linux/meta-virtualization.git/recipes-extended/ipxe, branch master-next

ipxe: update to v2.0.0-tip

2026-06-02T01:34:15+00:00

Bumping ipxe to version v2.0.0-73-ge0a2ca984, which comprises the following commits: e0a2ca984 [linux] Disable implicit linking against libatomic 409747f42 [tg3] Use updated DMA APIs 4906a255e [loong64] Port the RISC-V optimised TCP/IP checksum implementation 127d8fd40 [riscv] Simplify TCP/IP checksum calculation 56a4f695d [ci] Update action versions to silence GitHub warnings fa473fd13 [ci] Include UEFI Secure Boot builds for RISC-V 64 and LoongArch64 6dcc40105 [loong64] Replace optimised string operations 63eeb23ad [build] Mark core riscv64 files as permitted for UEFI Secure Boot 2d8236995 [neighbour] Discard deferred packets before discarding complete entries 28b4b7086 [build] Mark core loong64 headers as permitted for UEFI Secure Boot fed3c38fd [doc] Add an AI contribution policy ca8520080 [virtio] Replace the virtio core and network device driver 2b4a3efcc [lacp] Use the same system identifier for all ports ab9d7b006 [pci] Provide pci_bar_is_io() to determine BAR type cac27e488 [ioapi] Allow combined port accessors to be used in Secure Boot builds 63c1a6301 [tls] Add support for RSA-PSS signature scheme efa9515b1 [tls] Split out hybrid MD5+SHA1 algorithm used in TLS version 1.1 0c617b913 [crypto] Add support for RSA-PSS signature scheme c8743b8c8 [crypto] Allow for alternative RSA signature schemes 7fe8b7fde [test] Use mock random data for public key self-tests ae8defc27 [bnxt] Do not abort teardown on command failure 822d4b143 [bnxt] Improve code readability and debug output be35d67a0 [librm] Specify regparm function attribute only for i386 c18d0a23b [build] Remove redundant regparm function attribute for x86_64 2d28657ef [w89c840] Fix build warnings with GCC 16 3d1a20eac [intel] Add PCI ID for I219-V and -LM existing of 18-29 997e3f40c [efi] Register EFI IPv6 device path settings as netX.ndp 009bcf17a [tls] Treat signature algorithm identifiers as opaque 16-bit values 8c7c084e0 [crypto] Fail all operations for the null public-key algorithm df4eec8cf [efi] Fix operator precedence in autoexec network download 8d2ebbf8a [crypto] Add support for HKDF key derivation a42daf6e8 [cloud] Separate snapshot deletion from image deletion for Alibaba Cloud 295f3bed2 [virtio] Ensure that device is closed before unmapping regions 1c54e7e8a [virtio] Fix assertion failures when interface is closed 2b2580f78 [virtio] Set MTU for both modern and legacy devices ea2468962 [cloud] Mark imported images as supporting NVMe for Alibaba Cloud 2360ec2a7 [cloud] Delete underlying snapshots when deleting Alibaba Cloud images 82a8fcc11 [ci] Add a workflow to import images to Alibaba Cloud fa856e784 [cloud] Retry all Alibaba Cloud API calls d146b28b5 [cloud] Do not rely on CopyImage to import images to Alibaba Cloud 7e54e75a2 [cloud] Do not rely on ECS instances to import images to Alibaba Cloud 13ee60c19 [cloud] Do not rely on Function Compute to import images to Alibaba Cloud 09c17f76c [cloud] Support creation of a censorship bypass role for Alibaba Cloud 0e70ad188 [cloud] Add utility to set up VPCs and security groups in Alibaba Cloud 1c32a1782 [cloud] Update disk log console tool descriptions 304904dbb [cloud] Fix architecture detection for partitioned disk images 07887332c [efi] Add disk log console support 480b6f021 [disklog] Generalise disk log console mechanism ec38e98d4 [disklog] Generalise CONSOLE_INT13 to CONSOLE_DISKLOG 6d8297505 [undi] Pad transmit buffer length to work around vendor driver bugs 5e06c866a [efi] Remove the Dhcp6Dxe driver veto 8796d2fb0 [efi] Drop to external TPL when unloading vetoed images 75115ee99 [efi] Add partition information protocol header and GUID definition c8a96482e [efi] Update to current EDK2 headers 6d2f69f55 [build] Add Ubuntu/Debian syslinux mbr.bin search path 646d4b0a0 [build] Allow binaries to request a log partition from genfsimg e2e9e68f3 [build] Work around syslinux bugs in FAT cluster counting b4fb9382e [build] Use sector count values consistently in genfsimg 2c84b686b [build] Use a partition table in generated USB disk images 0d30ee7b4 [build] Ensure that generated filesystem images retain no stale content a0bf3f1cc [cloud] Omit uploading empty blocks to EBS snapshots 5921e6b45 [cloud] Add utility to read INT13CON partition in Alibaba Cloud 619b1db1b [bnxt] Update conditions for invoking short commands c3560072e [cloud] Add utility for importing images to Alibaba Cloud 7b3eb3c86 [undi] Drag in PCI-specific configuration 88d396719 [efi] Add a dummy SBOM PE section 847e09850 [ci] Add a workflow to import images to Google Cloud 013a4a93d [cloud] Specify Google Cloud project explicitly for storage client e180aa85e [test] Assign unique MAC addresses for test network devices 5edffb26b [ci] Fix family name used for AWS image imports e9b80ee54 [ci] Add a workflow to import images to AWS EC2 c44d5f96e [cloud] Add ability to upload AMI list to an S3 bucket 33ca177cf [release] Update version number after release Signed-off-by: Bruce Ashfield

ipxe: fix build with current toolchain

2026-03-24T17:25:56+00:00

Update ipxe for compatibility with the current OE toolchain: - Add coreutils-native to DEPENDS for cksum (used by build system to generate checksums embedded in binary images) - Drop syslinux and cdrtools-native from DEPENDS, remove ISOLINUX_BIN from EXTRA_OEMAKE - Skip ISO and USB image generation from the ALL target - only ROM files are needed for Xen HVM and the ISO tools (genisoimage/xorrisofs) are not compatible with cdrtools' mkisofs - Drop patches applied upstream: gcc-10 warning fix, golan type casts, fcommon directive, xenver.h typo, old-style function definition, C23 reserved words, and unsafe function wrapper - Refresh ipxe-fix-hostcc-nopie-cflags.patch for new line numbers Signed-off-by: Bruce Ashfield

