public inbox for devel@edk2.groups.io
 help / color / mirror / Atom feed
From: "Wang, Jian J" <jian.j.wang@intel.com>
To: "devel@edk2.groups.io" <devel@edk2.groups.io>,
	"sami.mujawar@arm.com" <sami.mujawar@arm.com>,
	"Vang, Judah" <judah.vang@intel.com>
Cc: "Gao, Liming" <gaoliming@byosoft.com.cn>,
	"Wu, Hao A" <hao.a.wu@intel.com>,
	"Mistry, Nishant C" <nishant.c.mistry@intel.com>, nd <nd@arm.com>
Subject: Re: [edk2-devel] [PATCH v5 08/19] MdeModulePkg: Add support for Protected Variables
Date: Tue, 22 Nov 2022 06:26:59 +0000	[thread overview]
Message-ID: <MW4PR11MB676342F37DA14ABD5ADDEACEB60D9@MW4PR11MB6763.namprd11.prod.outlook.com> (raw)
In-Reply-To: <852C10C4-B88F-422F-9220-9FBDBB7DBE20@arm.com>

Thanks for sharing the info. It looks that my coding style knowledge needs refresh.

Regards,
Jian

> -----Original Message-----
> From: devel@edk2.groups.io <devel@edk2.groups.io> On Behalf Of Sami
> Mujawar
> Sent: Tuesday, November 15, 2022 4:49 PM
> To: devel@edk2.groups.io; Vang, Judah <judah.vang@intel.com>; Wang, Jian J
> <jian.j.wang@intel.com>
> Cc: Gao, Liming <gaoliming@byosoft.com.cn>; Wu, Hao A
> <hao.a.wu@intel.com>; Mistry, Nishant C <nishant.c.mistry@intel.com>; nd
> <nd@arm.com>
> Subject: Re: [edk2-devel] [PATCH v5 08/19] MdeModulePkg: Add support for
> Protected Variables
> 
> Hi All,
> 
> I believe the EDKII CI is following the edk2-Coding standard rule 5.3.5 which
> forbids prefixing file include guard macro names with '_', see https://edk2-
> docs.gitbook.io/edk-ii-c-coding-standards-specification/v/release-
> 2.20/5_source_files/53_include_files#5.3.5-all-include-file-contents-must-be-
> protected-by-a-include-guard
> 
> If I understand correctly the edk2 CI runs uncrustify on the patch diff. Therefore,
> unless you touch the macro in an existing file, it would not complain.
> 
> Regards,
> 
> Sami Mujawar
> 
> On 14/11/2022, 17:20, "devel@edk2.groups.io on behalf of Judah Vang via
> groups.io" <devel@edk2.groups.io on behalf of
> judah.vang=intel.com@groups.io> wrote:
> 
>     Jian,
> 
>     That's not the reason why I removed the leading '_' underscore.
>     When I don't remove it, the EDK2 CI is giving me a fail and telling me it needs
> to be removed.
>     I don't know why this is the case but it seems to only happen for new files.
> 
>     Judah
> 
>     -----Original Message-----
>     From: Wang, Jian J <jian.j.wang@intel.com>
>     Sent: Sunday, November 13, 2022 11:14 PM
>     To: Vang, Judah <judah.vang@intel.com>; devel@edk2.groups.io
>     Cc: Gao, Liming <gaoliming@byosoft.com.cn>; Wu, Hao A
> <hao.a.wu@intel.com>; Mistry, Nishant C <nishant.c.mistry@intel.com>
>     Subject: RE: [PATCH v5 08/19] MdeModulePkg: Add support for Protected
> Variables
> 
>     Hi Judah,
> 
>     Just one comment:
> 
>     For all header files, no need to remove the opening '_' of include guard macro.
>     Protected variable code are now in different folder than original variable
> driver.
>     They won't reference code from each other. Please add the opening '_' for
> those
>     macros to confirm to edk2 coding convention.
> 
>     Regards,
>     Jian
> 
>     > -----Original Message-----
>     > From: Vang, Judah <judah.vang@intel.com>
>     > Sent: Sunday, November 06, 2022 3:35 PM
>     > To: devel@edk2.groups.io
>     > Cc: Wang, Jian J <jian.j.wang@intel.com>; Gao, Liming
>     > <gaoliming@byosoft.com.cn>; Wu, Hao A <hao.a.wu@intel.com>; Mistry,
>     > Nishant C <nishant.c.mistry@intel.com>
>     > Subject: [PATCH v5 08/19] MdeModulePkg: Add support for Protected
> Variables
>     >
>     > REF: https://bugzilla.tianocore.org/show_bug.cgi?id=2594
>     >
>     > V5: Add RuntimeDxe Variable Protection into a new directory and
>     > keep existing Variable for RuntimeDxe unchanged.
>     >
>     > v4: Applied code review - remove unreferenced library from .inf.
>     > Updated some function description and parameters.
>     >
>     > V3: Fix 'NextVariableStore' parameter for CopyMem.  It was causing
>     > an exception. Need to correctly cast 'NextVariableStore' so all
>     > platforms build.  Add code to initialize 'ContextIn' structure in
>     > SmmVariableReay() to fix issue with NULL function pointer.
>     >
>     > V1: Add support for Protected Variables.
>     > Add new API to retrieve Variable Infomation and data.
>     > Add new API to update variable in non-volatile storage or
>     > cached copy.
