)]}' { "log": [ { "commit": "3b54a25765919289f1bc38261b6b2bddb7b20a21", "tree": "994e10a6333240f23087fb8a3f7e3f516b2fb6a2", "parents": [ "850eac1d1932b7e64bc7ba6122df7c9dabf44e81" ], "author": { "name": "Kun Qin", "email": "kuqin@microsoft.com", "time": "Wed Feb 16 20:10:34 2022 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 29 03:36:10 2026 +0000" }, "message": "MdeModulePkg: PiSmmCore: Decouple MM core mailbox data\n\nCurrent `gSmmCorePrivate` data used in PiSmmCore is a shared data\nstructure initialized and used by PiSmmIpl. Thus the content is exposed\nto normal DXE environment.\n\nSpecifically, `SmmDispatcher` actively uses `gSmmCorePrivate` to\ndetermine dispatch behavior. As a result, the potential attack surface is\nexposed from SMM initialization through the SMM Ready-to-Lock event.\n\nThis change decouple Core private data from and IPL mailbox at the\nentrypoint of each MMI handle routine. It is a preventative fix to\neliminate hot access to gSmmCorePrivate within the SMM core.\n\nSigned-off-by: Kun Qin \u003ckun.qin@microsoft.com\u003e\n" }, { "commit": "850eac1d1932b7e64bc7ba6122df7c9dabf44e81", "tree": "fd08df15814c14bc009ba57e640f6d319ad07d04", "parents": [ "e3c74a5cb68c156cd434916baaa202f7277fe06b" ], "author": { "name": "Baraneedharan Anbazhagan", "email": "anbazhagan@hp.com", "time": "Wed Oct 21 13:54:15 2026 -0500" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 28 23:12:13 2026 +0000" }, "message": "MdeModulePkg: Use OpenProtocol for protocol lookup\n\nReplace HandleProtocol with OpenProtocol using\nEFI_OPEN_PROTOCOL_GET_PROTOCOL in SmmCorePerformanceLib.\n\nSigned-off-by: Anbazhagan Baraneedharan \u003canbazhagan@hp.com\u003e\n" }, { "commit": "e3c74a5cb68c156cd434916baaa202f7277fe06b", "tree": "dac3321da41462916402013c068a60c4aeffedde", "parents": [ "7af9d049380a791f843458d0c85157e3f0d9f4f6" ], "author": { "name": "Baraneedharan Anbazhagan", "email": "anbazhagan@hp.com", "time": "Tue Oct 20 17:00:55 2026 -0500" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 28 23:12:13 2026 +0000" }, "message": "MdeModulePkg: Fix SMM performance UI-name lookup\n\nSMM images without embedded PDB paths trigger a UI-name fallback\nthat incorrectly treats PiSmmCore\u0027s private-context pointer as a\nDXE image handle, causing an assertion or invalid memory access.\n\nRead the UI section from the target image\u0027s firmware-volume\nDeviceHandle instead.\n\nSigned-off-by: Anbazhagan Baraneedharan \u003canbazhagan@hp.com\u003e\n" }, { "commit": "7af9d049380a791f843458d0c85157e3f0d9f4f6", "tree": "cdf2a1f624d5bd6a05b6df32c40b8247fff9c1f0", "parents": [ "30acc60ed311d9b81dc0d8979a477faafabfda2d" ], "author": { "name": "Gaggery Tsai", "email": "gaggery.tsai@intel.com", "time": "Wed Oct 14 18:43:32 2026 -0700" }, "committer": { "name": "Nate DeSimone", "email": "nathaniel.l.desimone@intel.com", "time": "Wed Oct 28 10:56:36 2026 -0700" }, "message": "IntelFsp2WrapperPkg: Measure the original FSP ImageBase\n\nAn FSP wrapper that loads an FSP component to memory writes the load\naddress into FSP_INFO_HEADER.ImageBase. When that address depends on\nthe boot, for example when the PEI memory layout changes after the\nMemoryTypeInformation variable is updated, the FSP digest and PCR0\nchange from boot to boot although the FSP binary is the same.\n\nAdd FSP_IMAGE_BASE_HOB. With BIT30 and BIT31 set, FspsWrapperPeim and\nFspiWrapperPeim save ImageBase before writing the load address.\nName BIT30 FSP_MEASURE_ORIGINAL_IMAGEBASE. When the measured FSP\nhas ImageBase equal to its base address, BaseFspMeasurementLib\nhashes the saved value in place of the four ImageBase bytes.\nIf all other measured bytes are unchanged, this reproduces the\noriginal FSP code digest with the existing UPD exclusion.\nWithout a matching HOB, with conflicting HOBs, or with any other\nImageBase value, the library measures ImageBase as found in memory.\nThe default behavior, UPD measurement and event payloads are\nunchanged.\n\nA field left at the saved original value produces the same digest\nas substitution. This does not validate the runtime ImageBase.\nOnly ImageBase is restored; changes made by RebaseFspFv are not\nundone and can still make the digest depend on the load address.\n\nSigned-off-by: Gaggery Tsai \u003cgaggery.tsai@intel.com\u003e\n" }, { "commit": "30acc60ed311d9b81dc0d8979a477faafabfda2d", "tree": "c46de137e5198bdb3d975258fc2833c3bafe613c", "parents": [ "6351ea3d16f465127b6449b07f1f3ce88295270a" ], "author": { "name": "Michael D Kinney", "email": "michael.d.kinney@intel.com", "time": "Mon Oct 26 17:08:52 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 28 15:59:17 2026 +0000" }, "message": "MdeModulePkg/Core/Pei: Test AllocatePages memory reuse\n\nAdd a PEI Core host-test target and register it in\nMdeModulePkgHostTest.dsc. Cover Temporary Memory reuse after\nPeiFreePages(), search suppression without free events, active-range\npriority during a pending stack switch, and Permanent Memory top-down\nordering.\n\nTest early best-fit selection, padding-HOB reuse, and aligned 4 KiB,\n16 KiB, and 64 KiB allocation. Cover invalid memory types and unrestricted\nfallback for out-of-PHIT and adjacent coalesced HOBs. Verify final-fallback\nbest-fit and HOB-list tie order. Skip padding-HOB integration when runtime\ngranularity is no larger than default.\n\nSigned-off-by: Michael D Kinney \u003cmichael.d.kinney@intel.com\u003e\n" }, { "commit": "6351ea3d16f465127b6449b07f1f3ce88295270a", "tree": "bf6e54459829af51c16b589d174b5c59511ecaaa", "parents": [ "931973afa488b9bc3debee3aa9390e184a460870" ], "author": { "name": "Michael D Kinney", "email": "michael.d.kinney@intel.com", "time": "Wed Sep 30 17:40:25 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 28 15:59:17 2026 +0000" }, "message": "MdeModulePkg/Core/Pei: Gate early page reuse on free events\n\nTrack TemporaryMemoryPagesFreed in PEI_CORE_INSTANCE. Set it after a\nsuccessful PeiFreePages() call while PEI uses Temporary Memory or creation\nof an alignment-padding HOB, and leave it set after ranges are reused.\n\nWhen PEI uses Temporary Memory and PeiMemoryInstalled and\nSwitchStackSignal are FALSE, search conventional-memory allocation HOBs\nbefore consuming the active top-down range. Select the smallest suitable\nHOB, preserve HOB-list order for ties, and merge adjacent free HOBs on\ndemand when no candidate fits. Share the best-fit helper with the final\nunrestricted fallback.\n\nWhile the stack switch to Permanent Memory is pending, suppress the early\nsearch and use the active physical-memory range first. Preserve Permanent\nMemory top-down/bin-first priority and the existing unrestricted fallback.\n\nSigned-off-by: Michael D Kinney \u003cmichael.d.kinney@intel.com\u003e\n" }, { "commit": "931973afa488b9bc3debee3aa9390e184a460870", "tree": "6e867d3aced548625623b6be93e9d70274eac5f7", "parents": [ "96b044d6b5bbe466e0fc1f320973e077568fa9d9" ], "author": { "name": "Ilya Somkin", "email": "onto1024b@gmail.com", "time": "Tue Oct 27 15:26:51 2026 +0300" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 28 12:27:40 2026 +0000" }, "message": "DynamicTablesPkg/AcpiSpcrLib: Use a fully qualified NameSpaceString\n\nThe `SPCR` specification describes `NamespaceString[]` as \"a fully\nqualified reference to the object that represents this device in the\nACPI namespace\". The generator sets it to `COM1`, the name of the\ndevice in the `SSDT` built along with the `SPCR` table, which is not a\nfully qualified path, so set it to `\\_SB_.COM1`.\n\nSigned-off-by: Ilya Somkin \u003conto1024b@gmail.com\u003e\n" }, { "commit": "96b044d6b5bbe466e0fc1f320973e077568fa9d9", "tree": "6f82afa6bf8355ef2fbd61bc2270348c78d6ec4a", "parents": [ "541e5611d624fc65d7c61936e97032410db8d431" ], "author": { "name": "Barath M", "email": "barathm@ami.com", "time": "Fri Oct 23 17:23:44 2026 +0530" }, "committer": { "name": "pierregondois", "email": "41638958+pierregondois@users.noreply.github.com", "time": "Wed Oct 28 11:40:08 2026 +0100" }, "message": "ShellPkg: Add missing smbios type 38 field messages\n\nREF: https://github.com/tianocore/edk2/issues/13174\n\nSigned-off-by: Barath \u003cbarathm@ami.com\u003e\n" }, { "commit": "541e5611d624fc65d7c61936e97032410db8d431", "tree": "1382e896c36053363623bcf8601a18cb0bcde8aa", "parents": [ "07b0a29928373eed213ba5965eae0be2a09b0a74" ], "author": { "name": "Nate DeSimone", "email": "nathaniel.l.desimone@intel.com", "time": "Tue Oct 27 10:41:44 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 28 09:57:15 2026 +0000" }, "message": "BaseTools/set_vsprefix_envs.bat: Fix VS2019/VS2022 falling into VS2026\n\nAdding VS2026 support left the :SetWinDDK label and code block between\n:SetVS2022 and :SetVS2026. The \"goto SetWinDDK\" taken after VS2019 or VS2022\nsetup then fell through into :SetVS2026, so VS2026 was also initialized and its\nenvironment variables (VCINSTALLDIR, PATH) overrode the requested version.\n\nThe fix is to remove the intermediate :SetWinDDK block, so the goto\nstatements land on the single remaining copy of the :SetWinDDK block at the\nend of the file.\n\nSigned-off-by: Nate DeSimone \u003cnathaniel.l.desimone@intel.com\u003e\n" }, { "commit": "07b0a29928373eed213ba5965eae0be2a09b0a74", "tree": "c307220bef172805cea00b85fe21d2eb9c10c3f9", "parents": [ "490feed6d804e25c16eee5d1f1145b8e92edcfdf" ], "author": { "name": "Qihang Gao", "email": "gaoqihang@loongson.cn", "time": "Thu Oct 22 20:18:02 2026 +0800" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 28 02:03:31 2026 +0000" }, "message": "OvmfPkg/LoongArchVirt: Enable stack check function for Loongarch64\n\nStack protector for Loongarch64 has been supported since https://github.com/tianocore/edk2/pull/12677.\nThis patch enables stack check function by setting build option\nCUSTOM_STACK_CHECK_LIB to DYNAMIC in LoongArchVirtQemu.dsc.\n\nSigned-off-by: Qihang Gao \u003cgaoqihang@loongson.cn\u003e\nCc: Chao Li \u003clichao@loongson.cn\u003e\nCc: Dongyan Qian \u003cqiandongyan@loongson.cn\u003e\n" }, { "commit": "490feed6d804e25c16eee5d1f1145b8e92edcfdf", "tree": "d93272db5f4f0410295fe936afd21305256eba1b", "parents": [ "f884ecc80e7b601821874b197c0979b8999d7411" ], "author": { "name": "Patrick Rudolph", "email": "patrick.rudolph@9elements.com", "time": "Tue Sep 29 07:09:20 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 27 21:35:34 2026 +0000" }, "message": "UefiPayloadPkg: Disable PcdFirstTimeWakeUpAPsBySipi\n\nThe bootloader might have used the \u0027hlt\u0027 instruction to stop the APs,\nbefore jumping to UefiPayload, where after they don\u0027t respond to\nSIPI any more.\n\nWith PcdFirstTimeWakeUpAPsBySipi defaulting to TRUE, the first WakeUpAP\ncall will not see any APs and only init memory for the BSP, while\nsubsequent WakeUpAP will use the INIT-SIPI-SIPI sequence where the APs are\nin an undefined state, causing undefined system behaviour.\n\nDisable PcdFirstTimeWakeUpAPsBySipi to use INIT-SIPI-SIPI sequence to\nwakeup APs.\n\nTEST\u003dCan boot UefiPayload with coreboot as bootloader, without seeing\n random crashes.