ipxe: update to v2.0.0

2026-03-24T15:42:07+00:00

Bumping ipxe to version v2.0.0-13-ga0bf3f1cc, which comprises the following commits: a0bf3f1cc [cloud] Omit uploading empty blocks to EBS snapshots 5921e6b45 [cloud] Add utility to read INT13CON partition in Alibaba Cloud 619b1db1b [bnxt] Update conditions for invoking short commands c3560072e [cloud] Add utility for importing images to Alibaba Cloud 7b3eb3c86 [undi] Drag in PCI-specific configuration 88d396719 [efi] Add a dummy SBOM PE section 847e09850 [ci] Add a workflow to import images to Google Cloud 013a4a93d [cloud] Specify Google Cloud project explicitly for storage client e180aa85e [test] Assign unique MAC addresses for test network devices 5edffb26b [ci] Fix family name used for AWS image imports e9b80ee54 [ci] Add a workflow to import images to AWS EC2 c44d5f96e [cloud] Add ability to upload AMI list to an S3 bucket 33ca177cf [release] Update version number after release 12798ec29 [release] Release version 2.0.0 616506924 [doc] Update change log in preparation for release 94138656d [efi] Do not unconditionally raise back to internal TPL cbeda2012 [efi] Allow creating an image device handle with no parent device 5a17d8daf [efi] Install protocols onto a dedicated device handle 910d9c5a9 [efi] Allow executing images even with no open network devices 3df8f9c37 [efi] Try all supported autoexec protocols b677399da [efi] Treat a URI device path as higher priority than a cached DHCP packet 8df45c2f3 [github] Add organization to sponsorship links 608dde2ad [doc] Add contribution guidelines f7fe2b319 [cachedhcp] Set current working URI to cached DHCP filename 027d0fe24 [ci] Include Secure Boot ISO and USB images in release artifacts 559282d5a [build] Use Markdown consistently within release notes 3680a4ae5 [build] Add support for including a UEFI shim in filesystem images 1fbc3bca7 [efi] Automatically open network device matching loaded image device path a69afd743 [tftp] Use TFTP server URI only if no other working URI is set fa993d524 [tls] Transmit a closure alert when closing the connection 4d0b0cd4c [tls] Respond to received closure alerts efe812637 [cachedhcp] Automatically open network device matching cached DHCPACK 879549da3 [dynui] Allow for duplicate shortcut keys f00d2079d [doc] Add release process documentation ad748f0d9 [bnxt] Update link speed definitions 7ce5dbd76 [efi] Allow for the existence of multiple shim lock protocols 596c84ce7 [efi] Support the EFI_PXE_BASE_CODE_TFTP_GET_FILE_SIZE operation b48965ae5 [xferbuf] Silently discard data written to a void data transfer buffer 3194c8ad0 [xferbuf] Record maximum required size 7948ffe32 [ci] Remove now-redundant "netboot" job 9250a9091 [build] Create util/gensrvimg for building network boot server images f0ceb70cb [bnxt] Fix memory leak in probe() a6d393ecc [bnxt] Skip unnecessary calls for VFs 9443f7a2a [tls] Remove current time from client random bytes 1b6d88d64 [ipv6] Obtain MTU setting from NDP 1eb571cef [bnxt] Remove access of deprecated link speed variables a5e4bb98b [bnxt] Fix typo in function declaration df5957ccc [bnxt] Fix coding style 9d6831bb0 [bnxt] Correct port index usage 2012ab71d [pxeprefix] Add a minimal iPXE NBP metadata header 47467538f [build] Use little-endian word values in genfsimg 0854850d0 [ci] Add a job to automatically create releases 179366d72 [ci] Remove redundant duplicate creation of version.txt 9e0057a86 [build] Allow for generation of all release information a82e0b41a [doc] Fix header levels in Markdown files df2ef86d1 [doc] Update README 53a3365be [doc] Add an initial changelog 8fb90cb40 [build] Allow for construction of a text file containing the version 0cde7ce6d [build] Mark system logger as permitted for UEFI Secure Boot 2184bfdb0 [ci] Create a network bootable files archive as a build artifact d98278a17 [ci] Include latest iPXE shim in build artifacts 80639a6ca [ci] Use ipxe-builder-utils container for combined BIOS/UEFI images 93fc2123c [ci] Include CA certificate file alongside signed binaries a956c5fea [ci] Allow for manually triggered workflow runs 21b5bd840 [ci] Add support for building UEFI Secure Boot signed binaries 1d23d5a03 [ci] Schedule Coverity Scan run via GitHub Actions 2161e976c [build] Include USB drivers in the all-drivers build by default ae8e23a45 [build] Handle all driver list construction via parserom.pl c9158cb32 [build] Mark Xen HVM files as permitted for UEFI Secure Boot 7caee4489 [ci] Include Linux userspace build artifacts 6dc991d07 [slirp] Disable warnings for uncleanly deprecated libslirp functions 25429d952 [build] Include PCI drivers only in BIOS and UEFI builds 3f12b8b1c [build] Include devicetree drivers in the SBI all-drivers build 81da1a1b6 [dt] Add DT_ROM() and DT_ID() macros 5669c4d52 [build] Include Xen and Hyper-V drivers only in x86 BIOS and UEFI builds 0992d9b56 [build] Include Linux network drivers in the Linux all-drivers build 6e56f7ff2 [linux] Remove unused can_probe field from driver definition 8a1dd5850 [build] Include ISA drivers only in 32-bit BIOS builds cc4a9df97 [ci] Include Secure Boot build artifacts cf350b8eb [build] Filter out non-permitted drivers for UEFI Secure Boot 7a2817bbd [build] Drag in Xen and Hyper-V support via network device drivers 99a9e6e43 [build] Construct driver rules for USB devices e783adcfd [build] Construct driver lists for each bus type 152351219 [build] Allow PCI_ROM() and ISA_ROM() to span multiple lines 4d6c8ab44 [usb] Add USB_ROM() and USB_ID() macros 481e04311 [librm] Work around two errata in the 386's "popal" instruction cd9b44e57 [syslog] Allow port number to be specified for encrypted syslog server 362b704f8 [ci] Include supported network device list in build artifacts 18fab8dd8 [loong64] Fix error identifier generation for LoongArch64 12b279b4c [ci] Include error identifier list in build artifacts 95e756569 [pci] Ignore invalid subordinate bus numbers aa06a76eb [ci] Show rolling release publication URL c18d89570 [efi] Cache identified PCI root bridge I/O protocol handle 30d162ddd [uri] Ensure "##params=" separator is correct 59c67e111 [ci] Run tests on pull requests 5abbcab90 [build] Mark MS-CHAPv2 as permitted for UEFI Secure Boot 9106130f6 [build] Ensure dependencies of version.c are always rebuilt as expected a565e18f3 [build] Exclude local named config headers from annotation checks b05a045b4 [ci] Publish rolling release binaries via https://boot.ipxe.org 74e0551ac [ci] Publish rolling release build artifacts with stable URLs e855c4c64 [ci] Produce combined BIOS/UEFI ISO and USB images 8e10974c8 [ci] Upload a selection of build artifacts from each run dee71adda [build] Exclude external files from annotation checks 301b1ecf2 [build] Mark compressed image tools as permitted for UEFI Secure Boot c07fb71a9 [build] Mark FDT management tools as permitted for UEFI Secure Boot 6b17d320d [build] Mark core arm64 files as permitted for UEFI Secure Boot f1bcd160a [xen] Update to latest stable release headers 8e31ac9fc [build] Mark dummy architecture headers as permitted for UEFI Secure Boot 40c2db9d6 [build] Mark direct kernel loading as forbidden for UEFI Secure Boot 4db03054d [build] Mark GDB stub as forbidden for UEFI Secure Boot 03a906a9f [build] Mark Realtek driver as permitted for UEFI Secure Boot b7e7f62b8 [efi] Avoid dragging in IPv4, IPv6, and DNS support unconditionally e31dc79d4 [build] Mark EFI SNP/MNP driver wrappers as permitted for UEFI Secure Boot 641ea020f [prefix] Make unlzma.S compatible with 386 class CPUs d0ea2b1bb [ci] Use prebuilt containers to build and test iPXE 207c99a47 [build] Allow GITVERSION to be specified as an environment variable 0abef79a2 [build] Do not use "git log" to construct build timestamp faa42c850 [build] Do not use "git describe" to construct version number a42a15ae9 [build] Allow for per-architecture sysroots 6eab3dbcd [ci] Update to ubuntu-24.04 GitHub actions runner 05cb93046 [build] Extend default configuration for non-BIOS builds 4157afc12 [usb] Drag in USB commands only when USB support is present f3abf2b9d [pci] Drag in PCI commands only when PCI support is present f7f685f8c [build] Canonicalise console type configuration ce6f574a9 [build] Canonicalise USB configuration 6ad6af198 [build] Canonicalise settings sources configuration ff80a1758 [build] Sort general configuration in order of approachability 360c0f336 [build] Canonicalise remaining portions of general configuration d27cf68e0 [build] Canonicalise SAN boot protocol configuration 464916f99 [build] Canonicalise download protocol configuration f869132d6 [build] Canonicalise network protocol configuration e72c331aa [build] Canonicalise command list configuration 9f4b9f60f [build] Canonicalise image type configuration c7403e7e5 [build] Mark more reviewed files as permitted for UEFI Secure Boot 1d5b1d924 [build] Fail Secure Boot builds unless all files are permitted 46510f36a [build] Mark MD4 and MD5 as forbidden for UEFI Secure Boot adcaaf9b9 [build] Mark known reviewed files as permitted for UEFI Secure Boot 6cccb3bdc [build] Mark core files as permitted for UEFI Secure Boot 1996e214e [build] Check for standalone FILE_LICENCE() and FILE_SECBOOT() declarations 49f700a25 [console] Mark generated keymaps as permitted for Secure Boot 30948987f [build] Mark existing files as explicitly forbidden for Secure Boot b09af00fa [efi] Mark imported EDK2 headers as permitted for Secure Boot c5ae9ec99 [efi] Update to current EDK2 headers e61c636bf [build] Define a mechanism for marking Secure Boot permissibility 9c01c5a5d [neighbour] Treat delayed transmissions as pending operations 2110afb35 [tcp] Report TCP statistics via the "ipstat" command a8c89276c [malloc] Increase heap size to 4MB 8e557f1ab [tcp] Discard packets that lie immediately before the receive window ff6d612e7 [neighbour] Add the ability to artificially delay outbound packets 33c832b0d [neighbour] Split out deferred transmission from discovery completion aabfb8a94 [neighbour] Use discovery protocol field to identify incomplete neighbours d0e01bb3f [neighbour] Always use network device's own link-layer address 7c39c04a5 [crypto] Allow for zero-length big integer literals 01038893a [test] Update big integer tests to use okx() 383214794 [crypto] Fix identification of non-wrapped elliptic curve identifiers 5aab6b7a3 [crypto] Add ECDSA-based TLS cipher suites f1e23b53a [test] Add test cases for X.509 certificates with ECDSA signatures d6eeb9039 [crypto] Add OID-identified algorithms for ECDSA with SHA2 hash family d14066e92 [crypto] Allow ecPublicKey to be identified as a public-key algorithm f3147b42a [test] Ensure OID-identified algorithms are present for X.509 tests aa247f6e3 [x509] Correct debug message 4e3cbeef8 [crypto] Add support for ECDSA signatures 948677fe5 [test] Test verification of constructed signature cfbf0da93 [crypto] Allow for an explicit representation of point at infinity af99310f5 [test] Test signature verification independently of signing 3d5cd3d79 [intel] Add PCI ID for I219-V and -LM 24 86c40a8b1 [efi] Retry calls to GetRNG() as needed fb1188936 [crypto] Generalise rsa_parse_integer() to asn1_enter_unsigned() c7f129fed [crypto] Allow for addition of arbitrary Weierstrass curve points 1e353ff36 [crypto] Split out Weierstrass point initialisation and finalisation d3adea838 [crypto] Expose the (prime) group order as an elliptic curve property 80e98dc0d [crypto] Verify that weierstrass_multiply() result is not point at infinity b362f77bd [test] Allow for elliptic curve tests other than multiplication e50e30a7f [crypto] Expose the base point as an explicit elliptic curve property 88c3e68df [http] Abort connections after a long period of inactivity 1a789c1da [http] Rename connection retry timer 64f936d5d [crypto] Allow for OID-identified elliptic curve algorithms e6610b793 [test] Include key matching in existing public-key tests 3e566818f [crypto] Remove obsolete maximum output length method 1ccc320ee [crypto] Construct asymmetric ciphered data using ASN.1 builders d4258272c [crypto] Construct signatures using ASN.1 builders 8cd963ab9 [crypto] Pass signatures for verification as ASN.1 cursors c9c028259 [crypto] Restructure handling of ASN.1 bit strings d73981aec [intel] Add PCI IDs for I225 and I226 chipsets 19dffdc83 [efi] Allow for creating devices with no EFI parent device dfea3bbfa [pci] Use runtime selectable PCI I/O API for EFI cloud builds 9c1ac48bc [pci] Allow probing permission to vary by range ff1a17dc7 [pci] Use linker tables for runtime selectable PCI APIs 0cf2f8028 [pci] Allow PCI configuration space access mechanism to vary by range 81496315f [arm] Avoid unaligned accesses for memcpy() and memset() 338347465 [efi] Wrap a selection of runtime services calls 925af2b4d [efi] Allow SAN-booted images to be traced via DEBUG=efi_wrap 0a8e34657 [efi] Add image security database GUID definition 5c135240b [efi] Add Microsoft vendor GUID definition 5154b6fcc [efi] Add storage security command protocol header and GUID definition 27ec3c76a [efi] Update to current EDK2 headers 3a2f75b78 [efi] Mark Arm/ProcessorBind.h as a non-imported header f0d978d8b [efi] Mark Ip4Config.h as a non-imported header f9b9ef578 [efi] Mark UgaDraw.h as a non-imported header c0ac23fc5 [efi] Switch back to VA_START() etc macros for EFIAPI functions 360aa7064 [efi] Skip including the EDK2 ProcessorBind.h header for 32-bit RISC-V df7f59d47 [pci] Move ECAM pci_can_probe() definition to correct header file b41bda441 [spcr] Accept alternative type value for a 16550-compatible UART 6d9374e5a [acpi] Allow acpi_ioremap() to map a port I/O address bd3982b63 [ioapi] Allow iounmap() to be called for port I/O addresses f2ea97102 [spcr] Use the serial port defined by the ACPI SPCR by default 595ff2403 [spcr] Add support for the ACPI Serial Port Console Redirection table 8fd5e2772 [acpi] Add acpi_ioremap() to map an ACPI-described address 08d4d7fe9 [uart] Make baud rate a property of the UART a786c8d23 [uart] Support 16550 UARTs accessed via either MMIO or port I/O f7de1b53d [ioapi] Provide combined MMIO and port I/O accessors fde35ff00 [pci] Disable decoding while setting a BAR value 606e87ec7 [cloud] Display instance type in AWS EC2 0336e2987 [ena] Leave queue base address empty when creating a low latency queue 0ddd83069 [riscv] Correct page table stride calculation 426c721e3 [librm] Correct page table stride calculation c8f088d4e [cloud] Display build architecture in AWS EC2 416a2143a [cloud] Remove AWS public image access block only if not already unblocked ba1846a0d [cloud] Remove AWS public image access block automatically if needed b2e846821 [ena] Limit receive queue size to work around hardware bugs 846c505ae [ena] Increase transmit queue size to match receive fill level 0ae5e25de [ena] Add memory barrier after writing to on-device memory c296747d0 [ena] Increase receive fill level c1badf71c [ena] Add support for low latency transmit queues 0d15d7f0a [ena] Record supported device features e5e371f48 [ena] Cancel uncompleted transmit buffers on close dcc5d36ce [ena] Map the on-device memory, if present 510f3e5e1 [ena] Add descriptive messages for any admin queue command failures 3538e9c39 [pci] Record prefetchable memory window for PCI bridges 04a61c413 [ena] Use pci_bar_set() to place device within bridge memory window 94902ae18 [pci] Handle sizing of 64-bit BARs e80818e4f [tls] Disable renegotiation unless extended master secret is used 57504353f [tls] Refuse to resume sessions with mismatched master secret methods ab64bc5b8 [tls] Add support for the Extended Master Secret d6656106e [tls] Generate master secret only after sending Client Key Exchange 4f44f6240 [gve] Rearm interrupts unconditionally on every poll f5ca1de73 [gve] Use raw DMA addresses in descriptors in DQO-QPL mode 1cc1f1cd4 [gve] Report only packet completions for the transmit ring d2e1e591a [gve] Use dummy interrupt to trigger completion writeback in DQO mode c2d7ddd0c [gve] Add missing memory barriers 543829964 [intelxl] Use default dummy MSI-X target address 4224f574d [pci] Map all MSI-X interrupts to a dummy target address by default ce30ba14f [gve] Select preferred operating mode 74c9fd72c [gve] Add support for out-of-order queues 0d1ddfe42 [gve] Cancel pending transmissions when closing device cf5349754 [bnxt] Handle link related async events 4508e1023 [gve] Allow for descriptor and completion lengths to vary by mode 20a489253 [gve] Rename GQI-specific data structures and constants 86b322d99 [gve] Allow for out-of-order buffer consumption b8dd3c384 [gve] Add