>     >
>     > Cc: Jian J Wang <jian.j.wang@intel.com>
>     > Cc: Liming Gao <gaoliming@byosoft.com.cn>
>     > Cc: Hao A Wu <hao.a.wu@intel.com>
>     > Cc: Nishant C Mistry <nishant.c.mistry@intel.com>
>     > Signed-off-by: Jian J Wang <jian.j.wang@intel.com>
>     > Signed-off-by: Nishant C Mistry <nishant.c.mistry@intel.com>
>     > Signed-off-by: Judah Vang <judah.vang@intel.com>
>     > ---
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/RuntimeDxeUnitTes
>     > t/VariableLockRequestToLockUnitTest.inf |   36 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeDxe
>     > .inf                                   |  151 +
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.inf
>     > |  153 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRuntim
>     > eDxe.inf                                |  119 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableStandalone
>     > Mm.inf                                 |  143 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/PrivilegePolymorphi
>     > c.h                                   |  158 +
>     >  MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Variable.h
>     > |  948 +++++
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableNonVolatile
>     > .h                                    |   67 +
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableParsing.h
>     > |  424 ++
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeCac
>     > he.h                                   |   51 +
>     >  MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Measurement.c
>     > |  343 ++
>     >  MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Reclaim.c
>     > |  504 +++
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/RuntimeDxeUnitTes
>     > t/VariableLockRequestToLockUnitTest.c   |  607 +++
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/SpeculationBarrierD
>     > xe.c                                  |   27 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/SpeculationBarrierS
>     > mm.c                                  |   26 +
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/TcgMorLockDxe.c
>     > |  153 +
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/TcgMorLockSmm.c
>     > |  569 +++
>     >  MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VarCheck.c
>     > |  101 +
>     >  MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Variable.c
>     > | 4037 ++++++++++++++++++++
>     >  MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableDxe.c
>     > |  670 ++++
>     >  MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableExLib.c
>     > |  417 ++
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableLockReques
>     > tToLock.c                              |   96 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableNonVolatile
>     > .c                                    |  537 +++
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableParsing.c
>     > | 1110 ++++++
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariablePolicySmm
>     > Dxe.c                                   |  575 +++
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeCac
>     > he.c                                   |  158 +
>     >  MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.c
>     > | 1268 ++++++
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRuntim
>     > eDxe.c                                  | 1895 +++++++++
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableStandalone
>     > Mm.c                                   |   89 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableTraditional
>     > Mm.c                                  |  130 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeDxe
>     > .uni                                   |   22 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeDxe
>     > Extra.uni                              |   14 +
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.uni
>     > |   27 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmExtra.u
>     > ni                                     |   14 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRuntim
>     > eDxe.uni                                |   23 +
>     >
>     >
> MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRuntim
>     > eDxeExtra.uni                           |   14 +
>     >  36 files changed, 15676 insertions(+)
>     >
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/RuntimeDxeUnitT
>     > est/VariableLockRequestToLockUnitTest.inf
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/RuntimeDxeUnitT
>     > est/VariableLockRequestToLockUnitTest.inf
>     > new file mode 100644
>     > index 000000000000..586d877fca90
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/RuntimeDxeUnitT
>     > est/VariableLockRequestToLockUnitTest.inf
>     > @@ -0,0 +1,36 @@
>     > +## @file
>     > +# This is a host-based unit test for the VariableLockRequestToLock shim.
>     > +#
>     > +# Copyright (c) Microsoft Corporation.
>     > +# SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +##
>     > +
>     > +[Defines]
>     > +  INF_VERSION         = 0x00010017
>     > +  BASE_NAME           = VariableLockRequestToLockUnitTest
>     > +  FILE_GUID           = A657FCD8-4A0D-46B4-8DC9-F089626383AD
>     > +  VERSION_STRING      = 1.0
>     > +  MODULE_TYPE         = HOST_APPLICATION
>     > +
>     > +#
>     > +# The following information is for reference only and not required by the
> build
>     > tools.
>     > +#
>     > +#  VALID_ARCHITECTURES           = IA32 X64 ARM AARCH64
>     > +#
>     > +
>     > +[Sources]
>     > +  VariableLockRequestToLockUnitTest.c
>     > +  ../VariableLockRequestToLock.c
>     > +
>     > +[Packages]
>     > +  MdePkg/MdePkg.dec
>     > +  MdeModulePkg/MdeModulePkg.dec
>     > +  UnitTestFrameworkPkg/UnitTestFrameworkPkg.dec
>     > +
>     > +[LibraryClasses]
>     > +  UnitTestLib
>     > +  DebugLib
>     > +  VariablePolicyLib
>     > +  VariablePolicyHelperLib
>     > +  BaseMemoryLib
>     > +  MemoryAllocationLib
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeD
>     > xe.inf
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeD
>     > xe.inf
>     > new file mode 100644
>     > index 000000000000..6adc2c636e84
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeD
>     > xe.inf
>     > @@ -0,0 +1,151 @@
>     > +## @file
>     > +#  Provides variable service.
>     > +#
>     > +#  This module installs variable arch protocol and variable write arch
> protocol
>     > to provide
>     > +#  variable services: SetVariable, GetVariable, GetNextVariableName and
>     > QueryVariableInfo.
>     > +#
>     > +#  Caution: This module requires additional review when modified.
>     > +#  This driver will have external input - variable data.
>     > +#  This external input must be validated carefully to avoid security issues
> such
>     > as
>     > +#  buffer overflow or integer overflow.
>     > +#
>     > +# Copyright (c) 2006 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +# Copyright (c) Microsoft Corporation.
>     > +# SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +#
>     > +##
>     > +
>     > +[Defines]
>     > +  INF_VERSION                    = 0x00010005
>     > +  BASE_NAME                      = VariableRuntimeDxe
>     > +  MODULE_UNI_FILE                = VariableRuntimeDxe.uni
>     > +  FILE_GUID                      = 146F4448-56BF-405C-A8C4-B77FFD24BE00
>     > +  MODULE_TYPE                    = DXE_RUNTIME_DRIVER
>     > +  VERSION_STRING                 = 1.0
>     > +  ENTRY_POINT                    = VariableServiceInitialize
>     > +
>     > +#
>     > +# The following information is for reference only and not required by the
> build
>     > tools.
