24 Sep 04:32

github-actions

f254700

v2024050000.0.2

What's Changed

[CHERRY-PICK][REBASE\&FF] ImageValidation.py: Support gitignore style syntax for file exclusion @Javagedes (#1154)
Change Details
## Description
Cherry-pick of #1140 into dev/202405

This commit is also in release/202308
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
- Squash into 6310e1e
How This Was Tested

Cherry-pick of #1140 into dev/202405

Integration Instructions

Cherry-pick of #1140 into dev/202405
```
  </blockquote>
  <hr>
</details>
```

[CHERRY-PICK] .pytool/ImageValidation: Print invalid dir paths @makubacki (#1155)
Change Details
## Description
- Print directory paths considered invalid to aid debugging
- Build native OS file paths using os.path.join for walk dirs
- Clean up trailing whitespace throughout the file
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested
- Local build with the plugin
- Tested invalid directory printing by adding an invalid arch to TARGET_ARCH (so the directory doesn't exist in build output).
Integration Instructions

N/A - Minor tweaks

[CHERRY-PICK] MdePkg: Bring in mocks from 2311 @VivianNK (#1139)
Change Details
## Description
Add mocks from 2311

Cherry picked and squashed the following commits:
a5ba951
5aa1be5
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Tested in 202311 CI

Integration Instructions

N/A

[Cherry-Pick] Support Report Status Code in the UefiPxe driver. @apop5 (#1138)
Change Details
## Description
Report PXE error status via Status Code, with this design, it will be flexible to register a status code handler via gEfiRscHandlerProtocolGuid to output the customized error code to other telemetry service.

The subclass code is EFI_IO_BUS_IP_NETWORK
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

N/A

Integration Instructions

N/A

🐛 Bug Fixes

[REBASE\&FF] MdeModulePkg/SMM: Initialize 'WillReturn' variable @Javagedes (#1159)
Change Details
## Description
The local variable 'WillReturn' was being used without prior initialization in some code paths.
This patch ensures that 'WillReturn' is properly initialized to prevent undefined behavior.

Cherry-pick from EDKII tianocore/edk2@30b6d08
Cherry-pick from dev/202405 36f763d
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Cherry-pick from EDKII tianocore/edk2@30b6d08

Integration Instructions

Cherry-pick from EDKII tianocore/edk2@30b6d08
```
  </blockquote>
  <hr>
</details>
```

Full Changelog: v2024050000.0.1...v2024050000.0.2

Contributors

VivianNK, makubacki, and 2 other contributors

Assets 4

10 Sep 22:50

github-actions

v2024050000.0.1

88b6c1e

v2024050000.0.1

What's Changed

[202405] Add Cumulative CodeQL changes. @apop5 (#1137)
Change Details
## Description
Cumulative CodeQL fixes for the release 202405 Branch.

13dff4f
f26f86d
e97c273
564f262
769b019
4828ebb
4c372a2
5f165d2
006dc1f
c99d59f
f648481
c70d96e
7c60e33
2deccbe
2c4db39
ec7a96c
45219b5
b47eb1f
1cd17c1
fec2cd9
326dde3
a420f66
4f4cc7d
d2e5518
9496601
83ec756
192d343
55ad1f2
e71970b
be03b5b
b9d04a0
f495191
6acf82c
2c6ee99
8398844
f90d7a8
5464d16
4c082e3
f8616ec
070d25d
442aab8
fe7078e
e0b2964
798cfa3
92dc249
0c3eaac
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Ran Local CI.
Booted on physical system.

Integration Instructions

N/A

[CHERRY-PICK] MdeModulePkg/FaultTolerantWriteDxe: Fix buffer overrun issue @os-d (#1131)
Change Details
## Description
- This PR aims to prevent a buffer overrun issue found in FtwGetLastWriteHeader function.As per the current code, when there is a malformed blocks (with all bytes as 0s) then Offset += FTW_WRITE_TOTAL_SIZE (FtwHeader->NumberOfWrites, FtwHeader->PrivateDataSize) would access beyond FtwWorkSpaceSize.
- Also added the signature check to validate work space
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Cherry-picked from edk2.

