文件	最后提交记录	最后更新时间
.本项目已经正式迁移至 AtomGit 平台	update README.md	7 个月前
0001-OvmfPkg-VirtioNetDxe-Extend-the-RxBufferSize-to-avoi.patch	upgrade to 202308 for support riscv64 and add a patch to fix build error on the riscv64 obs build environment.	2 年前
0002-add-Wno-maybe-uninitialized-to-fix-build-error.patch	upgrade to 202308 for support riscv64 and add a patch to fix build error on the riscv64 obs build environment.	2 年前
0003-Add-testcases-for-empty-associated-data-entries-with.patch	Fix some CVE CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2023-2975、CVE-2023-6129 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0004-Do-not-ignore-empty-associated-data-with-AES-SIV-mod.patch	Fix some CVE CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2023-2975、CVE-2023-6129 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0005-Add-a-test-for-CVE-2023-3446.patch	Fix some CVE CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2023-2975、CVE-2023-6129 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0006-Fix-DH_check-excessive-time-with-over-sized-modulus.patch	Fix some CVE CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2023-2975、CVE-2023-6129 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0007-Make-DH_check-set-some-error-bits-in-recently-added-.patch	Fix some CVE CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2023-2975、CVE-2023-6129 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0008-DH_check-Do-not-try-checking-q-properties-if-it-is-o.patch	Fix some CVE CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2023-2975、CVE-2023-6129 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0009-dhtest.c-Add-test-of-DH_check-with-q-p-1.patch	Fix some CVE CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2023-2975、CVE-2023-6129 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0010-Add-NULL-checks-where-ContentInfo-data-can-be-NULL.patch	Fix some CVE CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2023-2975、CVE-2023-6129 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0011-poly1305-ppc.pl-Fix-vector-register-clobbering.patch	Fix some CVE CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2023-2975、CVE-2023-6129 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0012-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch	Fix some CVE fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0013-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch	Fix some CVE fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0014-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch	Fix some CVE fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0015-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch	Fix some CVE fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0016-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch	Fix some CVE fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0017-SecurityPkg-Adding-CVE-2022-36764-to-SecurityFixes.y.patch	Fix some CVE fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0018-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch	Fix some CVE fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0019-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch	Fix some CVE fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0020-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch	Fix some CVE fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0021-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0021-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch	Fix some CVE fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0022-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0023-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0024-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0025-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Un.