.gitignore

file added

+2

.shim.metadata

file added

+2

README.md

file removed

-5

SOURCES/0001-Align-the-sections-we-re-loading-and-check-for-valid.patch

file added

+102

SOURCES/0001-Make-lib-build-right-with-the-cflags-it-should-be-us.patch

file added

+215

SOURCES/0001-fallback-Fix-comparison-between-signed-and-unsigned-.patch

file added

+48

SOURCES/0001-fix-verify_mok.patch

file added

+54

SOURCES/0002-Fix-length-of-allocated-buffer-for-boot-option-compa.patch

file added

+55

SOURCES/0002-Make-lib-use-the-right-CFLAGS.patch

file added

+74

SOURCES/0002-shim.c-Add-support-for-hashing-relocation-of-32-bit-.patch

file added

+175

SOURCES/0003-netboot.h-fix-build-error-on-32-bit-systems.patch

file added

+27

SOURCES/0004-properly-compile-OpenSSL-in-32-bit-mode.patch

file added

+34

SOURCES/0005-fallback.c-fix-32-bit-compilation.patch

file added

+38

SOURCES/0006-fix-fallback.so-build-dependency.patch

file added

+29

SOURCES/0007-propagate-some-path-variables.patch

file added

+38

SOURCES/0008-allow-32-bit-compilation-with-64-bit-compiler.patch

file added

+90

SOURCES/0009-shim-improve-error-messages.patch

file added

+186

SOURCES/0010-Clarify-meaning-of-insecure_mode.patch

file added

+99

SOURCES/0011-Don-t-hook-system-services-if-shim-has-no-built-in-k.patch

file added

+42

SOURCES/0012-Fix-path-generation-for-Dhcpv4-bootloader.patch

file added

+124

SOURCES/0013-Lengths-that-might-be-1-can-t-be-unsigned-Peter.patch

file added

+40

SOURCES/0014-Fix-wrong-sizeof.patch

file added

+30

SOURCES/0015-Initialize-entries-before-we-pass-it-to-another-func.patch

file added

+30

SOURCES/0016-Rewrite-directory-traversal-allocation-path-so-cover.patch

file added

+63

SOURCES/0017-Error-check-the-right-thing-in-get_variable_attr-whe.patch

file added

+27

SOURCES/0018-fallback-For-HD-device-paths-use-just-the-media-node.patch

file added

+219

SOURCES/0019-fallback-Attempt-to-re-use-existing-entries-when-pos.patch

file added

+147

SOURCES/0020-Add-a-preliminary-test-plan.patch

file added

+104

SOURCES/0021-Add-a-failure-case-to-the-test-plan-and-fix-an-order.patch

file added

+71

SOURCES/0022-Allow-fallback-to-use-the-system-s-LoadImage-StartIm.patch

file added

+250

SOURCES/0023-additional-bounds-checking-on-section-sizes.patch

file added

+295

SOURCES/0024-Kees-patch-missed-the-offset-adjustment-to-PEHdr.patch

file added

+75

SOURCES/0025-Get-rid-of-SectionCache-in-generate_hash-it-is-unuse.patch

file added

+35

SOURCES/0026-fallback-Avoid-duplicate-old-BootOrder.patch

file added

+90

SOURCES/0027-fallback-Fix-the-data-size-for-boot-option-compariso.patch

file added

+26

SOURCES/0028-fallback-Try-to-boot-the-first-boot-option-anyway.patch

file added

+58

SOURCES/0029-Fetch-the-netboot-image-from-the-same-device.patch

file added

+144

SOURCES/0030-Check-the-first-4-bytes-of-the-certificate.patch

file added

+140

SOURCES/0031-Remove-grubpath-in-generate_path.patch

file added

+64

SOURCES/0032-MokManager-delete-the-BS-NV-variables-the-right-way.patch

file added

+69

SOURCES/0033-MokManager-handle-the-error-status-from-ReadKeyStrok.patch

file added

+160

SOURCES/0034-Exclude-ca.crt-while-signing-EFI-images.patch

file added

+30