Integration Instructions

N/A.
```
  </blockquote>
  <hr>
</details>
```

[202405] ImageValidation.py: Don't parse entire image @Javagedes (#1127)
Change Details
## Description
This commit modifies the PE parsing functionality to only parse the headers of the image, rather than the entire image. This change is made to improve performance and also the probability of failing to parse the entire image. This comes after this commit (erocarrera/pefile#365) in pefile resulted in efi image parsing failures, breaking the build.

This commit also wraps the parsing of the image in a try-except block to catch any exceptions that may be raised during parsing, to cleanly exit.

See: microsoft/mu_tiano_platforms#1025 and erocarrera/pefile#421
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Validated pipelines build on mu_tiano_platforms

Integration Instructions

N/A

[202405] ImageValidation: Determine profile from inf MODULE\_TYPE @Javagedes (#1124)
Change Details
## Description
In previous iterations, the profile was determined by parsing the makefile, looking for MODULE_TYPE. As each OS / tool chain may use a different makefile type, this was not a reliable method. This updates the plugin to read the INF for the compiled efi file to determine the MODULE_TYPE and thus the profile.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Validated on qemuq35 that the module type was successfully parsed.

Integration Instructions

N/A
```
  </blockquote>
  <hr>
</details>
```

📖 Documentation Updates

Update ReadMe.rst to add mock-related breaking changes @VivianNK (#1130)
Change Details
## Description
Release notes for 202311 -> 202405
Cmocka mocks and stubs were moved so file paths using them need to be updated.

Remove markdown syntax for links.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

N/A

Integration Instructions

N/A

Full Changelog: v2024050000.0.0...v2024050000.0.1

Contributors

VivianNK, Javagedes, and 2 other contributors

Assets 4

26 Aug 22:44

apop5

v2024050000.0.0

f481172

v2024050000.0.0

Initial Release notes of 202405 contain a full list of mu changes on top of edk2-stable202405

PR associated with the commit can be found at the bottom of the information pane reached by clicking on the commit hash

What's Changed

🚀 Features & ✨ Enhancements

UefiCpuPkg: CpuPageTableLib: Remove Empty Test Suite

Change Details

f481172

Create mocks for PlatformHookLib and PciLib (#1094)

Change Details

47134bd

[CHERRY-PICK] UefiCpuPkg/PiSmmCpuDxeSmm: Consume PcdCpuSmmApSyncTimeout2

Change Details

4d722ac

[CHERRY-PICK] UefiCpuPkg: Refine the PCD usage comment

Change Details

125e5a0

[Cherry-Pick] UefiCpuPkg: Add PcdCpuSmmApSyncTimeout2 PCD (#1096)

Change Details

b970851

Create the Google Test mocks for SmmBase2 Protocol.

Change Details

efda14a

Add mock functions under MockPciIoProtocol and Create Mock for Smbio, UsbIo and NvmExpressPassthru protocol

Change Details

2f6f616

Create Mock for IsaHc protocol

Change Details

19e3f7b

Added MockServiceBinding and Add mock functions under MockUefiBootServicesTableLib, MockUefiLib and MockUefiDevicePathLib

Change Details

ea82edd

Add deprecation warning support to OverrideValidation plugin (#742)

Change Details

6f49d15

Update BaseCryptLib tests to reference the PCDs before running (#1034)

Change Details

2567c9b

Added MockUefiDevicePathLib and gBS_AllocatePool under MockUefiBootServicesTableLib

Change Details

64d9dfe

Added mock functions on UefiLib

Change Details

6e13911

Added mock functions for TimerLib

Change Details

b477e63

Added mock functions for PciExpressLib

Change Details

0182bec

Added mock functions for UefiBootServicesTableLib

Change Details

c321f8c

BaseTools/Plugin/HostBasedUnitTestRunner: Fix invalid escape in HostBasedUnitTest.py (#899)