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0026-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0027-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0028-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0029-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0030-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0031-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0032-MdePkg-Test-Add-gRT_GetTime-Google-Test-Mock.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0033-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0034-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0035-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0036-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0037-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0038-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0039-NetworkPkg-Updating-SecurityFixes.yaml.patch	Fix som CVE Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235 Signed-off-by: yexiao <yexiao7@huawei.com>	2 年前
0040-Add-a-test-for-session-cache-handling.patch	Fix CVE-2023-6237、CVE-2024-2511 Signed-off-by: ShenYage <shenyage1@huawei.com>	2 年前
0041-Extend-the-multi_resume-test-for-simultaneous-resump.patch	Fix CVE-2023-6237、CVE-2024-2511 Signed-off-by: ShenYage <shenyage1@huawei.com>	2 年前
0042-Fix-unconstrained-session-cache-growth-in-TLSv1.3.patch	Fix CVE-2023-6237、CVE-2024-2511 Signed-off-by: ShenYage <shenyage1@huawei.com>	2 年前
0043-Hardening-around-not_resumable-sessions.patch	Fix CVE-2023-6237、CVE-2024-2511 Signed-off-by: ShenYage <shenyage1@huawei.com>	2 年前
0044-Add-a-test-for-session-cache-overflow.patch	Fix CVE-2023-6237、CVE-2024-2511 Signed-off-by: ShenYage <shenyage1@huawei.com>	2 年前
0045-Limit-the-execution-time-of-RSA-public-key-check.patch	Fix CVE-2023-6237、CVE-2024-2511 Signed-off-by: ShenYage <shenyage1@huawei.com>	2 年前
0046-MdeModulePkg-Potential-UINT32-overflow-in-S3-ResumeC.patch	Fix CVE-2024-1298 Signed-off-by: ShenYage <shenyage1@huawei.com>	2 年前
0047-Fix-SSL_select_next_proto-and-add-ALPN-validation-in.patch	Fix CVE-2024-5535 Signed-off-by: ShenYage <shenyage1@huawei.com>	2 年前
0048-Add-a-test-for-ALPN-and-NPN.patch	Fix CVE-2024-5535 Signed-off-by: ShenYage <shenyage1@huawei.com>	2 年前
0049-Avoid-type-errors-in-EAI-related-name-check-logic.patch	Fix CVE-2024-6119 Signed-off-by: ShenYage <shenyage1@huawei.com>	1 年前
0050-Revert-Platform-Loongson-LoongArchQemuPkg-Add-ImageP.patch	add LoongArch support backport edk2-platform to build with edk2-2308 Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn> (cherry picked from commit ec60765a8e460c2eb12f2a6f676e1272973ff5ce)	1 年前
0051-Revert-Platform-Loongson-Fix-compile-error.patch	add LoongArch support backport edk2-platform to build with edk2-2308 Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn> (cherry picked from commit ec60765a8e460c2eb12f2a6f676e1272973ff5ce)	1 年前
0052-Revert-LoongArchQemuPkg-auto-gen-fix-SEC-ProcessLibr.patch	add LoongArch support backport edk2-platform to build with edk2-2308 Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn> (cherry picked from commit ec60765a8e460c2eb12f2a6f676e1272973ff5ce)	1 年前
0053-relax_edk2_gcc14.patch	add LoongArch support backport edk2-platform to build with edk2-2308 Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn> (cherry picked from commit ec60765a8e460c2eb12f2a6f676e1272973ff5ce)	1 年前