SOURCES/0035-No-newline-for-console_notify.patch

file added

+49

SOURCES/0036-Remove-the-duplicate-calls-in-lib-console.c.patch

file added

+35

SOURCES/0037-Silence-the-functions-of-shim-protocol.patch

file added

+716

SOURCES/0038-Free-the-string-from-DevicePathToStr.patch

file added

+82

SOURCES/0039-Explain-the-logic-in-secure_mode-better.patch

file added

+33

SOURCES/0040-Check-the-secure-variables-with-the-lib-functions.patch

file added

+106

SOURCES/0041-Make-sure-we-default-to-assuming-we-re-locked-down.patch

file added

+84

SOURCES/0042-Simplify-the-checking-of-SB-and-DB-states.patch

file added

+92

SOURCES/0043-Update-openssl-to-0.9.8za.patch

file added

+3032

SOURCES/0044-Replace-build-instructions-in-README-with-something-.patch

file added

+27

SOURCES/0045-CryptLib-undefine-va_arg-and-friends-before-redefini.patch

file added

+37

SOURCES/0046-unhook_system_services-bail-on-systab-NULL.patch

file added

+30

SOURCES/0047-Factor-out-x86-isms-and-add-cross-compile-support.patch

file added

+235

SOURCES/0048-Add-support-for-64-bit-ARM-AArch64.patch

file added

+131

SOURCES/0049-Add-support-for-32-bit-ARM.patch

file added

+209

SOURCES/0050-Update-openssl-to-0.9.8zb.patch

file added

+4231

SOURCES/0051-Fix-typo-from-Ard-s-old-tree-32-bit-ARM-patch.patch

file added

+30

SOURCES/0052-Handle-empty-.reloc-section-in-PE-COFF-loader.patch

file added

+54

SOURCES/0053-Don-t-name-something-exit.patch

file added

+37

SOURCES/0054-Make-sure-we-don-t-try-to-load-a-binary-from-a-diffe.patch

file added

+68

SOURCES/0055-Actually-refer-to-the-base-relocation-table-of-our-l.patch

file added

+140

SOURCES/0056-Make-64-on-32-maybe-work-on-x86_64.patch

file added

+331

SOURCES/0057-Validate-computed-hash-bases-hash-sizes-more-thoroug.patch

file added

+84

SOURCES/0058-Don-t-call-AuthenticodeVerify-if-vendor_cert_size-is.patch

file added

+47

SOURCES/0059-Fix-our-in_protocol-printing.patch

file added

+30

SOURCES/0060-Generate-a-sane-PE-header-on-shim-fallback-and-MokMa.patch

file added

+417

SOURCES/0061-Do-the-same-for-ia32.patch

file added

+383

SOURCES/0062-Make-list_keys-index-variables-all-be-signed.patch

file added

+34

SOURCES/0063-Revert-header-changes.patch

file added

+702

SOURCES/0064-Actually-find-the-relocations-correctly-and-process-.patch

file added

+200

SOURCES/0065-Don-t-append-an-empty-cert-list-to-MokListRT-if-vend.patch

file added

+90

SOURCES/0066-Fix-some-minor-testplan-errors.patch

file added

+37

SOURCES/0067-Don-t-verify-images-with-the-empty-build-key.patch

file added

+31

SOURCES/0068-Cryptlib-remove-the-unused-files.patch

file added

+1265

SOURCES/0069-Another-testplan-error.patch

file added

+71

SOURCES/0070-shim-buffer-overflow-on-ipv6-option-parsing.patch

file added

+173

SOURCES/0071-OOB-access-when-parsing-MOK-List-Certificates-on-MOK.patch

file added

+88

SOURCES/0072-Make-another-integer-compare-be-signed-unsigned-safe.patch

file added

+28

SOURCES/0073-Use-Werror-sign-compare.patch

file added

+28

SOURCES/0074-Correctly-reject-bad-tftp-addresses-earlier-rather-t.patch

file added

+32

SOURCES/rhtest.cer

file added

+0

empty file added

SOURCES/securebootca.cer

file added

+0

empty file added

SPECS/shim.spec

file added

+297