>     > +#
>     > +#  VALID_ARCHITECTURES           = IA32 X64 EBC
>     > +#
>     > +#  VIRTUAL_ADDRESS_MAP_CALLBACK  =
> VariableClassAddressChangeEvent
>     > +#
>     > +
>     > +[Sources]
>     > +  Reclaim.c
>     > +  Variable.c
>     > +  VariableDxe.c
>     > +  Variable.h
>     > +  VariableNonVolatile.c
>     > +  VariableNonVolatile.h
>     > +  VariableParsing.c
>     > +  VariableParsing.h
>     > +  VariableRuntimeCache.c
>     > +  VariableRuntimeCache.h
>     > +  PrivilegePolymorphic.h
>     > +  Measurement.c
>     > +  TcgMorLockDxe.c
>     > +  VarCheck.c
>     > +  VariableExLib.c
>     > +  SpeculationBarrierDxe.c
>     > +  VariableLockRequestToLock.c
>     > +
>     > +[Packages]
>     > +  MdePkg/MdePkg.dec
>     > +  MdeModulePkg/MdeModulePkg.dec
>     > +
>     > +[LibraryClasses]
>     > +  MemoryAllocationLib
>     > +  BaseLib
>     > +  SynchronizationLib
>     > +  UefiLib
>     > +  UefiBootServicesTableLib
>     > +  BaseMemoryLib
>     > +  DebugLib
>     > +  UefiRuntimeLib
>     > +  DxeServicesTableLib
>     > +  UefiDriverEntryPoint
>     > +  PcdLib
>     > +  HobLib
>     > +  TpmMeasurementLib
>     > +  AuthVariableLib
>     > +  VarCheckLib
>     > +  VariableFlashInfoLib
>     > +  VariablePolicyLib
>     > +  VariablePolicyHelperLib
>     > +  SafeIntLib
>     > +  ProtectedVariableLib
>     > +
>     > +[Protocols]
>     > +  gEfiFirmwareVolumeBlockProtocolGuid           ## CONSUMES
>     > +  ## CONSUMES
>     > +  ## NOTIFY
>     > +  gEfiFaultTolerantWriteProtocolGuid
>     > +  gEfiVariableWriteArchProtocolGuid             ## PRODUCES
>     > +  gEfiVariableArchProtocolGuid                  ## PRODUCES
>     > +  gEdkiiVariableLockProtocolGuid                ## PRODUCES
>     > +  gEdkiiVariablePolicyProtocolGuid              ## CONSUMES
>     > +  gEdkiiVarCheckProtocolGuid                    ## PRODUCES
>     > +
>     > +[Guids]
>     > +  ## SOMETIMES_CONSUMES   ## GUID # Signature of Variable store
> header
>     > +  ## SOMETIMES_PRODUCES   ## GUID # Signature of Variable store header
>     > +  ## SOMETIMES_CONSUMES   ## HOB
>     > +  ## SOMETIMES_PRODUCES   ## SystemTable
>     > +  gEfiAuthenticatedVariableGuid
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## GUID # Signature of Variable store
> header
>     > +  ## SOMETIMES_PRODUCES   ## GUID # Signature of Variable store header
>     > +  ## SOMETIMES_CONSUMES   ## HOB
>     > +  ## SOMETIMES_PRODUCES   ## SystemTable
>     > +  gEfiVariableGuid
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"PlatformLang"
>     > +  ## SOMETIMES_PRODUCES   ## Variable:L"PlatformLang"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"Lang"
>     > +  ## SOMETIMES_PRODUCES   ## Variable:L"Lang"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"PK"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"KEK"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"SecureBoot"
>     > +  gEfiGlobalVariableGuid
>     > +
>     > +  gEfiMemoryOverwriteControlDataGuid            ## SOMETIMES_CONSUMES
> ##
>     > Variable:L"MemoryOverwriteRequestControl"
>     > +  gEfiMemoryOverwriteRequestControlLockGuid     ##
> SOMETIMES_PRODUCES
>     > ## Variable:L"MemoryOverwriteRequestControlLock"
>     > +
>     > +  gEfiEventVirtualAddressChangeGuid             ## CONSUMES             ## Event
>     > +  gEfiSystemNvDataFvGuid                        ## CONSUMES             ## GUID
>     > +  gEfiEndOfDxeEventGroupGuid                    ## CONSUMES             ## Event
>     > +  gEdkiiFaultTolerantWriteGuid                  ## SOMETIMES_CONSUMES   ##
> HOB
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"VarErrorFlag"
>     > +  ## SOMETIMES_PRODUCES   ## Variable:L"VarErrorFlag"
>     > +  gEdkiiVarErrorFlagGuid
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"db"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"dbx"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"dbt"
>     > +  gEfiImageSecurityDatabaseGuid
>     > +
>     > +[Pcd]
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize                 ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxAuthVariableSize             ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVolatileVariableSize         ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize
> ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize               ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize                ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxUserNvVariableSpaceSize
>     > ## CONSUMES
>     > +
>     >
> gEfiMdeModulePkgTokenSpaceGuid.PcdBoottimeReservedNvVariableSpaceSize
>     > ## CONSUMES
>     > +
> gEfiMdeModulePkgTokenSpaceGuid.PcdReclaimVariableSpaceAtEndOfDxe  ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdEmuVariableNvModeEnable
> ##
>     > SOMETIMES_CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdEmuVariableNvStoreReserved
> ##
>     > SOMETIMES_CONSUMES
>     > +
>     > +[FeaturePcd]
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics  ##
>     > CONSUMES # statistic the information of variable.
>     > +  gEfiMdePkgTokenSpaceGuid.PcdUefiVariableDefaultLangDeprecate ##
>     > CONSUMES # Auto update PlatformLang/Lang
>     > +
>     > +[Depex]
>     > +  TRUE
>     > +
>     > +[UserExtensions.TianoCore."ExtraFiles"]
>     > +  VariableRuntimeDxeExtra.uni
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.inf
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.inf
>     > new file mode 100644
>     > index 000000000000..2651ec514df3
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.inf
>     > @@ -0,0 +1,153 @@
>     > +## @file
>     > +#  Provides SMM variable service.
>     > +#
>     > +#  This module installs SMM variable protocol into SMM protocol database,
>     > +#  which can be used by SMM driver, and installs SMM variable protocol
>     > +#  into BS protocol database, which can be used to notify the SMM Runtime
>     > +#  Dxe driver that the SMM variable service is ready.
>     > +#  This module should be used with SMM Runtime DXE module together.
> The
>     > +#  SMM Runtime DXE module would install variable arch protocol and
> variable
>     > +#  write arch protocol based on SMM variable module.
>     > +#
>     > +#  Caution: This module requires additional review when modified.
>     > +#  This driver will have external input - variable data and communicate
> buffer in
>     > SMM mode.
>     > +#  This external input must be validated carefully to avoid security issues
> such
>     > as
>     > +#  buffer overflow or integer overflow.
>     > +#    The whole SMM authentication variable design relies on the integrity of
>     > flash part and SMM.
>     > +#  which is assumed to be protected by platform.  All variable code and
>     > metadata in flash/SMM Memory
>     > +#  may not be modified without authorization. If platform fails to protect
> these
>     > resources,
>     > +#  the authentication service provided in this driver will be broken, and the
>     > behavior is undefined.
>     > +#
>     > +# Copyright (c) 2010 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +# Copyright (c) Microsoft Corporation.