0054-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch	add LoongArch support backport edk2-platform to build with edk2-2308 Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn> (cherry picked from commit ec60765a8e460c2eb12f2a6f676e1272973ff5ce)	1 年前
0055-MdePkg-Add-StandardSignatureIsHygonGenuine-in-BaseCp.patch	Add support for Hygon CSV3 guest Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0056-UefiCpuPkg-LocalApicLib-Exclude-second-SendIpi-seque.patch	Add support for Hygon CSV3 guest Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0057-OvmfPkg-Add-CSV-secure-call-library-on-Hygon-CPU.patch	Add support for Hygon CSV3 guest Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0058-OvmfPkg-ResetVector-Support-CSV-in-ResetVector-phase.patch	Add support for Hygon CSV3 guest Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0059-OvmfPkg-PlatformPei-Initialize-CSV-VM-s-memory.patch	Add support for Hygon CSV3 guest Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0060-OvmfPkg-BaseMemcryptSevLib-update-page-status-to-Sec.patch	Add support for Hygon CSV3 guest Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0061-OvmfPkg-Tcg-Add-CsvLib-for-TpmMmioSevDecryptPei.patch	Add support for Hygon CSV3 guest Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0062-OvmfPkg-Add-CsvDxe-driver.patch	Add support for Hygon CSV3 guest Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0063-OvmfPkg-IoMmuDxe-Add-CsvIoMmu-protocol.patch	Add support for Hygon CSV3 guest Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0064-OvmfPkg-Reserve-a-CPUID-table-page-for-CSV-guest.patch	Add support for Hygon CSV3 guest Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0065-OvmfPkg-Use-classic-mmio-window-for-CSV-guest.patch	Add support for Hygon CSV3 guest Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0066-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236-Rela.patch	fix some bugs for CVE-2023-45236、CVE-2023-45237 Signed-off-by: ShenYage <shenyage1@huawei.com>	1 年前
0067-NetworkPkg-DxeNetLib-SECURITY-PATCH-CVE-2023-45237-R.patch	fix some bugs for CVE-2023-45236、CVE-2023-45237 Signed-off-by: ShenYage <shenyage1@huawei.com>	1 年前
0068-OvmfPkg-BaseMemEncryptLib-Detect-SEV-live-migration-.patch	Support live migration for Hygon CSV1/2/3 guests, fix nesting #VC The live migration of Hygon CSV1/2/3 guest depends on the KVM hypercall KVM_HC_MAP_GPA_RANGE, add code to sync page enc/dec status to KVM. The MMIO routine of VC handler will get memory encrypt status to validate MMIO address. MemEncryptSevGetEncryptionMask() will enable interrupt while interrupt must be disabled during VC. During DXE stage, VC routine as below: CcExitHandleVc -> MemEncryptSevGetAddressRangeState -> MemEncryptSevGetEncryptionMask->PcdGet64(PcdPteMemoryEncryptionAddressOrMask) Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0069-OvmfPkg-BaseMemEncryptLib-Hypercall-API-for-page-enc.patch	Support live migration for Hygon CSV1/2/3 guests, fix nesting #VC The live migration of Hygon CSV1/2/3 guest depends on the KVM hypercall KVM_HC_MAP_GPA_RANGE, add code to sync page enc/dec status to KVM. The MMIO routine of VC handler will get memory encrypt status to validate MMIO address. MemEncryptSevGetEncryptionMask() will enable interrupt while interrupt must be disabled during VC. During DXE stage, VC routine as below: CcExitHandleVc -> MemEncryptSevGetAddressRangeState -> MemEncryptSevGetEncryptionMask->PcdGet64(PcdPteMemoryEncryptionAddressOrMask) Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0070-OvmfPkg-BaseMemEncryptLib-Invoke-page-encryption-sta.patch	