0
0
Fork
You've already forked edk2
0
No description
  • C 81.6%
  • Python 10.2%
  • Assembly 4%
  • Rich Text Format 1.8%
  • C++ 0.8%
  • Other 1.3%
Find a file
Michael Kubacki 9b6b8a53b7 .github/codeql/edk2.qls: Enable CWE 120, 787, and 805 queries
As recommended by CodeQL this change replaces
cpp/potential-buffer-overflow with cpp/overrunning-write-with-float
and cpp/overrunning-write.
Enables:
1. cpp/overrunning-write
 - @name Likely overrunning write
 - @description Buffer write operations that do not control the length
 data written may overflow
 - @kind problem
 - @problem.severity error
 - @security-severity 9.3
 - @precision high
 - @id cpp/very-likely-overrunning-write
 - @tags reliability
 - security
 - external/cwe/cwe-120
 - external/cwe/cwe-787
 - external/cwe/cwe-805
2. cpp/overrunning-write-with-float
 - @name Potentially overrunning write with float to string conversion
 - @description Buffer write operations that do not control the length
 of data written may overflow when floating point inputs
 take extreme values.
 - @kind problem
 - @problem.severity error
 - @security-severity 9.3
 - @precision medium
 - @id cpp/overrunning-write-with-float
 - @tags reliability
 - security
 - external/cwe/cwe-120
 - external/cwe/cwe-787
 - external/cwe/cwe-805
3. cpp/very-likely-overrunning-write
 - @name Likely overrunning write
 - @description Buffer write operations that do not control the length
 of data written may overflow
 - @kind problem
 - @problem.severity error
 - @security-severity 9.3
 - @precision high
 - @id cpp/very-likely-overrunning-write
 - @tags reliability
 - security
 - external/cwe/cwe-120
 - external/cwe/cwe-787
 - external/cwe/cwe-805
- CWEs:
 - https://cwe.mitre.org/data/definitions/120.html
 - https://cwe.mitre.org/data/definitions/787.html
 - https://cwe.mitre.org/data/definitions/805.html
Cc: Sean Brogan <sean.brogan@microsoft.com>
Cc: Michael Kubacki <mikuback@linux.microsoft.com>
Cc: Michael D Kinney <michael.d.kinney@intel.com>
Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com>
2022年12月23日 13:52:00 +08:00
.azurepipelines .azurepipelines: Add LoongArch64 architecture on LoongArch64 EDK2 CI. 2022年10月14日 02:16:33 +00:00
.github .github/codeql/edk2.qls: Enable CWE 120, 787, and 805 queries 2022年12月23日 13:52:00 +08:00
.mergify .mergify: Simplify Mergify rules using GitHub status checks 2021年07月09日 15:57:46 -07:00
.pytool .pytool/Readme.md: Add reference to new build instructions 2022年12月16日 22:17:18 +00:00
ArmPkg ArmPkg/ArmTrngLib: Remove ASSERTs in ArmTrngLibConstructor() 2022年11月26日 14:42:41 +00:00
ArmPlatformPkg ArmPlatformPkg: Retire NorFlashDxe driver 2022年11月06日 15:21:12 +00:00
ArmVirtPkg ArmVirtPkg: Remove CcProbeLib from ArmVirtQemu.dsc 2022年12月22日 13:35:44 +00:00
BaseTools tools_def: add -fno-omit-frame-pointer to GCC48_{IA32,X64}_CC_FLAGS 2022年12月22日 01:19:36 +00:00
Conf BaseTools:Delete FrameworkDatabase from BaseTools/Conf 2019年05月09日 15:03:30 +08:00
CryptoPkg CryptoPkg: Need to enable crypto functions 2022年12月21日 12:52:39 +00:00
DynamicTablesPkg DynamicTablesPkg: Allow for specified CPU names 2022年12月19日 11:28:55 +00:00
EmbeddedPkg EmbeddedPkg/MetronomeDxe: Update outdated lower bound comment 2022年11月29日 19:39:43 +00:00
EmulatorPkg EmulatorPkg/RedfishHostInterface: Add NULL function 2022年12月20日 06:54:06 +00:00
FatPkg FatPkg: Add LOONGARCH64 architecture for EDK2 CI. 2022年10月14日 02:16:33 +00:00
FmpDevicePkg FmpDevicePkg: Add LOONGARCH64 architecture for EDK2 CI. 2022年10月14日 02:16:33 +00:00
IntelFsp2Pkg IntelFsp2Pkg: Improvement of supporting null UPD pointer in FSP-T 2022年11月11日 04:46:39 +00:00
IntelFsp2WrapperPkg IntelFsp2WrapperPkg: Check header revision for MultiPhase support. 2022年10月25日 23:12:10 +00:00
MdeModulePkg MdeModulePkg/Bus/Pci/XhciDxe: Check port is compatible before getting PSIV 2022年12月21日 00:46:58 +00:00
MdePkg MdePkg: Fix typos and spacing in Library/PerformanceLib.h 2022年12月21日 03:20:33 +00:00
NetworkPkg NetworkPkg: Add LoongArch64 architecture. 2022年10月14日 02:16:33 +00:00
OvmfPkg OvmfPkg/AcpiPlatformDxe: Check PcdConfidentialComputingGuestAttr 2022年12月22日 13:35:44 +00:00
PcAtChipsetPkg PcAtChipsetPkg: Move RTC PCD to dynamic PCD 2022年12月22日 07:06:24 +00:00
PrmPkg PrmPkg/PrmSsdtInstallDxe: Update PRMT Device CID to PNP0C02. 2022年11月08日 16:08:26 +00:00
RedfishPkg RedfishPkg/RedfishHostInterface: Platform Redfish HI notification 2022年12月20日 06:54:06 +00:00
SecurityPkg SecurityPkg: deprecate RpmcLib and VariableKeyLib 2022年12月21日 05:49:48 +00:00
ShellPkg ShellPkg/Shell: Do not set end device path if already end 2022年12月13日 21:12:47 +00:00
SignedCapsulePkg SignedCapsulePkg: Add package CI YAML file 2022年10月04日 17:49:56 +00:00
SourceLevelDebugPkg SourceLevelDebugPkg: Add package CI YAML file 2022年10月06日 02:09:28 +00:00
StandaloneMmPkg StandaloneMmPkg: Remove duplicated words 2022年09月05日 13:52:51 +00:00
UefiCpuPkg UefiCpuPkg: Simplify the code to set smm page table as RO 2022年12月21日 11:13:48 +00:00
UefiPayloadPkg UefiPayloadPkg: Fix boot issue for non-universal payload 2022年12月22日 17:16:54 +00:00
UnitTestFrameworkPkg UnitTestFrameworkPkg/UnitTestLib: Print expected Status on ASSERT fail 2022年12月14日 23:48:30 +00:00
.gitignore .gitignore: Ignore python compiled files, extdeps, and vscode 2019年11月11日 13:01:25 -08:00
.gitmodules UnitTestFrameworkPkg: Add googletest submodule and GoogleTestLib 2022年11月11日 05:46:51 +00:00
.mailmap .mailmap: add entries for Rebecca Cran 2020年09月22日 13:53:46 +00:00
CONTRIBUTING.md Add a stub CONTRIBUTING.md pointing to the wiki 2020年08月18日 18:07:43 +00:00
edksetup.bat BaseTools: Add double quote around CLANG_BIN path string 2021年04月20日 10:21:17 +00:00
edksetup.sh edksetup.sh: remove redundant -?, -h and --help in options parsing 2019年07月23日 10:41:55 +02:00
License-History.txt edk2: Add License-History.txt 2019年04月09日 09:10:18 -07:00
License.txt edk2: Change License.txt from 2-Clause BSD to BSD+Patent 2019年04月09日 09:10:18 -07:00
Maintainers.txt Maintainers: Update OvmfPkg/IoMmuDxe 2022年12月18日 02:14:31 +00:00
pip-requirements.txt pip-requirements.txt: Update to edk2-pytool-extensions 0.20.0 2022年11月17日 09:52:23 +08:00
ReadMe.rst UnitTestFrameworkPkg: Add googletest submodule and GoogleTestLib 2022年11月11日 05:46:51 +00:00

