-
efi-master-051220241d9aa4a2 · ·
Two fixes for the EFI subsystem coming via the TPM tree as agreed by Heinrich The LMB patch fixes a failure in SystemReady testing. Nothing bad happens without the patch in the device operation, but the return values are wrong and SCT tests fail for MemoryAllocationServicesTest category. The second is a shielding the device against mistakes in the definition of struct fields needed by the capsule update mechanism. Instead of crashing, print a humna readable message of what's wrong.
-
tpm-master-16112024c0231ede · ·
Two changes from Heinrich. One is adding some missing TPM files for proper maintenance. The second addresses Coverity-ID: 356664 replacing a mempcy() which has undefined behavior with memmove()
-
fwu-next-190920246f933aa9 · ·
This PR contains various improvements in the A/B update logic for EFI - Read both copies of metadata, in case one of the is corrupted - Check the metadata version against the running firmware to make sure it's allowed - Limit the use of a revert capsule if the board is on a trial state and make sure it's not applied if the max counter has expired
-
tpm-master-09082024c686b38d · ·
Back when the TPM subsystem was refactored tpm_tis_wait_init() ended up being called after tpm_tis_init() which initializes values the former needs. Since we added more TPM chipsets since then sitting on an i2c bus, this patch folds in tpm_tis_wait_init into tpm_tis_init and makes sure it's called in the right order regardless of the bus the TPM sits on.
-
tpm-master-24062024b73948c7 · ·
When the EFI TCG measurement code moved from EFI to the TPM subsystem for general use some prototypes changed from returning efi_status_t to int, which is more appropriate for the non-EFI APIs. However, some of the EFI callsites never changed and we ended up assigning the int value to efi_status_t. This is unlikely to cause any problems, apart from returning invalid values on failures and violating the EFI spec.
-
optee-master-260420244242b397 · ·
Minor changes on this PR. Igor added some orphaned OP-TEE related files on the proper section of MAINTAINERS and fixed a potential buffer overflow in tee-sandbox