: bz#1849177 - (OVMF: negotiate "SMI on VCPU hotplug" with QEMU) -- Resolves: bz#1893806 - (attempt advancing RHEL8 edk2's OpenSSL submodule to RHEL8 OpenSSL 1.1.1g (or later)) - -* Mon Aug 10 2020 Miroslav Rezanina - 20200602gitca407c7246bf-3.el8 -- edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch [bz#1861718] -- Resolves: bz#1861718 - (Very slow boot when overcommitting CPU) - -* Wed Jun 24 2020 Miroslav Rezanina - 20200602gitca407c7246bf-2.el8 -- edk2-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch [bz#1844682] -- edk2-OvmfPkg-GenericQemuLoadImageLib-log-Not-Found-at-INF.patch [bz#1844682] -- edk2-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch [bz#1844682] -- Resolves: bz#1844682 - (silent build of edk2-aarch64 logs DEBUG_ERROR messages that don't actually report serious errors) - -* Sat Jun 13 2020 Miroslav Rezanina - 20200602gitca407c7246bf-1.el8 -- Rebase to edk2-stable202005 [bz#1817035] -- Resolves: bz#1817035 - ((edk2-rebase-rhel-8.3) - rebase edk2 to upstream tag edk2-stable202005 for RHEL-8.3) - -* Fri Mar 27 2020 Miroslav Rezanina - 20190829git37eef91017ad-9.el8 -- edk2-OvmfPkg-QemuVideoDxe-unbreak-secondary-vga-and-bochs.patch [bz#1806359] -- Resolves: bz#1806359 - (bochs-display cannot show graphic wihout driver attach) - -* Tue Feb 18 2020 Miroslav Rezanina - 20190829git37eef91017ad-8.el8 -- edk2-MdeModulePkg-Enable-Disable-S3BootScript-dynamically.patch [bz#1801274] -- edk2-MdeModulePkg-PiDxeS3BootScriptLib-Fix-potential-nume.patch [bz#1801274] -- Resolves: bz#1801274 - (CVE-2019-14563 edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib [rhel-8]) - -* Tue Feb 11 2020 Miroslav Rezanina - 20190829git37eef91017ad-7.el8 -- edk2-SecurityPkg-Fix-spelling-errors-PARTIAL-PICK.patch [bz#1751993] -- edk2-SecurityPkg-DxeImageVerificationHandler-simplify-Ver.patch [bz#1751993] -- edk2-SecurityPkg-DxeImageVerificationHandler-remove-else-.patch [bz#1751993] -- edk2-SecurityPkg-DxeImageVerificationHandler-keep-PE-COFF.patch [bz#1751993] -- edk2-SecurityPkg-DxeImageVerificationHandler-narrow-down-.patch [bz#1751993] -- edk2-SecurityPkg-DxeImageVerificationHandler-fix-retval-o.patch [bz#1751993] -- edk2-SecurityPkg-DxeImageVerificationHandler-remove-super.patch [bz#1751993] -- edk2-SecurityPkg-DxeImageVerificationHandler-unnest-AddIm.patch [bz#1751993] -- edk2-SecurityPkg-DxeImageVerificationHandler-eliminate-St.patch [bz#1751993] -- edk2-SecurityPkg-DxeImageVerificationHandler-fix-retval-f.patch [bz#1751993] -- edk2-SecurityPkg-DxeImageVerificationHandler-fix-imgexec-.patch [bz#1751993] -- edk2-SecurityPkg-DxeImageVerificationHandler-fix-defer-vs.patch [bz#1751993] -- Resolves: bz#1751993 - (DxeImageVerificationLib handles "DENY execute on security violation" like "DEFER execute on security violation" [rhel8]) - -* Tue Jan 21 2020 Miroslav Rezanina - 20190829git37eef91017ad-6.el8 -- edk2-UefiCpuPkg-PiSmmCpuDxeSmm-fix-2M-4K-page-splitting-r.patch [bz#1789335] -- Resolves: bz#1789335 - (VM with edk2 can't boot when setting memory with '-m 2001') - -* Thu Jan 16 2020 Miroslav Rezanina - 20190829git37eef91017ad-5.el8 -- edk2-MdeModulePkg-UefiBootManagerLib-log-reserved-mem-all.patch [bz#1789797] -- edk2-NetworkPkg-HttpDxe-fix-32-bit-truncation-in-HTTPS-do.patch [bz#1789797] -- Resolves: bz#1789797 - (Backport upstream patch series: "UefiBootManagerLib, HttpDxe: tweaks for large HTTP(S) downloads" to improve HTTP(S) Boot experience with large (4GiB+) files) - -* Wed Dec 11 2019 Miroslav Rezanina - 20190829git37eef91017ad-4.el8 -- edk2-redhat-set-guest-RAM-size-to-768M-for-SB-varstore-te.patch [bz#1778301] -- edk2-redhat-re-enable-Secure-Boot-varstore-template-verif.patch [bz#1778301] -- Resolves: bz#1778301 - (re-enable Secure Boot (varstore template) verification in %check) - -* Thu Dec 05 2019 Miroslav Rezanina - 20190829git37eef91017ad-3.el8 -- Update used openssl version [bz#1616029] -- Resolves: bz#1616029 - (rebuild edk2 against the final RHEL-8.2.0 version of OpenSSL-1.1.1) - -* Mon Dec 02 2019 Miroslav Rezanina - 20190829git37eef91017ad-2.el8 -- edk2-MdePkg-Include-Protocol-Tls.h-Add-the-data-type-of-E.patch [bz#1536624] -- edk2-CryptoPkg-TlsLib-Add-the-new-API-TlsSetVerifyHost-CV.patch [bz#1536624] -- edk2-CryptoPkg-Crt-turn-strchr-into-a-function-CVE-2019-1.patch [bz#1536624] -- edk2-CryptoPkg-Crt-satisfy-inet_pton.c-dependencies-CVE-2.patch [bz#1536624] -- edk2-CryptoPkg-Crt-import-inet_pton.c-CVE-2019-14553.patch [bz#1536624] -- edk2-CryptoPkg-TlsLib-TlsSetVerifyHost-parse-IP-address-l.patch [bz#1536624] -- edk2-NetworkPkg-TlsDxe-Add-the-support-of-host-validation.patch [bz#1536624] -- edk2-NetworkPkg-HttpDxe-Set-the-HostName-for-the-verifica.patch [bz#1536624] -- edk2-redhat-enable-HTTPS-Boot.patch [bz#1536624] -- Resolves: bz#1536624 - (HTTPS enablement in OVMF) - -* Fri Nov 29 2019 Miroslav Rezanina - 20190829git37eef91017ad-1.el8 -- Rebase to edk2-stable201908 [bz#1748180] -- Resolves: bz#1748180 - ((edk2-rebase-rhel-8.2) - rebase edk2 to upstream tag edk2-stable201908 for RHEL-8.2) - -* Mon Aug 05 2019 Miroslav Rezanina - 20190308git89910a39dcfd-6.el8 -- edk2-ArmVirtPkg-silence-DEBUG_VERBOSE-masking-0x00400000-.patch [bz#1714446] -- edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch [bz#1714446] -- edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1714446] -- Resolves: bz#1714446 - (edk2-aarch64 silent build is not silent enough) - -* Tue Jul 02 2019 Miroslav Rezanina - 20190308git89910a39dcfd-5.el8 -- edk2-redhat-add-D-TPM2_ENABLE-to-the-edk2-ovmf-build-flag.patch [bz#1693205] -- Resolves: bz#1693205 - (edk2: Enable TPM2 support) - -* Tue Jun 11 2019 Miroslav Rezanina - 20190308git89910a39dcfd-4.el8 -- edk2-OvmfPkg-raise-the-PCIEXBAR-base-to-2816-MB-on-Q35.patch [bz#1666941] -- edk2-OvmfPkg-PlatformPei-set-32-bit-UC-area-at-PciBase-Pc.patch [bz#1666941] -- Resolves: bz#1666941 - (UEFI guest cannot boot into os when setting some special memory size) - -* Tue Apr 09 2019 Danilo Cesar Lemes de Paula - 20190308git89910a39dcfd-2.el8 -- edk2-redhat-provide-firmware-descriptor-meta-files.patch [bz#1600230] -- Resolves: bz#1600230 - ([RHEL 8.1] RFE: provide firmware descriptor meta-files for the edk2-ovmf and edk2-aarch64 firmware images) - -* Mon Apr 08 2019 Danilo Cesar Lemes de Paula - 20190308git89910a39dcfd-1.el8 -- Rebase to edk2-20190308git89910a39dcfd - -* Mon Jan 21 2019 Danilo Cesar Lemes de Paula - 20180508gitee3198e672e2-9.el8 -- edk2-BaseTools-Fix-UEFI-and-Tiano-Decompression-logic-iss.patch [bz#1662184] -- edk2-MdePkg-BaseUefiDecompressLib-Fix-UEFI-Decompression-.patch [bz#1662184] -- edk2-IntelFrameworkModulePkg-Fix-UEFI-and-Tiano-Decompres.patch [bz#1662184] -- edk2-git-Use-HTTPS-support.patch [] -- Resolves: bz#1662184 - (backport fix for (theoretical?) regression introduced by earlier CVE fixes) - -* Wed Nov 21 2018 Danilo Cesar Lemes de Paula - 20180508gitee3198e672e2-8.el8 -- edk2-NetworkPkg-UefiPxeBcDxe-Add-EXCLUSIVE-attribute-when.patch [bz#1643377] -- Resolves: bz#1643377 - (Exception when grubx64.efi used for UEFI netboot) - -* Tue Nov 06 2018 Danilo Cesar Lemes de Paula - 20180508gitee3198e672e2-5.el8 -- edk2-MdeModulePkg-Variable-Fix-Timestamp-zeroing-issue-on.patch [bz#1641436] -- edk2-MdePkg-Add-more-checker-in-UefiDecompressLib-to-acce.patch [bz#1641449 bz#1641453 bz#1641464 bz#1641469] -- edk2-IntelFrameworkModulePkg-Add-more-checker-in-UefiTian.patch [bz#1641453 bz#1641464 bz#1641469] -- edk2-BaseTools-Add-more-checker-in-Decompress-algorithm-t.patch [bz#1641445 bz#1641453 bz#1641464 bz#1641469] -- Resolves: bz#1641436 - (CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users [rhel-8]) -- Resolves: bz#1641445 - (CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c [rhel-8]) -- Resolves: bz#1641449 - (CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c [rhel-8]) -- Resolves: bz#1641453 - (CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function [rhel-8]) -- Resolves: bz#1641464 - (CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function [rhel-8]) -- Resolves: bz#1641469 - (CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function [rhel-8]) - -* Tue Sep 04 2018 Danilo Cesar Lemes de Paula - 20180508gitee3198e672e2-5.el8 -- edk2-BaseTools-footer.makefile-expand-BUILD_CFLAGS-last-f.patch [bz#1607906] -- edk2-BaseTools-header.makefile-remove-c-from-BUILD_CFLAGS.patch [bz#1607906] -- edk2-BaseTools-Source-C-split-O2-to-BUILD_OPTFLAGS.patch [bz#1607906] -- edk2-BaseTools-Source-C-take-EXTRA_OPTFLAGS-from-the-call.patch [bz#1607906] -- edk2-BaseTools-Source-C-take-EXTRA_LDFLAGS-from-the-calle.patch [bz#1607906] -- edk2-BaseTools-VfrCompile-honor-EXTRA_LDFLAGS.patch [bz#1607906] -- edk2-redhat-inject-the-RPM-compile-and-link-options-to-th.patch [bz#1607906] -- Resolves: bz#1607906 - (edk2-tools: Does not use RPM build flags) - -* Wed Aug 08 2018 Danilo Cesar Lemes de Paula - 20180508gitee3198e672e2-4.el8 -- edk2-redhat-provide-virtual-bundled-OpenSSL-in-edk2-ovmf-.patch [bz#1607801] -- Resolves: bz#1607801 - (add 'Provides: bundled(openssl) = 1.1.0h' to the spec file) - -* Tue Jul 24 2018 Danilo Cesar Lemes de Paula - 20180508gitee3198e672e2-3.el8 -- edk2-redhat-Provide-and-Obsolete-OVMF-and-AAVMF.patch [bz#1596148] -- edk2-ArmVirtPkg-unify-HttpLib-resolutions-in-ArmVirt.dsc..patch [bz#1536627] -- edk2-ArmVirtPkg-ArmVirtQemu-enable-the-IPv6-stack.patch [bz#1536627] -- edk2-advertise-OpenSSL-due-to-IPv6-enablement-too-RHEL-on.patch [bz#1536627] -- edk2-redhat-add-D-NETWORK_IP6_ENABLE-to-the-build-flags.patch [bz#1536627] -- edk2-redhat-update-license-fields-and-files-in-the-spec-f.patch [bz#1536627] -- Resolves: bz#1536627 - (IPv6 enablement in OVMF) -- Resolves: bz#1596148 - (restore Provides/Obsoletes macros for OVMF and AAVMF, from RHEL-8 Alpha) - -* Tue Jul 10 2018 Danilo C. L. de Paula - 20180508gitee3198e672e2-2.el8 -- Rebase edk2 on top of 20180508gitee3198e672e2 - -* Fri Jun 08 2018 Miroslav Rezanina - 20180508-2.gitee3198e672e2 -- OvmfPkg/PlatformBootManagerLib: connect consoles unconditionally [bz#1577546] -- build OVMF varstore template with SB enabled / certs enrolled [bz#1561128] -- connect Virtio RNG devices again [bz#1579518] -- Resolves: bz#1577546 - (no input consoles connected under certain circumstances) -- Resolves: bz#1561128 - (OVMF Secure boot enablement (enrollment of default keys)) -- Resolves: bz#1579518 - (EFI_RNG_PROTOCOL no longer produced for virtio-rng) -* Wed Dec 06 2017 Miroslav Rezanina - 20171011-4.git92d07e48907f.el7 -- ovmf-MdeModulePkg-Core-Dxe-log-informative-memprotect-msg.patch [bz#1520485] -- ovmf-MdeModulePkg-BdsDxe-fall-back-to-a-Boot-Manager-Menu.patch [bz#1515418] -- Resolves: bz#1515418 - (RFE: Provide diagnostics for failed boot) -- Resolves: bz#1520485 - (AAVMF: two new messages with silent build) - -* Fri Dec 01 2017 Miroslav Rezanina - 20171011-3.git92d07e48907f.el7 -- ovmf-UefiCpuPkg-CpuDxe-Fix-multiple-entries-of-RT_CODE-in.patch [bz#1518308] -- ovmf-MdeModulePkg-DxeCore-Filter-out-all-paging-capabilit.patch [bz#1518308] -- ovmf-MdeModulePkg-Core-Merge-memory-map-after-filtering-p.patch [bz#1518308] -- Resolves: bz#1518308 - (UEFI memory map regression (runtime code entry splitting) introduced by c1cab54ce57c) - -* Mon Nov 27 2017 Miroslav Rezanina - 20171011-2.git92d07e48907f.el7 -- ovmf-MdeModulePkg-Bds-Remove-assertion-in-BmCharToUint.patch [bz#1513632] -- ovmf-MdeModulePkg-Bds-Check-variable-name-even-if-OptionN.patch [bz#1513632] -- ovmf-MdeModulePkg-PciBus-Fix-bug-that-PCI-BUS-claims-too-.patch [bz#1514105] -- ovmf-OvmfPkg-make-it-a-proper-BASE-library.patch [bz#1488247] -- ovmf-OvmfPkg-create-a-separate-PlatformDebugLibIoPort-ins.patch [bz#1488247] -- ovmf-OvmfPkg-save-on-I-O-port-accesses-when-the-debug-por.patch [bz#1488247] -- ovmf-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch [bz#1488247] -- ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-QemuVide.patch [bz#1488247] -- ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch [bz#1488247] -- ovmf-Revert-redhat-introduce-separate-silent-and-verbose-.patch [bz#1488247] -- Resolves: bz#1488247 - (make debug logging no-op unless a debug console is active) -- Resolves: bz#1513632 - ([RHEL-ALT 7.5] AAVMF fails to boot after setting BootNext) -- Resolves: bz#1514105 - (backport edk2 commit 6e3287442774 so that PciBusDxe not over-claim resources) - -* Wed Oct 18 2017 Miroslav Rezanina - 20171011-1.git92d07e48907f.el7 -- Rebase to 92d07e48907f [bz#1469787] -- Resolves: bz#1469787 - ((ovmf-rebase-rhel-7.5) Rebase OVMF for RHEL-7.5) -- Resolves: bz#1434740 - (OvmfPkg/PciHotPlugInitDxe: don't reserve IO space when IO support is disabled) -- Resolves: bz#1434747 - ([Q35] code12 error when hotplug x710 device in win2016) -- Resolves: bz#1447027 - (Guest cannot boot with 240 or above vcpus when using ovmf) -- Resolves: bz#1458192 - ([Q35] recognize "usb-storage" devices in XHCI ports) -- Resolves: bz#1468526 - (>1TB RAM support) -- Resolves: bz#1488247 - (provide "OVMF_CODE.secboot.verbose.fd" for log capturing; silence "OVMF_CODE.secboot.fd") -- Resolves: bz#1496170 - (Inconsistent MOR control variables exposed by OVMF, breaks Windows Device Guard) - -* Fri May 12 2017 Miroslav Rezanina - 20170228-5.gitc325e41585e3.el7 -- ovmf-OvmfPkg-EnrollDefaultKeys-update-SignatureOwner-GUID.patch [bz#1443351] -- ovmf-OvmfPkg-EnrollDefaultKeys-expose-CertType-parameter-.patch [bz#1443351] -- ovmf-OvmfPkg-EnrollDefaultKeys-blacklist-empty-file-in-db.patch [bz#1443351] -- ovmf-OvmfPkg-introduce-the-FD_SIZE_IN_KB-macro-build-flag.patch [bz#1443351] -- ovmf-OvmfPkg-OvmfPkg.fdf.inc-extract-VARS_LIVE_SIZE-and-V.patch [bz#1443351] -- ovmf-OvmfPkg-introduce-4MB-flash-image-mainly-for-Windows.patch [bz#1443351] -- ovmf-OvmfPkg-raise-max-variable-size-auth-non-auth-to-33K.patch [bz#1443351] -- ovmf-OvmfPkg-PlatformPei-handle-non-power-of-two-spare-si.patch [bz#1443351] -- ovmf-redhat-update-local-build-instructions-with-D-FD_SIZ.patch [bz#1443351] -- ovmf-redhat-update-OVMF-build-commands-with-D-FD_SIZE_4MB.patch [bz#1443351] -- Resolves: bz#1443351 - ([svvp][ovmf] job "Secure Boot Logo Test" failed with q35&ovmf) - -* Fri Apr 28 2017 Miroslav Rezanina - 20170228-4.gitc325e41585e3.el7 -- ovmf-ShellPkg-Shell-clean-up-bogus-member-types-in-SPLIT_.patch [bz#1442908] -- ovmf-ShellPkg-Shell-eliminate-double-free-in-RunSplitComm.patch [bz#1442908] -- Resolves: bz#1442908 - (Guest hang when running a wrong command in Uefishell) - -* Tue Apr 04 2017 Miroslav Rezanina - 20170228-3.gitc325e41585e3.el7 -- ovmf-ArmVirtPkg-FdtClientDxe-supplement-missing-EFIAPI-ca.patch [bz#1430262] -- ovmf-ArmVirtPkg-ArmVirtPL031FdtClientLib-unconditionally-.patch [bz#1430262] -- ovmf-MdeModulePkg-RamDiskDxe-fix-C-string-literal-catenat.patch [bz#1430262] -- ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-ACPI-GUID.patch [bz#1430262] -- ovmf-EmbeddedPkg-introduce-PlatformHasAcpiLib.patch [bz#1430262] -- ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-Device-Tree.patch [bz#1430262] -- ovmf-ArmVirtPkg-add-PlatformHasAcpiDtDxe.patch [bz#1430262] -- ovmf-ArmVirtPkg-enable-AcpiTableDxe-and-EFI_ACPI_TABLE_PR.patch [bz#1430262] -- ovmf-ArmVirtPkg-FdtClientDxe-install-DT-as-sysconfig-tabl.patch [bz#1430262] -- ovmf-ArmVirtPkg-PlatformHasAcpiDtDxe-don-t-expose-DT-if-Q.patch [bz#1430262] -- ovmf-ArmVirtPkg-remove-PURE_ACPI_BOOT_ENABLE-and-PcdPureA.patch [bz#1430262] -- Resolves: bz#1430262 - (AAVMF: forward QEMU's DT to the guest OS only if ACPI payload is unavailable) - -* Mon Mar 27 2017 Miroslav Rezanina - 20170228-2.gitc325e41585e3.el7 -- ovmf-MdeModulePkg-Core-Dxe-downgrade-CodeSegmentCount-is-.patch [bz#1433428] -- Resolves: bz#1433428 - (AAVMF: Fix error message during ARM guest VM installation) - -* Wed Mar 08 2017 Laszlo Ersek - ovmf-20170228-1.gitc325e41585e3.el7 -- Rebase to upstream c325e41585e3 [bz#1416919] -- Resolves: bz#1373812 - (guest boot from network even set 'boot order=1' for virtio disk with OVMF) -- Resolves: bz#1380282 - (Update OVMF to openssl-1.0.2k-hobbled) -- Resolves: bz#1412313 - (select broadcast SMI if available) -- Resolves: bz#1416919 - (Rebase OVMF for RHEL-7.4) -- Resolves: bz#1426330 - (disable libssl in CryptoPkg) - -* Mon Sep 12 2016 Laszlo Ersek - ovmf-20160608b-1.git988715a.el7 -- rework downstream-only commit dde83a75b566 "setup the tree for the secure - boot feature (RHEL only)", excluding patent-encumbered files from the - upstream OpenSSL 1.0.2g tarball [bz#1374710] -- rework downstream-only commit dfc3ca1ee509 "CryptoPkg/OpensslLib: Upgrade - OpenSSL version to 1.0.2h", excluding patent-encumbered files from the - upstream OpenSSL 1.0.2h tarball [bz#1374710] - -* Thu Aug 04 2016 Miroslav Rezanina - OVMF-20160608-3.git988715a.el7 -- ovmf-MdePkg-PCI-Add-missing-PCI-PCIE-definitions.patch [bz#1332408] -- ovmf-ArmPlatformPkg-NorFlashDxe-accept-both-non-secure-an.patch [bz#1353494] -- ovmf-ArmVirtPkg-ArmVirtQemu-switch-secure-boot-build-to-N.patch [bz#1353494] -- ovmf-ArmPlatformPkg-NorFlashAuthenticatedDxe-remove-this-.patch [bz#1353494] -- ovmf-ArmVirtPkg-add-FDF-definition-for-empty-varstore.patch [bz#1353494] -- ovmf-redhat-package-the-varstore-template-produced-by-the.patch [bz#1353494] -- ovmf-ArmVirtPkg-Re-add-the-Driver-Health-Manager.patch [bz#1353494] -- ovmf-ArmVirtPkg-HighMemDxe-allow-patchable-PCD-for-PcdSys.patch [bz#1353494] -- ovmf-ArmVirtPkg-ArmVirtQemuKernel-make-ACPI-support-AARCH.patch [bz#1353494] -- ovmf-ArmVirtPkg-align-ArmVirtQemuKernel-with-ArmVirtQemu.patch [bz#1353494] -- ovmf-ArmVirtPkg-ArmVirtQemu-factor-out-shared-FV.FvMain-d.patch [bz#1353494] -- ovmf-ArmVirtPkg-factor-out-Rules-FDF-section.patch [bz#1353494] -- ovmf-ArmVirtPkg-add-name-GUIDs-to-FvMain-instances.patch [bz#1353494] -- ovmf-OvmfPkg-add-a-Name-GUID-to-each-Firmware-Volume.patch [bz#1353494] -- ovmf-OvmfPkg-PlatformBootManagerLib-remove-stale-FvFile-b.patch [bz#1353494] -- ovmf-MdePkg-IndustryStandard-introduce-EFI_PCI_CAPABILITY.patch [bz#1332408] -- ovmf-MdeModulePkg-PciBusDxe-look-for-the-right-capability.patch [bz#1332408] -- ovmf-MdeModulePkg-PciBusDxe-recognize-hotplug-capable-PCI.patch [bz#1332408] -- ovmf-OvmfPkg-add-PciHotPlugInitDxe.patch [bz#1332408] -- ovmf-ArmPkg-ArmGicLib-manage-GICv3-SPI-state-at-the-distr.patch [bz#1356655] -- ovmf-ArmVirtPkg-PlatformBootManagerLib-remove-stale-FvFil.patch [bz#1353494] -- ovmf-OvmfPkg-EnrollDefaultKeys-assign-Status-before-readi.patch [bz#1356913] -- ovmf-OvmfPkg-EnrollDefaultKeys-silence-VS2015x86-warning-.patch [bz#1356913] -- ovmf-CryptoPkg-update-openssl-to-ignore-RVCT-3079.patch [bz#1356184] -- ovmf-CryptoPkg-Fix-typos-in-comments.patch [bz#1356184] -- ovmf-CryptoPkg-BaseCryptLib-Avoid-passing-NULL-ptr-to-fun.patch [bz#1356184] -- ovmf-CryptoPkg-BaseCryptLib-Init-the-content-of-struct-Ce.patch [bz#1356184] -- ovmf-CryptoPkg-OpensslLib-Upgrade-OpenSSL-version-to-1.0..patch [bz#1356184] -- Resolves: bz#1332408 - (Q35 machine can not hot-plug scsi controller under switch) -- Resolves: bz#1353494 - ([OVMF] "EFI Internal Shell" should be removed from "Boot Manager") -- Resolves: bz#1356184 - (refresh embedded OpenSSL to 1.0.2h) -- Resolves: bz#1356655 - (AAVMF: stop accessing unmapped gicv3 registers) -- Resolves: bz#1356913 - (fix use-without-initialization in EnrollDefaultKeys.efi) - -* Tue Jul 12 2016 Miroslav Rezanina - OVMF-20160608-2.git988715a.el7 -- ovmf-ArmPkg-ArmGicV3Dxe-configure-all-interrupts-as-non-s.patch [bz#1349407] -- ovmf-ArmVirtPkg-PlatformBootManagerLib-Postpone-the-shell.patch [bz#1353689] -- Resolves: bz#1349407 - (AArch64: backport fix to run over gicv3 emulation) -- Resolves: bz#1353689 - (AAVMF: Drops to shell with uninitialized NVRAM file) - -* Thu Jun 9 2016 Laszlo Ersek - ovmf-20160608-1.git988715a.el7 -- Resolves: bz#1341733 - (prevent SMM stack overflow in OVMF while enrolling certificates in "db") -- Resolves: bz#1257882 - (FEAT: support to boot from virtio 1.0 modern devices) -- Resolves: bz#1333238 - (Q35 machine can not boot up successfully with more than 3 virtio-scsi - storage controller under switch) -- Resolves: bz#1330955 - (VM can not be booted up from hard disk successfully when with a passthrough - USB stick) - -* Thu May 19 2016 Laszlo Ersek - ovmf-20160419-2.git90bb4c5.el7 -- Submit scratch builds from the exploded tree again to - supp-rhel-7.3-candidate, despite FatPkg being OSS at this point; see - bz#1329559. - -* Wed Apr 20 2016 Laszlo Ersek - ovmf-20160419-1.git90bb4c5.el7 -- FatPkg is under the 2-clause BSDL now; "ovmf" has become OSS -- upgrade to openssl-1.0.2g -- Resolves: bz#1323363 - (remove "-D SECURE_BOOT_ENABLE" from AAVMF) -- Resolves: bz#1257882 - (FEAT: support to boot from virtio 1.0 modern devices) -- Resolves: bz#1308678 - (clearly separate SB-less, SMM-less OVMF binary from SB+SMM OVMF binary) - -* Fri Feb 19 2016 Miroslav Rezanina - OVMF-20160202-2.gitd7c0dfa.el7 -- ovmf-restore-TianoCore-splash-logo-without-OpenSSL-advert.patch [bz#1308678] -- ovmf-OvmfPkg-ArmVirtPkg-show-OpenSSL-less-logo-without-Se.patch [bz#1308678] -- ovmf-OvmfPkg-simplify-VARIABLE_STORE_HEADER-generation.patch [bz#1308678] -- ovmf-redhat-bring-back-OVMF_CODE.fd-but-without-SB-and-wi.patch [bz#1308678] -- ovmf-redhat-rename-OVMF_CODE.smm.fd-to-OVMF_CODE.secboot..patch [bz#1308678] - -* Tue Feb 2 2016 Laszlo Ersek - ovmf-20160202-1.gitd7c0dfa.el7 -- rebase to upstream d7c0dfa -- update OpenSSL to 1.0.2e (upstream) -- update FatPkg to SVN r97 (upstream) -- drive NVMe devices (upstream) -- resize xterm on serial console mode change, when requested with - -fw_cfg name=opt/(ovmf|aavmf)/PcdResizeXterm,string=y - (downstream) -- Resolves: bz#1259395 - (revert / roll back AAVMF fix for BZ 1188054) -- Resolves: bz#1202819 - (OVMF: secure boot limitations) -- Resolves: bz#1182495 - (OVMF rejects iPXE oprom when Secure Boot is enabled) - -* Thu Nov 5 2015 Laszlo Ersek - ovmf-20151104-1.gitb9ffeab.el7 -- rebase to upstream b9ffeab -- Resolves: bz#1207554 - ([AAVMF] AArch64: populate SMBIOS) -- Resolves: bz#1270279 - (AAVMF: output improvements) - -* Thu Jun 25 2015 Miroslav Rezanina - OVMF-20150414-2.gitc9e5618.el7 -- ovmf-OvmfPkg-PlatformPei-set-SMBIOS-entry-point-version-d.patch [bz#1232876] -- Resolves: bz#1232876 - (OVMF should install a version 2.8 SMBIOS entry point) - -* Sat Apr 18 2015 Laszlo Ersek - 20150414-1.gitc9e5618.el7 -- rebase from upstream 9ece15a to c9e5618 -- adapt .gitignore files -- update to openssl-0.9.8zf -- create Logo-OpenSSL.bmp rather than modifying Logo.bmp in-place -- update to FatPkg SVN r93 (git 8ff136aa) -- drop the following downstream-only patches (obviated by upstream - counterparts): - "tools_def.template: use forward slash with --add-gnu-debuglink (RHEL only)" - "tools_def.template: take GCC48 prefixes from environment (RHEL only)" - "OvmfPkg: set video resolution of text setup to 640x480 (RHEL only)" - "OvmfPkg: resolve OrderedCollectionLib with base red-black tree instance" - "OvmfPkg: AcpiPlatformDxe: actualize QemuLoader.h comments" - "OvmfPkg: AcpiPlatformDxe: remove current ACPI table loader" - "OvmfPkg: AcpiPlatformDxe: implement QEMU's full ACPI table loader interface" - "OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size" - "OvmfPkg: disable stale fork of SecureBootConfigDxe" - "OvmfPkg: SecureBootConfigDxe: remove stale fork" - "Try to read key strike even when ..." - "OvmfPkg: BDS: remove dead call to PlatformBdsEnterFrontPage()" - "OvmfPkg: BDS: drop useless return statement" - "OvmfPkg: BDS: don't overwrite the BDS Front Page timeout" - "OvmfPkg: BDS: optimize second argument in PlatformBdsEnterFrontPage() call" - 'OvmfPkg: BDS: drop superfluous "connect first boot option" logic' - "OvmfPkg: BDS: drop custom boot timeout, revert to IntelFrameworkModulePkg's" - "Add comments to clarify mPubKeyStore buffer MemCopy. ..." - "MdeModulePkg/SecurityPkg Variable: Add boundary check..." - "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit" - "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE" - "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands" -- merge downstream AAVMF patch "adapt packaging to Arm64", which forces us to - rename the main package from "OVMF" to "ovmf" -- drop the following ARM BDS specific tweaks (we'll only build the Intel BDS): - "ArmPlatformPkg/Bds: generate ESP Image boot option if user pref is unset - (Acadia)" - "ArmPlatformPkg/Bds: check for other defaults too if user pref is unset - (Acadia)" - "ArmPlatformPkg/ArmVirtualizationPkg: auto-detect boot path (Acadia)" - "ArmPlatformPkg/Bds: initialize ConIn/ConOut/ErrOut before connecting - terminals" - "ArmPlatformPkg/Bds: let FindCandidate() search all filesystems" - "ArmPlatformPkg/Bds: FindCandidateOnHandle(): log full device path" - "ArmPlatformPkg/Bds: fall back to Boot Menu when no default option was found" - "ArmPlatformPkg/Bds: always connect drivers before looking at boot options" -- drop patch "ArmPlatformPkg/ArmVirtualizationPkg: enable DEBUG_VERBOSE (Acadia - only)", obsoleted by fixed bug 1197141 -- tweak patch "write up build instructions (for interactive, local development) - (RHELSA)". The defaults in "BaseTools/Conf/target.template", ie. - ACTIVE_PLATFORM and TARGET_ARCH, are set for OVMF / X64. The AAVMF build - instructions now spell out the necessary override options (-p and -a, - respectively). -- extend patch "build FAT driver from source (RHELSA)" to the Xen build as well - (only for consistency; we don't build for Xen). -- drop the following downstream-only AAVMF patches, due to the 77d5dac -> - c9e5618 AAVMF rebase & join: - "redhat/process-rh-specific.sh: fix check for hunk-less filtered patches" - "redhat/process-rh-specific.sh: suppress missing files in final 'rm'" - "ArmVirtualizationQemu: build UEFI shell from source (Acadia only)" - "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE" - "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands" - "ArmVirtualizationPkg: work around cache incoherence on KVM affecting DTB" - "Changed build target to supp-rhel-7.1-candidate" - "ArmVirtualizationPkg: VirtFdtDxe: forward FwCfg addresses from DTB to PCDs" - "ArmVirtualizationPkg: introduce QemuFwCfgLib instance for DXE drivers" - "ArmVirtualizationPkg: clone PlatformIntelBdsLib from ArmPlatformPkg" - "ArmVirtualizationPkg: PlatformIntelBdsLib: add basic policy" - "OvmfPkg: extract QemuBootOrderLib" - "OvmfPkg: QemuBootOrderLib: featurize PCI-like device path translation" - "OvmfPkg: introduce VIRTIO_MMIO_TRANSPORT_GUID" - "ArmVirtualizationPkg: VirtFdtDxe: use dedicated VIRTIO_MMIO_TRANSPORT_GUID" - "OvmfPkg: QemuBootOrderLib: widen ParseUnitAddressHexList() to UINT64" - "OvmfPkg: QemuBootOrderLib: OFW-to-UEFI translation for virtio-mmio" - "ArmVirtualizationPkg: PlatformIntelBdsLib: adhere to QEMU's boot order" - "ArmVirtualizationPkg: identify "new shell" as builtin shell for Intel BDS" - "ArmVirtualizationPkg: Intel BDS: load EFI-stubbed Linux kernel from fw_cfg" - 'Revert "ArmVirtualizationPkg: work around cache incoherence on KVM affecting - DTB"' - "OvmfPkg: QemuBootOrderLib: expose QEMU's "-boot menu=on[, splash-time=N]"" - "OvmfPkg: PlatformBdsLib: get front page timeout from QEMU" - "ArmVirtualizationPkg: PlatformIntelBdsLib: get front page timeout from QEMU" - "ArmPkg: ArmArchTimerLib: clean up comments" - "ArmPkg: ArmArchTimerLib: use edk2-conformant (UINT64 * UINT32) / UINT32" - "ArmPkg: ArmArchTimerLib: conditionally rebase to actual timer frequency" - "ArmVirtualizationQemu: ask the hardware for the timer frequency" - "ArmPkg: DebugPeCoffExtraActionLib: debugger commands are not errors" - "ArmPlatformPkg: PEIM startup is not an error" - "ArmVirtualizationPkg: PlatformIntelBdsLib: lack of QEMU kernel is no error" - "ArmVirtualizationPkg: expose debug message bitmask on build command line" -- tweak patch "rebase to upstream 77d5dac (Acadia only)": update spec changelog - only -- tweak patch "spec: build AAVMF with the Intel BDS driver (RHELSA only)": - apply "-D INTEL_BDS" to manual build instructions in redhat/README too -- tweak patch "spec: build and install verbose and silent (default) AAVMF - binaries": apply DEBUG_PRINT_ERROR_LEVEL setting to interactive build - instructions in redhat/README too -- install OVMF whitepaper as part of the OVMF build's documentation -- Resolves: bz#1211337 - (merge AAVMF into OVMF) -- Resolves: bz#1206523 - ([AAVMF] fix missing cache maintenance) - -* Fri Mar 06 2015 Miroslav Rezanina - AAVMF-20141113-5.git77d5dac.el7_1 -- aavmf-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1197141] -- aavmf-ArmPlatformPkg-PEIM-startup-is-not-an-error.patch [bz#1197141] -- aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-lack-of-QEM.patch [bz#1197141] -- aavmf-ArmVirtualizationPkg-expose-debug-message-bitmask-on.patch [bz#1197141] -- aavmf-spec-build-and-install-verbose-and-silent-default-AA.patch [bz#1197141] -- Resolves: bz#1197141 - (create silent & verbose builds) - -* Tue Feb 10 2015 Miroslav Rezanina - AAVMF-20141113-4.git77d5dac.el7 -- aavmf-ArmPkg-ArmArchTimerLib-clean-up-comments.patch [bz#1188247] -- aavmf-ArmPkg-ArmArchTimerLib-use-edk2-conformant-UINT64-UI.patch [bz#1188247] -- aavmf-ArmPkg-ArmArchTimerLib-conditionally-rebase-to-actua.patch [bz#1188247] -- aavmf-ArmVirtualizationQemu-ask-the-hardware-for-the-timer.patch [bz#1188247] -- aavmf-ArmPkg-TimerDxe-smack-down-spurious-timer-interrupt-.patch [bz#1188054] -- Resolves: bz#1188054 - (guest reboot (asked from within AAVMF) regressed in 3.19.0-0.rc5.58.aa7a host kernel) -- Resolves: bz#1188247 - (backport "fix gBS->Stall()" series) - -* Mon Jan 19 2015 Miroslav Rezanina - AAVMF-20141113-3.git77d5dac.el7 -- aavmf-OvmfPkg-QemuBootOrderLib-expose-QEMU-s-boot-menu-on-.patch [bz#1172756] -- aavmf-OvmfPkg-PlatformBdsLib-get-front-page-timeout-from-Q.patch [bz#1172756] -- aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-get-front-p.patch [bz#1172756] -- Resolves: bz#1172756 - ([RFE]Expose boot-menu shortcut to domain via AAVMF) - -* Wed Jan 14 2015 Miroslav Rezanina - AAVMF-20141113-2.git77d5dac.el7 -- aavmf-ArmVirtualizationPkg-VirtFdtDxe-forward-FwCfg-addres.patch [bz#1172749] -- aavmf-ArmVirtualizationPkg-introduce-QemuFwCfgLib-instance.patch [bz#1172749] -- aavmf-ArmVirtualizationPkg-clone-PlatformIntelBdsLib-from-.patch [bz#1172749] -- aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-add-basic-p.patch [bz#1172749] -- aavmf-OvmfPkg-extract-QemuBootOrderLib.patch [bz#1172749] -- aavmf-OvmfPkg-QemuBootOrderLib-featurize-PCI-like-device-p.patch [bz#1172749] -- aavmf-OvmfPkg-introduce-VIRTIO_MMIO_TRANSPORT_GUID.patch [bz#1172749] -- aavmf-ArmVirtualizationPkg-VirtFdtDxe-use-dedicated-VIRTIO.patch [bz#1172749] -- aavmf-OvmfPkg-QemuBootOrderLib-widen-ParseUnitAddressHexLi.patch [bz#1172749] -- aavmf-OvmfPkg-QemuBootOrderLib-OFW-to-UEFI-translation-for.patch [bz#1172749] -- aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-adhere-to-Q.patch [bz#1172749] -- aavmf-ArmVirtualizationPkg-identify-new-shell-as-builtin-s.patch [bz#1172749] -- aavmf-ArmVirtualizationPkg-Intel-BDS-load-EFI-stubbed-Linu.patch [bz#1172749] -- aavmf-spec-build-AAVMF-with-the-Intel-BDS-driver-RHELSA-on.patch [bz#1172749] -- aavmf-Revert-ArmVirtualizationPkg-work-around-cache-incohe.patch [bz#1172910] -- Resolves: bz#1172749 - (implement fw_cfg, boot order handling, and -kernel booting in ArmVirtualizationQemu) -- Resolves: bz#1172910 - (revert Acadia-only workaround (commit df7bca4e) once Acadia host kernel (KVM) is fixed) - -* Fri Dec 05 2014 Miroslav Rezanina - OVMF-20140822-7.git9ece15a.el7 -- ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-READ.patch [bz#1166971] -- ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-othe.patch [bz#1166971] -- Resolves: bz#1166971 - (virtio-scsi disks and cd-roms with nonzero LUN are rejected with errors) - -* Tue Nov 25 2014 Miroslav Rezanina - OVMF-20140822-6.git9ece15a.el7 -- ovmf-OvmfPkg-AcpiPlatformDxe-make-dependency-on-PCI-enume.patch [bz#1166027] -- Resolves: bz#1166027 - (backport "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit") - -* Tue Nov 18 2014 Miroslav Rezanina - OVMF-20140822-4.git9ece15a.el7 -- ovmf-Add-comments-to-clarify-mPubKeyStore-buffer-MemCopy.patch [bz#1162314] -- ovmf-MdeModulePkg-SecurityPkg-Variable-Add-boundary-check.patch [bz#1162314] -- Resolves: bz#1162314 - (EMBARGOED OVMF: uefi: INTEL-TA-201410-001 && INTEL-TA-201410-002 [rhel-7.1]) - -* Thu Nov 13 2014 Laszlo Ersek - AAVMF-20141113-1.git77d5dac -- rebased to upstream 77d5dac - -- patch "ArmVirtualizationPkg: FdtPL011SerialPortLib: support UEFI_APPLICATION" - is now upstream (SVN r16219, git edb5073) - -* Thu Nov 13 2014 Miroslav Rezanina - OVMF-20140822-3.git9ece15a.el7 -- ovmf-Revert-OvmfPkg-set-video-resolution-of-text-setup-to.patch [bz#1153927] -- ovmf-Try-to-read-key-strike-even-when-the-TimeOuts-value-.patch [bz#1153927] -- ovmf-OvmfPkg-BDS-remove-dead-call-to-PlatformBdsEnterFron.patch [bz#1153927] -- ovmf-OvmfPkg-BDS-drop-useless-return-statement.patch [bz#1153927] -- ovmf-OvmfPkg-BDS-don-t-overwrite-the-BDS-Front-Page-timeo.patch [bz#1153927] -- ovmf-OvmfPkg-BDS-optimize-second-argument-in-PlatformBdsE.patch [bz#1153927] -- ovmf-OvmfPkg-BDS-drop-superfluous-connect-first-boot-opti.patch [bz#1153927] -- ovmf-OvmfPkg-BDS-drop-custom-boot-timeout-revert-to-Intel.patch [bz#1153927] -- ovmf-OvmfPkg-set-video-resolution-of-text-setup-to-640x48.patch [bz#1153927] -- Resolves: bz#1153927 - (set NEXTBOOT to uefi setting failed from Windows Recovery console) - -* Tue Nov 11 2014 Miroslav Rezanina - OVMF-20140822-2.git9ece15a -- ovmf-redhat-process-rh-specific.sh-suppress-missing-files.patch [bz#1145784] -- ovmf-Revert-RH-only-OvmfPkg-QemuVideoDxe-fix-querying-of-.patch [bz#1145784] -- ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-implement-QEM.patch [bz#1145784] -- ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-remove-curren.patch [bz#1145784] -- ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-actualize-Qem.patch [bz#1145784] -- ovmf-Revert-RH-only-OvmfPkg-resolve-OrderedCollectionLib-.patch [bz#1145784] -- ovmf-OvmfPkg-QemuVideoDxe-work-around-misreported-QXL-fra.patch [bz#1145784] -- ovmf-OvmfPkg-resolve-OrderedCollectionLib-with-base-red-b.patch [bz#1145784] -- ovmf-OvmfPkg-AcpiPlatformDxe-actualize-QemuLoader.h-comme.patch [bz#1145784] -- ovmf-OvmfPkg-AcpiPlatformDxe-remove-current-ACPI-table-lo.patch [bz#1145784] -- ovmf-OvmfPkg-AcpiPlatformDxe-implement-QEMU-s-full-ACPI-t.patch [bz#1145784] -- ovmf-spec-build-small-bootable-ISO-with-standalone-UEFI-s.patch [bz#1147592] -- ovmf-OvmfPkg-allow-exclusion-of-the-shell-from-the-firmwa.patch [bz#1147592] -- ovmf-spec-exclude-the-UEFI-shell-from-the-SecureBoot-enab.patch [bz#1147592] -- ovmf-OvmfPkg-EnrollDefaultKeys-application-for-enrolling-.patch [bz#1148296] -- ovmf-spec-package-EnrollDefaultKeys.efi-on-UefiShell.iso-.patch [bz#1148296] -- ovmf-OvmfPkg-disable-stale-fork-of-SecureBootConfigDxe.patch [bz#1148294] -- ovmf-OvmfPkg-SecureBootConfigDxe-remove-stale-fork.patch [bz#1148294] -- Resolves: bz#1145784 - (OVMF sync with QXL and ACPI patches up to edk2 7a9612ce) -- Resolves: bz#1147592 - (the binary RPM should include a small ISO file with a directly bootable UEFI shell binary) -- Resolves: bz#1148294 - (drop OvmfPkg's stale fork of SecureBootConfigDxe) -- Resolves: bz#1148296 - (provide a non-interactive way to auto-enroll important SecureBoot certificates) - -* Wed Oct 15 2014 Laszlo Ersek - AAVMF-20141015-1.gitc373687 -- ported packaging to aarch64 / AAVMF - -* Fri Aug 22 2014 Laszlo Ersek - 20140822-1.git9ece15a.el7 -- rebase from upstream 3facc08 to 9ece15a -- update to openssl-0.9.8zb -- update to FatPkg SVN r86 (git 2355ea2c) -- the following patches of Paolo Bonzini have been merged in upstream; drop the - downstream-only copies: - 7bc1421 edksetup.sh: Look for BuildEnv under EDK_TOOLS_PATH - d549344 edksetup.sh: Ensure that WORKSPACE points to the top of an edk2 - checkout - 1c023eb BuildEnv: remove useless check before setting $WORKSPACE -- include the following patches that have been pending review on the upstream - list for a long time: - [PATCH 0/4] OvmfPkg: complete client for QEMU's ACPI loader interface - http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8369 - [PATCH] OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size - http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8515 -- nasm is a build-time dependency now because upstream BuildTools has started - to call it directly - -* Wed Jul 23 2014 Laszlo Ersek - 20140723-1.git3facc08.el7 -- rebase from upstream a618eaa to 3facc08 -- update to openssl-0.9.8za -- drop downstream-only split varstore patch, rely on upstream's - -* Tue Jun 24 2014 Miroslav Rezanina - 20140619-1.gita618eaa.el7 -- Initial version