Change Details

4719b97

Set EFI_MEMORY_SP as System Memory (#886)

Change Details

036686e

Added MockPciIoProtocol and MockLocalApicLib (#890)

Change Details

52973f2

GitHub Action: Bump robinraju/release-downloader from 1.10 to 1.11 (#1116)

Change Details

973a5aa

pip: Update all pip-requirements to latest. (#1120)

Change Details

7dac39f

Repo File Sync: 202405 Branch Transition Updates. (#1119)

Change Details

ba1307e

CodeQlFilters.yml: Add global CodeQL filter file to repo.

Change Details

301fb03

ShellPkg: CodeQL Fixes.

Change Details

22ae568

UefiCpuPkg: CodeQL Fixes.

Change Details

b001cc9

MdeModulePkg: CodeQL Fixes.

Change Details

d74b9cf

MdePkg: CodeQL Fixes.

Change Details

413351c

NetworkPkg: CodeQL Fixes.

Change Details

3dc1746

StandaloneMmPkg: CodeQL Fixes.

Change Details

652f7e4

Updated Release notes. (#1107)

Change Details

dbfd484

BaseTools/build_rule.template: Add FILE_GUID to the environment for Rust modules (#1108)

Change Details

6305b70

MdeModulePkg: Correct the placement of the variable policy locking

Change Details

8c05410

MdePkg: Create Google mock for ReadOnlyVariable2

Change Details

30d4dd5

Revert "MdeModulePkg: Updates Debug Statements for Mem/Page.c"

Change Details

...

Assets 4

29 Jul 22:15

github-actions

v2023110010.0.1

7a2272c

v2023110010.0.1

What's Changed

Add deprecation warning support to OverrideValidation plugin @NishanthSanjeevi (#742)
Change Details
## Description
Added deprecation warning support to the existing Override validation plugin/tool.
- Impacts functionality?
  - Functionality - All libraries/drivers that are no longer used should add a Deprecation warning
- Impacts security?
  - Security - N/A
- Breaking change?
  - Breaking change - Will anyone consuming this change experience a break
    in build or boot behavior? No
- Includes tests? No
- Includes documentation? Added documentation for how to use the Deprecation warnings module
How This Was Tested

Added the Deprecation warnings to the INFs and a warning was thrown when a deprecated module was part of the DSC

Integration Instructions

N/A

Update BaseCryptLib tests to reference the PCDs before running @kenlautner (#1034)
Change Details
## Description
The BaseCryptLibUnitTestApp tests the linked BaseCryptLib instance's crypto to make sure all functions are performing as expected. With the move to the Crypto binary and the BaseCryptLibOnProtocol instances we disable certain crypto functionality on purpose which causes the test to fail (and also the BaseCryptLibOnProtocol lib to assert). The changes made here use the already existing crypto PCDs to check if the tested cryptography is enabled with the current Crypto binary and if not to skip the test. This will allow the test to show if the enabled crypto is working correctly instead of failing for crypto we don't care about.
- Impacts functionality?
  - Functionality - Does the change ultimately impact how firmware functions?
  - Examples: Add a new library, publish a new PPI, update an algorithm, ...
- Impacts security?
  - Security - Does the change have a direct security impact on an application,
    flow, or firmware?
  - Examples: Crypto algorithm change, buffer overflow fix, parameter
    validation improvement, ...
- Breaking change?
  - Breaking change - Will anyone consuming this change experience a break
    in build or boot behavior?
  - Examples: Add a new library class, move a module to a different repo, call
    a function in a new library class in a pre-existing module, ...
- Includes tests?
  - Tests - Does the change include any explicit test code?
  - Examples: Unit tests, integration tests, robot tests, ...
- Includes documentation?
  - Documentation - Does the change contain explicit documentation additions
    outside direct code modifications (and comments)?
  - Examples: Update readme file, add feature readme file, link to documentation
    on an a separate Web page, ...
How This Was Tested

Tested on Qemu and intel physical platforms with various crypto binary layouts. The relevant tests pass and disabled crypto skips their tests. Furthermore when the PCDs are configured to run tests for crypto we don't support with the selected crypto binary, the test fails as expected.