>     > +# SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +#
>     > +##
>     > +
>     > +[Defines]
>     > +  INF_VERSION                    = 0x00010005
>     > +  BASE_NAME                      = VariableSmm
>     > +  MODULE_UNI_FILE                = VariableSmm.uni
>     > +  FILE_GUID                      = 1C32FDDF-7FF1-4EE5-BDA0-ED9AAC623D3C
>     > +  MODULE_TYPE                    = DXE_SMM_DRIVER
>     > +  VERSION_STRING                 = 1.0
>     > +  PI_SPECIFICATION_VERSION       = 0x0001000A
>     > +  ENTRY_POINT                    = VariableServiceInitialize
>     > +
>     > +#
>     > +# The following information is for reference only and not required by the
> build
>     > tools.
>     > +#
>     > +#  VALID_ARCHITECTURES           = IA32 X64
>     > +#
>     > +
>     > +
>     > +[Sources]
>     > +  Reclaim.c
>     > +  Variable.c
>     > +  VariableTraditionalMm.c
>     > +  VariableSmm.c
>     > +  VariableNonVolatile.c
>     > +  VariableNonVolatile.h
>     > +  VariableParsing.c
>     > +  VariableParsing.h
>     > +  VariableRuntimeCache.c
>     > +  VariableRuntimeCache.h
>     > +  VarCheck.c
>     > +  Variable.h
>     > +  PrivilegePolymorphic.h
>     > +  VariableExLib.c
>     > +  TcgMorLockSmm.c
>     > +  SpeculationBarrierSmm.c
>     > +  VariableLockRequestToLock.c
>     > +
>     > +[Packages]
>     > +  MdePkg/MdePkg.dec
>     > +  MdeModulePkg/MdeModulePkg.dec
>     > +
>     > +[LibraryClasses]
>     > +  UefiDriverEntryPoint
>     > +  MemoryAllocationLib
>     > +  BaseLib
>     > +  SynchronizationLib
>     > +  UefiLib
>     > +  MmServicesTableLib
>     > +  BaseMemoryLib
>     > +  DebugLib
>     > +  DxeServicesTableLib
>     > +  HobLib
>     > +  PcdLib
>     > +  SmmMemLib
>     > +  AuthVariableLib
>     > +  VarCheckLib
>     > +  UefiBootServicesTableLib
>     > +  VariableFlashInfoLib
>     > +  VariablePolicyLib
>     > +  VariablePolicyHelperLib
>     > +  SafeIntLib
>     > +  ProtectedVariableLib
>     > +
>     > +[Protocols]
>     > +  gEfiSmmFirmwareVolumeBlockProtocolGuid        ## CONSUMES
>     > +  ## CONSUMES
>     > +  ## NOTIFY
>     > +  gEfiSmmFaultTolerantWriteProtocolGuid
>     > +  ## PRODUCES
>     > +  ## UNDEFINED # SmiHandlerRegister
>     > +  gEfiSmmVariableProtocolGuid
>     > +  gEfiMmEndOfDxeProtocolGuid                    ## NOTIFY
>     > +  gEdkiiSmmVarCheckProtocolGuid                 ## PRODUCES
>     > +  gEfiTcgProtocolGuid                           ## SOMETIMES_CONSUMES
>     > +  gEfiTcg2ProtocolGuid                          ## SOMETIMES_CONSUMES
>     > +
>     > +[Guids]
>     > +  ## SOMETIMES_CONSUMES   ## GUID # Signature of Variable store
> header
>     > +  ## SOMETIMES_PRODUCES   ## GUID # Signature of Variable store header
>     > +  ## SOMETIMES_CONSUMES   ## HOB
>     > +  ## SOMETIMES_PRODUCES   ## SystemTable
>     > +  gEfiAuthenticatedVariableGuid
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## GUID # Signature of Variable store
> header
>     > +  ## SOMETIMES_PRODUCES   ## GUID # Signature of Variable store header
>     > +  ## SOMETIMES_CONSUMES   ## HOB
>     > +  ## SOMETIMES_PRODUCES   ## SystemTable
>     > +  gEfiVariableGuid
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"PlatformLang"
>     > +  ## SOMETIMES_PRODUCES   ## Variable:L"PlatformLang"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"Lang"
>     > +  ## SOMETIMES_PRODUCES   ## Variable:L"Lang"
>     > +  gEfiGlobalVariableGuid
>     > +
>     > +  gEfiMemoryOverwriteControlDataGuid            ## SOMETIMES_CONSUMES
> ##
>     > Variable:L"MemoryOverwriteRequestControl"
>     > +  gEfiMemoryOverwriteRequestControlLockGuid     ##
> SOMETIMES_PRODUCES
>     > ## Variable:L"MemoryOverwriteRequestControlLock"
>     > +
>     > +  gSmmVariableWriteGuid                         ## PRODUCES             ## GUID #
> Install
>     > protocol
>     > +  gEfiSystemNvDataFvGuid                        ## CONSUMES             ## GUID
>     > +  gEdkiiFaultTolerantWriteGuid                  ## SOMETIMES_CONSUMES   ##
> HOB
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"VarErrorFlag"
>     > +  ## SOMETIMES_PRODUCES   ## Variable:L"VarErrorFlag"
>     > +  gEdkiiVarErrorFlagGuid
>     > +
>     > +[Pcd]
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize                  ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxAuthVariableSize              ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVolatileVariableSize          ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize
> ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize                ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize                 ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxUserNvVariableSpaceSize
>     > ## CONSUMES
>     > +
>     >
> gEfiMdeModulePkgTokenSpaceGuid.PcdBoottimeReservedNvVariableSpaceSize
>     > ## CONSUMES
>     > +
> gEfiMdeModulePkgTokenSpaceGuid.PcdReclaimVariableSpaceAtEndOfDxe
>     > ## CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdEmuVariableNvModeEnable
> ##
>     > SOMETIMES_CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdEmuVariableNvStoreReserved
> ##
>     > SOMETIMES_CONSUMES
>     > +
>     > +[FeaturePcd]
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics        ##
>     > CONSUMES  # statistic the information of variable.
