From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga07.intel.com (mga07.intel.com [134.134.136.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id 3EF6981D41 for ; Thu, 3 Nov 2016 17:59:43 -0700 (PDT) Received: from fmsmga004.fm.intel.com ([10.253.24.48]) by orsmga105.jf.intel.com with ESMTP; 03 Nov 2016 17:59:45 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.31,589,1473145200"; d="scan'208";a="187427138" Received: from ray-dev.ccr.corp.intel.com ([10.239.9.25]) by fmsmga004.fm.intel.com with ESMTP; 03 Nov 2016 17:59:44 -0700 From: Ruiyu Ni To: edk2-devel@lists.01.org Date: Fri, 4 Nov 2016 08:59:38 +0800 Message-Id: <20161104005942.345832-1-ruiyu.ni@intel.com> X-Mailer: git-send-email 2.9.0.windows.1 Subject: [PATCH 0/4] Defer 3rd party images loading to after EndOfDxe X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Nov 2016 00:59:43 -0000 The patches change the default image loading policy by deferring 3rd party images loading to after EndOfDxe and add a new BDS API to dispatch the deferred images. Platform needs to call the new BDS API EfiBootManagerDispatchDeferredImages after EndOfDxe to ensure that any deferred images are loaded. Ruiyu Ni (4): MdeModulePkg/SecurityStubDxe: Defer 3rd party image before EndOfDxe MdeModulePkg/UefiBootManager: Add EfiBootManagerDispatchDeferredImages MdeModulePkg/BdsDxe: Check deferred images before booting to OS MdeModulePkg/SecurityStubDxe: Report failure if image is load earlier MdeModulePkg/Include/Library/UefiBootManagerLib.h | 13 + MdeModulePkg/Library/UefiBootManagerLib/BmMisc.c | 113 ++++++ .../Library/UefiBootManagerLib/InternalBm.h | 1 + .../UefiBootManagerLib/UefiBootManagerLib.inf | 1 + MdeModulePkg/Universal/BdsDxe/Bds.h | 4 +- MdeModulePkg/Universal/BdsDxe/BdsDxe.inf | 2 + MdeModulePkg/Universal/BdsDxe/BdsEntry.c | 89 +++++ .../SecurityStubDxe/Defer3rdPartyImageLoad.c | 413 +++++++++++++++++++++ .../SecurityStubDxe/Defer3rdPartyImageLoad.h | 95 +++++ .../Universal/SecurityStubDxe/SecurityStub.c | 14 +- .../Universal/SecurityStubDxe/SecurityStubDxe.inf | 11 +- 11 files changed, 753 insertions(+), 3 deletions(-) create mode 100644 MdeModulePkg/Universal/SecurityStubDxe/Defer3rdPartyImageLoad.c create mode 100644 MdeModulePkg/Universal/SecurityStubDxe/Defer3rdPartyImageLoad.h -- 2.9.0.windows.1