rpm/ovmf
SHA256
1
0
Fork 0
forked from pool/ovmf
Code Pull Requests Activity

Accepting request 832682 from home:gary_lin:branches:Virtualization

Browse Source 
Update to edk2-stable202008

OBS-URL: https://build.opensuse.org/request/show/832682
OBS-URL: https://build.opensuse.org/package/show/Virtualization/ovmf?expand=0&rev=169
This commit is contained in:
Gary Ching-Pang Lin 2020-09-07 07:34:48 +00:00 committed by Git OBS Bridge
parent c02bee212e
commit 28900ff5c1
11 changed files with 111 additions and 62 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
edk2-stable202005.tar.gz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:373c3eff3497316a48fcf4be8dcee227431cbce86dcd80a004950e992f0297e2
size 12721407

3
edk2-stable202008.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:b399cd11c5901035d5f0e920cff3fa67ce7c1277bddae9ec73ef4e455c11d332
size 13172590

3
openssl-1.1.1d.tar.gz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:1e3a91bc1f9dfce01af26026f856e064eab4c8ee0a8f457b5ae30b40b8b711f2
size 8845861

11
openssl-1.1.1d.tar.gz.asc
View File

@ -1,11 +0,0 @@
-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEEhlersmDwVrHlGQg52cTSbQ5gRJEFAl13oWoACgkQ2cTSbQ5g
RJH0Agf+IekQXtSPsrn/5RMgXFGSyK+S1BpFhyoJRvDocVZAxwgvd4F1fcYkFVXH
5+Q6o6s6tIDb+VkuIajcDxTQvrFoXKWMbsFsu3NBAan5R0OlYINRYtXULg0ZqQv4
zxclCSLQTpuMyptuGGbg0/8+9IAhGFk2XSA5EEI+SC6lswRQiT7p6dbULj4CvH3m
7mqovojAAaEJpgfG8b+L+QBJ4XId99uC6tiLM1tTMCsn1ErLsTd366fzEpC1w12a
V/gWQ1mVs+bmSRySPx8mO4CpHfhAI+sZrSsWG+UXP9Guf9YKHFLJDiSrX7EmvszR
B+/LvZqce4iCnwCUoIuYhxM6EybDdQ==
=v5CI
-----END PGP SIGNATURE-----

3
openssl-1.1.1g.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:ddb04774f1e32f0c49751e21b67216ac87852ceb056b75209af2443400636d46
size 9801502

11
openssl-1.1.1g.tar.gz.asc Normal file
View File

@ -0,0 +1,11 @@
-----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEEhlersmDwVrHlGQg52cTSbQ5gRJEFAl6e5ZUACgkQ2cTSbQ5g
RJHnTQf+KGRLb4BacpX2zWwjEHy/F4ylVcQXV0e5tVcLhdoviUxShb6RQ05uQ9XQ
Jmm94vFoquPGwhkH4HcT8NE5vYROsGqbgyy8i4D1iq5sJ/vFc1yU6b8Xxpnljk8N
mxjz69uHftPbJknNhpNzMbRn+UzZZpK7sU4kgr0u0H8FBuX7m61hFLRqJWNbsx5R
E3ekj06iPvzE+mxxWOOtJx412Ury69atfCP+SzUGLLYvaIm/htInR8uI7uEVh2hu
Aj1il4BvZX/r11PgSlzbwl9FZorKc+S6vrxnPek8+QKCRluvFe0IhcerLoIPk4Ok
gmM3j8ng49KW3xVL6IZIMjkfZdTuTw==
=CJa/
-----END PGP SIGNATURE-----

30
openssl-fix-syntax-error.patch
View File

@ -1,30 +0,0 @@
From c3656cc594daac8167721dde7220f0e59ae146fc Mon Sep 17 00:00:00 2001
From: "Dr. Matthias St. Pierre" <Matthias.St.Pierre@ncp-e.com>
Date: Wed, 11 Sep 2019 10:25:43 +0200
Subject: [PATCH] crypto/threads_none.c: fix syntax error in
openssl_get_fork_id()
Fixes #9858
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/9860)
---
crypto/threads_none.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/crypto/threads_none.c b/crypto/threads_none.c
index aabf0e0dc0..aaaaae872a 100644
--- a/crypto/threads_none.c
+++ b/crypto/threads_none.c
@@ -143,7 +143,7 @@ int openssl_get_fork_id(void)
# if defined(OPENSSL_SYS_UNIX)
return getpid();
# else
- return return 0;
+ return 0;
# endif
}
#endif
--
2.24.0