\n\nSigned-off-by: Patrick Rudolph \u003cpatrick.rudolph@9elements.com\u003e\n" }, { "commit": "f884ecc80e7b601821874b197c0979b8999d7411", "tree": "b36943f488d1dbaeacc0ddf4e274960296259b47", "parents": [ "447c415c2678a2bab107d5d529b879e3d7713830" ], "author": { "name": "Nate DeSimone", "email": "nathaniel.l.desimone@intel.com", "time": "Fri Oct 23 15:06:33 2026 -0700" }, "committer": { "name": "Nate DeSimone", "email": "nathaniel.l.desimone@intel.com", "time": "Tue Oct 27 14:09:48 2026 -0700" }, "message": "BaseTools/GenFw: Remove unused mPhdrBase variable\n\nClang 23 detects that mPhdrBase is unused via the\n-Wunused-but-set-global warning, which breaks the BaseTools\nbuild.\n\nSigned-off-by: Nate DeSimone \u003cnathaniel.l.desimone@intel.com\u003e\n" }, { "commit": "447c415c2678a2bab107d5d529b879e3d7713830", "tree": "12c706cfdd520c0b326369b365422b6e5005bbb5", "parents": [ "c6ee316435166b74d98b6a72edf916dc2f7f327a" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Thu Sep 24 17:32:00 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 27 11:59:48 2026 +0000" }, "message": "MdeModulePkg/PciBusDxe: Honour fixed bus numbers of EA bridges\n\nThe Enhanced Allocation capability of a PCI-PCI bridge carries an\nadditional DWORD describing the fixed secondary and subordinate bus\nnumbers used by the bridge, if it does not rely on its bus number\nregisters. Such a bridge only forwards configuration transactions for\nits fixed bus numbers, and so they must be assigned to it during bus\nenumeration.\n\nRecord the fixed bus numbers when parsing the EA capability, and assign\nthem in PciScanBus () instead of allocating the next available bus\nnumber. The buses below the bridge are numbered from its fixed secondary\nbus number onwards, and the entire fixed range is consumed, regardless\nof how many buses are actually in use below the bridge. Hot plug bus\npadding does not apply to such bridges.\n\nAs bus numbers are assigned in ascending order, the fixed bus numbers\ncannot be honoured if they have already been assigned to another\nbridge, if they are not covered by a single bus number range of the root\nbridge, or if they are not nested inside the fixed bus numbers of an\nupstream bridge. In this case, do not scan behind the bridge, and set\nits primary bus number to an invalid value, so that the device info\ncollector pass does not scan behind it either: its bus number registers\nare likely hardwired, and so the hierarchy behind it may remain visible\non buses that are assigned to other bridges.\n\nReport an error if buses below a bridge with fixed bus numbers end up\noutside of its fixed range, as those will be unreachable.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "c6ee316435166b74d98b6a72edf916dc2f7f327a", "tree": "8b4fb427ca243a41c63a9f4a48646c9e31b87c46", "parents": [ "f531283dee7df7e6a53f17704be217fb5f7096ce" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Thu Sep 24 16:41:01 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 27 11:59:48 2026 +0000" }, "message": "MdeModulePkg/PciBusDxe: Support EA fixed bridge windows\n\nA PCI-PCI bridge that implements the Enhanced Allocation (EA) capability\nmay use entries with BEI 6 to describe fixed I/O, memory and prefetchable\nmemory ranges that it forwards to its secondary side, regardless of the\ncontents of its Base/Limit registers.\n\nSo record such windows when parsing the EA capability of a bridge, and\ntreat the corresponding decodes as supported so that resources are not\ndegraded to a different type on account of the Base/Limit registers not\nbeing implemented.\n\nWhen calculating the aperture of such a bridge window, pin it to the fixed\nrange. Fixed resources below the bridge must reside inside that range, and\nare dropped otherwise. Relocatable resources are placed inside the range at\nthe offsets calculated for them, provided that the window does not hold any\nfixed resources, and is large enough, suitably aligned and, if it resides\nabove 4 GB, only covers resources that may be placed above 4 GB. Otherwise,\nthey are dropped.\n\nPinned EA windows are not programmed into the Base/Limit registers, and\npropagate upwards as fixed resources, like any other pinned bridge window.\n\nThe on-chip bridges of some SoCs (e.g., Cavium/Marvell ThunderX family)\nimplement the EA capability only to describe their fixed bus numbers, and\ncarry no BEI 6 entries at all. The fixed BARs below such bridges are 64-bit\nnon-prefetchable ranges above 4 GB, and those below different bridges are\ninterleaved, as each device has BARs in multiple distinct regions. Covering\nthem with pinned windows does not work: the 32-bit non-prefetchable window\ncannot describe them, and the pinned windows of sibling bridges overlap.\nEvidently, such bridges forward the fixed ranges below them regardless of\ntheir Base/Limit registers.\n\nSo assume that a bridge that implements the EA capability but has no BEI 6\nentry for a certain type of window passes through the fixed resources of\nthat type below it: move them to the resource nodes of the upstream bus,\nrestoring the original BAR type of fixed device resources, and leave the\nbridge window to the relocatable resources below it, if any. Bridges that\ndo not implement the EA capability are unaffected.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "f531283dee7df7e6a53f17704be217fb5f7096ce", "tree": "53d42ca9e9c55531c9530eca7b3f2a6414a87e51", "parents": [ "c91bedce833efc472ac78ac5cfd7866a86576141" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Thu Sep 24 16:32:21 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 27 11:59:48 2026 +0000" }, "message": "MdeModulePkg/PciBusDxe: Submit fixed ranges to the host bridge\n\nAfter submitting the resource requirements for a root bridge, pass the\nfixed ranges below it to the host bridge driver via the EDKII PCI Host\nBridge Fixed Resource protocol, if it is implemented. These are the fixed\nBARs of devices on the root bus, and the pinned windows of PCI-PCI bridges\nthat cover fixed BARs further down the hierarchy.\n\nIf the protocol is not implemented, log the fixed ranges, as they need to\nbe reserved by the platform in that case.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "c91bedce833efc472ac78ac5cfd7866a86576141", "tree": "195da86a006a9be726bf6a03d62ca1fb7780da73", "parents": [ "0ed21804f9626bdab1c0f3541951021180329317" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Thu Sep 24 16:32:20 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 27 11:59:48 2026 +0000" }, "message": "MdeModulePkg/PciHostBridgeDxe: Implement the Fixed Resource protocol\n\nImplement the EDKII PCI Host Bridge Fixed Resource protocol, and install\nit alongside the resource allocation protocol.\n\nFixed ranges submitted for a root bridge are validated against its\napertures, and claimed in GCD at their host address before any of the\nroot bridge windows are allocated, so that the allocator will steer clear\nof them. Failure to claim a range is not treated as an error, given that\nthe platform may have reserved it already. The claimed ranges are released\nagain when the resources are freed or the enumeration is restarted.\n\nThe fixed ranges are appended to the resource descriptors returned by the\nroot bridge\u0027s Configuration () method, which permits the PCI bus driver to\nresolve the translation offset for BARs that decode a fixed range.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "0ed21804f9626bdab1c0f3541951021180329317", "tree": "93eb531c5d6e50ec8e421b35264a2b76a3c3a395", "parents": [ "fe00f5464caa773d578426307980f869b0f011a3" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Thu Sep 24 16:32:20 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 27 11:59:48 2026 +0000" }, "message": "MdeModulePkg: Add EDKII PCI Host Bridge Fixed Resource protocol\n\nIntroduce a protocol that permits the PCI bus driver to inform the PCI\nhost bridge driver about ranges below a root bridge that are decoded at a\nfixed address, e.g., BARs described by an Enhanced Allocation capability,\nor PCI-PCI bridge windows that cover them.\n\nThe host bridge driver is expected to keep these ranges clear when\nallocating the root bridge windows, and to report them via the\nConfiguration () method of the root bridge I/O protocol, so that\ntranslation offsets can be resolved for them.\n\nThe protocol is optional: in its absence, the platform is expected to\nreserve such fixed ranges itself.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "fe00f5464caa773d578426307980f869b0f011a3", "tree": "32eb6125ff5496d1c0ecf3bce8e2fe13bf7512fc", "parents": [ "d293b1e9d9051def25e0fa7b6eb17fa8601f38d4" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Thu Sep 24 16:32:07 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 27 11:59:48 2026 +0000" }, "message": "MdeModulePkg/PciBusDxe: Honour fixed BARs in the resource allocator\n\nBARs described by an Enhanced Allocation capability decode a fixed address\nrange, and so they must be excluded from the ordinary resource allocation,\nwhich assigns relocatable ranges by packing BARs at offsets from the base\nof the enclosing window.\n\nSo represent such BARs as fixed resource nodes, which are not taken into\naccount when calculating the size of the enclosing window, and which are\nnot programmed into the BAR registers.\n\nA PCI-PCI bridge window that covers fixed resource nodes must itself be\npinned to a range that covers all of them. Relocatable resources of the\nsame type below such a bridge cannot be accommodated, and are dropped with\nan error. The pinned windows are programmed before the rest of the\nhierarchy, and are propagated upwards as fixed nodes.\n\nFinally, permit PciIo to fall back to a translation offset of 0 for fixed\nBARs that are not covered by any of the root bridge\u0027s resource windows,\ngiven that the platform may have reserved these ranges by other means.\n\nFixed resources don\u0027t occupy any of the relocatable aperture of the\nenclosing window, and so a window or root bridge resource pool that only\nholds fixed resources does not request any resources. So don\u0027t submit a\nresource request for it, and don\u0027t treat the absence of an allocated base\nas an error when programming the resources below it. This is the case,\ne.g., for root bridges whose devices only have fixed BARs.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "d293b1e9d9051def25e0fa7b6eb17fa8601f38d4", "tree": "8b8c4d256ad482f40f5088e71b307227a06597fa", "parents": [ "e6e048381472fc3ec1c0b7175905afa20aa24cf7" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Thu Sep 24 16:31:58 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 27 11:59:48 2026 +0000" }, "message": "MdeModulePkg/PciBusDxe: Parse the Enhanced Allocation capability\n\nDevices that implement the PCI Enhanced Allocation (EA) capability may\nhave BARs that are hardwired to a fixed address range, and that cannot be\nsized or relocated via the ordinary BAR registers.\n\nSo when gathering device and PCI-PCI bridge information, parse the EA\ncapability if it exists, and use each enabled entry for BEI 0-5 (0-1 for\nbridges) to override the information obtained from the corresponding BAR:\nrecord the fixed base address and size, and mark the BAR as having a fixed\naddress, so that the resource allocator can take this into account.\n\nDo the same after resizable BARs have been adjusted, as this re-parses the\nBAR registers, and ensure that UpdatePciInfo () leaves such BARs alone.