aboutsummaryrefslogtreecommitdiff
path: root/libstb
AgeCommit message (Expand)AuthorFilesLines
2022-06-13libstb: Fix memcpy overread in fakenv_readpublic()Reza Arbab1-2/+2
2022-06-13libstb: Work around deprecated API warnings on OpenSSL 3.0 systemsReza Arbab1-0/+1
2022-03-16libstb/create-container: avoid using deprecated APIs when compiling with Open...Eric Richter1-1/+9
2021-12-09secvar/pkcs7: fix a wrong sizeof()Daniel Axtens1-1/+1
2021-11-04secvar/edk2: store timestamp variable in protected storageEric Richter2-1/+4
2021-11-04secvar/secboot_tpm: unify behavior for bank hash check and secboot header checkEric Richter2-16/+29
2021-11-04secvar/secboot_tpm: correctly reset the control index on secboot formatEric Richter1-4/+7
2021-09-09secvar: Free md context on hash errorNick Child1-2/+2
2021-07-27secvar/backend: fix comment of get_hash_to_verifyDaniel Axtens1-1/+1
2021-07-27secvar/backend: clarify variables in process_updateDaniel Axtens1-8/+6
2021-07-27secvar/backend: rename verify_signature parametersDaniel Axtens1-2/+2
2021-07-20pkcs7: pkcs7_get_content_info_type should reset *p on errorDaniel Axtens2-1/+35
2021-07-20secvar/backend: fix a memory leak in get_pkcs7Daniel Axtens4-1/+181
2021-07-20secvar/backend: fix an integer underflow bugDaniel Axtens3-0/+182
2021-07-20secvar/backend: Don't overread data in auth descriptorDaniel Axtens2-0/+22
2021-07-20secvar: return error if verify_signature runs out of ESLsNick Child2-1/+29
2021-07-20secvar: return error if validate_esl has extra dataNick Child2-1/+19
2021-07-20secvar/backend: use endian-aware types in edk2.hDaniel Axtens1-9/+9
2021-07-19secvar: Make `validate_esl_list` iterate through esl chainNick Child3-4/+244
2021-07-19secvar: ensure ESL buf size is at least what ESL header expectsNick Child3-1/+182
2021-06-25secvar/backend: require sha256 in our PKCS#7 messagesDaniel Axtens3-0/+216
2021-06-24secvar: fix endian conversionNayna Jain1-1/+1
2021-05-13secvar/backend: add EFI_CERT_RSA2048_GUIDDaniel Axtens1-0/+2
2021-05-13secvar/backend: include short-types.h in edk2.hDaniel Axtens1-0/+1
2021-05-13secvar/secvar_util: Properly free memory on zalloc failNick Child1-1/+1
2021-05-13edk2-compat-process.c: Remove repetitive debug print statementsNick Child1-7/+2
2021-03-31secvar/backend/edk2.h: mark structs as __packed explicitlyDaniel Axtens1-6/+8
2021-02-04libstb/trustedboot: Use inclusive language, replace the word 'whitelist'Philippe Mathieu-Daudé1-1/+1
2020-11-27secvar: fix Using plain integer as NULL pointer sparse warningStewart Smith1-1/+1
2020-10-02secvar/test: use mbedtls cflags when building the test binariesEric Richter2-2/+4
2020-10-02secvar/test: use vendored mbedtls instead of hostEric Richter2-7/+10
2020-10-01secvar: Clean up makefiles and fix out of tree buildsOliver O'Halloran4-19/+13
2020-10-01secvar/test: Remove broken initalizersOliver O'Halloran1-2/+2
2020-10-01secvar/backend: improve edk2 driver unit testcasesNayna Jain2-37/+387
2020-10-01secvar/backend: Bugfixes in edk2 driverNayna Jain3-14/+37
2020-10-01secboot_tpm.c: increase tpmnv vars index sizeEric Richter3-6/+6
2020-10-01tssskiboot.c: chunk reads/writes in 1024-sized buffers to support larger nv i...Eric Richter1-28/+54
2020-10-01secvar/test: add edk2-compat driver test and test dataEric Richter17-2/+2448
2020-10-01secvar/backend: add edk2 derived key updates processingNayna Jain7-2/+1499
2020-10-01crypto: add out-of-tree mbedtls pkcs7 parserNayna Jain6-1/+848
2020-10-01secvar/storage: add utility tool to generate NV public name hashesEric Richter2-0/+110
2020-10-01secvar/test: add secboot_tpm storage driver test casesEric Richter2-1/+146
2020-10-01secvar/storage/fakenv: add fake tpm operations for testingEric Richter2-0/+178
2020-10-01secvar/storage: add secvar storage driver for pnor-based p9Eric Richter5-4/+818
2020-10-01secvar_devtree: add physical presence mode helperEric Richter2-0/+17
2020-10-01secvar/test: update API tests for new secvar structEric Richter3-39/+14
2020-10-01secvar: overhaul secvar struct by removing static sized fieldsEric Richter3-97/+88
2020-10-01secvar_util: add new helper functionsEric Richter2-3/+65
2020-10-01secvar: change backend hook interface to take in bank referencesNayna Jain1-3/+3
2020-10-01secvar_main: rework secvar_main error flow, make storage locking explicitEric Richter1-14/+67