10
ovmf-disable-ia32-firmware-piepic.patch
View File

@ -1,10 +1,10 @@
Index: edk2-edk2-stable201905/BaseTools/Conf/tools_def.template
Index: edk2-edk2-stable202008/BaseTools/Conf/tools_def.template
===================================================================
--- edk2-edk2-stable201905.orig/BaseTools/Conf/tools_def.template
+++ edk2-edk2-stable201905/BaseTools/Conf/tools_def.template
@@ -1738,7 +1738,7 @@ DEFINE GCC_AARCH64_RC_FLAGS = -I
--- edk2-edk2-stable202008.orig/BaseTools/Conf/tools_def.template
+++ edk2-edk2-stable202008/BaseTools/Conf/tools_def.template
@@ -1954,7 +1954,7 @@ DEFINE GCC_DEPS_FLAGS = -MM
DEFINE GCC48_ALL_CC_FLAGS = -g -fshort-wchar -fno-builtin -fno-strict-aliasing -Wall -Werror -Wno-array-bounds -ffunction-sections -fdata-sections -include AutoGen.h -fno-common -DSTRING_ARRAY_NAME=$(BASE_NAME)Strings
DEFINE GCC48_ALL_CC_FLAGS = DEF(GCC_ALL_CC_FLAGS) -ffunction-sections -fdata-sections -DSTRING_ARRAY_NAME=$(BASE_NAME)Strings
DEFINE GCC48_IA32_X64_DLINK_COMMON = -nostdlib -Wl,-n,-q,--gc-sections -z common-page-size=0x20
-DEFINE GCC48_IA32_CC_FLAGS = DEF(GCC48_ALL_CC_FLAGS) -m32 -march=i586 -malign-double -fno-stack-protector -D EFI32 -fno-asynchronous-unwind-tables -Wno-address
+DEFINE GCC48_IA32_CC_FLAGS = DEF(GCC48_ALL_CC_FLAGS) -m32 -march=i586 -malign-double -fno-stack-protector -D EFI32 -fno-asynchronous-unwind-tables -Wno-address -fno-pic -fno-pie

12
ovmf-pie.patch
View File

@ -1,13 +1,13 @@
Index: edk2-edk2-stable201905/BaseTools/Source/C/Makefiles/header.makefile
Index: edk2-edk2-stable202008/BaseTools/Source/C/Makefiles/header.makefile
===================================================================
--- edk2-edk2-stable201905.orig/BaseTools/Source/C/Makefiles/header.makefile
+++ edk2-edk2-stable201905/BaseTools/Source/C/Makefiles/header.makefile
@@ -75,7 +75,7 @@ else
--- edk2-edk2-stable202008.orig/BaseTools/Source/C/Makefiles/header.makefile
+++ edk2-edk2-stable202008/BaseTools/Source/C/Makefiles/header.makefile
@@ -88,7 +88,7 @@ else
BUILD_CFLAGS = -MD -fshort-wchar -fno-strict-aliasing -fwrapv \
-fno-delete-null-pointer-checks -Wall -Werror \
-Wno-deprecated-declarations -Wno-stringop-truncation -Wno-restrict \
--Wno-unused-result -nostdlib -g
+-Wno-unused-result -nostdlib -g -fPIE
endif
BUILD_LFLAGS =
BUILD_CXXFLAGS = -Wno-unused-result
endif
ifeq ($(CXX), llvm)