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "e6e048381472fc3ec1c0b7175905afa20aa24cf7", "tree": "5eeac4438054cee3bb67d61cae209d4bbd83fef1", "parents": [ "13cb2f1d98573fd2c7bd2797f2007ce51ba1716a" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Thu Sep 24 16:31:42 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 27 11:59:48 2026 +0000" }, "message": "MdePkg/IndustryStandard: Add PCI Enhanced Allocation definitions\n\nAdd the capability ID and the register layout of the PCI Enhanced\nAllocation (EA) capability, as defined in the PCI Local Bus Specification\nECN \"Enhanced Allocation\", so that drivers can discover BARs and bridge\nwindows that are hardwired to fixed addresses.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "13cb2f1d98573fd2c7bd2797f2007ce51ba1716a", "tree": "ef1e2ff4bf67475fcf25cc1d7e96c653dcbca8b7", "parents": [ "dd87bafc40adb36d96e2bcc96ae1be464709db69" ], "author": { "name": "Shubham Aggarwal", "email": "shubagga@google.com", "time": "Mon Oct 26 10:52:25 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 27 09:04:14 2026 +0000" }, "message": "CryptoPkg/BaseCryptLib: Use SHA512_Final() in Sha512Final()\n\nSha512Final() finalizes the SHA-512 context with SHA384_Final() instead\nof SHA512_Final(). This has been the case since the file was added in\ncommit 2ac68e8b549b (\"CryptoPkg Updates to support RFC3161 timestamp\nsignature verification.\"). All the other functions in the file call the\nSHA384_*() or SHA512_*() functions of their own algorithm, including\nSha512HashAll(), which has used SHA512_Init(), SHA512_Update() and\nSHA512_Final() since commit f335d91a3bfe (\"CryptoPkg/BaseCryptLib:\navoid using SHA512()\").\n\nWith OpenSSL, this happens to work: SHA384_Final() simply calls\nSHA512_Final(), which writes as many bytes as the md_len field of the\ncontext specifies, so a context set up by SHA512_Init() still yields\nthe full 64-byte SHA-512 digest.\n\nHowever, SHA384_Final() is meant to be paired with SHA384_Init(), and\nto produce the 48-byte SHA-384 digest. Crypto libraries that implement\nthe same API may enforce this, by asserting that md_len is the SHA-384\ndigest size and writing only 48 bytes. With an OpensslLib instance\nbased on such a library, every SHA-512 digest computed by\nSha512Final(), such as the one returned by Hash2DxeCrypto for\nEFI_HASH2_PROTOCOL, either triggers the assertion or, if assertions are\ndisabled, is truncated to 48 bytes, leaving the last 16 bytes of the\nHashValue buffer unwritten.\n\nUse SHA512_Final(), which matches the SHA512_Init() and SHA512_Update()\ncalls in Sha512Init() and Sha512Update(). There is no functional change\nwith OpenSSL.\n\nSigned-off-by: Shubham Aggarwal \u003cshubagga@google.com\u003e\n" }, { "commit": "dd87bafc40adb36d96e2bcc96ae1be464709db69", "tree": "0a11f2c84aaef9a4f2bf0a5a14d565ed2af2e2b4", "parents": [ "01bd046e7b4bf3087821945a480c9ec90c6fb35a" ], "author": { "name": "Kevin Loughlin", "email": "kevinloughlin@google.com", "time": "Wed Oct 21 15:34:24 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Mon Oct 26 20:45:42 2026 +0000" }, "message": "OvmfPkg/PlatformBootManagerLib: Avoid full 64-byte PCI header reads in BDS\n\nVisitingAPciInstance() currently reads the entire 64-byte PCI_TYPE00\nconfiguration header (16 32-bit reads per device) on every invocation of\nVisitAllPciInstances(). Under virtualization (especially confidential\ncomputing guests such as SEV-SNP and TDX where each config-space access\ntriggers a #VC/#VE exit to the VMM), reading all 16 DWORDs per device\nacross multiple BDS passes adds significant unnecessary exit overhead:\n\n1. SetPciIntLine() only inspects the 1-byte InterruptPin register\n (PCI_INT_PIN_OFFSET, 0x3D). Convert SetPciIntLine() to a\n PROTOCOL_INSTANCE_CALLBACK invoked via VisitAllInstancesOfProtocol()\n that reads PCI_INT_PIN_OFFSET directly with a single 8-bit read,\n eliminating 15 config-space reads per PCI device during\n PciAcpiInitialization().\n2. With SetPciIntLine() converted, all remaining VisitAllPciInstances()\n callbacks (DetectAndPreparePlatformPciDevicePath() and\n ConnectRecursivelyIfPciMassStorage()) only inspect fields within the\n 16-byte PCI_DEVICE_INDEPENDENT_REGION (Pci.Hdr). Update\n VisitingAPciInstance() to read only sizeof (Pci.Hdr) / sizeof (UINT32)\n (4 DWORDs instead of 16) while zeroing the remainder of PCI_TYPE00.\n\nSigned-off-by: Kevin Loughlin \u003ckevinloughlin@google.com\u003e\n" }, { "commit": "01bd046e7b4bf3087821945a480c9ec90c6fb35a", "tree": "2573bff939bb23601ec489417c27cc749078b4dd", "parents": [ "520f764655158e70ea7d165aec315ad653e8b41f" ], "author": { "name": "Kevin Loughlin", "email": "kevinloughlin@google.com", "time": "Wed Oct 21 15:32:54 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Mon Oct 26 20:45:42 2026 +0000" }, "message": "OvmfPkg/PlatformBootManagerLib: Remove blanket PCI device enablement\n\nDetectAndPreparePlatformPciDevicePath() currently enables IO, MMIO, and\nbus master decoding (EFI_PCI_DEVICE_ENABLE) on every enumerated PCI\ndevice unconditionally during PlatformInitializeConsole() (invoked in\nPlatformBootManagerBeforeConsole()).\n\nEnabling PCI decoding and DMA across all devices in platform BDS before\ntheir respective UEFI drivers bind is contrary to the UEFI driver model:\nPCI bridges are enabled by PciBusDxe during StartPciDevicesOnBridge(),\nwhile endpoint drivers (including console and display drivers such as\nQemuVideoDxe, SioBusDxe, PciSioSerialDxe, and VirtioPciDeviceDxe) enable\nthe specific PCI attributes they require in DriverBindingStart() and\ndisable them in DriverBindingStop().\n\nRemove the blanket PciIo-\u003eAttributes() call from\nDetectAndPreparePlatformPciDevicePath() in PlatformBootManagerLib and\nPlatformBootManagerLibBhyve.\n\nSigned-off-by: Kevin Loughlin \u003ckevinloughlin@google.com\u003e\n" }, { "commit": "520f764655158e70ea7d165aec315ad653e8b41f", "tree": "412d5480bf1ca4ad1a2d612b8fbc00ab26d134b2", "parents": [ "f278f1a928052fa04d04105c4c43a1f1d62a0f21" ], "author": { "name": "Kevin Loughlin", "email": "kevinloughlin@google.com", "time": "Wed Oct 21 15:31:10 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Mon Oct 26 20:45:42 2026 +0000" }, "message": "MdeModulePkg/PciBusDxe: Avoid redundant PCI register and bridge accesses\n\nCurrently, PciOperateRegister() unconditionally writes to the target PCI\nconfiguration register (Command or Bridge Control) on\nEFI_ENABLE_REGISTER and EFI_DISABLE_REGISTER operations even when the\nrequested bits are already in the target state or when Command is 0.\n\nSimilarly, PciIoAttributes() unconditionally invokes\nPCI_ENABLE_COMMAND_REGISTER() and PCI_DISABLE_COMMAND_REGISTER() even\nwhen Command is 0 (unlike BridgeControl, which is guarded by\nBridgeControl !\u003d 0), and unconditionally recurses into\nUpStreamBridge-\u003ePciIo.Attributes() even when UpStreamAttributes is 0\n(such as when enabling IO, MEMORY, or BUS_MASTER on an endpoint).\n\nUnder virtualization (especially confidential computing environments\nsuch as AMD SEV-SNP and Intel TDX), every PCI configuration space read\nor write traps to the hypervisor. Update PciOperateRegister() to skip\nno-op register reads/writes when Command is 0 or when the register value\nis unchanged, and update PciIoAttributes() to guard Command register\nupdates and upstream bridge recursion on non-zero masks.\n\nSuggested-by: Ard Biesheuvel \u003cardb+tianocore@kernel.org\u003e\nSigned-off-by: Kevin Loughlin \u003ckevinloughlin@google.com\u003e\n" }, { "commit": "f278f1a928052fa04d04105c4c43a1f1d62a0f21", "tree": "e47811a52a536cb3a7f427d0f278a1836a7a736e", "parents": [ "5c148d5a90825929283615136c20127bd7d14a69" ], "author": { "name": "João Andrade", "email": "659718+joaosa@users.noreply.github.com", "time": "Sat Oct 24 14:55:06 2026 +0100" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Mon Oct 26 16:53:54 2026 +0000" }, "message": "OvmfPkg/VirtioSerialDxe: unmap the ring before freeing it\n\nVirtioSerialUninitRing tests the ring mapping with the condition\ninverted: a mapped ring is never unmapped, and an unmapped one is\n\"unmapped\" with a NULL token. VirtioRingUninit then frees the ring\npages while the mapping stays registered with the VirtIo device.\n\nWith IoMmuDxe (SEV and TDX guests) that mapping owns a stash buffer and\na reserved shared-memory slot, both released when the ring is freed. At\nExitBootServices IoMmuUnmapAllMappings flushes the leftover mapping and\ncopies the slot into the long-freed stash buffer. On an SEV-SNP guest\nwith a virtio-serial console the write lands on live DXE heap and the\nRELEASE firmware faults with #UD in CoreFindFreePagesI (CR() on a\ngMemoryMap entry with a broken signature) before the kernel runs. With\nPcdHeapGuardPropertyMask freed-memory guard enabled the fault moves to\nthe CopyMem in IoMmuDxe, destination in a freed page, source in the\nreserved slot region.\n\nVirtioInputDxe has the same sequence with the test the right way round.\nFlip the condition so the ring is unmapped before it is freed.\n\nBoot-tested on SEV-SNP hardware with a virtio-serial console: the\nfirmware reaches the kernel, and the same build with the freed-memory\nguard shows no fault.\n\nCc: Ard Biesheuvel \u003cardb+tianocore@kernel.org\u003e\nCc: Jiewen Yao \u003cjiewen.yao@intel.com\u003e\nCc: Gerd Hoffmann \u003ckraxel@redhat.com\u003e\nSigned-off-by: João Andrade \u003c659718+joaosa@users.noreply.github.com\u003e\n" }, { "commit": "5c148d5a90825929283615136c20127bd7d14a69", "tree": "e926af38a7289625e39ae56cb2b88aff557bad59", "parents": [ "a9a4df268aa61c8d4bd9710d793fd1dbc32d3c8a" ], "author": { "name": "Qihang Gao", "email": "gaoqihang@loongson.cn", "time": "Mon Oct 26 15:14:57 2026 +0800" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Mon Oct 26 11:57:25 2026 +0000" }, "message": "BaseTools: Fix CLANGDWARF LoongArch64 ASLC build\n\nWhen building a module containing .aslc files on the CLANGDWARF LoongArch64\nplatform, errors occur because the target and linker are set incorrectly.\nTherefore, this patch:\n- Add the missing target triplet to ASLCC_FLAGS so ACPI objects are\ncompiled for LoongArch64 rather than the host architecture.\n- Add -fuse-ld\u003dlld to ASLDLINK_FLAGS so linking does not fall back to the\nGCC ld, which lacks elf64loongarch support.\n\nSigned-off-by: Qihang Gao \u003cgaoqihang@loongson.cn\u003e\nSigned-off-by: Chao Li \u003clichao@loongson.cn\u003e\n" }, { "commit": "a9a4df268aa61c8d4bd9710d793fd1dbc32d3c8a", "tree": "25e6ef741bf87fd2a198fa62a0c49a2a62300439", "parents": [ "0a503bc2f5bd37c7a5d39d0ba31008f446f0298d" ], "author": { "name": "Jakov Zauzolkov", "email": "jakov.zauzolkov@aisec.fraunhofer.de", "time": "Mon Oct 12 13:15:59 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Mon Oct 26 09:49:55 2026 +0000" }, "message": "OvmfPkg/PlatformInitLib: Move \u0027First\u0027 variable to PlatformInfoHob\n\nThe static variable \u0027First\u0027 in function PlatformIgvmScanE820 in Igvm.c\nused for debugging is part of the .data section. Initially, the variable\nholds the boolean value 0x01, which changes during code execution to\n0x00. As this change happens before the PEIFV measurement, and the\nvariable is part of the measurement, the measured PEIFV, which is\nextended into PCR0, differs from the unbooted PEIFV. This difference\nprevents precomputation of the expected value for PCR0, needed for\nremote attestation.\n\nFix this by moving the variable into the PlatformInfoHob.