Support live migration for Hygon CSV1/2/3 guests, fix nesting #VC The live migration of Hygon CSV1/2/3 guest depends on the KVM hypercall KVM_HC_MAP_GPA_RANGE, add code to sync page enc/dec status to KVM. The MMIO routine of VC handler will get memory encrypt status to validate MMIO address. MemEncryptSevGetEncryptionMask() will enable interrupt while interrupt must be disabled during VC. During DXE stage, VC routine as below: CcExitHandleVc -> MemEncryptSevGetAddressRangeState -> MemEncryptSevGetEncryptionMask->PcdGet64(PcdPteMemoryEncryptionAddressOrMask) Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0071-OvmfPkg-VmgExitLib-Encryption-state-change-hypercall.patch	Support live migration for Hygon CSV1/2/3 guests, fix nesting #VC The live migration of Hygon CSV1/2/3 guest depends on the KVM hypercall KVM_HC_MAP_GPA_RANGE, add code to sync page enc/dec status to KVM. The MMIO routine of VC handler will get memory encrypt status to validate MMIO address. MemEncryptSevGetEncryptionMask() will enable interrupt while interrupt must be disabled during VC. During DXE stage, VC routine as below: CcExitHandleVc -> MemEncryptSevGetAddressRangeState -> MemEncryptSevGetEncryptionMask->PcdGet64(PcdPteMemoryEncryptionAddressOrMask) Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0072-OvmfPkg-PlatformPei-Mark-SEC-GHCB-page-as-unencrypte.patch	Support live migration for Hygon CSV1/2/3 guests, fix nesting #VC The live migration of Hygon CSV1/2/3 guest depends on the KVM hypercall KVM_HC_MAP_GPA_RANGE, add code to sync page enc/dec status to KVM. The MMIO routine of VC handler will get memory encrypt status to validate MMIO address. MemEncryptSevGetEncryptionMask() will enable interrupt while interrupt must be disabled during VC. During DXE stage, VC routine as below: CcExitHandleVc -> MemEncryptSevGetAddressRangeState -> MemEncryptSevGetEncryptionMask->PcdGet64(PcdPteMemoryEncryptionAddressOrMask) Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0073-OvmfPkg-AmdSevDxe-Add-support-for-SEV-live-migration.patch	Support live migration for Hygon CSV1/2/3 guests, fix nesting #VC The live migration of Hygon CSV1/2/3 guest depends on the KVM hypercall KVM_HC_MAP_GPA_RANGE, add code to sync page enc/dec status to KVM. The MMIO routine of VC handler will get memory encrypt status to validate MMIO address. MemEncryptSevGetEncryptionMask() will enable interrupt while interrupt must be disabled during VC. During DXE stage, VC routine as below: CcExitHandleVc -> MemEncryptSevGetAddressRangeState -> MemEncryptSevGetEncryptionMask->PcdGet64(PcdPteMemoryEncryptionAddressOrMask) Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0074-OvmfPkg-BaseMemcryptSevLib-Correct-the-calculation-o.patch	Support live migration for Hygon CSV1/2/3 guests, fix nesting #VC The live migration of Hygon CSV1/2/3 guest depends on the KVM hypercall KVM_HC_MAP_GPA_RANGE, add code to sync page enc/dec status to KVM. The MMIO routine of VC handler will get memory encrypt status to validate MMIO address. MemEncryptSevGetEncryptionMask() will enable interrupt while interrupt must be disabled during VC. During DXE stage, VC routine as below: CcExitHandleVc -> MemEncryptSevGetAddressRangeState -> MemEncryptSevGetEncryptionMask->PcdGet64(PcdPteMemoryEncryptionAddressOrMask) Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0075-OvmfPkg-BaseMemEncryptLib-Return-SUCCESS-if-not-supp.patch	Support live migration for Hygon CSV1/2/3 guests, fix nesting #VC The live migration of Hygon CSV1/2/3 guest depends on the KVM hypercall KVM_HC_MAP_GPA_RANGE, add code to sync page enc/dec