support for raw DMA addressing 9f554ec9d [gve] Add concept of a queue page list base device address 91db5b68f [gve] Set descriptor and completion ring sizes when creating queues 048a34670 [gve] Add concept of operating mode 610089b98 [gve] Remove separate concept of "packet descriptor" ee9aea789 [gve] Parse option list returned in device descriptor 6464f2edb [bnxt] Add error recovery support 969ce2c55 [efi] Use current boot option as a fallback for obtaining the boot URI c10da8b53 [efi] Add ability to extract device path from an EFI load option 5bec2604a [libc] Add wcsnlen() 61b4585e2 [efi] Drag in MNP driver whenever SNP driver is present a53ec4493 [bnxt] Update CQ doorbell type 8460dc4e8 [dwgpio] Use fdt_reg() to get GPIO port numbers 88ba01176 [fdt] Provide fdt_reg() for unsized single-entry regions 9d4a2ee35 [cmdline] Show commands in alphabetical order 332241238 [digest] Treat inability to acquire an image as a fatal error 6fa901530 [digest] Add "--set" option to store digest value in a setting f5467d69d [github] Extend sponsorship link f45782f9f [digest] Add commands for all enabled digest algorithms 2e4e1f7e9 [dwgpio] Add driver for the DesignWare GPIO controller 90fe3a292 [gpio] Add a framework for GPIO controllers 5f10b7455 [fdt] Use phandle as device location f7a1e9ef8 [dwmac] Show core version in debug messages 01b1028d4 [bnxt] Remove unnecessary test_if macro 6ca7a560a [bnxt] Remove unnecessary I/O macros be551d420 [serial] Explicitly initialise serial console UART to NULL a814c4605 [riscv] Place explicitly zero-initialised variables in the .data section 5bda1727b [riscv] Allow for poisoning .bss section before early initialisation e3a6e9230 [undi] Assume that legacy interrupts are broken for any PCIe device 65b8a6e45 [pxeprefix] Display PCI vendor and device ID in PXE startup banner fb082bd4c [fdt] Add ability to locate node by phandle e01e5ff7c [dwusb] Add driver for DesignWare USB3 host controller 6c42ea127 [xhci] Allow for non-PCI xHCI host controllers eca97c2ee [xhci] Use root hub port number to determine slot type 8a8904aad [efi] Check only the non-extended WaitForKey event 8701863a1 [efi] Allow compiler to perform type checks on EFI_EVENT 1e3fb1b37 [init] Show initialisation function names in debug messages 7ac4b3c6f [efi] Assume that vendor wireless drivers are unusable via SNP c3376f864 [efi] Drop to external TPL for calls to ConnectController() c01c3215d [efi] Provide efi_tpl_name() for transcribing TPLs in debug messages 434462a93 [riscv] Ensure coherent DMA allocations do not cross cacheline boundaries d539a420d [riscv] Support the standard Svpbmt extension for page-based memory types 2aacb346c [riscv] Create coherent DMA mapping of 32-bit address space on demand 0611ddbd1 [riscv] Use 1GB pages for I/O device mappings c2cdc1d31 [dwmac] Add driver for DesignWare Ethernet MAC bbabde8ff [riscv] Invalidate data cache on completed RX DMA buffers 634d9abef [riscv] Add optimised TCP/IP checksumming 101ef74a6 [riscv] Provide a DMA API implementation for RISC-V bare-metal systems 22de0c4ed [dma] Use virtual addresses for dma_map() 06083d267 [build] Handle isohybrid with xorrisofs e223b3251 [riscv] Support explicit cache management operations on I/O buffers 6a75115a7 [riscv] Add support for detecting T-Head vendor extensions 19f1407ad [iobuf] Ensure I/O buffer data sits within unshared cachelines c21443f0b [uaccess] Allow for coherent DMA mapping of the 32-bit address space d75d10df1 [riscv] Create coherent DMA mapping for low 4GB of address space 3fd54e4f3 [riscv] Construct invariant portions of page table outside the loop 6bc55d65b [bnxt] Update supported devices array 002062777 [bnxt] Update device descriptions 126366ac4 [bnxt] Remove VLAN stripping logic 4262328c1 [github] Add sponsorship link 54392f0d7 [bnxt] Increase Tx descriptors e5953ed7e [build] Disable use of common symbols 8df3b9640 [build] Allow for the existence of small-data sections d3e10ebd3 [legacy] Allocate legacy driver .bss-like segments at probe time 6ea800ab5 [legacy] Rename the global legacy NIC to "legacy_nic" d0c02e0df [legacy] Allocate extra padding in receive buffers 97f40c5fc [pxe] Use a weak symbol for isapnp_read_port c33ff76d8 [fdtcon] Add basic support for FDT-based system serial console 9ada09c91 [dwuart] Read input clock frequency from the device tree 0ed1dea7f [uart] Wait for 16550 UART to become idle before modifying LCR 2ce1b185b [serial] Allow platform to specify mechanism for identifying console 5d9f20bbd [dwuart] Add "ns16550a" compatible device ID d1823eb67 [riscv] Inhibit SBI console when a serial console is active 25fa01822 [riscv] Serialise MMIO accesses with respect to each other 53a3befb6 [dwuart] Add a basic driver for the Synopsys DesignWare UART cca1cfd49 [uart] Allow for dynamically registered 16550 UARTs 71b4bfb6b [uart] Add support for MMIO-accessible 16550 UARTs 6c8fb4b89 [uart] Allow for the existence of non-16550 UARTs 60e167c00 [uart] Remove ability to use frame formats other than 8n1 5783a10f7 [riscv] Write SBI console output to early UART, if enabled 41e65df19 [riscv] Maximise barrier effects of memory fences 7e96e5f2e [fdt] Allow paths and aliases to be terminated with separator characters 1de3aef78 [bnxt] Remove TX padding 3e8909cf5 [fdtmem] Limit relocation to 32-bit address space c4a3d438e [dt] Allow for creation of standalone devices b5fb7353f [ipv4] Add support for classless static routes e648d23fb [ipv4] Extend routing mechanism to handle non-default routes 96f586466 [ipv4] Add self-tests for IPv4 routing 1ae75a3bd [test] Add infrastructure for test network devices 5b3ebf8b2 [riscv] Support T-Head CPUs using non-standard Memory Attribute Extension 817145fe0 [riscv] Do not set executable bit in early UART page mapping 7df005c4c [riscv] Add fences around early UART writes 88cffd75a [riscv] Zero SATP after any failed attempt to enable paging bb2011241 [dt] Locate parent node at point of use in dt_ioremap() 1762568ec [fdt] Provide ability to locate the parent device node d64250918 [fdt] Add tests for device tree creation 3fe321c42 [riscv] Add support for a SiFive-compatible early UART 2e27d772c [riscv] Support mapping early UARTs outside of the identity map 98fdfdd25 [riscv] Add support for writing prefix debug messages direct to a UART 2e8d45aee [riscv] Create macros for writing characters to the debug console 6eb51f1a6 [riscv] Ignore riscv,isa property in favour of direct CSR testing 192cfc3cc [image] Use image name rather than pointer value in all debug messages eae9a2754 [riscv] Support mapping I/O devices outside of the identity map 6af4a022b [fdtmem] Ignore reservation regions with no fixed addresses 56f5845b3 [riscv] Include carriage returns in libprefix.S debug messages 09140ab2c [memmap] Allow explicit colour selection for memory map debug messages 8d88870da [riscv] Support older SBI implementations 036e43334 [memmap] Rename addr/last fields to min/max for clarity cd38ed4fa [lkrn] Support initrd construction for RISC-V bare-metal kernels c713ce5c7 [initrd] Squash and shuffle only initrds within the external heap 4a39b877d [initrd] Split out initrd construction from bzimage.c 11929389e [initrd] Allow for images straddling the top of the reshuffle region 029c7c417 [initrd] Rename bzimage_align() to initrd_align() 9231d8c95 [initrd] Swap initrds entirely in-place via triple reversal 11e01f065 [uheap] Expose external heap region directly e05604107 [uheap] Prevent allocation of blocks with zero physical addresses b9095a045 [fdtmem] Allow iPXE to be relocated to the top of the address space a53456334 [riscv] Speed up memmove() when copying in forwards direction 20d2c0f78 [lkrn] Shut down devices before jumping to kernel entry point 969e8b546 [lkrn] Allow a single initrd to be passed to the booted kernel 9bc559850 [fdt] Allow an initrd to be specified when creating a device tree c1cd54ad7 [initrd] Move initrd reshuffling to be architecture-independent code d15a11f3a [image] Use image replacement when executing extracted images e2f4dba2b [lkrn] Add support for EFI zboot compressed kernel images ecac4a34c [lkrn] Add basic support for the RISC-V Linux kernel image format d0c35b682 [bios] Use generic external heap based on the system memory map 140ceeeb0 [riscv] Use generic external heap based on the system memory map 4d560af2b [uheap] Add a generic external heap based on the system memory map 490f1ecad [malloc] Allow heap to specify block and pointer alignments c6ca3d3af [malloc] Allow for the existence of multiple heaps 83449702e [memmap] Remove now-obsolete get_memmap() 624d76e26 [bios] Use memmap_describe() to find an external heap location 79c30b92a [settings] Use memmap_describe() to construct memory map settings c8d64ecd8 [bios] Use memmap_describe() to find a relocation address dbc86458e [comboot] Use memmap_describe() to obtain available memory d0adf3b4c [multiboot] Use memmap_describe() to construct Multiboot memory map 25ab8f462 [image] Use memmap_describe() to check loadable image segments a353e7080 [memmap] Use memmap_dump_all() to dump debug memory maps 3812860e3 [bios] Describe umalloc() heap as an in-use memory area 4c4c94ca0 [bios] Update to use the generic system memory map API 3f6ee9573 [fdtmem] Update to use the generic system memory map API bab3d7671 [memmap] Define an API for managing the system memory map f6f11c101 [tests] Remove prehistoric umalloc() test code e0c4cfa81 [fdtmem] Record size of accessible physical address space 64ad1d03c [bios] Rename memmap.c to int15.c 1dd9ac13f [bnxt] Use updated DMA APIs 08edad7ca [bnxt] Return proper error codes in probe 4d39b2dcc [crypto] Remove redundant null pointer check d1c1e578a [riscv] Add a .pf32 build target for padded parallel flash images 6fd927f92 [riscv] Perform a writability test before applying relocations 4566f5975 [riscv] Avoid potentially overwriting the scratch area during relocation 8e38af800 [riscv] Add a .lkrn build target resembling a Linux kernel binary 17fd67ce0 [riscv] Relocate to a safe physical address on startup 3dfc88158 [riscv] Construct page tables based on link-time virtual addresses c45dc4a55 [riscv] Allow apply_relocs() to use non-inline relocation records 420e475b1 [riscv] Return accessible physical address space size from enable_paging() 6fe9ce66a [fdtmem] Add ability to parse FDT memory map for a relocation address 2e45106c0 [riscv] Ensure that prefix_virt is aligned on an xlen boundary 95ede670b [riscv] Hold virtual address offset in the thread pointer register f988ec09e [fdt] Generalise access to "reg" property 3027864f1 [riscv] Use load and store pseudo-instructions where possible 134d76379 [build] Formalise mechanism for accessing absolute symbols 1d58d928f [libc] Display assertion failure message before incrementing counter 8fe3c68b3 [riscv] Add support for disabling 64-bit and 32-bit paging 5b19ddbb3 [riscv] Return virtual address offset from enable_paging() 5e518c744 [riscv] Restore temporarily modified PTE within 32-bit transition code 0279015d0 [uaccess] Generalise librm's virt_offset mechanism for RISC-V e8a6c2657 [build] Constrain PHYS_CODE() and REAL_CODE() to use i386 registers 12dee2dab [riscv] Add debug printing of hexadecimal values in libprefix.S 72c81419b [riscv] Move prefix system reset code to libprefix.S 764183504 [riscv] Add basic debug progress messages in libprefix.S 9445a9ff4 [riscv] Provide a millicode variant of print_message() dc9e6f0ed [riscv] Move prefix debug message printing to libprefix.S b3cbdc86f [riscv] Place prefix debug strings in .rodata 4bef4c806 [riscv] Use compressed relocation records 8f7aa292a [riscv] Place .got and .got.plt in .data e37e3f17e [riscv] Discard ELF hash tables 70bb5e5e6 [zbin] Allow for constructing compressed dynamic relocation records 98646b9f0 [build] Allow for 32-bit and 64-bit versions of util/zbin 4c11737d5 [riscv] Add support for enabling 32-bit paging a32f3c2bc [riscv] Add support for enabling 64-bit paging dad206026 [riscv] Allow for a non-zero link-time address a4b5dd63c [riscv] Split out runtime relocator to libprefix.S 1534b0a6e [uaccess] Remove redundant virt_to_user() and userptr_t a169d7359 [uaccess] Reduce scope of included uaccess.h header 05ad7833c [image] Make image data read-only to most consumers cd803ff2e [image] Add the concept of a static image 330391001 [image] Move embedded images from .rodata to .data 2d9a6369d [test] Separate read-only and writable CMS test images b6f9e4bab [uaccess] Remove redundant copy_from_user() and copy_to_user() a69c42dd9 [image] Clear recorded replacement image immediately after consuming 9962c0a58 [bofm] Remove userptr_t from BOFM table parsing and updating 080072384 [bofm] Allow BOFM tests to be run without a BOFM-capable device driver 4e909cc2b [build] Remove some long-obsolete unused header files 6c9dc063f [peerdist] Remove never-used peerdist_msg_blk() macro 54c4217bd [peerdist] Remove userptr_t from PeerDist content information parsing 837b77293 [xferbuf] Simplify and generalise data transfer buffers 43fc51629 [prefix] Remove userptr_t from command line image construction c9fb94dba [comboot] Remove userptr_t from COM32 API implementation f001e61a6 [comboot] Remove userptr_t from COMBOOT API implementation ef9711958 [comboot] Remove userptr_t from COMBOOT image parsing 0b45db397 [uaccess] Remove redundant UNULL definition 6ccb6bcfc [bzimage] Remove userptr_t from bzImage parsing 412ad5601 [initrd] Use physical addresses for calculations on initrd locations ef3827cf1 [bzimage] Use image name in debug messages 083e273bb [efi] Add ability to reboot to firmware setup menu 7eaa2daf6 [reboot] Generalise warm reboot indicator to a flags bitmask ba2135d0f [multiboot] Remove userptr_t from Multiboot and ELF image parsing c8c5cd685 [multiboot] Use image name in Multiboot and ELF debug messages 3befb5eb5 [linux] Enable compiler warnings when building the linux_api.o object 024439f33 [linux] Add missing return statement to linux_poll() bd4ca67cf [build] Disable gcc unterminated-string-initializer warnings 15c1111c7 [build] Remove unsafe disable function wrapper from legacy NIC drivers 7741756af [build] Prevent the use of reserved words in C23 b816b816a [build] Fix old-style function definition 58e6729cb [build] Fix typo in xenver.h header guard 4c8bf666f [pnm] Remove userptr_t from PNM image parsing d29651dde [png] Remove userptr_t from PNG image parsing 76a17b098 [fbcon] Avoid redrawing unchanged characters when scrolling aa3cc56ab [fbcon] Remove userptr_t from framebuffer console drivers 4cca1cadf [efi] Remove userptr_t from EFI PE image parsing 338cebfee [pxe] Remove userptr_t from PXE file API implementation 8b3b4f245 [pxe] Remove userptr_t from PXE API call dispatcher c1b558f59 [cmdline] Remove userptr_t from "digest" command 0edbc4c08 [nbi] Remove userptr_t from NBI image parsing 3cb33435f [sdi] Remove userptr_t from SDI image parsing d7c94c4aa [pxe] Remove userptr_t from PXE NBP image parsing 2f11f466e [block] Remove userptr_t from block device abstraction 2742ed5d7 [uaccess] Remove now-obsolete memchr_user() 4f4f6c33e [script] Remove userptr_t from script image parsing 8923a216b [ucode] Remove userptr_t from microcode image parsing 605cff4c8 [ucode] Remove userptr_t from microcode update mechanism f18c1472e [thunderx] Replace uses of userptr_t with direct pointer dereferences 8ac03b4a7 [exanic] Replace uses of userptr_t with direct pointer dereferences e8ffe2cd6 [uaccess] Remove trivial uses of userptr_t 945df9b42 [gve] Replace uses of userptr_t with direct pointer dereferences 839540cb9 [umalloc] Remove userptr_t from user memory allocations 0bf0f8716 [smbios] Remove userptr_t from SMBIOS structure parsing 0b3fc48fe [acpi] Remove userptr_t from ACPI table parsing c059b3417 [deflate] Remove userptr_t from decompression code b89a34b07 [image] Remove userptr_t from image definition e98b84f1b [crypto] Remove userptr_t from CMS verification and decryption 3f8937d2f [crypto] Remove userptr_t from ASN.1 parsers 04d0b2fdf [uaccess] Remove redundant read_user() 050df80bb [uaccess] Replace real_to_user() with real_to_virt() 8c31270a2 [uaccess] Remove user_to_phys() and phys_to_user() 4535548cb [uaccess] Remove redundant user_to_virt() 89fe78868 [uaccess] Remove redundant memcpy_user() and related string functions ef0384918 [uaccess] Remove redundant userptr_add() and userptr_diff() b65f67d44 [uaccess] Change userptr_t to be a pointer type 71174e19d [uaccess] Add explicit casts to and from userptr_t where needed 63d27c631 [uaccess] Rename userptr_sub() to userptr_diff() 