\n\nCo-authored-by: Simon Ott \u003csimon.ott@aisec.fraunhofer.de\u003e\nSigned-off-by: Jakov Zauzolkov \u003cjakov.zauzolkov@aisec.fraunhofer.de\u003e\n" }, { "commit": "0a503bc2f5bd37c7a5d39d0ba31008f446f0298d", "tree": "22067de8bdc99bbe4704c2fe9431b7a7325f1d78", "parents": [ "02c1141a0e5b5c958630e81ac6ebb4b03c1e836f" ], "author": { "name": "Dongyan Qian", "email": "qiandongyan@loongson.cn", "time": "Tue Oct 20 18:39:34 2026 +0800" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Sat Oct 24 17:15:38 2026 +0000" }, "message": "MdePkg/BaseLib: Support IMPCTL1, IMPCTL2 and TLBRPRMD on LoongArch\n\nAdd CsrRead(), CsrWrite() and CsrXChg() support for IMPCTL1 (0x80),\nIMPCTL2 (0x81) and TLBRPRMD (0x8F). These selectors currently reach\nthe unsupported-selector trap instead of a CSR instruction.\n\nDefine the register numbers, add the IMPCTL1/2 dispatch range and\nextend the existing TLB refill range and instruction tables through\nTLBRPRMD. Preserve the existing handling of all other selectors.\n\nThe register definitions follow LoongArch Reference Manual Volume 1,\nversion 1.10, sections 7.4.18, 7.4.19 and 7.5.17. IMPCTL field semantics\nremain implementation-specific; this change only enables CSR access.\n\nLink: https://loongson.github.io/LoongArch-Documentation/LoongArch-Vol1-EN.html\nSigned-off-by: Dongyan Qian \u003cqiandongyan@loongson.cn\u003e\n" }, { "commit": "02c1141a0e5b5c958630e81ac6ebb4b03c1e836f", "tree": "fc8ec211abe15ba05e9a60cf7b812741e5e4f780", "parents": [ "929b5d83ddff8ac4fe6532db1d75c189c4355021" ], "author": { "name": "Michael D Kinney", "email": "michael.d.kinney@intel.com", "time": "Thu Oct 22 08:35:49 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Sat Oct 24 02:01:56 2026 +0000" }, "message": "Maintainers.txt: Add Khalid Ali as PcAtChipsetPkg maintainer\n\nSigned-off-by: Michael D Kinney \u003cmichael.d.kinney@intel.com\u003e\n" }, { "commit": "929b5d83ddff8ac4fe6532db1d75c189c4355021", "tree": "0068e0da3711102f356b8f138e612fb33e242b47", "parents": [ "19069f43c467cbf1f9e2627aa6dcee3de98cdb55" ], "author": { "name": "Michael D Kinney", "email": "michael.d.kinney@intel.com", "time": "Wed Oct 21 18:50:37 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Sat Oct 24 02:01:56 2026 +0000" }, "message": "Maintainers.txt: Promote Star Zeng to UefiCpuPkg maintainer\n\nPromote Star Zeng from reviewer to maintainer of UefiCpuPkg.\n\nSigned-off-by: Michael D Kinney \u003cmichael.d.kinney@intel.com\u003e\n" }, { "commit": "19069f43c467cbf1f9e2627aa6dcee3de98cdb55", "tree": "f34a683d4631d79ea3c41b792825d96c18f598eb", "parents": [ "280d35400e689afeb41e53fc1fb1f16b138d684a" ], "author": { "name": "Michael D Kinney", "email": "michael.d.kinney@intel.com", "time": "Wed Oct 21 18:39:11 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Sat Oct 24 02:01:56 2026 +0000" }, "message": "Maintainers.txt: Update maintainers and reviewers\n\nBaseTools: Remove Guillermo Antonio Palomino Sosa\nFmpDevicePkg: Remove Wei6 Xu\nIntelFsp2Pkg: Remove Ray Ni\nMdeModulePkg: Remove Dandan Bi, Ray Ni\nPcAtChipsetPkg: Remove Ray Ni\nSecurityPkg: Remove Min Xu\nStandaloneMmPkg: Remove Ray Ni, Dun Tan, Eduardo Cuevas Farfan\nUefiCpuPkg: Remove Ray Ni, Dun Tan, Eduardo Cuevas Farfan\nUefiPayloadPkg: Remove Shuo Liu\n\nSigned-off-by: Michael D Kinney \u003cmichael.d.kinney@intel.com\u003e\n" }, { "commit": "280d35400e689afeb41e53fc1fb1f16b138d684a", "tree": "352e34c9a2484e5794aae68858c7f1f24399a7b2", "parents": [ "508e0f237f1df3656b1f62f0116e7f242704d646" ], "author": { "name": "Thamballi Sreelalitha", "email": "sreelali@qti.qualcomm.com", "time": "Wed Oct 21 11:31:02 2026 +0530" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 23:40:47 2026 +0000" }, "message": "CryptoPkg/BaseCryptLib: Remove redundant uint64_t typedef\n\nThe typedef \u0027uint64_t\u0027 in CryptParallelHash.h conflicts with the same\ntypedef defined in openssl/include/openssl/e_os2.h when both headers are\nincluded in the same translation unit. This causes a redefinition error\nwith strict compiler flags (-Werror,-Wtypedef-redefinition).\n\nThe uint64_t type is already provided through the include chain:\nInternalCryptLib.h -\u003e openssl/evp.h -\u003e openssl/e_os2.h\n\nRemoving the redundant typedef resolves the conflict while maintaining\ncompatibility, as the type is still available through the proper include\nchain.\n\nSigned-off-by: Thamballi Sreelalitha \u003csreelali@qti.qualcomm.com\u003e\n" }, { "commit": "508e0f237f1df3656b1f62f0116e7f242704d646", "tree": "c880a669c5ed9b04e4b6a32902413aa5b86b5f82", "parents": [ "cd3407a4c347bd033f7d866b36fb4adea6ec9a87" ], "author": { "name": "Doug Flick", "email": "dougflick@microsoft.com", "time": "Fri Oct 16 14:42:34 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 20:01:16 2026 +0000" }, "message": "SecurityPkg: Add MM random number protocol provider\n\nAdd a reusable MM_STANDALONE RNG protocol producer backed by the\nplatform-selected RngLib so MM consumers can obtain entropy without\ndepending on the DXE protocol database.\n\nSigned-off-by: Doug Flick \u003cdougflick@microsoft.com\u003e\n" }, { "commit": "cd3407a4c347bd033f7d866b36fb4adea6ec9a87", "tree": "ea4fc1ff49867693966ded233fa0651d76a735ec", "parents": [ "3c890c11dfdb5908dcbc84f977dddc6c6d43789f" ], "author": { "name": "Thamballi Sreelalitha", "email": "sreelali@qti.qualcomm.com", "time": "Mon Aug 24 11:47:38 2026 +0530" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 19:41:46 2026 +0000" }, "message": "UefiCpuPkg/CpuExceptionHandlerLib: Follow AAPCS in exception handler\n\nAdd frame record in CommonExceptionEntry before calling\nCommonCExceptionHandler to comply with AArch64 AAPCS calling convention.\nThis also allows the debugger to reconstruct the full call stack when\na crash occurs in any UEFI module.\n\nKnown Limitation :\nThis only fixes the CommonExceptionEntry() link in the chain.\nThe final hop from CommonExceptionEntry()\u0027s frame record back into the\ninterrupted function\u0027s own frame is still just the x29 value captured at\nexception time.\nIf the exception was taken while the interrupted function\u0027s prologue or\nepilogue was still executing, that frame record may be incomplete or\nalready torn down, and FP-chain unwinding can produce an incorrect\nor truncated backtrace for that last frame.\n\nSigned-off-by: Thamballi Sreelalitha \u003csreelali@qti.qualcomm.com\u003e\n" }, { "commit": "3c890c11dfdb5908dcbc84f977dddc6c6d43789f", "tree": "246b19a93426127cfa7716aebc37d0ab66a06564", "parents": [ "9794998206206c1ecb7ade9fa181f17b2cbbe63e" ], "author": { "name": "Vincent Ke", "email": "vincentke@ami.com", "time": "Fri Oct 02 15:54:37 2026 +0800" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 18:55:11 2026 +0000" }, "message": "MdePkg,MdeModulePkg: Introduce Enter4Byte/Exit4Byte In SpiNorFlashJedecSfdp\n\nFollow JESD216H 6.4.19, DWORD 16\nIntroduce Enter4Byte/Exit4Byte In SpiNorFlashJedecSfdp And SpiNorFlash\nFixes: #13171\n\nContinuous-integration-options: PatchCheck.ignore-multi-package\nSigned-off-by: Vincent Ke \u003cvincentke@ami.com\u003e\n" }, { "commit": "9794998206206c1ecb7ade9fa181f17b2cbbe63e", "tree": "476cc501398f8e7855681640f252a7f75f54b708", "parents": [ "eb400628a17dddb822502bae2f669fe0c8e96004" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 22 13:03:28 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 17:37:24 2026 +0000" }, "message": "MdePkg: AArch64: AsmMacroLib.h: Use PE Friendly Section Syntax\n\nClang prior to at least v23.1.4 used to merge ELF style section\nnames for PE targets. However,\nhttps://github.com/llvm/llvm-project/pull/199625 changed that\nbehavior to only occur for MinGW. This causes newer versions\nof clang to not merge together .text sections in edk2 binaries,\ncreating very large images.\n\nThis commit changes the ASM_FUNC and ASM_FUNC_ALIGN macros to\nnot use the ELF style syntax when building PE images and instead\nuse PE style section syntax to ensure the sections get merged.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "eb400628a17dddb822502bae2f669fe0c8e96004", "tree": "77cf419e82824abd086c7e0df4084f3fb526ae08", "parents": [ "05fd3e9a35b00f3dcc6344936919cd505dea4bc7" ], "author": { "name": "Simon Wang", "email": "simowang@nvidia.com", "time": "Tue Oct 20 17:42:10 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 10:09:23 2026 +0000" }, "message": "DynamicTablesPkg: Add SMBIOS Type 45 generator\n\nAdd the SMBIOS Type 45 Firmware Inventory Information generator.\n\nValidate the fields defined by SMBIOS 3.9.0. Resolve optional associated\ncomponent handles from generator and object tokens.\n\nSigned-off-by: Simon Wang \u003csimowang@nvidia.com\u003e\nSigned-off-by: Girish Mahadevan \u003cgmahadevan@nvidia.com\u003e\n" }, { "commit": "05fd3e9a35b00f3dcc6344936919cd505dea4bc7", "tree": "7ee791eccdad6eb9c289994cd2f107eebd75f78c", "parents": [ "d1c50b3609e88b6e97d795f9d0eadd6ce428feed" ], "author": { "name": "Girish Mahadevan", "email": "gmahadevan@nvidia.com", "time": "Tue Oct 20 17:35:56 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 10:09:23 2026 +0000" }, "message": "DynamicTablesPkg: Add Firmware Inventory CM objects\n\nAdd Arch Common objects and Configuration Manager object parsers for\nSMBIOS Type 45 Firmware Inventory Information and associated components.\n\nSigned-off-by: Girish Mahadevan \u003cgmahadevan@nvidia.com\u003e\n" }, { "commit": "d1c50b3609e88b6e97d795f9d0eadd6ce428feed", "tree": "eb3e429841fa1d86b5026c307ea01d16addcc4f4", "parents": [ "1346f2f41a6df1c711218b076f7563c5b5884bcd" ], "author": { "name": "Thamballi Sreelalitha", "email": "sreelali@qti.qualcomm.com", "time": "Thu Oct 22 01:25:30 2026 +0530" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 04:43:48 2026 +0000" }, "message": "MdeModulePkg/LogoDxe: Add support for loading logo from FV\n\nAdd support for loading logos from FREEFORM FFS files identified by\nPcdLogoFileGuid. When the PCD is zero or invalid, preserve the\nexisting HII-based logo loading path.\n\nWhen the PCD is valid non-zero, select the logo from the corresponding RAW\nFFS file in the firmware volume, including compressed and uncompressed\nsection layouts.\n\nKey Difference\n - LogoDxe: HII fallback always works (embedded logo available)\n - LogoFfsDxe: HII fallback returns EFI_NOT_FOUND (no embedded logo)\n\nUpdate LogoDxe file descriptions, copyright notices, include ordering,\nand INF annotations. Consolidate module includes into single shared\nheader.\n\nSigned-off-by: Thamballi Sreelalitha \u003csreelali@qti.qualcomm.com\u003e\n" }, { "commit": "1346f2f41a6df1c711218b076f7563c5b5884bcd", "tree": "5274f0ac9350d5d027ef5b9b40cb2626c686b240", "parents": [ "27bc5257b836c63f97fd8d874838e3dda89aa465" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 01 12:43:39 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "UefiPayloadPkg: PayloadLoaderPeim: Use DUMP_HEX Macro\n\nPayloadLoaderPeim had a DumpFdt() function that replicated\nhex dumping logic; use DUMP_HEX from DebugLib.h instead.\n\nThe print changes to have the prefix for every row instead\nof the top.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "27bc5257b836c63f97fd8d874838e3dda89aa465", "tree": "cc35f0b00c47349c2351c7bea004189a02929764", "parents": [ "9caad956434a821fecead7dd0d4eb24af316d85e" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 01 12:42:44 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "UefiCpuPkg: RegisterCpuFeaturesLib: Use DUMP_HEX Macro\n\nRegisterCpuFeaturesLib was implementing its own hex\ndumping logic; use the DebugLib.h macro instead.