>     > +  gEfiMdePkgTokenSpaceGuid.PcdUefiVariableDefaultLangDeprecate       ##
>     > CONSUMES  # Auto update PlatformLang/Lang
>     > +
>     > +[Depex]
>     > +  TRUE
>     > +
>     > +[UserExtensions.TianoCore."ExtraFiles"]
>     > +  VariableSmmExtra.uni
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxe.inf
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxe.inf
>     > new file mode 100644
>     > index 000000000000..0d169913c9c9
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxe.inf
>     > @@ -0,0 +1,119 @@
>     > +## @file
>     > +#  Runtime DXE part corresponding to SMM authenticated variable module.
>     > +#
>     > +#  This module installs variable arch protocol and variable write arch
> protocol
>     > to provide
>     > +#  variable service. This module need work together with SMM
> authenticated
>     > variable module.
>     > +#
>     > +#  Caution: This module requires additional review when modified.
>     > +#  This driver will have external input - variable data.
>     > +#  This external input must be validated carefully to avoid security issues
> such
>     > as
>     > +#  buffer overflow or integer overflow.
>     > +#    The whole SMM authentication variable design relies on the integrity of
>     > flash part and SMM.
>     > +#  which is assumed to be protected by platform.  All variable code and
>     > metadata in flash/SMM Memory
>     > +#  may not be modified without authorization. If platform fails to protect
> these
>     > resources,
>     > +#  the authentication service provided in this driver will be broken, and the
>     > behavior is undefined.
>     > +#
>     > +# Copyright (c) 2010 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +# Copyright (c) Microsoft Corporation.<BR>
>     > +# SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +#
>     > +##
>     > +
>     > +[Defines]
>     > +  INF_VERSION                    = 0x00010005
>     > +  BASE_NAME                      = VariableSmmRuntimeDxe
>     > +  MODULE_UNI_FILE                = VariableSmmRuntimeDxe.uni
>     > +  FILE_GUID                      = 3C9DF4B3-559F-4AE4-AEA3-E4B0C3D9D3EE
>     > +  MODULE_TYPE                    = DXE_RUNTIME_DRIVER
>     > +  VERSION_STRING                 = 1.0
>     > +  ENTRY_POINT                    = VariableSmmRuntimeInitialize
>     > +
>     > +#
>     > +# The following information is for reference only and not required by the
> build
>     > tools.
>     > +#
>     > +#  VALID_ARCHITECTURES           = IA32 X64
>     > +#
>     > +#  VIRTUAL_ADDRESS_MAP_CALLBACK  =  VariableAddressChangeEvent
>     > +#
>     > +
>     > +[Sources]
>     > +  VariableSmmRuntimeDxe.c
>     > +  PrivilegePolymorphic.h
>     > +  Measurement.c
>     > +  VariableParsing.c
>     > +  VariableParsing.h
>     > +  Variable.h
>     > +  VariablePolicySmmDxe.c
>     > +
>     > +[Packages]
>     > +  MdePkg/MdePkg.dec
>     > +  MdeModulePkg/MdeModulePkg.dec
>     > +
>     > +[LibraryClasses]
>     > +  MemoryAllocationLib
>     > +  BaseLib
>     > +  UefiBootServicesTableLib
>     > +  DebugLib
>     > +  UefiRuntimeLib
>     > +  DxeServicesTableLib
>     > +  UefiDriverEntryPoint
>     > +  TpmMeasurementLib
>     > +  SafeIntLib
>     > +  PcdLib
>     > +  MmUnblockMemoryLib
>     > +  ProtectedVariableLib
>     > +
>     > +[Protocols]
>     > +  gEfiVariableWriteArchProtocolGuid             ## PRODUCES
>     > +  gEfiVariableArchProtocolGuid                  ## PRODUCES
>     > +  gEfiMmCommunication2ProtocolGuid              ## CONSUMES
>     > +  ## CONSUMES
>     > +  ## NOTIFY
>     > +  ## UNDEFINED # Used to do smm communication
>     > +  gEfiSmmVariableProtocolGuid
>     > +  gEdkiiVariableLockProtocolGuid                ## PRODUCES
>     > +  gEdkiiVarCheckProtocolGuid                    ## PRODUCES
>     > +  gEdkiiVariablePolicyProtocolGuid              ## PRODUCES
>     > +
>     > +[FeaturePcd]
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdEnableVariableRuntimeCache
>     > ## CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics            ##
>     > CONSUMES
>     > +
>     > +[Pcd]
>     > +
>     >
> gEfiMdeModulePkgTokenSpaceGuid.PcdAllowVariablePolicyEnforcementDisable
>     > ## CONSUMES
>     > +
>     > +[Guids]
>     > +  ## PRODUCES             ## GUID # Signature of Variable store header
>     > +  ## CONSUMES             ## GUID # Signature of Variable store header
>     > +  ## SOMETIMES_PRODUCES   ## SystemTable
>     > +  gEfiAuthenticatedVariableGuid
>     > +
>     > +  ## PRODUCES             ## GUID # Signature of Variable store header
>     > +  ## CONSUMES             ## GUID # Signature of Variable store header
>     > +  ## SOMETIMES_PRODUCES   ## SystemTable
>     > +  gEfiVariableGuid
>     > +
>     > +  gEfiEventVirtualAddressChangeGuid             ## CONSUMES ## Event
>     > +  gEfiEventExitBootServicesGuid                 ## CONSUMES ## Event
>     > +  ## CONSUMES ## GUID # Locate protocol
>     > +  ## CONSUMES ## GUID # Protocol notify
>     > +  gSmmVariableWriteGuid
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"PK"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"KEK"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"SecureBoot"
>     > +  gEfiGlobalVariableGuid
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"db"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"dbx"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"dbt"
>     > +  gEfiImageSecurityDatabaseGuid
>     > +
>     > +  gVarCheckPolicyLibMmiHandlerGuid
>     > +  gEfiEndOfDxeEventGroupGuid
>     > +
>     > +[Depex]
>     > +  gEfiMmCommunication2ProtocolGuid
>     > +
>     > +[UserExtensions.TianoCore."ExtraFiles"]
>     > +  VariableSmmRuntimeDxeExtra.uni
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableStandalon
>     > eMm.inf
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableStandalon
>     > eMm.inf
>     > new file mode 100644
>     > index 000000000000..fb5a6c947890
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableStandalon
>     > eMm.inf
>     > @@ -0,0 +1,143 @@
>     > +## @file
>     > +#  Provides SMM variable service.