453acba7d [time] Use currticks() to provide the null system time 423cdbeb3 [riscv] Map DEL to backspace on the SBI debug console 1291dc39f [cgem] Add a driver for the Cadence GEM NIC 0c482060d [undi] Work around broken ASUSTeK KNPA-U16 server PXE ROM 758a50486 [efi] Inhibit calls to Shutdown() for wireless SNP devices b07cc851f [netdevice] Add the concept of an insomniac network device c88ebf2ac [efi] Allow for custom methods for disconnecting existing drivers eeec6442d [dt] Provide dt_ioremap() to map device registers 99322fd3b [fdt] Add fdt_cells() to read cell-based properties such as "reg" 2c406ec0b [netdevice] Add missing bus type identifier for devicetree devices 424839c58 [crypto] Allow for explicit control of external trust sources 37e9f785b [dt] Add basic concept of a devicetree bus d462aeb0c [fdt] Remove concept of a device tree cursor b1125007c [fdt] Add basic tests for reading values from a flattened device tree db4934617 [fdt] Avoid temporarily modifying path during path lookup c887de208 [fdt] Provide fdt_strings() to read string list properties 69af6f0c3 [fdt] Allow for trailing slashes in path lookups 96dfaa7e7 [crypto] Switch to using python-asn1crypto instead of python-asn1 7e64e9b67 [fdt] Populate boot arguments in constructed device tree d85344888 [fdt] Identify free space (if any) at end of parsed tree 0a48bb321 [x509] Ensure certificate remains valid during x509_append() a289b4b8c [tls] Support fragmentation of transmitted records f115cfcf9 [tls] Send an empty client certificate chain if we have no certificate 5818529f3 [iobuf] Limit automatic I/O buffer alignment to page size 7fe467a46 [tls] Encrypt data in place to reduce memory usage d92551a32 [xfer] Use xfer_alloc_iob() for transmit I/O buffers on stream sockets 3937c893a [isa] Disable legacy ISA device probing by default 4a7f64bf4 [efi] Allow for fact that SNP device may be removed by executed image 18dbd05ed [efi] Check correct return value from efi_pxe_find() 4bcaa3d38 [efi] Disconnect existing drivers on a per-protocol basis 7737fec5c [efi] Define an attachment priority order for EFI drivers be3322475 [efi] Show all drivers claiming support for a handle in debug messages ea5762d9d [efi] Return success from Stop() if driver is already stopped 7adce3a13 [efi] Add various well-known GUIDs encountered in WiFi boot b20f506a7 [efi] Install a device tree for the booted OS, if available 761f43ce1 [fdt] Provide the ability to create a device tree for a booted OS 666929e31 [efi] Create a copy of the system flattened device tree, if present 3860313dd [fdt] Allow for parsing device trees where the length is known in advance 2399c7998 [fdt] Allow for the existence of multiple device trees 09fbebc08 [fdt] Add the "fdt" command cfd93465e [fdt] Add the concept of an FDT image 98f86b4d0 [efi] Add support for installing EFI configuration tables f0caf90a7 [efi] Add flattened device tree header and GUID definitions ec8c5a5fb [efi] Add ACPI and SMBIOS tables as well-known GUIDs 0b606221c [undi] Ensure forward progress is made even if UNDI IRQ is stuck 4134280bc [pxeprefix] Ensure that UNDI IRQ is disabled before starting iPXE e8365f7a5 [pxeprefix] Work around missing type values from PXENV_UNDI_GET_NIC_TYPE 32a940821 [efi] Allow use of typed pointers for efi_open() et al 37897fbd4 [efi] Eliminate uses of HandleProtocol() bac318743 [efi] Use efi_open() for all ephemeral protocol opens 5a5e2a1da [efi] Use efi_open_unsafe() for all explicitly unsafe protocol opens 9dd30f11f [efi] Use efi_open_by_driver() for all by-driver protocol opens 4561a0376 [efi] Use efi_open_by_child() for all by-child protocol opens 358db1561 [efi] Create safe wrappers for OpenProtocol() and CloseProtocol() 48d168012 [efi] Remove the efipci_open() and efipci_close() wrappers 328388532 [efi] Avoid function name near-collision 331bbf507 [efi] Remove spurious close of SNP device parent's device path 8249bbc09 [efi] Use driver name only from driver binding handles in debug messages 02ecb23d1 [efi] Get veto candidate driver name via either component name protocol 756e3907f [efi] Get veto candidate driver name from image handle be5bf0aa7 [efi] Show image address range in veto debug messages 5d64469a9 [efi] Prefer driver name to device path for debug messages 7cda3dbf9 [efi] Attempt to retrieve driver name from image handle for debug messages 1a602c92a [efi] Allow wrapping the global boot services table in situ f68c8b09e [efi] Fix debug wrappers for CloseEvent() and CheckEvent() 37ea181d8 [efi] Ignore path separator characters in virtual filenames 6e4196baf [efi] Prescroll the display after a failed wrapped ExitBootServices() call 8ea8411f0 [efi] Add EFI_RNG_PROTOCOL_GUID as a well-known GUID 42a29d568 [crypto] Update cmsdetach to work with python-asn1 version 3.0.0 829e2d1f2 [rng] Restore state of IRQ 8 and PIE when disabling entropy gathering 8840de409 [pic8259] Return previous state when enabling or disabling IRQs d1133956d [contrib] Update bochsrc.txt to work with current versions ddc2d928d [efi] Accept and trust CA certificates in the TlsCaCertificates variable aa49ce5b1 [efi] Add TLS authentication header and GUID definitions 2a901a33d [efi] Add EFI_GLOBAL_VARIABLE as a well-known GUID da3024d25 [cpio] Allow for the construction of pure directories d6ee9a924 [cpio] Fix calculation of name lengths in CPIO headers 5f3ecbde5 [crypto] Support extracting certificates from EFI signature list images 26a8fed71 [crypto] Allow for parsing of DER data separate from DER images 011c778f0 [efi] Allow efi_guid_ntoa() to be used in non-EFI builds 8706ae36d [efi] Add EFI_SIGNATURE_LIST header and GUID definitions a3ede1078 [efi] Update to current EDK2 headers 32d706a9f [build] Use -fshort-wchar when building EFI host utilities 82fac5162 [efi] Mark UsbHostController.h as a non-imported header be3a78eaf [lkrnprefix] Support a longer version string 12ea8c407 [cpio] Allow for construction of parent directories as needed e7595fe88 [menu] Allow a post-activity timeout to be defined ccd620054 [crypto] Start up RBG on demand if needed b35300fc6 [efi] Increase download timeout for autoexec.ipxe 8e6b914c5 [crypto] Support direct reduction only for Montgomery constant R^2 mod N 5056e8ad9 [crypto] Expose shifted out bit from big integer shifts bd90abf48 [bnxt] Allocate TX rings with firmware input 77cc3ed10 [malloc] Ensure free memory blocks remain aligned 6f076efa6 [malloc] Clean up debug messages c85de315a [crypto] Add definitions and tests for the NIST P-384 elliptic curve bc5f3dbe3 [crypto] Add definitions and tests for the NIST P-256 elliptic curve be9ce4907 [crypto] Add support for Weierstrass elliptic curve point multiplication 66b5d1ec8 [crypto] Add a generic implementation of a Montgomery ladder c2f21a218 [test] Add generic tests for elliptic curve point multiplication c9291bc5c [tls] Allow for NIST elliptic curve point formats df7ec3176 [crypto] Generalise elliptic curve key exchange to ecdhe_key() cc38d7dd3 [crypto] Add bigint_ntoa() for transcribing big integers d88eb0a19 [crypto] Extract bigint_reduce_supremum() from bigint_mod_exp() 83ba34076 [crypto] Allow for relaxed Montgomery reduction c0cbe7c2e [efi] Add EFI_TCG2_PROTOCOL header and GUID definition 8816ddcd9 [efi] Update to current EDK2 headers 97079553b [crypto] Calculate inverse of modulus on demand in bigint_montgomery() 24db39fb2 [gve] Run startup process only while device is open 5202f8334 [crypto] Remove obsolete bigint_mod_multiply() 83ac98ce2 [crypto] Use Montgomery reduction for modular exponentiation 4f7dd7fbb [crypto] Add bigint_montgomery() to perform Montgomery reduction 96f385d7a [crypto] Use inverse size as effective size for bigint_mod_invert() 7c2e68cc8 [crypto] Eliminate temporary working space for bigint_mod_invert() 9cbf5c4f8 [crypto] Eliminate temporary working space for bigint_reduce() 167a08f08 [crypto] Expose carry flag from big integer addition and subtraction da6da6eb3 [crypto] Add bigint_msb_is_set() to clarify code e9a23a5b3 [efi] Ensure local drives are connected when attempting a SAN boot 8fc11d8a4 [build] Allow for per-architecture cross-compilation prefixes 19f44d299 [riscv] Check if seed CSR is accessible from S-mode e0e102ee2 [sbi] Add support for running as a RISC-V SBI payload 7ccd08dbf [build] Allow default platform to vary by architecture d9c0d26e1 [pci] Provide a null PCI API for platforms with no PCI bus 06a933000 [riscv] Add missing volatile qualifiers on timer and seed CSR accesses be0c9788a [riscv] Add support for the seed CSR as an entropy source cd54e7c84 [riscv] Add support for RDTIME as a timer source b0a8eabbf [riscv] Add support for checking CPU extensions reported via device tree 74710b831 [fdt] Add ability to parse unsigned integer properties cc45ca372 [pci] Drag in PCI settings mechanism only when PCI support is present abfa7c3ab [uaccess] Rename UACCESS_EFI to UACCESS_FLAT 33d80b1cd [smbios] Provide a null SMBIOS API for platforms with no concept of SMBIOS 21940425c [riscv] Add support for reboot and power off via SBI b23204b38 [riscv] Add support for the SBI debug console fa1c24d14 [crypto] Add bigint_mod_invert() to calculate inverse modulo a power of two c69f9589c [usb] Expose USB device descriptor and strings via settings c219b5d8a [usb] Add "usbscan" command for iterating over USB devices 2bf16c6ff [crypto] Separate out bigint_reduce() from bigint_mod_multiply() f78c5a763 [crypto] Use architecture-independent bigint_is_set() 7e0bf4ec5 [crypto] Rename bigint_rol()/bigint_ror() to bigint_shl()/bigint_shr() 3f4f84392 [crypto] Eliminate temporary carry space for big integer multiplication 8844a3d54 [arm] Support building as a Linux userspace binary for AArch32 e0282688c [arm] Check PMCCNTR availability before use for profiling 5f7c6bd95 [profile] Standardise return type of profile_timestamp() 3def13265 [crypto] Use constant-time big integer multiplication 59d123658 [gve] Allocate all possible event counters 9bb206863 [efi] Remove redundant EFI_BOOT_FILE definitions c215048dd [riscv] Add support for the RISC-V CPU architecture 68db9a3cb [linux] Allow a sysroot to be specified via SYSROOT=... 670810bed [efi] Use standard va_args macros instead of VA_START() etc 1d43e535f [test] Add tests for 64-bit logical and arithmetic shifts c85ad1246 [efi] Centralise definition of efi_cpu_nap() 5de5d4626 [libc] Centralise architecture-independent portions of setjmp.h a1830ff43 [cloud] Add ability to delete old AMI images 49f9e036f [cloud] Add family and architecture tags to AWS snapshots and images f88761ef4 [ena] Change reported operating system type to "iPXE" 2b8200757 [gdb] Allow CPU architectures to omit support for GDB 804f35cb5 [build] Centralise dummy architecture-specific headers c7f2e7551 [aqc1xx] Add support for Marvell AQtion Ethernet controller 7f75d320f [etherfabric] Fix use of uninitialised variable in falcon_xaui_link_ok() 301644ab4 [test] Add CMS decryption self-tests 5e69cf08d [crypto] Allow cms_decrypt() to be called on unregistered images 72316b820 [image] Add the "imgdecrypt" command 486b15b3c [crypto] Support decryption of images via CMS envelopes 49404bfea [image] Split image_strip_suffix() out from image_extract() 748cab774 [crypto] Add cmsdetach script for detaching encrypted data from CMS messages b053ba198 [test] Update CMS self-test terminology 4b4a362f0 [crypto] Allow for extraction of ASN.1 algorithm parameters bdb5b4aef [crypto] Hold CMS message as a single ASN.1 object 46937a9df [crypto] Remove the concept of a public-key algorithm reusable context acbabdb33 [tls] Group client and server state in TLS connection structure c9cac76a5 [tls] Group transmit and receive state in TLS connection structure be2784649 [gve] Add missing error codes in EUNIQ() list of potential errors ab5743efc [contrib] Remove obsolete rom-o-matic code 633f4f362 [test] Generalise public-key algorithm tests and use okx() 53f089b72 [crypto] Pass asymmetric keys as ASN.1 cursors 950f6b586 [efi] Allow discovery of PCI bus:dev.fn address ranges 7c82ff0b6 [pci] Separate permission to probe buses from bus:dev.fn range discovery 9d9465b14 [crypto] Fix debug name for empty certificate chain validators 97635eb71 [crypto] Generalise cms_signature to cms_message 998edc6ec [crypto] Add OID-identified algorithms for AES ciphers 3b4d0cb55 [crypto] Pass image as parameter to CMS functions 96fb7a0a9 [crypto] Allow passing a NULL certificate store to x509_find() et al d85590b65 [crypto] Centralise mechanisms for identifying X.509 certificates 59e2b03e6 [crypto] Extend asn1_enter() to handle partial object cursors 0e73b48f7 [crypto] Clarify ASN.1 cursor invalidation behaviour 309ac8fd2 [crypto] Do not return an error when skipping the final ASN.1 object a064d3976 [cpuid] Allow hypervisor CPUID leaves to be accessed as settings 121d96b90 [cpuid] Allow reading hypervisor CPUID leaves c117e6a48 [smbios] Allow reading an entire SMBIOS data structure as a setting 60d682409 [smbios] Avoid reading beyond end of constructed SMBIOS setting 0dc8933f6 [cloud] Add utility to read INT13CON partition in Google Compute Engine d2d194bc6 [gve] Increase number of receive buffers to reduce packet loss c7b76e3ad [gve] Add driver for Google Virtual Ethernet NIC 5a9f476d4 [cloud] Add utility for importing images to Google Compute Engine b66e27d9b [ipv6] Expose router address for DHCPv6 leased addresses 77acf6b41 [ipv4] Support small subnets with no directed broadcast address 821bb326f [hci] Remove the generalised widget user interface abstraction 162cc51b6 [form] Reimplement the "login" user interface f417f0b6a [form] Add support for dynamically created interactive forms 1c3c5e2b2 [dynui] Add concept of a secret user interface item 039019039 [dynui] Allow for multiple flags on a user interface item c8e50bb0f [dynui] Generalise mechanisms for looking up user interface items 5719cde83 [dynui] Generalise the concept of a menu to a dynamic user interface 122777f78 [hci] Allow tab key to be used to cycle through UI elements 76e0933d7 [hci] Rename "item" command's first parameter from "label" to "name" bf98eae5d [hci] Split out msg() and alert() from settings UI code bb4a10696 [hci] Draw all widgets on the standard screen e965f179e [libc] Add stpcpy() dc118c536 [hci] Provide a general concept of a text widget set d7e58c5a8 [test] Add test cases for editable strings b01781a2b [hci] Fix semantics of replace_string() to match code comments cb95b5b37 [efi] Veto the Dhcp6Dxe driver on all platforms 40b511244 [hci] Use dynamically allocated buffers for editable strings 27ecc36c0 [efi] Do not attempt to download autoexec.ipxe without a valid base URI 59f27d693 [netdevice] Add "linktype" setting 165995b7e [efi] Restructure handling of autoexec.ipxe script b940d5423 [cachedhcp] Allow cached DHCPACK to apply to temporary network devices b66f6025f [efi] Add the ability to create a temporary MNP network device b52b4a46d [efi] Allow for allocating EFI devices from arbitrary handles 764e34f15 [http] Add error table entry for HTTP 404 Not Found error afae88178 [tftp] Add error table entry for TFTP "file not found" error code 43deab89c [efi] Add error table entry for local filesystem EFI_NOT_FOUND error 19f39bc07 [efi] Report local file errors during download, rather than on opening f39b48d5f [image] Allow opaque URI component to provide image name 37850e0e8 [build] Fix build failures with random versions of gcc 9bbe77669 [efi] Extract basic network settings from loaded image device path 170bbfd48 [efi] Add efi_path_mac() to parse a MAC address from an EFI device path dcad73ca5 [efi] Add support for driving EFI_MANAGED_NETWORK_PROTOCOL devices da5188f3e [efi] Allow for drivers to be located via child handles ca483a196 [efi] Add helper functions for service binding protocols a15ce0018 [efi] Match chainloaded device by uppermost matching handle 390bce951 [efi] Set current working URI from our own device path URI, if present 1a84facf1 [efi] Add efi_path_uri() to parse a URI from an EFI device path 88c2a01e1 [settings] Expose current working URI and directory URI via settings 926816c58 [efi] Pad transmit buffer length to work around vendor driver bugs c11734eee [golan] Use ETH_HLEN for inline header size fa4bda617 [build] Fix building on older versions of gcc bac967d51 [snp] Allocate additional padding for receive buffers 17882e76a [ucode] Add support for updating x86 microcode 1344e13a0 [bios] Provide a multiprocessor API for BIOS a67f913d6 [librm] Add support for installing a startup IPI handler 89bb926a0 [efi] Provide a multiprocessor API for EFI 1ab4d3079 [mp] Define an API for multiprocessor functions df2f23e33 [efi] Update to current EDK2 headers 226531ed3 [ci] Update action versions to silence GitHub warnings 06e229590 [efi] Do not report return status from efi_block_local() 24a855f1f [block] Allow SAN boot device to be identified by filesystem label 62b6d3633 [block] Allow SAN boot device to be identified by an extra filename cea22d76e [block] Allow SAN boot device to be identified by UUID c4471e340 [efi] Add efi_path_guid() utility function 636ccb4ca [block] Allow for additional SAN boot parameters alongside filename b1c13cc43 [efi] Allow booting from local disks via the "sanboot" command 8da22a59e [block] Allow for iteration over SAN device list in drive number order 37edfea72 [efi] Generalise block device boot to support arbitrary EFI handles eb720d222 [efi] Use file system protocol to check for SAN boot filename existence 75c790448 [block] Use drive number as debug message stream ID 1b23d4de2 [efi] Use long forms of device paths in debug messages 7cd73884e [parseopt] Add parse_uuid() for parsing UUID command-line arguments 0eb8fbd0b [settings] Add parsing for UUID and GUID settings types da7b26628 [uuid] Add uuid_aton() to parse a UUID from a string 182ee9093 [efi] Work around broken boot services table manipulation by UEFI shim 43e385091 [eap] Add support for the MS-CHAPv2 authentication method 25ffcd79b [eap] Allow MD5-Challenge authentication method to be disabled 834f319f8 [eap] Add progress debug messages ee6185dcf [efi] Ignore new LoongArch PC-relative relocations and relaxations e5f3ba0ca [drivers] Sort PCI_ROM() entries numerically 582132fe3 [crypto] Force inlining of trivial wrapper functions 075292cc2 [crypto] Add implementation of MS-CHAPv2 authentication 929f06a76 [crypto] Allow for multiple cross-signed certificate download attempts 943d75b55 [crypto] Add x509_is_self_signed() helper function 3e721e0c0 [crypto] Add x509_truncate() to truncate a certificate chain e10dfe5dc [list] Add list_for_each_entry_safe_continue() 88b291d64 [list] Add list_is_head_entry() 94b39fbe9 [build] Fix build failures with older versions of gcc 0f5abd8b1 [libc] Allow build_assert() failures to be ignored via NO_WERROR=1 a846c4ccf [bnxt] Add support for BCM957608 e7ae51b0d [crypto] Add implementation of the DES cipher af4583b21 [test] Remove dummy initialisation vector for ECB-mode AES tests 36a27b22b [crypto] Fix stray references to AES 0cc0f4744 [tls] Tidy up error handling flow in tls_send_plaintext() 65d69d33d [efi] Fix hang during ExitBootServices() 963ec1c4f [tls] Add ECDHE cipher suites 8f6a9399b [tls] Make key exchange algorithms selectable via build configuration a881a2606 [crypto] Add X25519 OID-identified algorithm and TLS named curve b234226db [tls] Add support for Ephemeral Elliptic Curve Diffie-Hellman key exchange 8e2469c86 [tls] Split out Diffie-Hellman parameter signature verification 989dbe0bc [tls] Generate key material after sending ClientKeyExchange 6f70e8be8 [tls] Restructure construction of ClientHello message 17135c83f [crypto] Add an abstraction of an elliptic curve 27398f136 [crypto] Check for all-zeros result from X25519 key exchange de8a0821c [bnxt] Add support for additional chip IDs 2eea04c02 [crypto] Add X25519 key exchange algorithm 908174ec7 [loong64] Replace broken big integer arithmetic implementations bac13ba1f [crypto] Add bigint_swap() to conditionally swap big integers 13e390d54 [crypto] Add bigint_copy() as a convenient wrapper macro 26d3ef062 [crypto] Allow multiplicand and multiplier to differ in size 4b7d9a6af [libc] Replace linker_assert() with build_assert() 6d29415c8 [libc] Make static_assert() available via assert.h 6ca597eee [build] Fix building with newer binutils e66552eee [build] Remove unnecessary ".text" directives 08fcb0e8f [eap] Add support for the MD5-Challenge authentication type c6226f104 [eap] Add support for sending an EAP identity 0abb3e85e [eap] Ignore any received EAP responses 4ed7a5718 [build] Reduce scope of wildcard .gitignore rules fa6221323 [smbios] Support scanning for the 64-bit SMBIOS3 entry point 119c415ee [intel] Add PCI ID for I219-LM (23) 9e92c3989 [efi] Add potentially missing relocation types 3fc1b407d [efi] Fix Coverity warning about unintended sign extension 0958e0146 [efi] Add relocation types generated by clang 337880dea [build] Use SOURCE_DATE_EPOCH for FAT serial number if it exists f22879ca9 [efi] Allow compiling elf2efi with clang 98dd25a3b [efi] Avoid modifying PE/COFF debug filename a147245f1 [efi] Extend PE header size to cover space up to first section c3dd3168c [efi] Fix dependency list construction in EDK2 header import script b829b1750 [efi] Maximise image base address 03ff1bb99 [efi] Do not assume canonical PE section ordering 18582a05f [efi] Treat 16-bit sections as hidden in hybrid binaries 6714b20ea [efi] Place PE debug information in a hidden section b37d89db9 [efi] Fix recorded overall size of headers in NT optional header cc858acd3 [efi] Write out PE header only after writing sections b30a0987e [efi] Use load memory address as file offset for hybrid binaries 3d8a61465 [efi] Mark PE images as large address aware a9e89787d [efi] Set NXCOMPAT bit in PE header 678a60f61 [efi] Treat writable sections as data sections 8c8ead253 [efi] Update to current EDK2 headers 77b07ea4f [cloud] Add utility script to read iPXE output from INT13CON partition d8f9c221e [cloud] Add ability to overwrite existing AMI images 595b1796f [eapol] Limit number of EAPoL-Start packets transmitted per attempt 1bd01b761 [eapol] Delay EAPoL-Start while waiting for EAP to complete 5524bb983 [pci] Require discovery of a PCI device when determining usable PCI APIs 36e1a559a [pci] Check that ECAM configuration space is within reachable memory 1f3a37e34 [pci] Cache ECAM mapping errors 74ec00a9f [pci] Handle non-zero starting bus in ECAM allocations f88320313 [pci] Force completion of ECAM configuration space writes 115707c0e [iphone] Add missing va_start()/va_end() around reused argument list ff0f86048 [libc] Use wall clock time as seed for the (non-cryptographic) RNG 8b14652e5 [eapol] Send EAPoL-Start packets to trigger EAP authentication 56cc61a16 [eap] Define a supplicant model for EAP and EAPoL cac3a584d [fcoe] Use driver-private data to hold FCoE port structure 8cbf24819 [vmware] Use driver-private data to hold GuestInfo settings block 8b1d34bad [ipv6] Use driver-private data to hold link-local IPv6 settings block cc1e27e52 [lldp] Use driver-private data to hold LLDP settings block ae4e85bde [netdevice] Allocate private data for each network upper-layer driver eeb7cd56e [netdevice] Remove netdev_priv() helper function 0aa2e4ec9 [librm] Use explicit operand size when pushing a label address 9e99a55b3 [virtio] Fix implementation of vpm_ioread32() c1834f323 [dhcp] Request NTP server option d5c08f78b [ntp] Define NTP server setting c30b71ee9 [console] Restore compatibility with "--key" values in existing scripts f3036fc21 [linux] Set a default MAC address for tap devices 59d065c9a [linux] Fix error control flow in af_packet_nic_probe() 48ae5d536 [linux] Fix error control flow in tap_probe() 6701d91c5 [netdevice] Stop link block timer when device is closed b5b60ea33 [interface] Fix debug message values for temporary interfaces 824441069 [build] Inhibit more linker warnings about an implied executable stack daa9e54ab [build] Silence the "creating blib.a" message 3ef4f7e2e [console] Avoid overlap between special keys and Unicode characters cc07ed7c7 [console] Avoid overlap between remapping flags and character values 6f57d9193 [build] Use separate code segment if supported by linker e17568ad0 [build] Inhibit linker warnings about an implied executable stack 2524a6055 [build] Avoid using multiple target patterns in pattern rules 280942a92 [loong64] Add support for building EFI binaries 6d98e0ca4 [loong64] Add CPU sleeping API for EFI LoongArch64 0c67a3632 [loong64] Add I/O API for LoongArch64 c57887bfc [ioapi] Centralise definitions for dummy PIO 18af66970 [arm] Add missing arch/arm/core source directory cfe65aa82 [arm] Remove redundant inclusion of io.h ae435cb4c [efi] Process veto objects in reverse order of enumeration f8a0d1c0b [efi] Check for protocols opened by vetoed driver and image handles f0b102550 [efi] Unload vetoed drivers by image handle rather than driver handle c832580f1 [efi] Pass more detailed driver information to veto methods 9a118322a [efi] Show manufacturer in veto debug output 2689a6e77 [efi] Always poll for TX completions 4fa4052c7 [efi] Provide read-only access to EFI variables via settings mechanism 25a3d3aca [efi] Veto the VMware UefiPxeBcDxe driver 8ab9bdca4 [efi] Include protocol interface address in debug output 12776acce [efi] Add UefiPxeBcDxe module GUID 367e022b5 [efi] Add HttpBootDxe module GUID b9a60fb0b [efi] Add new IScsiDxe module GUID a64764d10 [efi] Add HTTP header and GUID definitions bc75bbaf1 [efi] Add DNS headers and GUID definitions e7adf5701 [efi] Add Ip4Config2 header and GUID definition 92ab2de3a [efi] Add IPv6 versions of existing IPv4 headers and GUID definitions 3184ff74e [efi] Update to current EDK2 headers 9cb0a4b8e [efi] Disable static assertions in EFI headers on non-EFI platforms b0093571f [crypto] Add support for PKCS#8 private key format 6a7f560e6 [efi] Implement "shim" as a dummy command on non-EFI platforms 5b4318143 [efi] Support versions of shim that perform SBAT verification d2e1601cf [efi] Separate GetMemoryMap() wrapper from shim unlocker 95b8338f0 [efi] Add "shim" command 28184b7c2 [efi] Add support for executing images via a shim 3c214f046 [efi] Add definitions for the UEFI shim lock protocol ce2200d5f [efi] Add efi_asprintf() and efi_vasprintf() c4a8d9038 [image] Generalise concept of selected image 79d85e29a [efi] Attempt to detect EFI images that fail Secure Boot verification d27cd8196 [ci] Work around Ubuntu packaging metadata issues 03eea19c1 [efi] Allow currently selected image to be opened as "grub*.efi" 0bb0aea87 [efi] Allow currently executing image to be opened via virtual filesystem f9beb20e9 [image] Allow for images to be hidden from lists of all images f93e6b712 [efi] Show original filenames in debug messages 22cc65535 [efi] Allow downloaded images to take precedence over constructed files bd1369744 [efi] Allow for sections to be excluded from the generated PE file 9fb28080d [efi] Allow elf2efi to be used for hybrid binaries 1e4c3789e [efi] Shrink size of data directory in PE header 0d04635ef [efi] Remove redundant zero padding in PE header 1d1cf74a5 [tls] Handle fragmented handshake records aa368ba52 [tls] Pass I/O buffer to received record handlers 2c6a15d2a [tls] Clean up change cipher spec record handling 09e8a1540 [efi] Claim fixed device paths by uninstalling device path protocol bf25e23d0 [intel] Add workaround for I210 reset hardware bugs 8f1c12011 [dhcp] Unregister ProxyDHCP and PXEBS settings on a successful DHCPACK 54fcb7c29 [efi] Use image name instead of pointer value in debug messages 9e1f7a365 [image] Always unregister currently executing image e51e7bbad [image] Consistently use for_each_image() to iterate over images 523788ccd [intelx] Add PCI IDs for Intel 82599 10GBASE-T NIC 96bb6ba44 [params] Allow for arbitrary HTTP request headers to be specified 33cb56cf1 [params] Rename "form parameter" to "request parameter" 60531ff6e [http] Use POST method only if the form parameter list is non-empty 04e60a278 [efi] Omit EFI_LOAD_FILE2_PROTOCOL for a zero-length initrd 471599dc7 [efi] Split out EFI_RNG_PROTOCOL as a separate entropy source 7d71cf318 [rng] Allow for entropy sources that fail during startup tests 6625e49ce [tables] Allow any lvalue to be used as a table iterator 9f17d1116 [rng] Allow entropy source to be selected at runtime 2733c4763 [iscsi] Limit maximum transfer size to MaxBurstLength cff857461 [rng] Add RDRAND as an entropy source 6a004be0c [efi] Support the initrd autodetection mechanism in newer Linux kernels cf9ad00af [efi] Fix debug message when reading from EFI virtual files 76a286530 [image] Check delimiters when parsing command-line key-value arguments 3c83843e1 [rng] Check for several functioning RTC interrupts be8ecaf80 [eisa] Check for system board presence before probing for slots 62a1d5c0f [loong64] Add initial support for LoongArch64 84cb77439 [test] Include build architecture in test suite banner bfa5262f0 [ci] Cache downloaded packages for GitHub actions ef0a6f479 [ioapi] Move PAGE_SHIFT to bits/io.h c6901792f [build] Allow for per-architecture unprefixed constant operand modifier a2bed4393 [xen] Allow for platforms that have no Xen support 7cc305f7b [efi] Enable NET_PROTO_LLDP by default dc16de320 [lldp] Add support for the Link Layer Discovery Protocol 6c0335adf [ci] Update to ubuntu-22.04 GitHub actions runner 8450fa4a7 [dhcp] Ignore DHCPNAK unless originating from the selected DHCP server 4e456d992 [efi] Do not attempt to drive PCI bridge devices d405a0bd8 [util] Add support for LoongArch64 binaries 49c13e81b [ci] Update to actions/checkout@v3 to silence GitHub warnings 8b645eea1 [xen] Update to current Xen headers 6f250be27 [efi] Allow autoexec script to be located alongside iPXE binary b6304f298 [realtek] Explicitly disable VLAN offload aa85c2918 [efi] Update to current EDK2 headers 66a2ff442 [tests] Verify ability to sleep the CPU 3bcd0d327 [dhcp] Add IANA-defined values for all current EFI client architectures 4bb521a8c [efi] Accept a command line passed to an iPXE image via LoadOptions b9be45401 [la64] Import LoongArch64 ProcessorBind.h from EDK2 headers e3d543437 [efi] Update to current EDK2 headers 137ca5d87 [efi] Mark ConsoleControl.h as a non-imported header 900379594 [efi] Remove deleted directories from EDK2 header import script 91944c634 [efi] Allow for whitespace before #include in imported EDK2 header files dac41fc4e [efi] Detect SPDX licence identifiers in imported EDK2 headers 5220bdc52 [legal] Add missing FILE_LICENCE declaration to efi_path.c 38f54fb41 [legal] Add support for the BSD-2-Clause-Patent licence 5bf8b1152 [efi] Build util/efirom as a host-only binary 2d180ce23 [tcp] Update maximum window size to 2MB 4bffe0f0d [pxe] Discard queued PXE UDP packets when under memory pressure c5426cdaa [golan] Add new PCI ID for NVIDIA BlueField-3 network device e72670ad7 [pxe] Avoid drawing menu items on bottom row of screen 68734b9a4 [efi] Bind to only the topmost instance of the SNP or NII protocols 2fef0c541 [efi] Extend efi_locate_device() to allow searching up the device path 1cd0a248c [efi] Add efi_path_prev() utility function 204d39222 [efi] Add efi_path_terminate() utility function fcfb70bfb [arm] Inhibit linker warnings about an implied executable stack c5e1f007a [arm] Use -mfloat-abi=soft only for EFI builds 9de6c45dd [arm] Use -fno-short-enums for all 32-bit ARM builds 8f59911b2 [arm] Support building as a Linux userspace binary for AArch64 2061d658b [dhcp] Simplify platform-specific client architecture definitions 2ef5f5e05 [build] Move -Ulinux to common Makefile 475c0dfa8 [linux] Centralise the linker script for Linux binaries a99e435c8 [efi] Do not rely on ProcessorBind.h when building host binaries 6b977d125 [ena] Allocate an unused Asynchronous Event Notification Queue (AENQ) 08740220b [netdevice] Ensure consistent interpretation of "netX" device name 2dcef4b7a [efi] Create VLAN autoboot device automatically f07630c74 [vlan] Support automatic VLAN device creation 5a2fa6040 [autoboot] Include VLAN tag in filter for identifying autoboot device c4c03e5be [netdevice] Allow duplicate MAC addresses 47af48012 [netdevice] Separate concept of scope ID from network device name index ab1954638 [efi] Disable receive filters to work around buggy UNDI drivers 7147532c3 [cachedhcp] Retain cached DHCPACK after startup if not already consumed 60b5532cf [cachedhcp] Include VLAN tag in filter for applying cached DHCPACK b9571ca12 [efi] Add efi_path_vlan() utility function 099e4d39b [efi] Expose efi_path_next() utility function 0f3ace92c [efi] Allow passing a NULL device path to path utility functions d879c8e4d [efi] Provide VLAN configuration protocol 5e62b4bc6 [vlan] Allow external code to identify VLAN priority as well as tag b0ded89e9 [build] Disable dangling pointer checking for GCC 54c4c1d40 [build] Disable array bounds checking for GCC 563bff472 [intel] Add PCI ID for I219-V and -LM 16,17 2ae535532 [pci] Backup and restore standard config space across PCIe FLR ca2be7e09 [pci] Allow PCI config space backup to be limited by maximum offset 688646fe6 [tls] Add GCM cipher