| Commit message (Collapse) | Author | Age |
|
|
|
|
|
|
|
| |
EFIGUARD_BACKDOOR_COOKIE_VALUE
* added some measurements that will get used later
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
|
|
|
| |
This reverts commit 60c4ec50b21b35ef49900abee704a39e0ea4ec17.
|
|
|
|
|
|
|
| |
* fixed EfiDSEFix Mingw Makefile
* removed `EFIAPI` from some imports
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
|
|
|
| |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
|
|
|
|
|
|
|
| |
EFIGUARD_DRIVER_FILENAME="something.efi"`.
* useful for testing multiple EfiGuard builds
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
|
|
|
|
|
|
|
| |
Re-add the missing headers for EFI_LEGACY_BIOS_PROTOCOL and gEfiLegacyBiosGuid which were removed from OvmfPkg in https://github.com/tianocore/edk2/commit/9d4becddbad24ca00b01d68087e0e86d33ec92b6.
Neither OVMF nor EfiGuard actually *needs* the CSM for anything, but being able to check for the presence of the legacy BIOS protocol is still important in order to determine if we are actually booting a legacy BIOS boot option. This allows us to then inform the user that what they are doing is not suppported and most likely a mistake.
Fixes #119
|
|
|
|
|
|
|
|
| |
Override the unwanted /GS flag addition (MSVC) and -fno-stack-protector removal (GCC) introduced in https://github.com/tianocore/edk2/commit/f53f029122d4493e9db95e2424dd8f067f247661
Additionally remove some other (less harmful but still unwanted) build flags that have been made the default in MSVC in the .vcxproj/.props files as well.
Fixes #134
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
This works around a Windows Shell issue when launching console applications that require admin elevation (this includes EfiDSEFix) from an unelevated command prompt while having UAC enabled.
Fixes #75
|
| |
|
|
|
|
|
| |
The interactive driver configuration now requires the HOME key to be pressed when the loader is started. If it is not pressed, the default configuration will be used as before.
The CONFIGURE_DRIVER compile time define is no longer useful due to this change and has been removed.
|
| |
|
| |
|
| |
|
|
|
|
| |
Fixes #97
|
| |
|
| |
|
|
|
|
| |
EfiBootManagerConnectAll provides this functionality now.
|
|
|
|
|
| |
- Add primitive aspect ratio weighting when determining which text mode is best
- Move all uses of gST->ConOut to SetHighestAvailableTextMode and exit early if it is NULL
|
|
|
|
| |
This behaviour matches that of edk2's UefiBootManagerLib since edk2 commit f7fdd620e8
|
|
|
|
| |
Reference: #60
|
|
|
|
|
|
|
| |
This prevents a bugcheck on Windows 10 and later when VBS is enabled, which was made the default setting in Windows 11.
Additionally, EfiDSEFix will not proceed if it detects that VBS is still unexpectedly running (meaning either EfiGuardDxe was never loaded, or it failed to disable VBS).
Fixes #59
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
Closes #51
|
| |
|
|
|
|
|
|
|
|
| |
- Verify expected lengths of instructions
- Verify CipInitialize is in PAGE
- Verify g_CiOptions is in either .data or CiPolicy
Fixes #31 (regression due to KB5003173 fix)
|
|
|
|
|
|
| |
EfiDSEFix was not finding the address of CI!g_CiOptions correctly after KB5003173 changed the layout of CI!CiInitialize.
Fixes #28
|
| |
|
|
|
|
|
|
| |
Note that BmSetMemoryTypeInformationVariable() is told by the loader that the image being loaded is *not* a boot application, which is a blatant lie. The reason for doing this is to prevent BmSetMemoryTypeInformationVariable() from performing a warm reset of the system due to a change in the memory type info. (Again, and again, and again...)
This is an attempt to fix S4 (hibernate) entry/resume issues; see #12.
|
|
|
|
| |
Fixes #9
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
The EFI variable "BootCurrent" corresponds to XXXX in some variable "BootXXXX", and this value was being used to guard against recursive self-booting. However, EfiBootManagerGetLoadOptions() already returns the options sorted by the contents of the "BootOrder" variable, which means that XXXX does not necessarily correspond to the linear index in a for loop. Instead use BootOptions[Index].OptionNumber to retrieve and compare the original value of XXXX
Fixes #5
|
|
|
|
|
|
| |
- Make hde64_table const to prevent it from ending up in .data
- #include <intrin.h> because Clang gets confused by __stosb without it
- Fix various warnings
|
| |
|
| |
|
| |
|
|
|
|
| |
Fixes #1
|
| |
|
| |
|
| |
|