>     > +#
>     > +#  This module installs SMM variable protocol into SMM protocol database,
>     > +#  which can be used by SMM driver, and installs SMM variable protocol
>     > +#  into BS protocol database, which can be used to notify the SMM Runtime
>     > +#  Dxe driver that the SMM variable service is ready.
>     > +#  This module should be used with SMM Runtime DXE module together.
> The
>     > +#  SMM Runtime DXE module would install variable arch protocol and
> variable
>     > +#  write arch protocol based on SMM variable module.
>     > +#
>     > +#  Caution: This module requires additional review when modified.
>     > +#  This driver will have external input - variable data and communicate
> buffer in
>     > SMM mode.
>     > +#  This external input must be validated carefully to avoid security issues
> such
>     > as
>     > +#  buffer overflow or integer overflow.
>     > +#    The whole SMM authentication variable design relies on the integrity of
>     > flash part and SMM.
>     > +#  which is assumed to be protected by platform.  All variable code and
>     > metadata in flash/SMM Memory
>     > +#  may not be modified without authorization. If platform fails to protect
> these
>     > resources,
>     > +#  the authentication service provided in this driver will be broken, and the
>     > behavior is undefined.
>     > +#
>     > +# Copyright (c) 2010 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +# Copyright (c) 2018, Linaro, Ltd. All rights reserved.<BR>
>     > +# Copyright (c) Microsoft Corporation.
>     > +# SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +#
>     > +##
>     > +
>     > +[Defines]
>     > +  INF_VERSION                    = 0x0001001B
>     > +  BASE_NAME                      = VariableStandaloneMm
>     > +  FILE_GUID                      = 417E6192-7678-4A75-B638-305A86D82936
>     > +  MODULE_TYPE                    = MM_STANDALONE
>     > +  VERSION_STRING                 = 1.0
>     > +  PI_SPECIFICATION_VERSION       = 0x00010032
>     > +  ENTRY_POINT                    = VariableServiceInitialize
>     > +
>     > +#
>     > +# The following information is for reference only and not required by the
> build
>     > tools.
>     > +#
>     > +#  VALID_ARCHITECTURES           = IA32 X64 ARM AARCH64
>     > +#
>     > +
>     > +
>     > +[Sources]
>     > +  Reclaim.c
>     > +  Variable.c
>     > +  VariableSmm.c
>     > +  VariableStandaloneMm.c
>     > +  VariableNonVolatile.c
>     > +  VariableNonVolatile.h
>     > +  VariableParsing.c
>     > +  VariableParsing.h
>     > +  VariableRuntimeCache.c
>     > +  VariableRuntimeCache.h
>     > +  VarCheck.c
>     > +  Variable.h
>     > +  PrivilegePolymorphic.h
>     > +  VariableExLib.c
>     > +  TcgMorLockSmm.c
>     > +  SpeculationBarrierSmm.c
>     > +  VariableLockRequestToLock.c
>     > +
>     > +[Packages]
>     > +  MdePkg/MdePkg.dec
>     > +  MdeModulePkg/MdeModulePkg.dec
>     > +  StandaloneMmPkg/StandaloneMmPkg.dec
>     > +
>     > +[LibraryClasses]
>     > +  AuthVariableLib
>     > +  BaseLib
>     > +  BaseMemoryLib
>     > +  DebugLib
>     > +  HobLib
>     > +  MemoryAllocationLib
>     > +  MmServicesTableLib
>     > +  SafeIntLib
>     > +  StandaloneMmDriverEntryPoint
>     > +  SynchronizationLib
>     > +  VarCheckLib
>     > +  VariableFlashInfoLib
>     > +  VariablePolicyLib
>     > +  VariablePolicyHelperLib
>     > +  ProtectedVariableLib
>     > +
>     > +[Protocols]
>     > +  gEfiSmmFirmwareVolumeBlockProtocolGuid        ## CONSUMES
>     > +  ## CONSUMES
>     > +  ## NOTIFY
>     > +  gEfiSmmFaultTolerantWriteProtocolGuid
>     > +  ## PRODUCES
>     > +  ## UNDEFINED # SmiHandlerRegister
>     > +  gEfiSmmVariableProtocolGuid
>     > +  gEfiMmEndOfDxeProtocolGuid                   ## NOTIFY
>     > +  gEdkiiSmmVarCheckProtocolGuid                ## PRODUCES
>     > +
>     > +[Guids]
>     > +  ## SOMETIMES_CONSUMES   ## GUID # Signature of Variable store
> header
>     > +  ## SOMETIMES_PRODUCES   ## GUID # Signature of Variable store header
>     > +  ## SOMETIMES_CONSUMES   ## HOB
>     > +  ## SOMETIMES_PRODUCES   ## SystemTable
>     > +  gEfiAuthenticatedVariableGuid
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## GUID # Signature of Variable store
> header
>     > +  ## SOMETIMES_PRODUCES   ## GUID # Signature of Variable store header
>     > +  ## SOMETIMES_CONSUMES   ## HOB
>     > +  ## SOMETIMES_PRODUCES   ## SystemTable
>     > +  gEfiVariableGuid
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"PlatformLang"
>     > +  ## SOMETIMES_PRODUCES   ## Variable:L"PlatformLang"
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"Lang"
>     > +  ## SOMETIMES_PRODUCES   ## Variable:L"Lang"
>     > +  gEfiGlobalVariableGuid
>     > +
>     > +  gEfiMemoryOverwriteControlDataGuid            ## SOMETIMES_CONSUMES
> ##
>     > Variable:L"MemoryOverwriteRequestControl"
>     > +  gEfiMemoryOverwriteRequestControlLockGuid     ##
> SOMETIMES_PRODUCES
>     > ## Variable:L"MemoryOverwriteRequestControlLock"
>     > +
>     > +  gEfiSystemNvDataFvGuid                        ## CONSUMES             ## GUID
>     > +  gEdkiiFaultTolerantWriteGuid                  ## SOMETIMES_CONSUMES   ##
> HOB
>     > +
>     > +  ## SOMETIMES_CONSUMES   ## Variable:L"VarErrorFlag"
>     > +  ## SOMETIMES_PRODUCES   ## Variable:L"VarErrorFlag"
>     > +  gEdkiiVarErrorFlagGuid
>     > +
>     > +[Pcd]
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize                  ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxAuthVariableSize              ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVolatileVariableSize          ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize
> ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize                ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize                 ##
>     > CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxUserNvVariableSpaceSize
>     > ## CONSUMES
>     > +
>     >
> gEfiMdeModulePkgTokenSpaceGuid.PcdBoottimeReservedNvVariableSpaceSize
>     > ## CONSUMES
>     > +
> gEfiMdeModulePkgTokenSpaceGuid.PcdReclaimVariableSpaceAtEndOfDxe
>     > ## CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdEmuVariableNvModeEnable
> ##
>     > SOMETIMES_CONSUMES
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdEmuVariableNvStoreReserved
> ##
>     > SOMETIMES_CONSUMES
>     > +
>     > +[FeaturePcd]
>     > +  gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics        ##
>     > CONSUMES  # statistic the information of variable.