\n\nThe print changes to uppercase hex.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "9caad956434a821fecead7dd0d4eb24af316d85e", "tree": "5a62467c44affd37f638e05137fcaa1c03c1d323", "parents": [ "940bae3d5565a5efd7c7b85de3759d6050b56639" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 01 12:42:07 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "TcgTpmPkg: TpmLib: Use DUMP_HEX Macro\n\nTpmLib was implementing its own hex dumping;\nuse the DebugLib.h macro instead.\n\nThe print changes by having lines of 16 bytes instead\nof one byte per line.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "940bae3d5565a5efd7c7b85de3759d6050b56639", "tree": "862d390a20b9bf761fc825bb17a8089a924261cf", "parents": [ "99ac204d5f46d4eacd10e92109bd0ec7578c8170" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 01 12:41:26 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "SecurityPkg: Use DUMP_HEX Macro\n\nSeveral places in SecurityPkg were implementing their\nown hex dumping logic; use the DebugLib.h macro instead.\n\nThe prints change slightly by having the prefix per row.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "99ac204d5f46d4eacd10e92109bd0ec7578c8170", "tree": "f0d73f54dfe622eb5ef9c2eb641f5966aa208d3c", "parents": [ "41ce98cb3e7704ac4205248b2ea57f982705f8ac" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 01 12:40:02 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "RedfishPkg: Use DUMP_HEX Macro\n\nRedfishDebugLib defined a DumpBuffer() function that\nreplicates functionality for hex dumping. Drop this\nand use DUMP_HEX instead.\n\nThe print changes slightly now by having the MAC heading\non every line, not just the top.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "41ce98cb3e7704ac4205248b2ea57f982705f8ac", "tree": "2d29d37b78340a33716075f10fc762b24b8174e2", "parents": [ "bbbb761e370379aed5d548cd5c044377fee4daaa" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 01 12:38:54 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "OvmfPkg: Use DUMP_HEX Macro\n\nTwo places in OvmfPkg were implementing their own\nhex dumping logic; use the DebugLib.h implementation\ninstead.\n\nThe prints change slightly by having the prefix per line,\nnot just in the header.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "bbbb761e370379aed5d548cd5c044377fee4daaa", "tree": "56d02029be2c2ede0bfb743a9ebf5572d22e6f14", "parents": [ "2b2c8374f91a9622b0d49ce7d90ce2bab10c9c6e" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 01 12:38:03 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "MdeModulePkg: Use DUMP_HEX Macro\n\nSeveral places in MdeModulePkg were implementing their\nown versions of hex dumping logic; use the DebugLib.h\nmacro instead.\n\nPrints change slightly, they are now standardized with\nuppercase hex, prefixes on every row instead of in the\nheader only, and VarCheckHiiLib no longer indents rows\nwith *ASCII*.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "2b2c8374f91a9622b0d49ce7d90ce2bab10c9c6e", "tree": "77f183ca942e087f102203cecfdfcb74998e4033", "parents": [ "e487e56c3749be43fd94e96e6d70285d501262cf" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 01 12:36:31 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "ManageabilityPkg: Use DUMP_HEX Macro\n\nSeveral places in ManageabilityPkg were implementing their\nown hex dumping logic; use the DebugLib.h macro instead.\n\nThe prints change slightly, they are now standardized on uppercase\nhex and with spacing between hex values. Prefixes now are on every\nrow instead of only the top.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "e487e56c3749be43fd94e96e6d70285d501262cf", "tree": "c0cb4a07bc22b0ab6e43d9470a96f2dc12159e07", "parents": [ "04c727060adb36d7034ae3a25bad46f9f31a0a82" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 01 12:35:27 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "EmulatorPkg: Redfish: Use DUMP_HEX Macro\n\nRedfishPlatformHostInterfaceLib in EmulatorPkg was\nimplementing its own hex dumping logic; use the\nDebugLib.h macro instead.\n\nThe print changes slightly, it no longer has custom rows\nor the address/size header.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "04c727060adb36d7034ae3a25bad46f9f31a0a82", "tree": "5061aea22168d947e6c37b685b11cb2f141f57b2", "parents": [ "cc3c64045e16ee06943c74258baa5b60bb88b0f3" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 01 12:34:30 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "DynamicTablesPkg: Use DUMP_HEX Macro\n\nSeveral places in DynamicTablesPkg implemented their\nown hex dumping loging; use the DebugLib.h macro instead.\n\nThe prints change slightly here, they are now standardized\nwith uppercase hex values and do not have custom address\nand length prints.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "cc3c64045e16ee06943c74258baa5b60bb88b0f3", "tree": "affe6f3faca0d7c933ed0b698323df6f55f06b2f", "parents": [ "0a00eb572c4e6874c9d4f0354d36cd51cbf308f1" ], "author": { "name": "Oliver Smith-Denny", "email": "osde@microsoft.com", "time": "Thu Oct 01 12:33:04 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "ArmPlatformPkg: PlatformPei: Use DUMP_HEX\n\nPlatformPei implements its own hex dumping; use the\nDebugLib.h macro instead.\n\nThe print changes slightly here, it used to be lowercase\nhex and only have a single prefix, now each line carries\nthe prefix (Digest or VendorInfo).\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "0a00eb572c4e6874c9d4f0354d36cd51cbf308f1", "tree": "a2bc5fd5a89c6619dac3b7e9310298dc627db6b2", "parents": [ "75b15c8badcbddeb92f9ab486010be0c1732e3f1" ], "author": { "name": "Mike Turner", "email": "miketur@microsoft.com", "time": "Thu Oct 01 12:25:41 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 03:44:49 2026 +0000" }, "message": "MdePkg: DebugLib: Add DUMP_HEX Macro\n\nPer issue #9665 (originally BZ 1371), this\nadds a DUMP_HEX macro to DebugLib.h to nicely\nformat printing hexadecimal values from memory.\n\nThis pattern is widely used across edk2 and platforms,\nbut every location implements its own version.\n\nSigned-off-by: Oliver Smith-Denny \u003cosde@microsoft.com\u003e\n" }, { "commit": "75b15c8badcbddeb92f9ab486010be0c1732e3f1", "tree": "0e90ff63881cd8554369b4ad4d63e8ab9e103685", "parents": [ "ca211e68cc58bee8490dfde0b84a103f2804501d" ], "author": { "name": "Stanislaw Grams", "email": "stanislaw.grams@intel.com", "time": "Wed Sep 30 12:38:35 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 02:04:33 2026 +0000" }, "message": "OvmfPkg/IntelTdx: Record Secure Boot default breaking change\n\nDocument the IntelTdxX64 Secure Boot and shell default changes as a\nbehavioral breaking change. Link the upstream tracking issue and provide\nmigration guidance for builds relying on the previous defaults.\n\nSigned-off-by: Stanislaw Grams \u003cstanislaw.grams@intel.com\u003e\n" }, { "commit": "ca211e68cc58bee8490dfde0b84a103f2804501d", "tree": "3e3b36ec9277f8437f9b54df248bf32750451331", "parents": [ "dabb4726988590e2db237d5caab6998b3c2c84ef" ], "author": { "name": "Stanislaw Grams", "email": "stanislaw.grams@intel.com", "time": "Wed Sep 16 15:55:43 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 02:04:33 2026 +0000" }, "message": "OvmfPkg/IntelTdx: Enable Secure Boot and drop the shell by default\n\nThe Config-B TDX firmware shipped with SECURE_BOOT_ENABLE\u003dFALSE and\nBUILD_SHELL\u003dTRUE by default, so a default production build performed no\nSecure Boot image verification and embedded the full UEFI Shell, giving an\nattacker an unauthenticated command environment.\n\nDefault SECURE_BOOT_ENABLE to TRUE and BUILD_SHELL to FALSE, matching the\nhardened AmdSevX64 posture. Both remain overridable on the build command\nline (-D FLAG\u003dVALUE) for development. With Secure Boot enabled the shell FV\nis already excluded by ShellDxe.fdf.inc.\n\nSigned-off-by: Stanislaw Grams \u003cstanislaw.grams@intel.com\u003e\n" }, { "commit": "dabb4726988590e2db237d5caab6998b3c2c84ef", "tree": "072ebe7e30c697e41618d09ddfa5bced6aad76ed", "parents": [ "a36bdc97ab558c424ed40f954c2e2218a3380723" ], "author": { "name": "Stanislaw Grams", "email": "stanislaw.grams@intel.com", "time": "Wed Sep 16 15:55:43 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 02:04:33 2026 +0000" }, "message": "OvmfPkg/PeilessStartupLib: Fail closed on Secure Boot store init error\n\nInitializePlatform() called PlatformInitEmuVariableNvStore() and discarded\nits return value. That store holds the authenticated Secure Boot variables\n(PK/KEK/db/dbx) that gate image verification, and it is populated from a\nflash template that can be influenced through the untrusted fw_cfg path. If\ninitialization failed the boot continued with an unverified Secure Boot\nconfiguration.\n\nPropagate the failure out of InitializePlatform() so the pei-less startup\ndead-loops instead of proceeding with an invalid variable store.\n\nSigned-off-by: Stanislaw Grams \u003cstanislaw.grams@intel.com\u003e\n" }, { "commit": "a36bdc97ab558c424ed40f954c2e2218a3380723", "tree": "ccb4b1619525ac096ea347bdfd5c37cd62d1a8d7", "parents": [ "cc8169c2a93b1ec5b167108ad6ab9529876ea76b" ], "author": { "name": "Varshit Pandya", "email": "varshit.pandya@arm.com", "time": "Thu Oct 08 15:29:03 2026 +0100" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 00:18:37 2026 +0000" }, "message": "DynamicTablesPkg: Add Arm SCMI SSDT generator\n\nAdd an Arm SSDT generator that describes SCMI ACPI devices using the\nARML0001 hardware identifier.\n\nGenerate the SCMI device properties for PCC transports, power capping\nand monitoring, and system telemetry protocols. Validate the SCMI\ndevice, protocol, transport, and PCC subspace relationships before\ngenerating AML.\n\nUse the semantic AmlLib SCMI interfaces to generate transport and\nprotocol properties, and keep generator-specific definitions in a\nprivate header.\n\nIterate over the direction-indexed transport arrays when validating\ncommon and protocol-exclusive channels.\n\nRegister the SCMI generator for AARCH64 builds.\n\nSigned-off-by: Varshit Pandya \u003cvarshit.pandya@arm.com\u003e\n" }, { "commit": "cc8169c2a93b1ec5b167108ad6ab9529876ea76b", "tree": "2b07b9238c3d38bc5a306f320501a8772344ba2a", "parents": [ "86c874f86494d522d9197b9ccbea88686e8f8600" ], "author": { "name": "Varshit Pandya", "email": "varshit.pandya@arm.com", "time": "Mon Oct 05 15:50:43 2026 +0100" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 00:18:37 2026 +0000" }, "message": "DynamicTablesPkg: Add Arm SCMI Configuration Manager objects\n\nAdd Arm namespace Configuration Manager objects describing SCMI ACPI\ndevices, PCC transports, and supported protocols.\n\nRepresent A2P and P2A transport references using direction-indexed\ntoken arrays.\n\nAdd the corresponding Configuration Manager object parsers.\n\nSigned-off-by: Varshit Pandya \u003cvarshit.pandya@arm.com\u003e\n" }, { "commit": "86c874f86494d522d9197b9ccbea88686e8f8600", "tree": "7506c30db15eb80a08924aee8b9aa58b64104d1f", "parents": [ "2b92c6d499de9127239b5c1da94c2dcccdd73f0f" ], "author": { "name": "Varshit Pandya", "email": "varshit.pandya@arm.com", "time": "Thu Oct 08 15:28:05 2026 +0100" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Fri Oct 23 00:18:37 2026 +0000" }, "message": "DynamicTablesPkg/AmlLib: Add SCMI package generation APIs\n\nAdd semantic AML generation APIs for SCMI transport and protocol\nproperties.