Integration Instructions

N/A. Using the crypto binaries should automatically configure the correct PCDs and BaseCryptLib library for the test to work correctly.

BaseTools/codeql: Update to CodeQL 2.18.1 @makubacki (#1072)
Change Details
## Description
Updates to the latest CodeQL version to resolve query dependencies.

Currently, errors like this will be seen:
```
Not using precompiled NoSpaceForZeroTerminator.qlx: This QLX (written by CodeQL 2.18.1) uses a primitive 'internSets', which this QL engine is too old to evaluate.
```
This is related to a CodeQL release made a few hours ago:

Release v2.18.1 · github/codeql-cli-binaries · GitHub

2311 version of #1069
- Impacts functionality?
  - Functionality - Does the change ultimately impact how firmware functions?
  - Examples: Add a new library, publish a new PPI, update an algorithm, ...
- Impacts security?
  - Security - Does the change have a direct security impact on an application,
    flow, or firmware?
  - Examples: Crypto algorithm change, buffer overflow fix, parameter
    validation improvement, ...
- Breaking change?
  - Breaking change - Will anyone consuming this change experience a break
    in build or boot behavior?
  - Examples: Add a new library class, move a module to a different repo, call
    a function in a new library class in a pre-existing module, ...
- Includes tests?
  - Tests - Does the change include any explicit test code?
  - Examples: Unit tests, integration tests, robot tests, ...
- Includes documentation?
  - Documentation - Does the change contain explicit documentation additions
    outside direct code modifications (and comments)?
  - Examples: Update readme file, add feature readme file, link to documentation
    on an a separate Web page, ...
How This Was Tested
- CI with CodeQL plugin enabled
Integration Instructions
- Verify queries being used are compatible with CodeQL 2.18.1

Added MockUefiDevicePathLib. Added gBS\_AllocatePool under MockUefiBootServicesTableLib @v-bhavanisu (#1059)
Change Details
## Description
Added MockUefiDevicePathLib. Added gBS_AllocatePool under MockUefiBootServicesTableLib
- Impacts functionality?
  - Functionality - Does the change ultimately impact how firmware functions?
  - Examples: Add a new library, publish a new PPI, update an algorithm, ...
- Impacts security?
  - Security - Does the change have a direct security impact on an application,
    flow, or firmware?
  - Examples: Crypto algorithm change, buffer overflow fix, parameter
    validation improvement, ...
- Breaking change?
  - Breaking change - Will anyone consuming this change experience a break
    in build or boot behavior?
  - Examples: Add a new library class, move a module to a different repo, call
    a function in a new library class in a pre-existing module, ...
- Includes tests?
  - Tests - Does the change include any explicit test code?
  - Examples: Unit tests, integration tests, robot tests, ...
- Includes documentation?
  - Documentation - Does the change contain explicit documentation additions
    outside direct code modifications (and comments)?
  - Examples: Update readme file, add feature readme file, link to documentation
    on an a separate Web page, ...
How This Was Tested