>     > +  gEfiMdePkgTokenSpaceGuid.PcdUefiVariableDefaultLangDeprecate       ##
>     > CONSUMES  # Auto update PlatformLang/Lang
>     > +
>     > +[Depex]
>     > +  TRUE
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/PrivilegePolymorp
>     > hic.h
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/PrivilegePolymorp
>     > hic.h
>     > new file mode 100644
>     > index 000000000000..7f14515b694f
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/PrivilegePolymorp
>     > hic.h
>     > @@ -0,0 +1,158 @@
>     > +/** @file
>     > +  Polymorphic functions that are called from both the privileged driver (i.e.,
>     > +  the DXE_SMM variable module) and the non-privileged drivers (i.e., one or
>     > +  both of the DXE_RUNTIME variable modules).
>     > +
>     > +  Each of these functions has two implementations, appropriate for
> privileged
>     > +  vs. non-privileged driver code.
>     > +
>     > +  Copyright (c) 2017, Red Hat, Inc.<BR>
>     > +  Copyright (c) 2010 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +
>     > +  SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +**/
>     > +
>     > +#ifndef PRIVILEGE_POLYMORPHIC_H_
>     > +#define PRIVILEGE_POLYMORPHIC_H_
>     > +
>     > +#include <Uefi/UefiBaseType.h>
>     > +
>     > +/**
>     > +  SecureBoot Hook for auth variable update.
>     > +
>     > +  @param[in] VariableName                 Name of Variable to be found.
>     > +  @param[in] VendorGuid                   Variable vendor GUID.
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +SecureBootHook (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid
>     > +  );
>     > +
>     > +/**
>     > +  Initialization for MOR Control Lock.
>     > +
>     > +  @retval EFI_SUCCESS     MorLock initialization success.
>     > +  @return Others          Some error occurs.
>     > +**/
>     > +EFI_STATUS
>     > +MorLockInit (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Delayed initialization for MOR Control Lock at EndOfDxe.
>     > +
>     > +  This function performs any operations queued by MorLockInit().
>     > +**/
>     > +VOID
>     > +MorLockInitAtEndOfDxe (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  This service is an MOR/MorLock checker handler for the SetVariable().
>     > +
>     > +  @param[in]  VariableName the name of the vendor's variable, as a
>     > +                           Null-Terminated Unicode String
>     > +  @param[in]  VendorGuid   Unify identifier for vendor.
>     > +  @param[in]  Attributes   Attributes bitmask to set for the variable.
>     > +  @param[in]  DataSize     The size in bytes of Data-Buffer.
>     > +  @param[in]  Data         Point to the content of the variable.
>     > +
>     > +  @retval  EFI_SUCCESS            The MOR/MorLock check pass, and Variable
>     > +                                  driver can store the variable data.
>     > +  @retval  EFI_INVALID_PARAMETER  The MOR/MorLock data or data size
> or
>     > +                                  attributes is not allowed for MOR variable.
>     > +  @retval  EFI_ACCESS_DENIED      The MOR/MorLock is locked.
>     > +  @retval  EFI_ALREADY_STARTED    The MorLock variable is handled inside
> this
>     > +                                  function. Variable driver can just return
>     > +                                  EFI_SUCCESS.
>     > +**/
>     > +EFI_STATUS
>     > +SetVariableCheckHandlerMor (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid,
>     > +  IN UINT32    Attributes,
>     > +  IN UINTN     DataSize,
>     > +  IN VOID      *Data
>     > +  );
>     > +
>     > +/**
>     > +  This service is consumed by the variable modules to place a barrier to stop
>     > +  speculative execution.
>     > +
>     > +  Ensures that no later instruction will execute speculatively, until all prior
>     > +  instructions have completed.
>     > +
>     > +**/
>     > +VOID
>     > +VariableSpeculationBarrier (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Notify the system that the SMM variable driver is ready.
>     > +**/
>     > +VOID
>     > +VariableNotifySmmReady (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Notify the system that the SMM variable write driver is ready.
>     > +**/
>     > +VOID
>     > +VariableNotifySmmWriteReady (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Variable Driver main entry point. The Variable driver places the 4 EFI
>     > +  runtime services in the EFI System Table and installs arch protocols
>     > +  for variable read and write services being available. It also registers
>     > +  a notification function for an EVT_SIGNAL_VIRTUAL_ADDRESS_CHANGE
>     > event.
>     > +
>     > +  @retval EFI_SUCCESS       Variable service successfully initialized.
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +MmVariableServiceInitialize (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  This function checks if the buffer is valid per processor architecture and
>     > +  does not overlap with SMRAM.
>     > +
>     > +  @param Buffer The buffer start address to be checked.
>     > +  @param Length The buffer length to be checked.
>     > +
>     > +  @retval TRUE  This buffer is valid per processor architecture and does not
>     > +                overlap with SMRAM.
>     > +  @retval FALSE This buffer is not valid per processor architecture or
> overlaps
>     > +                with SMRAM.
>     > +**/
>     > +BOOLEAN
>     > +VariableSmmIsBufferOutsideSmmValid (
>     > +  IN EFI_PHYSICAL_ADDRESS  Buffer,
>     > +  IN UINT64                Length
>     > +  );
>     > +
>     > +/**
>     > +  Whether the TCG or TCG2 protocols are installed in the UEFI protocol
>     > database.
>     > +  This information is used by the MorLock code to infer whether an existing
>     > +  MOR variable is legitimate or not.