\n\nKeep the low-level String, Integer, and Package object constructors\nprivate. The new APIs create, attach, and clean up the required AML\nobjects internally, reducing the risk of invalid attachments and leaked\nnodes.\n\nSigned-off-by: Varshit Pandya \u003cvarshit.pandya@arm.com\u003e\n" }, { "commit": "2b92c6d499de9127239b5c1da94c2dcccdd73f0f", "tree": "39b80fc7b52b17e96601249e76e32f9d38ae7187", "parents": [ "b1165aac2c1e551c7c0a4e229cac4c595cabc788" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Fri Oct 09 12:58:29 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "MdeModulePkg/Core: Add resource and GCD verification\n\nAdd debug verification for Resource Descriptor HOBs. Parse both v1\nand v2 Resource Descriptor HOBs, and warn about overlapping ranges.\nCheck I/O resources separately from memory and MMIO resources.\n\nPrint the complete GCD memory space map starting at address zero and\nrepresent any gaps as non-existent memory with\n\nThese changes are for debug purposes only. Examining the debug output\nwill enable a platform owner to view overlapping resource hobs, and\nshow gaps in the memory map based upon input from the PEI phase.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "b1165aac2c1e551c7c0a4e229cac4c595cabc788", "tree": "8376ea1d2ff79cba459954d3c26d269275d99895", "parents": [ "d5a9abcc75d806d4222cc4f9112aa693be709640" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 16:23:14 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "UefiPayloadPkg: Add EFI_HOB_RESOURCE_DESCRIPTOR2 support\n\nUpdate consumers of ResourceDescriptorHobs to understand both\nEFI_HOB_TYPE_RESOURCE_DESCRIPTOR and EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "d5a9abcc75d806d4222cc4f9112aa693be709640", "tree": "5513f096e7ced3931b6f8aaa728b731cc37c3864", "parents": [ "2907f9d8744a5587a0ae5c0e5fba15f02d8ffa39" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 16:23:14 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "UefiCpuPkg: Add EFI_HOB_RESOURCE_DESCRIPTOR2 support\n\nUpdate consumers of ResourceDescriptorHobs to understand both\nEFI_HOB_TYPE_RESOURCE_DESCRIPTOR and EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "2907f9d8744a5587a0ae5c0e5fba15f02d8ffa39", "tree": "c8638cb8a4bc5df3309a99e19d1f90ec31f478f5", "parents": [ "e856da88ede007b67424fc0bb72b057d7909b4a7" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 16:23:14 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "StandaloneMmPkg: Add EFI_HOB_RESOURCE_DESCRIPTOR2 support\n\nUpdate consumers of ResourceDescriptorHobs to understand both\nEFI_HOB_TYPE_RESOURCE_DESCRIPTOR and EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "e856da88ede007b67424fc0bb72b057d7909b4a7", "tree": "a840a2edccfedcea269f2270d803ba52e7486a03", "parents": [ "bd75f69286d93bb61749db7280a5d9d544590ccd" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 16:23:14 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "OvmfPkg: Add EFI_HOB_RESOURCE_DESCRIPTOR2 support\n\nUpdate consumers of ResourceDescriptorHobs to understand both\nEFI_HOB_TYPE_RESOURCE_DESCRIPTOR and EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "bd75f69286d93bb61749db7280a5d9d544590ccd", "tree": "29e3d0ce2eb13f3e1a0c621698f6272fbe3a8090", "parents": [ "3bbd06384c89511f60d68bbc91e317b7277f772e" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 16:23:14 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "IntelFsp2WrapperPkg: Add EFI_HOB_RESOURCE_DESCRIPTOR2 support\n\nUpdate consumers of ResourceDescriptorHobs to understand both\nEFI_HOB_TYPE_RESOURCE_DESCRIPTOR and EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "3bbd06384c89511f60d68bbc91e317b7277f772e", "tree": "c60519bb2cb5adf22d343017dc79302edf108340", "parents": [ "04c24ea041900a2e1b639dd1d8a13988c18f3f55" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 16:23:14 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "IntelFsp2Pkg: Add EFI_HOB_RESOURCE_DESCRIPTOR2 support\n\nUpdate consumers of ResourceDescriptorHobs to understand both\nEFI_HOB_TYPE_RESOURCE_DESCRIPTOR and EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "04c24ea041900a2e1b639dd1d8a13988c18f3f55", "tree": "7c5f2fd275bc64730e3658da5a656f52fa4abdb9", "parents": [ "c79f61870edc4b4efe3aa33299488f72286fef60" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 16:23:14 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "EmulatorPkg: Add EFI_HOB_RESOURCE_DESCRIPTOR2 support\n\nUpdate consumers of ResourceDescriptorHobs to understand both\nEFI_HOB_TYPE_RESOURCE_DESCRIPTOR and EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "c79f61870edc4b4efe3aa33299488f72286fef60", "tree": "b90a0011f1be80ebc550306662cd23196e402826", "parents": [ "ae61e3365614c3fbedf19741fbbf6c923a3a3df5" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 16:23:14 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "ArmPlatformPkg: Add EFI_HOB_RESOURCE_DESCRIPTOR2 support\n\nUpdate consumers of ResourceDescriptorHobs to understand both\nEFI_HOB_TYPE_RESOURCE_DESCRIPTOR and EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "ae61e3365614c3fbedf19741fbbf6c923a3a3df5", "tree": "edf07307ab6f93e13ca181ad067a5239f403320b", "parents": [ "bc048b5125e5e88d869793c83da4b4e552110a20" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 16:23:14 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "MdeModulePkg/Core: Add EFI_HOB_RESOURCE_DESCRIPTOR2 support\n\nAdd IS_RESOURCE_DESCRIPTOR_HOB() and GET_RESOURCE_HOB_ATTRIBUTE()\nmacros to handle both EFI_HOB_TYPE_RESOURCE_DESCRIPTOR and\nEFI_HOB_TYPE_RESOURCE_DESCRIPTOR2 HOB types. Resource Descriptor v2\nHOBs use ResourceCapabilities instead of ResourceAttribute, so they\ncannot be accessed through the same union member.\n\nUpdate consumers of ResourceDescriptorHobs to understand both\nEFI_HOB_TYPE_RESOURCE_DESCRIPTOR and EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "bc048b5125e5e88d869793c83da4b4e552110a20", "tree": "0d351cf185f56faaddc8c059e4e20295030f0292", "parents": [ "4166e78230a1d15617c2e44c3b5a8f3d2f41c720" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 14:01:22 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "MdeModulePkg/HobPrintLib: Enable EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2\n\nEnable printing EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2 type hobs\nfrom HobPrintLib.\n\nPrintResourceDiscriptorHob was misspelled.\nWhile adding Descriptor2 support, fix up spelling of Descriptor\nin existing function.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "4166e78230a1d15617c2e44c3b5a8f3d2f41c720", "tree": "ebc6e86725a489257bfeb3f0f464aaf7b56b9705", "parents": [ "cf746f9383d22199c815cebeeb8ef6851e52d46e" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 14:01:22 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "UefiPayloadPkg: Add BuildResourceDescriptor2Hob to HobLibs\n\nAdd BuildResourceDescriptor2Hob to HobLib implementations\nas described in PI 1.10 specification.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "cf746f9383d22199c815cebeeb8ef6851e52d46e", "tree": "4c9394ca83898fc4c5208e025f1eebf83f5f5022", "parents": [ "43965090e5dc83f298cdff31b6ebb34f0f931e13" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 14:01:22 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "StandaloneMmPkg: Add BuildResourceDescriptor2Hob to HobLibs\n\nAdd BuildResourceDescriptor2Hob to HobLib implementations\nas described in PI 1.10 specification.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "43965090e5dc83f298cdff31b6ebb34f0f931e13", "tree": "5e471bad19ad82205c331ac25c9405748da5e654", "parents": [ "0da0c4663e5133b15edc69354d4b3896344d89fe" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 14:01:22 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "EmbeddedPkg: Add BuildResourceDescriptor2Hob to HobLibs\n\nAdd BuildResourceDescriptor2Hob to HobLib implementations\nas described in PI 1.10 specification.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "0da0c4663e5133b15edc69354d4b3896344d89fe", "tree": "60a29bee5a90d97eef99cf388e1c30e766c58918", "parents": [ "019ce687d948745baf9205e8c82e691764daafaf" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 14:01:22 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "ArmVirtPkg: Add BuildResourceDescriptor2Hob to HobLibs\n\nAdd BuildResourceDescriptor2Hob to HobLib implementations\nas described in PI 1.10 specification.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "019ce687d948745baf9205e8c82e691764daafaf", "tree": "4272c109a42b289169e349913133a366a56dfb36", "parents": [ "bbca4acdfc9dc64234f824ba7e28be2239279a8d" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 14:01:22 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "MdeModulePkg: Add BuildResourceDescriptor2Hob to HobLibs\n\nAdd BuildResourceDescriptor2Hob to HobLib implementations\nas described in PI 1.10 specification.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "bbca4acdfc9dc64234f824ba7e28be2239279a8d", "tree": "38f100c77cc2d6372af4bf7174c4a73ab330ce2d", "parents": [ "68794be02db2089e3ed0dc3faf8d361ee1d2bd47" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 14:01:22 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "MdePkg: Add BuildResourceDescriptor2Hob to HobLibs\n\nAdd BuildResourceDescriptor2Hob to HobLib implementations\nas described in PI 1.10 specification.\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "68794be02db2089e3ed0dc3faf8d361ee1d2bd47", "tree": "64e5a469e13a2d6c1783fbec50a56f9ffb3aba18", "parents": [ "6a3fb7e0111bbd564b4244a9cbd458995fde684c" ], "author": { "name": "Aaron Pop", "email": "aaronpop@microsoft.com", "time": "Tue Jul 28 14:01:22 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 23:28:02 2026 +0000" }, "message": "MdePkg: Add Resource Descriptor Hob 2 defined in PI 1.10\n\nDefine EFI_HOB_TYPE_RESOURCE_DESCRIPTOR2 and\nEFI_HOB_TYPE_RESOURCE_DESCRIPTOR2\n\nSigned-off-by: Aaron Pop \u003caaronpop@microsoft.com\u003e\n" }, { "commit": "6a3fb7e0111bbd564b4244a9cbd458995fde684c", "tree": "7b1993851ce4edc070c20ac9bec48b0c7a934712", "parents": [ "c41279f7b01f176b8c924f563cd6ae833f176be2" ], "author": { "name": "Kajal Agarwal", "email": "kajal.agarwal@arm.com", "time": "Wed Oct 21 14:50:25 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 18:23:18 2026 +0000" }, "message": "ArmPkg/ArmPsciMpServicesDxe: Validate processor index before access\n\nEnableDisableAP() reads the target processor\u0027s status before checking\nwhether ProcessorNumber is within the per-processor data array. An invalid\nindex can therefore cause an out-of-bounds read instead of returning\nEFI_NOT_FOUND.\n\nMove the per-processor data access after the existing caller, processor\nindex and BSP checks. Read StatusFlag through the validated CpuData pointer\nto preserve the existing behavior for valid APs.\n\nSigned-off-by: Kajal Agarwal \u003ckajal.agarwal@arm.com\u003e\n" }, { "commit": "c41279f7b01f176b8c924f563cd6ae833f176be2", "tree": "b9546a0eff8887c5cd2f699e87bd1bc458565087", "parents": [ "b117e495e38bba3709b1baa573769200c50d1ae2" ], "author": { "name": "Xiang W", "email": "wangxiang@iscas.ac.cn", "time": "Thu Oct 15 16:15:20 2026 +0800" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 14:20:20 2026 +0000" }, "message": "OvmfPkg/RiscVVirt: Use FMP Capsule as cab payload for fwupd\n\nThe GenerateCapsule tool produces a properly formatted FMP Capsule,\nbut the original script placed the raw Firmware Volume into the\n.cab archive. fwupd expects the payload to already be in EFI Capsule\nformat when using the org.uefi.capsule protocol, and incorrectly\nre-packages the raw FD, resulting in a capsule that the firmware\nrejects.