suites f5c829b6f [tests] Verify ability to perform in-place encryption and decryption 4acded7e5 [crypto] Support in-place decryption for GCM ciphers 63fdd9b58 [tests] Verify ability to reset cipher initialisation vector 63577207a [crypto] Ensure relevant GCM cipher state is cleared by cipher_setiv() 7256a6eb2 [tls] Allow handshake digest algorithm to be specified by cipher suite 51ecc0549 [tls] Always send maximum supported version in ClientHello 54d83e92f [tls] Add support for AEAD ciphers 186306d61 [tls] Treat invalid block padding as zero length padding 634a86093 [tls] Allow for arbitrary-length initialisation vectors c453b4c28 [tls] Add MAC length as a cipher suite parameter b6eef1485 [tls] Abstract out concept of a TLS authentication header 6a360ebfd [tls] Ensure cipher alignment size is respected 30243ad73 [crypto] Add concept of cipher alignment size d1bc872a2 [tls] Formalise notions of fixed and record initialisation vectors f8565a655 [tls] Remove support for TLSv1.0 7b60a4875 [efi] Clear DMA-coherent buffers before mapping f48b01cb0 [bzimage] Fix parsing of "vga=..." when not at end of command line 8fce26730 [crypto] Add block cipher Galois/Counter mode of operation da81214ce [crypto] Add concept of authentication tag to cipher algorithms 0c383bf00 [crypto] Add concept of additional data to cipher algorithms 8e478e648 [crypto] Allow initialisation vector length to vary from cipher blocksize 52f72d298 [crypto] Expose null crypto algorithm methods for reuse 2c7824273 [tls] Add support for DHE variants of the existing cipher suites 6b2c94d3a [tls] Add support for Ephemeral Diffie-Hellman key exchange ea33ea33c [tls] Add key exchange mechanism to definition of cipher suite 80c45c5c7 [tls] Record ServerKeyExchange record, if provided 028aac99a [tls] Generate pre-master secret at point of sending ClientKeyExchange 1a7317e7d [tls] Generate master secret at point of sending ClientKeyExchange 18b861024 [crypto] Add Ephemeral Diffie-Hellman key exchange algorithm 007d3cb80 [crypto] Simplify internal HMAC API 88419b608 [test] Add HMAC self-tests 081b3eefc [ena] Assign memory BAR if left empty by BIOS 3aa6b79c8 [pci] Add minimal PCI bridge driver 649176cd6 [pci] Select PCI I/O API at runtime for cloud images 9448ac544 [bios] Allow pcibios_discover() to return an empty range be667ba94 [pci] Add support for the Enhanced Configuration Access Mechanism (ECAM) ff228f745 [pci] Generalise pci_num_bus() to pci_discover() 56b30364c [pci] Check for wraparound in callers of pci_find_next() 8fc3c26ea [pci] Allow pci_find_next() to return non-zero PCI segments 6459e3b7b [linux] Add missing PROVIDE_PCIAPI_INLINE() macros 8f5fc1614 [ipv6] Ignore SLAAC on prefixes with an incompatible prefix length bc19aeca5 [ipv6] Fix mask calculation when prefix length is not a multiple of 8 131daf1aa [test] Validate constructed IPv6 routing table entries a80124456 [ena] Increase receive ring size to 128 entries 3b81a4e25 [ena] Provide a host information page 9f81e97af [ena] Specify the unused completion queue MSI-X vector as 0xffffffff 6d2cead46 [ena] Allow for out-of-order completions 856ffe000 [ena] Limit submission queue fill level to completion queue size c5af41a6f [intelxl] Explicitly request a single queue pair for virtual functions 04879352c [intelxl] Allow for admin commands that trigger a VF reset 491c075f7 [intelxl] Negotiate virtual function API version 1.1 b52ea2084 [intelxl] Show virtual function packet statistics for debugging cad1cc6b4 [intelxl] Add driver for Intel 100 Gigabit Ethernet NICs 6871a7de7 [intelxl] Use admin queue to set port MAC address and maximum frame size 727b034f1 [intelxl] Use admin queue to get port MAC address 06467ee70 [intelxl] Defer fetching MAC address until after opening admin queue d6e36a2d7 [intelxl] Set maximum frame size to 9728 bytes as per datasheet 99242bbe2 [intelxl] Always issue "clear PXE mode" admin queue command faf26bf8b [intelxl] Allow expected admin queue command errors to be silenced f0ea19b23 [intelxl] Increase data buffer size to 4kB fb69d1400 [intelxl] Separate virtual function driver definitions c220b93f3 [intelxl] Reuse admin command descriptor and buffer for VF responses 67f8878e1 [intelxl] Handle admin events via a callback 9e46ffa92 [intelxl] Rename 8086:1889 PCI ID to "iavf" ef7066755 [intelxl] Increase receive descriptor ring size to 64 entries 9f5b9e3ab [intelxl] Negotiate API version for virtual function via admin queue b4216fa50 [intelxl] Use non-zero MSI-X vector for virtual function interrupts 1b61c2118 [intelxl] Fix invocation of intelxlvf_admin_queues() a202de385 [intelxl] Use function-level reset instead of PFGEN_CTRL.PFSWR 0965cec53 [pci] Generalise function-level reset mechanism 9dfcdc04c [intelxl] Update list of PCI IDs d8014b180 [intelxl] Include admin command response data buffer in debug output 319caeaa7 [intelxl] Identify rings consistently in debug messages 814aef68c [intelxl] Add missing padding bytes to receive queue context 725f0370f [intelxl] Fix bit width of function number in PFFUNC_RID register 5d3fad5c1 [intelxl] Fix retrieval of switch configuration via admin queue d3c8944d5 [acpi] Expose system MAC address via ${sysmac} setting d72c8fdc9 [cachedhcp] Allow cached DHCPACK to override a temporary MAC address 87f1796f1 [ecm] Treat ACPI MAC address as being a non-permanent MAC address 70995397e [cloud] Allow aws-import script to run on Python 3.6 f58b5109f [acpi] Support the "_RTXMAC_" format for ACPI-based MAC addresses 614c3f43a [acpi] Add MAC address extraction self-tests 1e1b9593e [linux] Add stub phys_to_user() implementation 27825e555 [acpi] Allow for the possibility of overriding ACPI tables at link time dd3547543 [efi] Support Unicode character output via framebuffer console ba93c9134 [fbcon] Support Unicode character output 2ff3385e0 [efi] Support Unicode character output via text console 7e9631b60 [utf8] Add UTF-8 accumulation self-tests 3cd3a7326 [utf8] Add ability to accumulate Unicode characters from UTF-8 bytes 2acdc9299 [dns] Always start DNS queries using the first configured DNS server bc5c612f7 [console] Include mappings for AltGr-Shift- 304333dac [console] Support changing keyboard map at runtime 674963e2a [settings] Always process all settings applicators 11e17991d [console] Ensure that US keyboard map appears at start of linker table 252cff5e9 [xsigo] Avoid storing unused uninitialised fields in gateway address 04288974f [pci] Ensure that pci_read_config() initialises all fields 5d22307c4 [image] Do not clear current working URI when executing embedded image 419b2e71d [console] Fix definition of unreachability for remapped keys 4a37b0500 [console] Add Swedish "se" keymap 5aee6b81d [build] Avoid invoking genkeymap.py via Perl 510f9de0a [console] Ensure that all ASCII characters are reachable in all keymaps 429d4beb8 [console] Remove "az" keymap a7a79ab12 [console] Fix unreachable characters in "mt" keymap 164db2cc6 [console] Fix unreachable characters in "il" keymap c7d781929 [console] Treat dead keys as producing their ASCII equivalents e1cedbc0d [console] Support AltGr to access ASCII characters via remapping f2a59d597 [console] Centralise handling of key modifiers 871dd236d [console] Allow for named keyboard mappings 115032159 [tables] Add ability to declare static table start and end markers 0bbd89678 [console] Handle remapping of scancode 86 3f05a82fe [console] Update genkeymap to work with current databases 0979b3a11 [efi] Support keyboard remapping via the EFI console eb92ba0a4 [usb] Handle upper/lower case and Ctrl- after applying remapping 468980db2 [usb] Support keyboard remapping via the native USB keyboard driver fa708015e [console] Avoid attempting to remap numeric keypad on BIOS console f51a62bc3 [console] Generalise bios_keymap() as key_remap() 64113751c [efi] Enable IMAGE_GZIP by default for AArch64 bc35b24e3 [prefix] Fix use of writable code segment on 486 and earlier CPUs 6ba671acd [efi] Attempt to fetch autoexec script via TFTP ec746c000 [efi] Allow for autoexec scripts that are not located in a filesystem e814d3390 [uri] Allow for relative URIs that include colons within the path f4f9adf61 [efi] Include Secure Boot Advanced Targeting (SBAT) metadata fbbdc3926 [build] Ensure version.%.o is always rebuilt as expected 53a5de364 [doc] Update user-visible ipxe.org URIs to use HTTPS 91c77e259 [efi] Do not align VirtualSize for .reloc and .debug sections f43c2fd69 [settings] Support formatting UUIDs as little-endian GUIDs 9062544f6 [efi] Disable EFI watchdog timer when shutting down to boot an OS 562c74e1e [efi] Run ExitBootServices shutdown hook at TPL_NOTIFY 0f4cc4b5a [build] Include EFI system partition table entry in isohybrid images a046da21a [efi] Raise TPL during driver unload entry point 3ad27fbe7 [intel] Add PCI ID for Intel X553 0x15e4 b6045a8cb [efi] Modify global system table when wrapping a loaded image 51612b6e6 [efi] Do not attempt to use console output after ExitBootServices() 236299baa [xhci] Avoid DMA during shutdown if firmware has disabled bus mastering 1844aacc8 [uri] Retain original encodings for path, query, and fragment fields 85eb961bf [xhci] Allow for permanent failure of the command mechanism f24a2794e [virtio] Update driver to use DMA API 2265a6519 [readline] Extend maximum read line length to 1024 characters 05a76acc6 [ecm] Use ACPI-provided system-specific MAC address if present 91e147213 [ecm] Expose USB vendor/device information to ecm_fetch_mac() 0cc4c42f0 [acpi] Allow for extraction of a MAC address from the DSDT/SSDT 02ec659b7 [acpi] Generalise DSDT/SSDT data extraction logic e09e1142a [efi] Record cached ProxyDHCPOFFER and PXEBSACK, if present db6310c3e [efi] Use zero for PCI vendor/device IDs when no applicable ID exists b33cc1efe [build] Fix genfsimg to work with FATDIR with space 4d180be51 [cloud] Retry DHCP aggressively in AWS EC2 c64dfff0a [efi] Match signtool expectations for file alignment 8d08300ad [libc] Allow for externally-defined LITTLE_ENDIAN and BIG_ENDIAN constants 2690f7309 [uri] Make URI schemes case-insensitive 4aa037582 [rdc] Add driver for RDC R6040 embedded NIC 5622575c5 [realtek] Work around hardware bug on RTL8211B 0688114ea [cloud] Show ifstat output after a failed boot attempt 9b6ad2d88 [peerdist] Assume that most recently discovered peer can be reused 51c88a4a6 [build] Fix building on broken versions of GNU binutils bf4ccd426 [build] Ensure build ID is deterministic 3c040ad38 [efi] Veto the Itautec Ip4ConfigDxe driver 3dd1989ac [libc] Match standard prototype for putchar() 52300ccf9 [base64] Include terminating NUL within base64 character array 92807f575 [rndis] Fix size of reserved fields 065dce8d5 [ath5k] Avoid returning uninitialised data on EEPROM read errors f3f568e38 [crypto] Add memory output constraints for big-integer inline assembly 74c54461c [build] Use SOURCE_DATE_EPOCH for isohybrid MBR ID if it exists 0d68d7151 [build] Use SOURCE_DATE_EPOCH for .iso timestamps if it exists e5f025517 [efi] Provide an "initrd.magic" file for use by UEFI kernels ef9953b71 [efi] Allow for non-image-backed virtual files bfca3db41 [cpio] Split out bzImage initrd CPIO header construction fc8bd4ba1 [x509] Use case-insensitive comparison for certificate names 661093054 [libc] Add strncasecmp() 059c4dc68 [bnxt] Use hexadecimal values in PCI_ROM entries adb2ed907 [intel] Add PCI ID for I219-V and -LM 10 to 15 d7bc9e9d6 [image] Support archive image formats independently of "imgextract" command 62f732207 [image] Propagate trust flag to extracted archive images 191f8825c [image] Allow single-member archive images to be executed transparently a6a8bb1a9 [undi] Read TSC only when profiling 05fcf1a2f [rng] Check for TSC support before using RTC entropy source 13c1abe10 [prefix] Specify i486 architecture for LZMA decompressor 866fa1ce7 [gzip] Add support for gzip archive images d093683d9 [zlib] Add support for zlib archive images 5c9c8d2b9 [image] Add "imgextract" command for extracting archive images de4f31cdc [image] Provide image_set_len() utility function 106f4c539 [cloud] Allow multiple images to be imported simultaneously 1dfc05622 [cloud] Attempt to include CPUID_SETTINGS only for x86 builds 438513f6f [cloud] Autodetect CPU architecture from AMI disk image 6dad316e6 [cloud] Use a sortable default AMI name e994237c0 [cloud] Add ability to generate Dokuwiki table of AMI images 323af9ee8 [settings] Add --timeout option to "read" command b2501dd12 [readline] Add an optional timeout to readline_history() 56f7d44fd [efi] Show ACPI address space descriptor ranges in debug messages 3efdbef2f [efi] Always map full length of coherent DMA buffer allocation e4afaa224 [build] Fix genfsimg to build ISO with long filenames 614d99eba [xen] Avoid infinite loop on allocation failure in xenstore_response() 85d179f2c [xen] Support scatter-gather to allow for jumbo frames 8ca43ccbc [int13] Do not report INT 13 extension support for emulated floppies 3ae83222c [cloud] Enable "poweroff" command in cloud images 78749542f [netdevice] Ensure driver transmit() and poll() will not be re-entered 0be8491b7 [pci] Avoid scanning nonexistent buses when using PCIAPI_DIRECT c0346dbb4 [intel] Add additional PCI device ID to table 94245624e [efi] Mark PE .reloc and .debug sections as discardable f1e9e2b06 [efi] Align EFI image sections by page size 1cc875651 [efi] Discard .pci_devlist.* sections for EFI images 1192edf39 [dhcp] Handle DHCPNAK by returning to discovery state 7c8fc2cae [linux] Fail at link time if building slirp.linux without libslirp 65bd5c05d [linux] Do not assume that stat() works on sysfs files 1c4917b6a [linux] Validate length of ACPI table read from sysfs 50d13907c [linux] Place -lslirp at end of linker search list 69ecab263 [linux] Use fstat() rather than statx() 2a2909cd1 [linux] Use generic sysfs mechanism to read SMBIOS table 681600680 [linux] Use generic sysfs mechanism to read ACPI tables 5c8a9905c [linux] Add a generic function for reading files from sysfs 976839ae4 [linux] Free cached ACPI tables on shutdown 3a5840012 [dns] Reduce debug verbosity for DNS server list 7b963310a [linux] Allow arbitrary settings to be applied to Linux devices 8055d5c48 [linux] Add missing pci_num_bus() stub 3b8aff94b [build] Fix building on older versions of gcc 2b5d3f582 [slirp] Add libslirp driver for Linux 916ebef19 [build] Allow __asmcall to be used as a type attribute c09b62797 [linux] Provide ACPI settings via /sys/firmware/acpi/tables 9776f6ece [acpi] Allow for platforms that provide ACPI tables individually d175936b7 [acpi] Eliminate redundant acpi_find_rsdt() in acpi_sx() 0956fb52c [acpi] Use a fixed colour for debug messages f309d7a7b [linux] Use host glibc system call wrappers 040cdd0c6 [linux] Add a prefix to all symbols to avoid future name collisions 16d95227a [bitops] Provide an explicit operand size for bit test instructions b76281a88 [efi] Compress EFI ROM images 900f1f98d [librm] Test for FXSAVE/FXRSTOR instruction support e63b8c330 [librm] Add missing __asmcall on init_idt() 22bb29eab [prefix] Add a generic raw image prefix 8446a439b [initrd] Allow for zero-length initrd files 4039b54ba [cloud] Do not enable serial console on EFI platforms cd3de55ea [efi] Record cached DHCPACK from loaded image's device handle, if present d562339fc [efi] Defer autoboot link-layer address and autoexec script probing e39cd79a0 [efi] Split out autoexec script portions of efi_autoboot.c 057674bb1 [pxe] Split out platform-independent portions of cachedhcp.c 19d0fab40 [ath5k] Add missing AR5K_EEPROM_READ in ath5k_eeprom_read_turbo_modes fa012dd02 [cloud] Enable IPv6 and HTTPS in cloud boot images d16535aa4 [cloud] Add utility for importing images to AWS EC2 1b99ba2a9 [build] Work around stray sections introduced by some binutils versions 83516ba7f [cloud] Use PCIAPI_DIRECT for cloud images 004924336 [ena] Switch to two-phase reset mechanism c160fb259 [build] Use .balign directive instead of .align b539e9a7e [build] Remove support for building with the Intel C compiler df16df2c8 [build] Report detailed errors when unable to find a usable mkisofs d79f504c0 [ci] Disable redundant scheduled execution of Coverity Scan 831f17f66 [ci] Disable Travis CI 1259580dd [ci] Add GitHub action for Coverity Scan eeca29a1e [ci] Add GitHub action for build testing e8393c372 [build] Work around distros that use -fcf-protection=full by default e80299c56 [build] Work around -fPIE patched versions of gcc on all architectures bfb72ec23 [build] Avoid spurious "make clean" when building for the first time 885c6d6e9 [efi] Fix