status to KVM. The MMIO routine of VC handler will get memory encrypt status to validate MMIO address. MemEncryptSevGetEncryptionMask() will enable interrupt while interrupt must be disabled during VC. During DXE stage, VC routine as below: CcExitHandleVc -> MemEncryptSevGetAddressRangeState -> MemEncryptSevGetEncryptionMask->PcdGet64(PcdPteMemoryEncryptionAddressOrMask) Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0076-OvmfPkg-BaseMemEncryptLib-Save-memory-encrypt-status.patch	Support live migration for Hygon CSV1/2/3 guests, fix nesting #VC The live migration of Hygon CSV1/2/3 guest depends on the KVM hypercall KVM_HC_MAP_GPA_RANGE, add code to sync page enc/dec status to KVM. The MMIO routine of VC handler will get memory encrypt status to validate MMIO address. MemEncryptSevGetEncryptionMask() will enable interrupt while interrupt must be disabled during VC. During DXE stage, VC routine as below: CcExitHandleVc -> MemEncryptSevGetAddressRangeState -> MemEncryptSevGetEncryptionMask->PcdGet64(PcdPteMemoryEncryptionAddressOrMask) Signed-off-by: hanliyang <hanliyang@hygon.cn>	1 年前
0077-VirtioDxe-add-support-of-MMIO-Bar-for-virtio-devices.patch	vdpa: support vdpa blk/scsi device boot	1 年前
0078-Virtio-wait-virtio-device-reset-done.patch	vdpa: support vdpa blk/scsi device boot	1 年前
0079-VirtioBlk-split-large-IO-according-to-segment_size_m.patch	vdpa: support vdpa blk/scsi device boot	1 年前
0080-Platform-Loongson-Remove-minimium-memory-size-limita.patch	Update LoongArch virtual machine (cherry picked from commit 5273094c17b4c10afdab541ea511b8e7d1b14b04)	1 年前
0081-Platform-Loongson-Modify-loongarch-uefi-firmware-siz.patch	Update LoongArch virtual machine (cherry picked from commit 5273094c17b4c10afdab541ea511b8e7d1b14b04)	1 年前
0082-fixup-fdt-parse-error.patch	Update LoongArch virtual machine (cherry picked from commit 5273094c17b4c10afdab541ea511b8e7d1b14b04)	1 年前
0083-Fix-timing-side-channel-CVE-2024-13176.patch	Fixes CVE-2024-13176、CVE-2024-4741、CVE-2023-5363	1 年前
0084-Free-the-read-buffers-CVE-2024-4741.patch	Fixes CVE-2024-13176、CVE-2024-4741、CVE-2023-5363	1 年前
0085-Process-key-length-CVE-2023-5363.patch	Fixes CVE-2024-13176、CVE-2024-4741、CVE-2023-5363	1 年前
0086-Check-DSA-parameters.patch	Fix CVE-2024-4603	1 年前
0087-Harden-BN_GF2m_poly2arr-against-misuse.patch	Fix CVE-2024-9143 Reference: https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154	1 年前
0088-SecurityPkg-Out-of-bound-read-in-HashPeImageByType.patch	Fix CVE-2024-38797	1 年前
0089-CryptoPkg-Make-DH_check_pub_key-and.patch	Fix CVE-2023-5678	1 年前
0090-NetworkPkg-IScsiDxe-Fix-for-out-of-bound-memory-acce.patch	fix CVE-2024-38805, CVE-2025-3770	10 个月前
0091-UefiCpuPkg-PiSmmCpuDxeSmm-Safe-handling-of-IDT-regis.patch	fix CVE-2024-38805, CVE-2025-3770	10 个月前
0092-kek_unwrap_key-Fix-incorrect-check-of-unwrapped-key-.patch	fix CVE-2025-9230	9 个月前
0093-UefiCpuPkg-CpuExceptionHandlerLib-fix-push-instructi.patch	UefiCpuPkg/CpuExceptionHandlerLib: fix push instructions Nasm 3.0 complains about 'dword' being invalid. The comment talks about a '8-byte value' so 'qword' should be correct here. With this change the extra comment explaining that the instruction actually pushes an 8-byte value despite the 'dword' keyword is not needed any more. Drop it. Fixes: https://github.com/tianocore/edk2/issues/11635 Signed-off-by: Gerd Hoffmann Signed-off-by: xiangzixuan <xiangzixuan@huawei.com>	7 个月前
0094-MdePkg-Add-SBI-Mpxy-Library-to-communicate-with-SBI-MPXY-extension.patch	Backport-Add AcpiErrorInjectionTableDxe and AcpiHardwareErrorTableDxe Support for OS RAS SSE validation Signed-off-by: liuqingtao <liu.qingtao2@zte.com.cn> Signed-off-by: hu.yuye<hu.yuye@zte.com.cn>	7 个月前