\n\nCopy the generated FMP Capsule into the .cab instead of the raw\npayload so that fwupd can use it directly without further\nmodification.\n\nSigned-off-by: Xiang W \u003cwangxiang@iscas.ac.cn\u003e\n" }, { "commit": "b117e495e38bba3709b1baa573769200c50d1ae2", "tree": "5a1ef5c7ce16ceac003e17d9bed0fad017ffb76c", "parents": [ "e9cd85d15812506a7890d7da9955f699852c3c48" ], "author": { "name": "Kajal Agarwal", "email": "kajal.agarwal@arm.com", "time": "Wed Oct 21 17:00:43 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 08:59:56 2026 +0000" }, "message": "DynamicTablesPkg: Add Virtio MMIO Device SSDT generator\n\nGenerate an SSDT for each Virtio MMIO device under \\_SB, assigning\nnames and UIDs from the Configuration Manager array indices. Describe\nMMIO ranges with Memory32Fixed or QWordMemory and emit _CCA from the\nCacheCoherent field.\n\nDecode Extended Interrupt flags for resource usage, trigger mode,\npolarity, and sharing. Validate resources and reject unsupported wake\nflags. Release partially generated tables on failure and transfer\nownership only after all device tables have been built.\n\nAdd the object parser and register the generator through the extended\ntable generation interface and Dynamic Tables build integration.\n\nSigned-off-by: Kajal Agarwal \u003ckajal.agarwal@arm.com\u003e\n" }, { "commit": "e9cd85d15812506a7890d7da9955f699852c3c48", "tree": "28b25ddbd90b41830e7b51cca6478db9944da261", "parents": [ "96823569903bf6914dbaf120802c16173e85f4f1" ], "author": { "name": "Kajal Agarwal", "email": "kajal.agarwal@arm.com", "time": "Wed Oct 21 17:00:43 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 08:59:56 2026 +0000" }, "message": "DynamicTablesPkg: Add Virtio MMIO Configuration Manager object\n\nAdd an architecture-common object describing the MMIO base address,\nregister range length, interrupt resource, and DMA cache coherency of\nVirtio MMIO devices.\n\nDefine an architecture-common Extended Interrupt alias with the ACPI\nresource descriptor flag semantics, including interrupt sharing.\n\nSigned-off-by: Kajal Agarwal \u003ckajal.agarwal@arm.com\u003e\n" }, { "commit": "96823569903bf6914dbaf120802c16173e85f4f1", "tree": "fec444b51f1d3fba1a9db0acad9aa04d65b2273a", "parents": [ "ffddaae78a0fa0e6597efce54f42374d81c0ddc5" ], "author": { "name": "Qihang Gao", "email": "gaoqihang@loongson.cn", "time": "Fri Oct 09 15:46:00 2026 +0800" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 05:49:25 2026 +0000" }, "message": "CryptoPkg: Remove duplicate file name in INF file\n\nIn BaseCryptLibMbedTls/SecCryptLib.inf file, Pk/CryptDhNull.c appears twice\nin [Sources] section, so remove the duplicate one.\n\nSigned-off-by: Qihang Gao \u003cgaoqihang@loongson.cn\u003e\n" }, { "commit": "ffddaae78a0fa0e6597efce54f42374d81c0ddc5", "tree": "6c2d6a44db3eff3460abd44580400d580b73f793", "parents": [ "ef03ae623f254e4914e99df21220cb7a00c68f08" ], "author": { "name": "Qihang Gao", "email": "gaoqihang@loongson.cn", "time": "Fri Oct 09 15:43:02 2026 +0800" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 05:49:25 2026 +0000" }, "message": "RedfishPkg: Remove duplicate protocol in INF file\n\nIn RedfishConfigHandlerDriver.inf file, gEdkIIRedfishCredentialProtocolGuid\nappears twice in [Procotols] section, so remove the duplicate one.\n\nSigned-off-by: Qihang Gao \u003cgaoqihang@loongson.cn\u003e\n" }, { "commit": "ef03ae623f254e4914e99df21220cb7a00c68f08", "tree": "e07bebe64d7781728569fb9869b688b758bf49b0", "parents": [ "68360d273c9788e75b9aca13f839563a5a6cb498" ], "author": { "name": "Kun Qin", "email": "kuqin@microsoft.com", "time": "Wed Sep 16 21:08:56 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 01:36:43 2026 +0000" }, "message": "BaseTools: FMMT: Add replacement regression tests\n\nThis change adds a few unit test cases to validate the FMMT tool.\n\nSigned-off-by: Kun Qin \u003ckun.qin@microsoft.com\u003e\n" }, { "commit": "68360d273c9788e75b9aca13f839563a5a6cb498", "tree": "d6d9f8e21653b3eabca9381028b2d9c771e39288", "parents": [ "26d6e1f5f26a7456f63011a3107d0ca577eed489" ], "author": { "name": "Kun Qin", "email": "kuqin@microsoft.com", "time": "Wed Sep 16 21:20:32 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 01:36:43 2026 +0000" }, "message": "BaseTools: FvHandler: Safely update FV free-space nodes\n\nCurrent FV resize routine assumes that the final child is always a free-\nspace node. However, when no such node exists, these routines can remove\nor overwrite valid trailing FFS nodes. One replacement path also inserts\nthe free-space byte count instead of the constructed tree node.\n\nThis change centralizes free-space node creation, resizing, and removal,\nusing the helper for direct replacements and recursive parent resizing.\n\nSigned-off-by: Kun Qin \u003ckun.qin@microsoft.com\u003e\n" }, { "commit": "26d6e1f5f26a7456f63011a3107d0ca577eed489", "tree": "3dde158df324e568996e39590353785822aa28cb", "parents": [ "52fa6fe8996f4b11881757b9300ee4ec584432ba" ], "author": { "name": "Kun Qin", "email": "kuqin@microsoft.com", "time": "Wed Sep 16 21:20:21 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Thu Oct 22 01:36:43 2026 +0000" }, "message": "BaseTools: FMMTOperation: Use distinct FFS trees for repeated replacement\n\nCurrent `ReplaceFfs` reuses the parsed replacement FFS tree for every\nmatching target. However, `FvHandler` mutates the tree while attaching it\nto a target, causing later replacements inherit state from an earlier\nreplaced instance and hang the process.\n\nThis change uses deep-copy of the replacement tree for each target to\navoid the failure case.\n\nSigned-off-by: Kun Qin \u003ckun.qin@microsoft.com\u003e\n" }, { "commit": "52fa6fe8996f4b11881757b9300ee4ec584432ba", "tree": "d8a1d3c5fed7de0e59b1b0f939ccc122c7203d6a", "parents": [ "bf25b6e4017b120decd2bb97384a8f319ba4303e" ], "author": { "name": "Michael D Kinney", "email": "michael.d.kinney@intel.com", "time": "Fri Oct 16 14:45:07 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 21:53:42 2026 +0000" }, "message": "MdeModulePkg/UsbBusDxe: Free BOS buffer on read failure\n\nUsbGetDevBosDesc() allocates a buffer for the initial BOS descriptor\nrequest. If that request fails, the success-only cleanup is skipped and\nthe function returns without freeing the buffer. Repeated enumeration\nattempts can leak one allocation per failure.\n\nFree the initial buffer before returning the transfer error.\n\nThe leaking retrieval helper was introduced by PR #12714:\nhttps://github.com/tianocore/edk2/pull/12714\n\nSigned-off-by: Michael D Kinney \u003cmichael.d.kinney@intel.com\u003e\n" }, { "commit": "bf25b6e4017b120decd2bb97384a8f319ba4303e", "tree": "284b1ce311b57c5e769404351ec00332b543894a", "parents": [ "7250fc9e3941e2899ab72ee7f30267c78615c7d3" ], "author": { "name": "Michael D Kinney", "email": "michael.d.kinney@intel.com", "time": "Fri Oct 16 14:45:03 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 21:53:42 2026 +0000" }, "message": "MdeModulePkg/UsbBusDxe: Bound BOS capability parsing\n\nUsbIsSSDevice() trusts device-reported NumDeviceCaps and capability\nLength fields without bounding reads to the BOS buffer. Malformed values\ncan cause out-of-bounds reads and an exception during device enumeration.\n\nValidate the BOS header and total length. Before reading each capability,\ncheck that its header and declared length fit in the remaining bytes.\nReject malformed or truncated descriptors and recognize SuperSpeed only\nafter validating the complete capability list.\n\nThe unbounded parser was introduced by PR #12714:\nhttps://github.com/tianocore/edk2/pull/12714\n\nSigned-off-by: Michael D Kinney \u003cmichael.d.kinney@intel.com\u003e\n" }, { "commit": "7250fc9e3941e2899ab72ee7f30267c78615c7d3", "tree": "6d7ef4471c4f80b1f5029b069ee7123c4443bc0d", "parents": [ "19bca85619073be97bf8c29f4511e6a78c7ed388" ], "author": { "name": "Michael D Kinney", "email": "michael.d.kinney@intel.com", "time": "Fri Oct 16 14:44:42 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 21:53:42 2026 +0000" }, "message": "MdeModulePkg/UsbBusDxe: Guard descriptor on SS retry\n\nUsbEnumerateNewDev() frees DevDesc before resetting the port for an\nenumeration retry. UsbRootHubResetPort() scans that device during the\nreset and previously dereferenced DevDesc without checking it.\n\nFor a SuperSpeed-capable device running below SuperSpeed, IsSSDev and\nSpeed still satisfy the scan\u0027s preceding conditions after DevDesc is\ncleared. The DeviceClass access can therefore cause a null-pointer\nexception. Add descriptor checks before those dereferences and clear\nIsSSDev when freeing the descriptor.\n\nThe unsafe reset dereference was introduced by PR #12714:\nhttps://github.com/tianocore/edk2/pull/12714\n\nSigned-off-by: Michael D Kinney \u003cmichael.d.kinney@intel.com\u003e\n" }, { "commit": "19bca85619073be97bf8c29f4511e6a78c7ed388", "tree": "ef52310cfbc8a226cc68361fedb98fdfb007f59c", "parents": [ "f2b519f83762a492b5a13f5477b9d76edfec5130" ], "author": { "name": "Michael D Kinney", "email": "michael.d.kinney@intel.com", "time": "Fri Oct 16 15:41:02 2026 -0700" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 21:53:42 2026 +0000" }, "message": "MdeModulePkg/UsbBusDxe: Add GoogleTest coverage\n\nTest valid SuperSpeed recognition and reject capabilities extending beyond\nthe BOS total length or supplied buffer. Verify failed initial BOS reads\nfree their buffers and root-hub reset succeeds after descriptor cleanup.\n\nSigned-off-by: Michael D Kinney \u003cmichael.d.kinney@intel.com\u003e\n" }, { "commit": "f2b519f83762a492b5a13f5477b9d76edfec5130", "tree": "203579209f44d622afc576f1d8a7b722d9b29ad2", "parents": [ "51c6b21ba3f139420de0082de9135fec4683f1c1" ], "author": { "name": "Felix Moessbauer", "email": "felix.moessbauer@siemens.com", "time": "Wed Oct 21 12:16:07 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 14:24:08 2026 +0000" }, "message": "ArmVirtPkg: Include TimestampDxe\n\nThe EFI Timestamp Protocol is a standard UEFI service, but no ArmVirt\nplatform produced it. Bootloaders that rely on it to implement the\nsystemd boot protocol (e.g. efibootguard and systemd-boot) have to fall\nback to manual reading of the time counters if not implemented.\n\nMdeModulePkg already provides a generic producer that sits on TimerLib,\nwhich every ArmVirt platform resolves, so no platform-specific support\ncode is needed to offer the protocol.\n\nThis mirrors the change already done for OvmfPkg, which for historical\nreasons does not cover the ARM virtual machine platforms.\n\nSigned-off-by: Felix Moessbauer \u003cfelix.moessbauer@siemens.com\u003e\n" }, { "commit": "51c6b21ba3f139420de0082de9135fec4683f1c1", "tree": "2ce0ce7a73076c8c308f841141d537580c78415a", "parents": [ "ce00a55779e8ad9e0e4dd4f5f260b31436c3b83d" ], "author": { "name": "Felix Moessbauer", "email": "felix.moessbauer@siemens.com", "time": "Tue Oct 20 14:29:35 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 14:24:08 2026 +0000" }, "message": "OvmfPkg: Include TimestampDxe on all platforms\n\nThe EFI Timestamp Protocol is a standard UEFI service, but no OVMF\nplatform produced it. Bootloaders that rely on it to implement the\nsystemd boot protocol (e.g. efibootguard and systemd-boot) have to fall\nback to manual reading of the time counters if not implemented.