erroneous comparison of a pointer against userptr_t 5bdb75c9d [contrib] Update bochsrc.txt to work with current versions 1af0fe04f [hermon] Add support for ConnectX-3 based cards 0c94659a8 [autoboot] Avoid closing and immediately reopening network device 6f1cb791e [hermon] Avoid parsing length field on completion errors 8747241b3 [hermon] Make hermon_dump_xxx() functions no-ops on non-debug builds 410566cef [hermon] Minimise reset time 7b2b35981 [hermon] Throttle debug output when sensing port type 299c671f5 [hermon] Add a debug notice when initialization is complete 8b07c88df [hermon] Add support for port management event d948ac6c6 [hermon] Adjust Ethernet work queue size e62c3e351 [hermon] Use reset value suitable for ConnectX-3 2e3d5909e [hermon] Clean up whitespace in hermon.c 79031fee2 [iscsi] Update link to iBFT reference manual def46cf34 [hermon] Limit link poll frequency in DOWN state ba20ba427 [build] Avoid using awk to format build ID as hexadecimal 3a2411b43 [build] Avoid using sha1sum when calculating build ID 82dbca493 [build] Allow BIOS linker script to be used with FreeBSD linker 1fea8ce06 [build] Check for broken elftoolchain version of objcopy fe52f8e8b [build] Avoid modifying load addresses when stripping .zinfo section d8dc06fbf [build] Replace random build ID with a deterministic one bc4979e2c [build] Use $(shell ...) to invoke BUILD_ID_CMD 9d000c9fd [build] Use SOURCE_DATE_EPOCH if it exists 6c91eebd0 [build] Use recursive deletion for "make clean" 5e260c73f [build] Avoid shell brace expansion in "make clean" f034ae59f [build] Allow elf2efi.c to build on FreeBSD 25b675c3d [build] Ensure that isolinux.bin is modifiable 9557497e7 [build] Add syslinux search locations used on FreeBSD f4fcd000a [build] Drop timestamps from .a file 43d72d008 [hermon] Perform clean MPT unmap on device shutdown 699b9f1d1 [hermon] Use Ethernet MAC as eIPoIB local EMAC 6cb12ee2b [hermon] Increase polling rate for command completions 7d32225b5 [hermon] Add event queue debug functions 7c40227e1 [hermon] Increase command timeout from 2 to 10 seconds cd126c41b [hermon] Add assorted debug error messages ce45c8dc2 [hermon] Show "issuing command" messages only at DBGLVL_EXTRA a2893dc18 [hermon] Reorganize PCI ROM list and document well-known product names 0e788c8ed [golan] Backport typo fix in nodnic_prm.h: s/HERMON/NODNIC/ 36a892a7c [arbel] Clean up whitespace in MT25218_PRM.h header 414c842f0 [hermon] Clean up whitespace in MT25408_PRM.h header a08244ecc [efi] Use EFI_SIMPLE_TEXT_INPUT_EX_PROTOCOL if available 8488c989c [image] Implicitly trust first embedded image b9de7e6ed [infiniband] Require drivers to specify the number of ports 4f9fbe6c1 [efi] Fix misleading debug message f4c3a0147 [ifmgmt] Make "ifstat" show the link-layer protocol for each netdev 42db0bd04 [cmdline] Expose "iflinkwait" as a command ade4d2b4f [efi] Fix use of uninitialised variable a3f1e8fb6 [efi] Automatically load "/autoexec.ipxe" when booted from a filesystem 989a7a803 [image] Provide image_memory() ffc41ae9d [travis] Update to current default build environment 68469d1b1 [build] Report a meaningful error message if isolinux.bin is missing 7c3d186a1 [build] Check that mkisofs equivalent supports the required options 8ef22d819 [tftp] Allow for profiling of client and server turnaround times b99477b3f [image] Add the "imgmem" command 99ac69b8a [image] Provide image_set_data() ae73fb5aa [build] Allow an initrd script to be provided via genfsimg 34f51a0dc [build] Fail gracefully when no input files are given to genfsimg 05d7591a7 [build] Use explicit disk geometry for generated FAT filesystem images a2a6618d4 [build] Fix genfsimg incompatibility with dash shell 565ca3eab [build] Set volume name "iPXE" on FAT filesystem images 117353815 [build] Allow genfsimg to be used on third party UEFI binaries 3a9621a6f [ipv6] Defer router discovery timeout while link is blocked 9a341203d [dhcp] Allow for links that remained blocked for up to three minutes 9c2e8bad1 [eap] Treat an EAP Request-Identity as indicating a blocked link 274ad6901 [eapol] Replace EAPoL code 860620459 [dhcp] Continue transmitting DHCPDISCOVER while link is blocked 0fb37a48a [build] Include xorrisofs as a viable mkisofs equivalent 8e3826aa1 [build] Inhibit spurious array bounds warning on some versions of gcc a5fb41873 [isa] Add missing #include 79c0173d6 [build] Create util/genfsimg for building filesystem-based images c42f31bc8 [xhci] Avoid false positive Coverity warning 5aa389593 [efi] Leave asynchronous USB endpoints open until device is removed 7ce3b8405 [xhci] Show meaningful error messages after command failures 017b345d5 [xhci] Fail attempts to issue concurrent commands 988d2c13c [efi] Use segment and bus number to identify PCI root bridge I/O protocol dced22d6d [smbios] Add support for the 64-bit SMBIOS3 entry point 485f8ce55 [efi] Allow for longer device paths in debug messages da491eaae [sfc] Update email addresses 68f1914aa [x509] Clarify debug message for an untrusted X.509 issuer ce841946d [golan] Add new PCI IDs 47098d7cb [efi] Allow EFI_USB_IO_PROTOCOL interfaces to be nullified and leaked 6769a7c3c [efi] Skip interface uninstallation during shutdown fb91542f2 [efi] Nullify interfaces unconditionally on error and shutdown paths f47a45ea2 [iphone] Add iPhone tethering driver f43a8f8b9 [crypto] Allow private key to be specified as a TLS connection parameter 6a8664d9e [tls] Include root of trust within definition of TLS session 3475f9162 [x509] Make root of trust a reference-counted structure e3eedb0be [efi] Avoid using potentially uninitialised driver name in veto checks 39f529349 [x509] Record root of trust used when validating a certificate 6e92d6213 [ocsp] Remove dummy OCSP certificate root be47c2c72 [http] Hide HTTP transport-layer filter implementation details 1b112e9d1 [asn1] Define ASN1_SHORT() for constructing short tagged values e4b6328c8 [asn1] Rename ASN1_OID_CURSOR to ASN1_CURSOR e33f52108 [asn1] Add constant for UTF-8 string tag 25b53afa5 [tls] Allow provision of a client certificate chain 2b6b02ee7 [tls] Use intf_insert() to add TLS to an interface 09fe2bbd3 [interface] Provide intf_insert() to insert a filter interface cb0ba2f82 [interface] Ignore any attempts to plug in the null interface b6e2ea03b [efi] Veto the HP XhciDxe Driver 63625b43e [efi] Allow vetoing of drivers that cannot be unloaded 354c252ee [efi] Provide manufacturer and driver names to all veto checking methods be49380f5 [efi] Split out dbg_efi_opener() as a standalone function 13a6d1729 [xhci] Update driver to use DMA API 6e01b74a8 [dma] Provide dma_umalloc() for allocating large DMA-coherent buffers a8442750e [efi] Avoid requesting zero-length DMA mappings a2e5cf1a3 [netdevice] Fix misleading comment on netdev_rx() 9ff61ab28 [netdevice] Do not attempt to unmap a null I/O buffer 8d337ecda [dma] Move I/O buffer DMA operations to iobuf.h 70e6e8324 [dma] Record DMA device as part of DMA mapping if needed cf12a4170 [dma] Modify DMA API to simplify calculation of medial addresses 24ef74377 [intelxl] Configure DMA mask as 64-bit 9e280aecb [intel] Configure DMA mask as 64-bit 0b5467b65 [efi] Report correct error when failing to unload a vetoed driver 1295b4acf [efi] Allow initialisation via SNP interface even while claimed 03314e8da [intelxl] Update driver to use DMA API 76a7bfe93 [intelxl] Read PCI bus:dev.fn number from PFFUNC_RID register b6eb17cbd [intelxl] Read MAC address from PRTPM_SA[HL] instead of PRTGL_SA[HL] e10a40d41 [efi] Avoid dropping below TPL as at entry to iPXE 062711f1c [intel] Use physical addresses in debug messages 810dc5d6c [realtek] Use physical addresses in debug messages fc5cf18da [efi] Use casts rather than virt_to_bus() for UNDI buffer addresses 83b8c0e21 [efi] Do not populate media header length in PXE transmit CPB 5439329c9 [intel] Update driver to use DMA API 0e2622090 [efi] Rename efi_blacklist to efi_veto 580d9b00d [realtek] Update driver to use DMA API 38a54bd3b [efi] Provide DMA operations for EFI PCI devices dda03c884 [dma] Define a DMA API to allow for non-flat device address spaces be1c87b72 [malloc] Rename malloc_dma() to malloc_phys() 36dde9b0b [efi] Retain a long-lived reference to the EFI_PCI_IO_PROTOCOL instance f560e7b70 [realtek] Reset NIC when closing interface if using legacy mode 9b25f6e5c [efi] Fall back to assuming identity mapping of MMIO address space 16873703d [efi] Avoid dragging in USB subsystem via efi_usb_path() e5e2f3fba [efi] Fix memory copy length used in efi_nullify_name2() 5b41b9a80 [efi] Nullify interfaces and leak memory on uninstallation failure 86c6c79fc [efi] Allow block devices to provide their own EFI device paths a2e44077c [infiniband] Allow SRP device to be described using an EFI device path bf051a76e [fcp] Allow Fibre Channel device to be described using an EFI device path e6f9054d1 [iscsi] Allow iSCSI device to be described using an EFI device path 334f0074b [efi] Show block device ACPI table contents only at DBGLVL_EXTRA 04cb17de5 [aoe] Allow AoE device to be described using an EFI device path 2d49ce6f0 [efi] Provide utility function to concatenate device paths 6154b1fb2 [efi] Split efi_netdev_path() out to a separate function b50ad5f09 [http] Allow HTTP connection to be described using an EFI device path f2c826179 [efi] Provide efi_uri_path() to construct a URI device path 1e8648f61 [usbblk] Allow USB block device to be described using an EFI device path 87e39a9c9 [efi] Split efi_usb_path() out to a separate function 2091288ea [efi] Define an interface operation to describe using an EFI device path 2bf0fd39c [efi] Split device path functions out to efi_path.c bcf858c56 [efi] Provide EFI_INTF_OP for EFI-only interface operations c504c1d69 [interface] Allow for the definition of an unused interface operation 49fd66a8c [build] Provide a testable platform macro alongside -DPLATFORM 6ccd5239b [ipv6] Reduce time spent waiting for router discovery 0c25daad3 [efi] Enable NET_PROTO_IPV6 by default 388d65708 [lacp] Ignore (and do not echo) trailing padding on received packets 3d4378991 [lacp] Detect and ignore erroneously looped back LACP packets 02748d0a5 [efi] Defer local download process until file has been opened 6d680bdec [usbblk] Add support for USB mass storage devices 88288407a [usb] Move usbio driver to end of USB driver list e30c26d01 [usb] Allow endpoints to be refilled to a specified upper limit ebf016608 [usb] Allow device halt to be cleared independently of host controller c70b3e04e [efi] Always enable recursion when calling ConnectController() fbb5989fd [efi] Connect controllers after loading an EFI driver eede697ec [ncm] Treat a zero divisor as indicating no alignment requirements 022014171 [efi] Fix reporting of USB supported languages array 02280dc64 [efi] Avoid integer underflow on malformed USB string descriptors 7c6fdf57e [usb] Avoid integer underflow on malformed string descriptors 7151fa3ff [efi] Allow DEBUG=efi_wrap to be used independently of a loaded image 8344803c9 [efi] Disconnect controllers before uninstalling EFI_USB_IO_PROTOCOL 8eb19a178 [usb] Show debug message on device removal 627b0ba2a [efi] Report any USB errors as EFI_USB_ERR_SYSTEM fbb776f2f [efi] Leave USB endpoint descriptors in existence until device is removed f42ba772c [usb] Reset control endpoints immediately after failure 27e886c67 [efi] Use address offset as reported by EFI_PCI_ROOT_BRIDGE_IO_PROTOCOL eecb75ba4 [pci] Update drivers to use pci_ioremap() 371af4eef [pci] Define pci_ioremap() for mapping PCI bus addresses ccfffc797 [efi] Provide a single implementation of efipci_root_close() fe6993419 [efi] Show memory map returned by wrapped calls to GetMemoryMap e08ad61bf [efi] Add debug wrappers for all boot services functions of interest 4bd064de2 [build] Fix building on older versions of gcc ef2c844d0 [efi] Attempt NII initialisation both with and without cable detection c63e61df7 [efi] Use device path to locate filesystem from which we were loaded fd47fa8fe [efi] Match EDK2 numbering for USB ports 70b1a641c [comboot] Fix stack pointer retrieval after COM32 binary returns b76052335 [efi] Check the status code from AllocatePool() a08ee6e72 [cmdline] Add "--timeout" parameter to "ifconf" command 145311c62 [intelx] Added PCI_ROM entry for Intel x553/x557-AT and x553 (SFP+) NICs afaf4272b [intel] Set INTEL_NO_PHY_RST on i218v c4d1ae0fc [intel] Add INTEL_NO_PHY_RST for I218LM 8bc85ec6f [deflate] Fix typo in comment describing length codes 8d243e65c [build] Fix a GNUism that FreeBSD's sed(1) cannot deal with ee2dc525b [wpa] Fix erroneous debug message in wpa_derive_ptk 0de5e6014 [libc] Fix memcmp() to return proper values 6ec33b8d6 [pcbios] Take alignment into account when checking for available space 45a0ca6de [pcbios] Fix "out of memory" detection when expanding bottom area cede0c5ba [libgcc] Change __divmoddi4 from int64 [unknown] to int64_t 4277942ac [build] Fix default target in sdsk image 366206517 [dns] Use all configured DNS servers a95a2eafc [xfer] Remove address family from definition of a socket opener 78ca890c3 [sfc] Add PCI ID for Solarflare SFC9120 and Solarflare SFC9140 1832f8a9b [efi] Claim SNP devices early in efi_download_start() b6eecb182 [efi] Ensure NUL byte is at lowest address within stack cookie fcdd9c098 [efi] Distribute available entropy within stack cookie f7ddda435 [libc] Add bit-rotation functions for unsigned long values 98d49e460 [efi] Avoid setting direction flag on EFI platforms 2f032c84a [libc] Provide an unoptimised generic_memcpy_reverse() d2fb317fe [crypto] Avoid temporarily setting direction flag in bigint_is_geq() 586b72373 [usb] Leave port enabled after a failed device registration f727ed8a1 [axge] Reapply USB device configuration when opening network device 0f5d23433 [xhci] Increase link state settling delay to 100ms e87760183 [usb] Avoid unnecessary calls to usb_hub_set_drvdata() 18d4be8aa [xhci] Set link state to RxDetect after disabling USB3 root hub port 761ed4365 [usb] Do not attempt to disable USB3 hub ports 8ff5babb4 [usb] Add missing usb_recycle() for completed hub interrupt transfers 5d6fb7282 [usb] Clear device endpoint halt before resetting host endpoint d5874c9f2 [axge] Handle non-gigabit link speeds 2ae5d4338 [efi] Raise TPL during driver entry point a87537d44 [efi] Detect and disable seriously broken EFI_RNG_PROTOCOL implementations decee20ec [build] Disable position-independent code for ARM64 EFI builds 8a1d66c7a [golan] Add explicit type casts for nodnic_queue_pair_type 28cf9806d [intel] Avoid spurious compiler warning on GCC 10 f982a7129 [build] Be explicit about -fcommon compiler directive 3f637d746 [ocsp] Accept SHA1 certID responses even if SHA1 is not enabled a61b27b97 [efi] Enable stack protection where possible 8830f2f35 [parseopt] Treat empty integer strings in user input as invalid 200029701 [util] Treat empty integer strings as invalid 770a7bd43 [snp] Retry initialisation if link is reported as down 7f2006a9a [crypto] Disable MD5 as an OID-identifiable algorithm by default bb74f0051 [crypto] Ensure that test code drags in required ASN.1 object identifiers bd7a5e4b9 [crypto] Allow algorithms to be included without being OID-identifiable dc785b0fb [tls] Default to supporting only TLSv1.1 or above 2dac11eb1 [tls] Allow a minimum TLS protocol version to be specified 9ee70fb95 [efi] Attempt to connect our driver directly if ConnectController fails 6a6def775 [uri] Avoid appearing to access final byte of a potentially empty string ac28bbb7e [efi] Work around UEFI specification bug in LoadImage for SAN boot 18d2162f6 [efi] Work around UEFI specification bug in LoadImage d68befef1 [png] Fix potential integer overflow ebff21a51 [bnxt] Add driver support for Broadcom NetXtreme-E Adapters bdf0e029a [efi] Disambiguate errors returned by ConnectController efc1ae5ab [int13con] Create log partition only when CONSOLE_INT13 is enabled 49319f1bc [bios] Define macros for constructing partition table entries e3ca21107 [iscsi] Eliminate variable-length stack allocation in URI parsing e2e29e7ae [iscsi] Eliminate variable-length stack allocations in CHAP handlers 446e8f14e [settings] Eliminate variable-length stack allocation 0a7432191 [slam] Allow for the possibility of IPv6 multicast addresses c5306bcfa [slam] Eliminate variable-length stack allocation 6248ac396 [infiniband] Eliminate variable-length stack allocation c625681ca [tftp] Eliminate unnecessary variable-length stack allocation 18dc73d27 [travis] Ensure that most recent tag is always available Signed-off-by: Bruce Ashfield