0095-MdePkg-RISC-V-Add-RAS-agent-client-library.patch	Backport-Add AcpiErrorInjectionTableDxe and AcpiHardwareErrorTableDxe Support for OS RAS SSE validation Signed-off-by: liuqingtao <liu.qingtao2@zte.com.cn> Signed-off-by: hu.yuye<hu.yuye@zte.com.cn>	7 个月前
0096-MdePkg-RISC-V-Add-function-to-probe-an-SBI-extension.patch	Backport-Add AcpiErrorInjectionTableDxe and AcpiHardwareErrorTableDxe Support for OS RAS SSE validation Signed-off-by: liuqingtao <liu.qingtao2@zte.com.cn> Signed-off-by: hu.yuye<hu.yuye@zte.com.cn>	7 个月前
0097-MdePkg-RISC-V-Add-SBI-MPXY-extension-related-macros.patch	Backport-Add AcpiErrorInjectionTableDxe and AcpiHardwareErrorTableDxe Support for OS RAS SSE validation Signed-off-by: liuqingtao <liu.qingtao2@zte.com.cn> Signed-off-by: hu.yuye<hu.yuye@zte.com.cn>	7 个月前
0098-MdePkg-RISC-V-Add-support-to-fetch-APEI-EINJ-instructions.patch	Backport-Add AcpiErrorInjectionTableDxe and AcpiHardwareErrorTableDxe Support for OS RAS SSE validation Signed-off-by: liuqingtao <liu.qingtao2@zte.com.cn> Signed-off-by: hu.yuye<hu.yuye@zte.com.cn>	7 个月前
0099-MdeModulePkg-Add-support-for-HEST-table-generation.patch	Backport-Add AcpiErrorInjectionTableDxe and AcpiHardwareErrorTableDxe Support for OS RAS SSE validation Signed-off-by: liuqingtao <liu.qingtao2@zte.com.cn> Signed-off-by: hu.yuye<hu.yuye@zte.com.cn>	7 个月前
0100-MdeModulePkg-Add-support-for-EINJ-table-generation.patch	Backport-Add AcpiErrorInjectionTableDxe and AcpiHardwareErrorTableDxe Support for OS RAS SSE validation Signed-off-by: liuqingtao <liu.qingtao2@zte.com.cn> Signed-off-by: hu.yuye<hu.yuye@zte.com.cn>	7 个月前
0101-OvmfPkg-RiscVVirt-Enable-HEST-generation-support.patch	Backport-Add AcpiErrorInjectionTableDxe and AcpiHardwareErrorTableDxe Support for OS RAS SSE validation Signed-off-by: liuqingtao <liu.qingtao2@zte.com.cn> Signed-off-by: hu.yuye<hu.yuye@zte.com.cn>	7 个月前
0102-OvmfPkg-RiscVVirt-Enable-APEI-EINJ-table-generation.patch	Backport-Add AcpiErrorInjectionTableDxe and AcpiHardwareErrorTableDxe Support for OS RAS SSE validation Signed-off-by: liuqingtao <liu.qingtao2@zte.com.cn> Signed-off-by: hu.yuye<hu.yuye@zte.com.cn>	7 个月前
0103-Correct-handling-of-AEAD-encrypted-CMS-with-inadmiss.patch	fix CVE-2025-15467 Signed-off-by: taolinghongfei <taolinghongfei@h-partners.com>	6 个月前
0104-Check-return-code-of-UTF8_putc.patch	fix CVE-2025-69419 Signed-off-by: mapengyuan <mapengyuan@xfusion.com>	5 个月前
0105-Ensure-ASN1-types-are-checked-before-use.patch	fix CVE-2026-22795,CVE-2026-22796,CVE-2025-69420,CVE-2025-69420,CVE-2025-68160,CVE-2025-69418	4 个月前
0106-Verify-ASN1-object-s-types-before-attempting-to-acce.patch	fix CVE-2026-22795,CVE-2026-22796,CVE-2025-69420,CVE-2025-69420,CVE-2025-68160,CVE-2025-69418	4 个月前
0107-PKCS12_item_decrypt_d2i_ex-Check-oct-argument-for-NU.patch	fix CVE-2026-22795,CVE-2026-22796,CVE-2025-69420,CVE-2025-69420,CVE-2025-68160,CVE-2025-69418	4 个月前
0108-When-a-FIO_f_linebuffer-is-part-of-a-bio-chain-and-t.patch	fix CVE-2026-22795,CVE-2026-22796,CVE-2025-69420,CVE-2025-69420,CVE-2025-68160,CVE-2025-69418	4 个月前
0109-Fix-OCB-AES-NI-HW-stream-path-unauthenticated-unencr.patch	fix CVE-2026-22795,CVE-2026-22796,CVE-2025-69420,CVE-2025-69420,CVE-2025-68160,CVE-2025-69418	4 个月前
0110-fix-Delta-CRL-Lacks-CRL-Number.patch	fix cve-2026-28388 to master	3 个月前
0111-fix-null-deref-in-ec-dh_cms_set_shared_info.patch	fix cve-2026-28389 -> master	3 个月前
0112-validate-RSA_public_encryp-result-in-RSASVE.patch	cve-2026-31790, cve-2026-28390, cve-2026-31789 -> master	2 个月前