EDK II Project

A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications from www.uefi.org.

Core CI Build Status

Host Type & Toolchain Build Status Test Status Code Coverage
Windows_VS2019 WindowsCiBuild WindowsCiTest WindowsCiCoverage
Ubuntu_GCC5 UbuntuCiBuild UbuntuCiTest UbuntuCiCoverage

More CI Build information

Platform CI Build Status

Microsoft Windows VS2019

Toolchain CONFIG DEBUG RELEASE NOOPT
EmulatorPkg_Win_VS2019
IA32
em32d em32r em32n
X64
em64d em64r em64n
IA32 FULL
em32fd em32fr em32fn
X64 FULL
em64fd em64fr em64fn
OvmfPkg_Win_VS2019
IA32
op32d op32r op32n
X64
op64d op64r op64n
IA32 X64
op3264d op3264r op3264n
IA32 X64 FULL
op3264fd op3264fr TCBZ_2661_

Ubuntu 18.04 GCC5

Toolchain CONFIG DEBUG RELEASE NOOPT
ArmVirtPkg_Ubuntu_GCC5
AARCH64
avAArch64du avAArch64ru avAArch64nu
ARM
avArmdu avArmru avArmnu
EmulatorPkg_Ubuntu_GCC5
IA32
em32du em32ru em32nu
X64
em64du em64ru em64nu
IA32 FULL
em32fdu em32fru em32fnu
X64 FULL
em64fdu em64fru em64fnu
OvmfPkg_Ubuntu_GCC5
IA32
op32du op32ru op32nu
X64
op64du op64ru op64nu
IA32 X64
op3264du op3264ru op3264nu
IA32 X64 FULL
op3264fdu op3264fru op3264fru

TCBZ_2668_ - EmulatorPkg Ubuntu GCC5 Segfaults during execution.

