Dear Tom,
The following changes since commit 0cc846dafcf6f6270c6587d6fe79011834d6e49a:
Prepare v2022.07-rc6 (2022-07-04 08:18:33 -0400)
are available in the Git repository at:
https://source.denx.de/u-boot/custodians/u-boot-efi.git tags/efi-2022-07-rc7
for you to fetch changes up to 8fb9dbdea716ab764c7a3c544569f903cbfdd744:
test/py: efi_secboot: add a test for a forged signed image (2022-07-05 14:37:16 +0200)
Gitlab-CI showed no issues: https://source.denx.de/u-boot/custodians/u-boot-efi/-/pipelines/12623
---------------------------------------------------------------- Pull request efi-2022-07-rc7
UEFI:
* correct verification of signed UEFI binaries
---------------------------------------------------------------- AKASHI Takahiro (5): lib: crypto: add mscode_parser efi_loader: signature: export efi_hash_regions() efi_loader: image_loader: replace EFI_PRINT with log macros efi_loader: image_loader: add a missing digest verification for signed PE image test/py: efi_secboot: add a test for a forged signed image
include/crypto/mscode.h | 43 ++++++++ include/efi_loader.h | 2 + lib/crypto/Kconfig | 9 ++ lib/crypto/Makefile | 12 +++ lib/crypto/mscode.asn1 | 28 ++++++ lib/crypto/mscode_parser.c | 135 ++++++++++++++++++++++++++ lib/efi_loader/Kconfig | 1 + lib/efi_loader/efi_image_loader.c | 114 ++++++++++++++++------ lib/efi_loader/efi_signature.c | 4 +- test/py/tests/test_efi_secboot/conftest.py | 3 + test/py/tests/test_efi_secboot/forge_image.sh | 5 + test/py/tests/test_efi_secboot/test_signed.py | 35 +++++++ 12 files changed, 361 insertions(+), 30 deletions(-) create mode 100644 include/crypto/mscode.h create mode 100644 lib/crypto/mscode.asn1 create mode 100644 lib/crypto/mscode_parser.c create mode 100644 test/py/tests/test_efi_secboot/forge_image.sh