recipes-extended: adapt to UNPACKDIR changes

2025-06-26T02:49:03+00:00

Adjusting our extended recipes to the OE core UNPACKDIR processing. We mainly just drop our S = assignments for git recipes Signed-off-by: Bruce Ashfield

ipxe: fix build with gcc-15

2025-05-06T01:45:13+00:00

* fixes: http://errors.yoctoproject.org/Errors/Details/853265/ Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield

recipes/classes/scripts: Drop SRCPV usage

2023-08-24T01:38:21+00:00

bitbake has been enhanced such that SRCPV is no longer needed in PV to handle updating git hashes and task signatures. We can simplify our PV by dropping SRCPV Signed-off-by: Bruce Ashfield

ipxe: Fix malformed Upstream-Status

2023-06-22T18:41:44+00:00

Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield

treewide: bulk update patches with status field

2023-01-27T15:32:06+00:00

While the insane.bbclass upstream-status check hasn't been made default, users of meta-virtualization may have it enabled in their distros .. so the effect is the same. We must have this tracking tag in out patches. This is a bulk update to add the tag and silence the QA message. As packages get updated, the normal/routine process of checking the patches will continue, and the status fields may (or may not) get more useful. Signed-off-by: Bruce Ashfield

ipxe: Pin to use gcc

2022-05-12T04:01:51+00:00

Use single quote instead of double quotes to help bitabake syntax highlighter do right job Signed-off-by: Khem Raj Cc: Bruce Ashfield Signed-off-by: Bruce Ashfield

global: update licence values to SPDX values

2022-02-18T18:07:10+00:00

These changes are the result of running the convert-spdx-licenses.py oe-core script. There's no impact to the build, but we will avoid issues when interacting with core QA by the alignment. Signed-off-by: Bruce Ashfield