\n\nMdeModulePkg already provides a generic producer that sits on TimerLib,\nwhich every OVMF platform resolves, so no platform-specific support\ncode is needed to offer the protocol.\n\nInclude it on all OVMF platforms, now that TimestampDxe no longer\nrestricts itself to x86.\n\nSigned-off-by: Felix Moessbauer \u003cfelix.moessbauer@siemens.com\u003e\n" }, { "commit": "ce00a55779e8ad9e0e4dd4f5f260b31436c3b83d", "tree": "38bac6a1f501cc1fdf6ceb95314040a65ac79839", "parents": [ "48f7e470ebbc235ddec904311d42ced562d304ae" ], "author": { "name": "Felix Moessbauer", "email": "felix.moessbauer@siemens.com", "time": "Tue Oct 20 14:29:29 2026 +0200" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 14:24:08 2026 +0000" }, "message": "MdeModulePkg/TimestampDxe: Mark all architectures as valid\n\nTimestampDxe only declares IA32, X64 and EBC as valid architectures.\nThis restriction is a leftover from when the driver was introduced and\nno longer reflects reality: the driver is plain C on top of TimerLib\nand the protocol it produces is not architecture specific, so it builds\nand works on every architecture edk2 supports.\n\nUse ANY instead of enumerating architectures, so the comment cannot go\nout of date again when further architectures are added.\n\nSigned-off-by: Felix Moessbauer \u003cfelix.moessbauer@siemens.com\u003e\n" }, { "commit": "48f7e470ebbc235ddec904311d42ced562d304ae", "tree": "be6de5bb98e85124cd3e6a8551a5e4060cb56d54", "parents": [ "062dd08efded1cf905e06da13732acf77bc1a0f8" ], "author": { "name": "Nick Betteridge", "email": "lists.nick.betteridge@gmail.com", "time": "Mon Oct 19 09:14:58 2026 +0100" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 13:45:44 2026 +0000" }, "message": "OvmfPkg/RiscVVirt/PlatformPei: Do not hide side effects in ASSERTs\n\nFindInstallPeiMemory() calls PeiServicesInstallPeiMemory() and\nSetupTPMResources() calls PcdSet64S (PcdTpmBaseAddress, ...) only as\nthe argument of ASSERT_EFI_ERROR. With MDEPKG_NDEBUG (RELEASE builds)\nthe macro expands to nothing, so neither call is made:\n\n- with RISCVVIRT_PEI_BOOTING, PEI memory is never installed and PeiCore\n never leaves temporary RAM (silent hang, \"DXE IPL PPI not found\" in a\n DEBUG build with asserts disabled);\n- with TPM2_ENABLE, PcdTpmBaseAddress stays 0 and Tcg2Pei faults on\n MmioRead8 (0).\n\nMake both calls unconditionally and assert on the returned status.\n\nSigned-off-by: Nick Betteridge \u003clists.nick.betteridge@gmail.com\u003e\n" }, { "commit": "062dd08efded1cf905e06da13732acf77bc1a0f8", "tree": "b10c4c6032291ae486e3785b01299fbaa9d9ec91", "parents": [ "85c3a5393714d2810dcd53a20a37541abb2b98b8" ], "author": { "name": "Amrathesh", "email": "amrathesh@arm.com", "time": "Mon Oct 05 06:11:27 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 13:04:49 2026 +0000" }, "message": "MdePkg: Add AEST 2.0 EAC2 ACPI definitions\n\nAdd revision specific constants and packed table, node, interface, and\ninterrupt definitions from DEN0085 2.0 EAC2 to ArmErrorSourceTable.h.\n\nRef: https://support.arm.com/documentation/den0085/0202/\n\nRepresent the variable length interface with fixed prefix and\nsuffix structures around its variable three bitmap arrays.\n\nSigned-off-by: Amrathesh \u003camrathesh@arm.com\u003e\n" }, { "commit": "85c3a5393714d2810dcd53a20a37541abb2b98b8", "tree": "f40d6b3c14c9785dc93b56cbdaf851d09a2b957b", "parents": [ "b51b8dfbb06ff5a9c6b7fed4e443dd14f89403e9" ], "author": { "name": "Kevin Loughlin", "email": "kevinloughlin@google.com", "time": "Fri Oct 16 19:54:04 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 09:48:29 2026 +0000" }, "message": "OvmfPkg/PlatformBootManagerLib: Skip 2nd console init without deferred ROMs\n\nIn PlatformBootManagerBeforeConsole(), PlatformInitializeConsole() is\ncalled a second time unconditionally after\nEfiBootManagerDispatchDeferredImages() to enable GOP consoles on\npassthrough GPUs whose Option ROMs were deferred until EndOfDxe.\n\nWhen no deferred images are loaded\n(EfiBootManagerDispatchDeferredImages() returns EFI_NOT_FOUND), this\nsecond call re-runs VisitAllPciInstances() to re-read the 64-byte PCI\nconfiguration header and re-write the PCI command register of every PCI\ndevice in the VM for no effect (which is particularly expensive under\nTDX/SEV-SNP where PCI configuration space accesses trap).\n\nGuard the second PlatformInitializeConsole() call on !EFI_ERROR (Status)\nfrom EfiBootManagerDispatchDeferredImages().\n\nSuggested-by: Ravi Chandra Sadineni \u003cravisadineni@google.com\u003e\nSigned-off-by: Kevin Loughlin \u003ckevinloughlin@google.com\u003e\n" }, { "commit": "b51b8dfbb06ff5a9c6b7fed4e443dd14f89403e9", "tree": "8913933d908545500ba9b0be90703ec0172382e1", "parents": [ "705de24e39a093ceb57fd7372e697e73380e57fe" ], "author": { "name": "Kevin Loughlin", "email": "kevinloughlin@google.com", "time": "Fri Oct 16 19:54:04 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 09:48:29 2026 +0000" }, "message": "OvmfPkg/PlatformBootManagerLib: Guard Boot Manager Menu hotkey registration\n\nIn PlatformRegisterOptionsAndKeys() (BdsPlatform.c),\nEfiBootManagerGetBootManagerMenu(\u0026BootOption) returns EFI_NOT_FOUND when\nUiApp.inf is omitted from the firmware volume (which\nPlatformRegisterFvBootOption() already tolerates via FileIsInFv(), and\nPlatformBootManagerUnableToBoot() in BdsPlatform.c and BdsEntry.c also\nhandle). Previously, PlatformRegisterOptionsAndKeys() asserted\nASSERT_EFI_ERROR(Status) and unconditionally called\nEfiBootManagerAddKeyOptionVariable() with an uninitialized\nBootOption.OptionNumber.\n\nReplace ASSERT_EFI_ERROR(Status) with if (!EFI_ERROR (Status)) so that\nF2/Esc hotkey registration is skipped cleanly when UiApp is absent,\nwhile preserving identical behavior when UiApp is present.\n\nSigned-off-by: Kevin Loughlin \u003ckevinloughlin@google.com\u003e\n" }, { "commit": "705de24e39a093ceb57fd7372e697e73380e57fe", "tree": "34dae9894c6ef6035a3412a7c82523e25fb4fe28", "parents": [ "85854ac470a7e089758aee6fe0095c2c1881af29" ], "author": { "name": "haword", "email": "zhenghaowei@loongson.cn", "time": "Fri Oct 16 10:09:03 2026 +0800" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 04:58:42 2026 +0000" }, "message": "MdeModulePkg/UsbMassStorageDxe: Report blank optical media as media absent\n\nA blank (unwritten) optical disc reports a zero capacity through READ\nCAPACITY (LastBlock \u003d\u003d 0). The driver currently exposes such a device\nwith BlockSize 2048 and LastBlock 0, so upper layers such as PartitionDxe\nand the BDS removable-media boot probe keep reading LBA 0. The drive\nrejects the read with \"Illegal Request / LBA out of range\" (sense 5/21/0)\nand UsbMassReadBlocks enters its reset recovery loop. So each failed probe\ncan block for tens of seconds and boot appears to hang.\n\nTreat an optical device with zero capacity as media absent so that the\nmedia is skipped instead of being probed.\n\nSigned-off-by: Haword \u003czhenghaowei@loongson.cn\u003e\n" }, { "commit": "85854ac470a7e089758aee6fe0095c2c1881af29", "tree": "6825e862eefb0f8ef7f9e7c2a605ee211e81bc8e", "parents": [ "a34a0ef95496fe4d192b490bc40c734194ebf4c6" ], "author": { "name": "Bosco Chen (AMI US Holdings Inc)", "email": "v-chenbosco@microsoft.com", "time": "Fri Oct 16 10:53:25 2026 +0800" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Wed Oct 21 00:41:20 2026 +0000" }, "message": "BaseTools/Plugin/HostBasedUnitTestRunner: Skip empty architectures\n\nThe host unit test runner returns success when an architecture has no\ntest executables. This skips later architectures and can hide earlier\ntest or coverage failures.\n\nContinue to the next architecture instead and include the architecture\nin the warning. Preserve the accumulated failure count.\n\nSigned-off-by: Bosco Chen (AMI US Holdings Inc) \u003cv-chenbosco@microsoft.com\u003e\n" }, { "commit": "a34a0ef95496fe4d192b490bc40c734194ebf4c6", "tree": "52f2285639480196f4299c16b94a1aa692fe1d5c", "parents": [ "75b106917296fe7b82d2d14700c90197b905e2a6" ], "author": { "name": "Wolf Hess", "email": "hailrake99@yandex.ru", "time": "Tue Oct 20 18:35:02 2026 +0300" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 20 22:34:10 2026 +0000" }, "message": "MdeModulePkg: Fix typo in DriverHealthManagerStrings.uni\n\nCorrect \"#lauguage\" to \"#language\" in the fr-FR entry of STR_NULL.\n\nSigned-off-by: Wolf Hess \u003chailrake99@yandex.ru\u003e\n" }, { "commit": "75b106917296fe7b82d2d14700c90197b905e2a6", "tree": "da1daa8c3018c46e2293b210a014086276a346aa", "parents": [ "4208d71daba23f014b78b73d1b88c53682f6d247" ], "author": { "name": "Kajal Agarwal", "email": "kajal.agarwal@arm.com", "time": "Tue Sep 15 14:30:41 2026 +0000" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 20 16:59:40 2026 +0000" }, "message": "ArmPkg/FmpDevicePsaFwuLib: Prevent size underflow\n\nThe available request and response payload sizes are calculated by\nsubtracting the protocol header and fixed data sizes from an unsigned\nmaximum buffer size. An undersized configured buffer can cause these\ncalculations to underflow and defeat later bounds checks.\n\nUse a shared switch-case macro to assert at build time that the configured\nMM shared buffer can hold the parameter header and each fixed request or\nresponse structure before returning its data size. Reject undersized\nbuffer configurations at compilation and retain the existing available\npayload size calculations.\n\nSet the PcdMmBufferSize package default to 0x10000 in ArmPkg.dec so\nbuilds without a platform override satisfy the library assertions.\n\nTest: AARCH64 DEBUG_GCC library build passes using the DEC default without\n a command-line PCD override.\n PcdMmBufferSize\u003d1 fails all ten static assertions as expected.\n\nSigned-off-by: Kajal Agarwal \u003ckajal.agarwal@arm.com\u003e\n" }, { "commit": "4208d71daba23f014b78b73d1b88c53682f6d247", "tree": "7cd46af8969855d4826e351ad2a75d8f1da4c1d4", "parents": [ "8ac2c6c8170e369c377f61fb14ae891772403fcf" ], "author": { "name": "abuthahirm", "email": "abuthahirm@ami.com", "time": "Wed Aug 05 17:11:44 2026 +0530" }, "committer": { "name": "mergify[bot]", "email": "37929162+mergify[bot]@users.noreply.github.com", "time": "Tue Oct 20 08:35:47 2026 +0000" }, "message": "NetworkPkg/DxeNetLib: Set *MediaState to EFI_NO_MEDIA if no SNP handle\n\nIn NetLibDetectMediaWaitTimeout(), *MediaState is pre-initialized to\nEFI_SUCCESS before the SNP handle lookup. When no SNP handle is found,\nthe function returns EFI_INVALID_PARAMETER but leaves *MediaState as\nEFI_SUCCESS. Callers such as PxeCheckMediaState() that rely solely on\n*MediaState (ignoring the return value) incorrectly treat a system with\nno network device as having media connected.\n\nFix this by setting *MediaState \u003d EFI_NO_MEDIA inside the\n(SnpHandle \u003d\u003d NULL) branch before returning EFI_INVALID_PARAMETER.\nUpdate the @retval comment to document this behavior.\n\nCc: Saloni Kasbekar \u003csaloni.kasbekar@intel.com\u003e\nCc: Zachary Clark-williams \u003czachary.clark-williams@intel.com\u003e\nSigned-off-by: Abuthahir M \u003cabuthahirm@ami.com\u003e\n" } ], "next": "8ac2c6c8170e369c377f61fb14ae891772403fcf" }