0113-Fix-NULL-deref-in-rsa_cms_decrypt.patch	cve-2026-31790, cve-2026-28390, cve-2026-31789 -> master	2 个月前
0114-Avoid-possible-buffer-overflow-in-buf2hex-conversion.patch	cve-2026-31790, cve-2026-28390, cve-2026-31789 -> master	2 个月前
0115-x509-free-in-dane-match.patch	cve-2026-28387 -> master	2 个月前
0116-NetworkPkg-IScsiDxe-Fix-for-Remote-Memory-Exposure-i.patch	fix cve-2025-2295, cve-2024-38798, cve-2026-34182 -> master	1 个月前
0117-EmbeddedPkg-Clear-keyboard-queue-buffer-after-readin.patch	fix cve-2025-2295, cve-2024-38798, cve-2026-34182 -> master	1 个月前
0118-MdeModulePkg-Clear-keyboard-queue-buffer-after-readin.patch	fix cve-2025-2295, cve-2024-38798, cve-2026-34182 -> master	1 个月前
0119-Reject-potentially-forged-encrypted-CMS-AuthEnvelope.patch	fix cve-2025-2295, cve-2024-38798, cve-2026-34182 -> master	1 个月前
0120-Avoid-length-truncation-in-ASN1_STRING_set.patch	fix cve-2026-34180, cve-2026-45445, cve-2026-7383, cve-2026-9076 -> master	1 个月前
0121-Apply-the-buffered-IV-on-the-AES-OCB-EVP_Cipher-path.patch	fix cve-2026-34180, cve-2026-45445, cve-2026-7383, cve-2026-9076 -> master	1 个月前
0122-Reject-oversized-inputs-in-ASN1_mbstring_ncopy.patch	fix cve-2026-34180, cve-2026-45445, cve-2026-7383, cve-2026-9076 -> master	1 个月前
0123-cms-kek_unwrap_key-Fix-out-of-bounds-read-in-check-b.patch	fix cve-2026-34180, cve-2026-45445, cve-2026-7383, cve-2026-9076 -> master	1 个月前
0124-Fix-potential-NULL-dereference-processing-CMS-Passwo.patch	fix cve-2026-42766, cve-2026-42767, cve-2026-42768, cve-2026-42770 -> master	1 个月前
0125-Fix-potential-NULL-dereference-in-OSSL_CRMF_ENCRYPTE.patch	fix cve-2026-42766, cve-2026-42767, cve-2026-42768, cve-2026-42770 -> master	1 个月前
0126-Enforce-implicit-rejection-for-CMS-PKCS-7-decryption.patch	fix cve-2026-42766, cve-2026-42767, cve-2026-42768, cve-2026-42770 -> master	1 个月前
0127-Match-the-local-q-DHX-parameter-against-the-peer-s-q.patch	fix cve-2026-42766, cve-2026-42767, cve-2026-42768, cve-2026-42770 -> master	1 个月前
README.md	update README.md	7 个月前
brotli.f4153a09f87cbb9c826d8fc12c74642bb2d879ea.tar.gz	upgrade to 202308 for support riscv64 and add a patch to fix build error on the riscv64 obs build environment.	2 年前
edk2-aarch64-verbose-raw.json	Added firmware scanning directory mapping for libvirt XML Signed-off-by: duyiwei <duyiwei@kylinos.cn>	2 年前
edk2-loongarch64.json	add LoongArch support backport edk2-platform to build with edk2-2308 Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn> (cherry picked from commit ec60765a8e460c2eb12f2a6f676e1272973ff5ce)	1 年前
edk2-ovmf-x64-nosb.json	Added firmware scanning directory mapping for libvirt XML Signed-off-by: duyiwei <duyiwei@kylinos.cn>	2 年前
edk2-platforms-35bca3ca71c0.tar.xz	add LoongArch support backport edk2-platform to build with edk2-2308 Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn> (cherry picked from commit ec60765a8e460c2eb12f2a6f676e1272973ff5ce)	1 年前
edk2-stable202308.tar.gz	upgrade to 202308 for support riscv64 and add a patch to fix build error on the riscv64 obs build environment.	2 年前
edk2.spec	RngLib is not support on loongarch64 remove RngLib on loongarch64	11 天前
openssl.de90e54bbe82e5be4fb9608b6f5c308bb837d355.tar.gz	upgrade to 202308 for support riscv64 and add a patch to fix build error on the riscv64 obs build environment.	2 年前
public-mipi-sys-t.370b5944c046bab043dd8b133727b2135af7747a.tar.gz	upgrade to 202308 for support riscv64 and add a patch to fix build error on the riscv64 obs build environment.	2 年前

通知: 本项目已经正式迁移至 AtomGit 平台

项目介绍

暂无简介

141提交数virt 应用

定制我的领域

README

规则集

edk2:

通知: 本项目已经正式迁移至 AtomGit 平台

项目介绍