cc01b26e05
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=1493 Pkcs7GetAttachedContent() implementation in current CryptPkcs7Verify.c is actually shared by RuntimeCryptLib.inf, SmmCryptLib.inf and BaseCryptLib.inf, which are not correct since there's no use scenario for runtime and AllocatePool() used in this method can only be called in boot time. This patch fix this issue by splitting file CryptPkcs7Verify.c into 3 parts. CryptPkcs7VerifyCommon.c (shared among Base, SMM, Runtime) CryptPkcs7VerifyBase.c (shared between Base, SMM) CryptPkcs7VerifyRuntime.c (for Runtime only) CryptPkcs7VerifyBase.c will have original implementation of Pkcs7GetAttachedContent() as CryptPkcs7Verify.c. CryptPkcs7VerifyRuntime.c provide a NULL version of Pkcs7GetAttachedContent(). No functionality and interface change is involved in this patch. Cc: Ting Ye <ting.ye@intel.com> Cc: Qin Long <qin.long@intel.com> Contributed-under: TianoCore Contribution Agreement 1.1 Signed-off-by: Jian J Wang <jian.j.wang@intel.com> Reviewed-by: Ting Ye <ting.ye@intel.com>
100 lines
3.1 KiB
INI
100 lines
3.1 KiB
INI
## @file
|
|
# Cryptographic Library Instance for PEIM.
|
|
#
|
|
# Caution: This module requires additional review when modified.
|
|
# This library will have external input - signature.
|
|
# This external input must be validated carefully to avoid security issues such as
|
|
# buffer overflow or integer overflow.
|
|
#
|
|
# Note: MD4 Digest functions,
|
|
# HMAC-MD5 functions, HMAC-SHA1/SHA256 functions, AES/TDES/ARC4 functions, RSA external
|
|
# functions, PKCS#7 SignedData sign functions, Diffie-Hellman functions, X.509
|
|
# certificate handler functions, authenticode signature verification functions,
|
|
# PEM handler functions, and pseudorandom number generator functions are not
|
|
# supported in this instance.
|
|
#
|
|
# Copyright (c) 2010 - 2018, Intel Corporation. All rights reserved.<BR>
|
|
# This program and the accompanying materials
|
|
# are licensed and made available under the terms and conditions of the BSD License
|
|
# which accompanies this distribution. The full text of the license may be found at
|
|
# http://opensource.org/licenses/bsd-license.php
|
|
#
|
|
# THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
#
|
|
##
|
|
|
|
[Defines]
|
|
INF_VERSION = 0x00010005
|
|
BASE_NAME = PeiCryptLib
|
|
MODULE_UNI_FILE = PeiCryptLib.uni
|
|
FILE_GUID = 9a2a4375-194c-4e97-9f67-547ec98d96ca
|
|
MODULE_TYPE = PEIM
|
|
VERSION_STRING = 1.0
|
|
LIBRARY_CLASS = BaseCryptLib|PEIM PEI_CORE
|
|
|
|
#
|
|
# The following information is for reference only and not required by the build tools.
|
|
#
|
|
# VALID_ARCHITECTURES = IA32 X64
|
|
#
|
|
|
|
[Sources]
|
|
Hash/CryptMd4Null.c
|
|
Hash/CryptMd5.c
|
|
Hash/CryptSha1.c
|
|
Hash/CryptSha256.c
|
|
Hash/CryptSha512.c
|
|
Hmac/CryptHmacMd5Null.c
|
|
Hmac/CryptHmacSha1Null.c
|
|
Hmac/CryptHmacSha256Null.c
|
|
Cipher/CryptAesNull.c
|
|
Cipher/CryptTdesNull.c
|
|
Cipher/CryptArc4Null.c
|
|
|
|
Pk/CryptRsaBasic.c
|
|
Pk/CryptRsaExtNull.c
|
|
Pk/CryptPkcs5Pbkdf2Null.c
|
|
Pk/CryptPkcs7SignNull.c
|
|
Pk/CryptPkcs7VerifyCommon.c
|
|
Pk/CryptPkcs7VerifyBase.c
|
|
|
|
Pk/CryptDhNull.c
|
|
Pk/CryptX509Null.c
|
|
Pk/CryptAuthenticodeNull.c
|
|
Pk/CryptTsNull.c
|
|
Pem/CryptPemNull.c
|
|
|
|
Rand/CryptRandNull.c
|
|
|
|
SysCall/CrtWrapper.c
|
|
SysCall/ConstantTimeClock.c
|
|
SysCall/BaseMemAllocation.c
|
|
|
|
[Packages]
|
|
MdePkg/MdePkg.dec
|
|
CryptoPkg/CryptoPkg.dec
|
|
|
|
[LibraryClasses]
|
|
BaseLib
|
|
BaseMemoryLib
|
|
MemoryAllocationLib
|
|
DebugLib
|
|
OpensslLib
|
|
IntrinsicLib
|
|
|
|
#
|
|
# Remove these [BuildOptions] after this library is cleaned up
|
|
#
|
|
[BuildOptions]
|
|
#
|
|
# suppress the following warnings so we do not break the build with warnings-as-errors:
|
|
# C4090: 'function' : different 'const' qualifiers
|
|
# C4718: 'function call' : recursive call has no side effects, deleting
|
|
#
|
|
MSFT:*_*_*_CC_FLAGS = /wd4090 /wd4718
|
|
|
|
# -JCryptoPkg/Include : To disable the use of the system includes provided by RVCT
|
|
# --diag_remark=1 : Reduce severity of "#1-D: last line of file ends without a newline"
|
|
RVCT:*_*_ARM_CC_FLAGS = -JCryptoPkg/Include --diag_remark=1
|