81
ovmf.changes
View File

@ -1,3 +1,84 @@
-------------------------------------------------------------------
Mon Sep 7 03:55:46 UTC 2020 - Gary Ching-Pang Lin <glin@suse.com>
- Update to edk2-stable202008
+ MdeModulePkg/Library: add PEIM and SEC module type to
TpmMeasurementLibNull
+ SecurityPkg/DxeImageVerificationLib: catch alignment overflow
(CVE-2019-14562) (bsc#1175476)
+ OvmfPkg/CpuHotplugSmm: fix CPU hotplug race before and after
SMI broadcast
+ SecurityPkg/Tcg2: handle PRE HASH and LOG ONLY
+ MdePkg/Include: Add missing definition of SMBIOS type 42h in
SmBios.h
+ MdePkg: UefiFileHandleLib: fix buffer overrun in
FileHandleReadLine()
+ OvmfPkg: Add SEV-ES support
+ MdeModulePkg/PartitionDxe: Fix the incorrect LBA size in child
hander
+ MdeModulePkg/PartitionDxe: Revert changes for the special MBR
+ MdeModulePkg/PartitionDxe: Put the UDF check ahead of MBR
+ ShellPkg: smbiosview - Change some type 17 field values format
+ CryptoPkg/OpensslLib: Upgrade OpenSSL to 1.1.1g
+ MdeModulePkg: Upon BootOption failure, Destroy RamDisk memory
before RSC.
+ OvmfPkg/LsiScsiDxe: Add support for LSI 53C895A
+ MdeModulePkg/DisplayEngine: Add Debug message to show mismatch
menu info
+ Add New Memory Attributes
+ MdeModulePkg/PartitionDxe: Add already start check for child
hanldes
+ MdeModulePkg/PartitionDxe: Skip the MBR that add for CD-ROM
+ MdeModulePkg/PartitionDxe: Correct the MBR last block value
+ MdeModulePkg/Variable/RuntimeDxe: Fix return status from
Reclaim()
+ SecurityPkg/Tcg2Pei: Add missing PCRIndex in FvBlob event.
+ SecurityPkg/Tcg2Dxe: Add PcdTcgPfpMeasurementRevision in
SpecId event.
+ CryptoPkg/BaseCryptLib: Add MARCO to disable the deprecated
SHA1 and MD5
+ ArmVirtPkg/NorFlashQemuLib: disable NOR flash DT nodes upon
discovery
+ UefiCpuPkg/SecCore: Add pre-memory AP vector
+ OvmfPkg: End timer interrupt later to avoid stack overflow
under load
+ ArmPkg/PlatformBootManagerLib: regenerate boot options on
boot failure
+ MdeModulePkg/StatusCodeHandler: do not output \n\r for string
data
+ Revert "OvmfPkg: use generic QEMU image loader for secure boot
enabled ..."
+ ArmVirtPkg/PrePi: use standard PeCoff routines for
self-relocation
+ ArmVirtPkg: add FDF rule for self-relocating PrePi
+ ArmPkg/ArmExceptionLib: use static buffer for sp_el0
+ MdeModulePkg/SetupBrowserDxe: Do not reconnect driver with
form-update
+ OvmfPkg/X86QemuLoadImageLib: handle EFI_ACCESS_DENIED from
LoadImage()
+ OvmfPkg/Tcg2ConfigPei: generalize TPM2-only file-top comments
+ ArmPkg: only attempt buildin MmCommunicationDxe for AArch64
+ ArmPkg/PlatformBootManagerLib: don't connect all devices on
each boot
+ ArmPkg/PlatformBootManagerLib: hide UEFI Shell as a regular
boot option
+ MdeModulePkg/BootManagerUiLib: show inactive boot options
+ ArmPkg/PlatformBootManagerLib: fall back to the UiApp on
boot failure
+ ArmPkg/PlatformBootManagerLib: register 's' as UEFI Shell
hotkey
+ ArmPkg/PlatformBootManagerLib: connect non-discoverable USB
hosts
+ ArmPkg/ArmSvcLib: prevent speculative execution beyond svc
+ ArmPkg/PlatformBootManagerLib: reject 'default' parity and
stop bit count
+ ArmPkg/PlatformBootManagerLib: use static assertion for
console type
- Update openssl to 1.1.1g
- Drop openssl-fix-syntax-error.patch
+ The new openssl already includes the fix.
- Refresh ovmf-pie.patch and ovmf-disable-ia32-firmware-piepic.patch
-------------------------------------------------------------------
Wed Jul 22 16:01:04 UTC 2020 - Kai Liu <kai.liu@suse.com>

6
ovmf.spec
View File

@ -18,7 +18,7 @@
%undefine _build_create_debug
%global openssl_version 1.1.1d
%global openssl_version 1.1.1g
%global softfloat_version b64af41c3276f
Name: ovmf
@ -26,7 +26,7 @@ URL: http://sourceforge.net/apps/mediawiki/tianocore/index.php?title=
Summary: Open Virtual Machine Firmware
License: BSD-2-Clause-Patent
Group: System/Emulators/PC
Version: 202005
Version: 202008
Release: 0
Source0: https://github.com/tianocore/edk2/archive/edk2-stable%{version}.tar.gz
Source1: https://www.openssl.org/source/openssl-%{openssl_version}.tar.gz
@ -52,7 +52,6 @@ Patch2: %{name}-gdb-symbols.patch
Patch3: %{name}-pie.patch
Patch4: %{name}-disable-ia32-firmware-piepic.patch
Patch5: %{name}-set-fixed-enroll-time.patch
Patch100: openssl-fix-syntax-error.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: bc
BuildRequires: cross-arm-binutils
@ -174,7 +173,6 @@ rm -rf $PKG_TO_REMOVE
# add openssl
pushd CryptoPkg/Library/OpensslLib/openssl
tar -xf %{SOURCE1} --strip 1
%patch100 -p1
popd
# add berkeley-softfloat-3