TCBZ_2639_ - EmulatorPkg Ubuntu GCC5 Segfaults during execution.

More ArmVirtPkg CI Build Information

More EmulatorPkg CI Build Information

More OvmfPkg CI Build Information

License Details

The majority of the content in the EDK II open source project uses a BSD-2-Clause Plus Patent License. The EDK II open source project contains the following components that are covered by additional licenses:

The EDK II open source project uses content from upstream projects as git submodules that are covered by additional licenses.

The EDK II Project is composed of packages. The maintainers for each package are listed in Maintainers.txt.

Resources

Code Contributions

To make a contribution to a TianoCore project, follow these steps.

  1. Create a change description in the format specified below to

    use in the source control commit log.

  2. Your commit message must include your Signed-off-by signature
  3. Submit your code to the TianoCore project using the process

    that the project documents on its web page. If the process is not documented, then submit the code on development email list for the project.

  4. It is preferred that contributions are submitted using the same

    copyright license as the base project. When that is not possible, then contributions using the following licenses can be accepted:

For documentation:

Contributions of code put into the public domain can also be accepted.

Contributions using other licenses might be accepted, but further review will be required.

Developer Certificate of Origin

Your change description should use the standard format for a commit message, and must include your Signed-off-by signature.

In order to keep track of who did what, all patches contributed must include a statement that to the best of the contributor's knowledge they have the right to contribute it under the specified license.

The test for this is as specified in the Developer's Certificate of Origin (DCO) 1.1. The contributor certifies compliance by adding a line saying

Signed-off-by: Developer Name developer@example.org

where Developer Name is the contributor's real name, and the email address is one the developer is reachable through at the time of contributing.

Developer's Certificate of Origin 1.1
By making a contribution to this project, I certify that:
(a) The contribution was created in whole or in part by me and I
 have the right to submit it under the open source license
 indicated in the file; or
(b) The contribution is based upon previous work that, to the best
 of my knowledge, is covered under an appropriate open source
 license and I have the right under that license to submit that
 work with modifications, whether created in whole or in part
 by me, under the same open source license (unless I am
 permitted to submit under a different license), as indicated
 in the file; or
(c) The contribution was provided directly to me by some other
 person who certified (a), (b) or (c) and I have not modified
 it.
(d) I understand and agree that this project and the contribution
 are public and that a record of the contribution (including all
 personal information I submit with it, including my sign-off) is
 maintained indefinitely and may be redistributed consistent with
 this project or the open source license(s) involved.

Sample Change Description / Commit Message

From: Contributor Name <contributor@example.com>
Subject: [Repository/Branch PATCH] Pkg-Module: Brief-single-line-summary
Full-commit-message
Signed-off-by: Contributor Name <contributor@example.com>

Notes for sample patch email

  • The first line of commit message is taken from the email's subject line following [Repository/Branch PATCH]. The remaining portion of the commit message is the email's content.
  • git format-patch is one way to create this format

Definitions for sample patch email

  • Repository is the identifier of the repository the patch applies.

    This identifier should only be provided for repositories other than edk2. For example edk2-BuildSpecification or staging.

  • Branch is the identifier of the branch the patch applies. This

    identifier should only be provided for branches other than

    edk2/master.

    For example edk2/UDK2015,

    edk2-BuildSpecification/release/1.27, or

    staging/edk2-test.

  • Module is a short identifier for the affected code or documentation. For example MdePkg, MdeModulePkg/UsbBusDxe, Introduction, or EDK II INF File Format.
  • Brief-single-line-summary is a short summary of the change.
  • The entire first line should be less than ~70 characters.
  • Full-commit-message a verbose multiple line comment describing

    the change. Each line should be less than ~70 characters.

  • Signed-off-by is the contributor's signature identifying them

    by their real/legal name and their email address.

Submodules

Submodule in EDK II is allowed but submodule chain should be avoided as possible as we can. Currently EDK II contains the following submodules

  • CryptoPkg/Library/OpensslLib/openssl
  • ArmPkg/Library/ArmSoftFloatLib/berkeley-softfloat-3
  • MdeModulePkg/Universal/RegularExpressionDxe/oniguruma
  • MdeModulePkg/Library/BrotliCustomDecompressLib/brotli
  • BaseTools/Source/C/BrotliCompress/brotli

ArmSoftFloatLib is actually required by OpensslLib. It's inevitable in openssl-1.1.1 (since stable201905) for floating point parameter conversion, but should be dropped once there's no such need in future release of openssl.

To get a full, buildable EDK II repository, use following steps of git command

 git clone https://github.com/tianocore/edk2.git
 cd edk2
 git submodule update --init
 cd ..

If there's update for submodules, use following git commands to get the latest submodules code.

 cd edk2
 git pull
 git submodule update

Note: When cloning submodule repos, '--recursive' option is not recommended. EDK II itself will not use any code/feature from submodules in above submodules. So using '--recursive' adds a dependency on being able to reach servers we do not actually want any code from, as well as needlessly downloading code we will not use.