Included this change under a GoogleTest and build successful

Integration Instructions

N/A

MdePkg/MockUefiLib: Add EfiCreateProtocolNotifyEvent() @TsunFeng (#1055)
Change Details
## Description
Added mock functions on UefiLib
- Impacts functionality?
  - Functionality - Does the change ultimately impact how firmware functions?
  - Examples: Add a new library, publish a new PPI, update an algorithm, ...
- Impacts security?
  - Security - Does the change have a direct security impact on an application,
    flow, or firmware?
  - Examples: Crypto algorithm change, buffer overflow fix, parameter
    validation improvement, ...
- Breaking change?
  - Breaking change - Will anyone consuming this change experience a break
    in build or boot behavior?
  - Examples: Add a new library class, move a module to a different repo, call
    a function in a new library class in a pre-existing module, ...
- Includes tests?
  - Tests - Does the change include any explicit test code?
  - Examples: Unit tests, integration tests, robot tests, ...
- Includes documentation?
  - Documentation - Does the change contain explicit documentation additions
    outside direct code modifications (and comments)?
  - Examples: Update readme file, add feature readme file, link to documentation
    on an a separate Web page, ...
How This Was Tested

Unit tests component can call this mock function success

Integration Instructions

N/A

Full Changelog: v2023110010.0.0...v2023110010.0.1

Contributors

makubacki, NishanthSanjeevi, and 3 other contributors

Assets 4

13 Jul 18:38

github-actions

v2023110009.0.1

1cbfaf1

v2023110009.0.1

What's Changed

🔐 Security Impacting

MdeModulePkg: Compatibility Mode: Only Remap System Memory Regions @os-d (#1030)
Change Details
## Description
When we enter memory protections compatibility mode, we attempt to disable null protection and remap 0 - 0xA0000 as RWX. This was done for x86 systems with broken shim/grubs on Linux that would attempt to use those regions. This resolved that issue and we could boot non-memory protection safe Linux images on x86 HW. However, this approach did not take into account systems that do not have that range marked as system memory, for example ARM64 systems do not have this requirement. As such, this would inappropriately map these regions as RWX when they were not system memory.

This patch updates the remapping to only remap and disable null protection if these ranges are marked as system memory, otherwise it will leave them alone.

For each item, place an "x" in between [ and ] if true. Example: [x].
(you can also check items in the GitHub UI)
- Impacts functionality?
  - Functionality - Does the change ultimately impact how firmware functions?
  - Examples: Add a new library, publish a new PPI, update an algorithm, ...
- Impacts security?
  - Security - Does the change have a direct security impact on an application,
    flow, or firmware?
  - Examples: Crypto algorithm change, buffer overflow fix, parameter
    validation improvement, ...
- Breaking change?
  - Breaking change - Will anyone consuming this change experience a break
    in build or boot behavior?
  - Examples: Add a new library class, move a module to a different repo, call
    a function in a new library class in a pre-existing module, ...
- Includes tests?
  - Tests - Does the change include any explicit test code?
  - Examples: Unit tests, integration tests, robot tests, ...
- Includes documentation?
  - Documentation - Does the change contain explicit documentation additions
    outside direct code modifications (and comments)?
  - Examples: Update readme file, add feature readme file, link to documentation
    on an a separate Web page, ...
How This Was Tested

Tested on an ARM64 platform that does not have 0 - 0xA0000 as system memory, as well as an X86 system that does have that range as system memory, booting a Linux image on both that forces us to enter compatibility mode.

Integration Instructions

N/A.
```
  </blockquote>
  <hr>
</details>
```

Full Changelog: v2023110009.0.0...v2023110009.0.1

Contributors

os-d

Assets 4

Releases: microsoft/mu_basecore

v2024050000.0.2

What's Changed

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

🐛 Bug Fixes

How This Was Tested

Integration Instructions

Contributors

v2023110012.1.0

What's Changed

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

🚀 Features & ✨ Enhancements

Commit Summary

How This Was Tested

Integration Instructions

Contributors

v2024050000.0.1

What's Changed

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

📖 Documentation Updates

How This Was Tested

Integration Instructions

Contributors

v2024050000.0.0

What's Changed

🚀 Features & ✨ Enhancements

v2023110012.0.0

What's Changed

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

⚠️ Breaking Changes

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

Contributors

v2023110011.0.0

What's Changed

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

⚠️ Breaking Changes

How This Was Tested

Integration Instructions