>     > +
>     > +  @retval TRUE  Either the TCG or TCG2 protocol is installed in the UEFI
>     > +                protocol database
>     > +  @retval FALSE Neither the TCG nor the TCG2 protocol is installed in the
> UEFI
>     > +                protocol database
>     > +**/
>     > +BOOLEAN
>     > +VariableHaveTcgProtocols (
>     > +  VOID
>     > +  );
>     > +
>     > +#endif
>     > diff --git
>     > a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Variable.h
>     > b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Variable.h
>     > new file mode 100644
>     > index 000000000000..c679e524043f
>     > --- /dev/null
>     > +++
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Variable.h
>     > @@ -0,0 +1,948 @@
>     > +/** @file
>     > +  The internal header file includes the common header files, defines
>     > +  internal structure and functions used by Variable modules.
>     > +
>     > +Copyright (c) 2006 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#ifndef VARIABLE_H_
>     > +#define VARIABLE_H_
>     > +
>     > +#include <PiDxe.h>
>     > +#include <Protocol/VariableWrite.h>
>     > +#include <Protocol/FaultTolerantWrite.h>
>     > +#include <Protocol/FirmwareVolumeBlock.h>
>     > +#include <Protocol/Variable.h>
>     > +#include <Protocol/VariableLock.h>
>     > +#include <Protocol/VarCheck.h>
>     > +#include <Library/PcdLib.h>
>     > +#include <Library/HobLib.h>
>     > +#include <Library/UefiDriverEntryPoint.h>
>     > +#include <Library/DxeServicesTableLib.h>
>     > +#include <Library/UefiRuntimeLib.h>
>     > +#include <Library/DebugLib.h>
>     > +#include <Library/BaseMemoryLib.h>
>     > +#include <Library/UefiBootServicesTableLib.h>
>     > +#include <Library/UefiLib.h>
>     > +#include <Library/BaseLib.h>
>     > +#include <Library/SynchronizationLib.h>
>     > +#include <Library/MemoryAllocationLib.h>
>     > +#include <Library/AuthVariableLib.h>
>     > +#include <Library/VarCheckLib.h>
>     > +#include <Library/VariableFlashInfoLib.h>
>     > +#include <Library/SafeIntLib.h>
>     > +#include <Library/ProtectedVariableLib.h>
>     > +#include <Guid/GlobalVariable.h>
>     > +#include <Guid/EventGroup.h>
>     > +#include <Guid/VariableFormat.h>
>     > +#include <Guid/SystemNvDataGuid.h>
>     > +#include <Guid/FaultTolerantWrite.h>
>     > +#include <Guid/VarErrorFlag.h>
>     > +
>     > +#include "PrivilegePolymorphic.h"
>     > +
>     > +#define EFI_VARIABLE_ATTRIBUTES_MASK
> (EFI_VARIABLE_NON_VOLATILE |\
>     > +                                      EFI_VARIABLE_BOOTSERVICE_ACCESS | \
>     > +                                      EFI_VARIABLE_RUNTIME_ACCESS | \
>     > +                                      EFI_VARIABLE_HARDWARE_ERROR_RECORD | \
>     > +
>     > EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS | \
>     > +                                      EFI_VARIABLE_APPEND_WRITE)
>     > +
>     > +///
>     > +/// The size of a 3 character ISO639 language code.
>     > +///
>     > +#define ISO_639_2_ENTRY_SIZE  3
>     > +
>     > +typedef enum {
>     > +  VariableStoreTypeVolatile,
>     > +  VariableStoreTypeHob,
>     > +  VariableStoreTypeNv,
>     > +  VariableStoreTypeMax
>     > +} VARIABLE_STORE_TYPE;
>     > +
>     > +typedef struct {
>     > +  UINT32                   PendingUpdateOffset;
>     > +  UINT32                   PendingUpdateLength;
>     > +  VARIABLE_STORE_HEADER    *Store;
>     > +} VARIABLE_RUNTIME_CACHE;
>     > +
>     > +typedef struct {
>     > +  BOOLEAN                   *ReadLock;
>     > +  BOOLEAN                   *PendingUpdate;
>     > +  BOOLEAN                   *HobFlushComplete;
>     > +  VARIABLE_RUNTIME_CACHE    VariableRuntimeHobCache;
>     > +  VARIABLE_RUNTIME_CACHE    VariableRuntimeNvCache;
>     > +  VARIABLE_RUNTIME_CACHE    VariableRuntimeVolatileCache;
>     > +} VARIABLE_RUNTIME_CACHE_CONTEXT;
>     > +
>     > +typedef struct {
>     > +  VARIABLE_HEADER    *CurrPtr;
>     > +  //
>     > +  // If both ADDED and IN_DELETED_TRANSITION variable are present,
>     > +  // InDeletedTransitionPtr will point to the IN_DELETED_TRANSITION one.
>     > +  // Otherwise, CurrPtr will point to the ADDED or
> IN_DELETED_TRANSITION
>     > one,
>     > +  // and InDeletedTransitionPtr will be NULL at the same time.
>     > +  //
>     > +  VARIABLE_HEADER    *InDeletedTransitionPtr;
>     > +  VARIABLE_HEADER    *EndPtr;
>     > +  VARIABLE_HEADER    *StartPtr;
>     > +  BOOLEAN            Volatile;
>     > +} VARIABLE_POINTER_TRACK;
>     > +
>     > +typedef struct {
>     > +  EFI_PHYSICAL_ADDRESS              HobVariableBase;
>     > +  EFI_PHYSICAL_ADDRESS              VolatileVariableBase;
>     > +  EFI_PHYSICAL_ADDRESS              NonVolatileVariableBase;
>     > +  VARIABLE_RUNTIME_CACHE_CONTEXT    VariableRuntimeCacheContext;
>     > +  EFI_LOCK                          VariableServicesLock;
>     > +  UINT32                            ReentrantState;
>     > +  BOOLEAN                           AuthFormat;
>     > +  BOOLEAN                           AuthSupport;
>     > +  BOOLEAN                           EmuNvMode;
>     > +} VARIABLE_GLOBAL;
>     > +
>     > +typedef struct {
>     > +  VARIABLE_GLOBAL                       VariableGlobal;
>     > +  UINTN                                 VolatileLastVariableOffset;
>     > +  UINTN                                 NonVolatileLastVariableOffset;
>     > +  UINTN                                 CommonVariableSpace;
>     > +  UINTN                                 CommonMaxUserVariableSpace;
>     > +  UINTN                                 CommonRuntimeVariableSpace;
>     > +  UINTN                                 CommonVariableTotalSize;
>     > +  UINTN                                 CommonUserVariableTotalSize;
>     > +  UINTN                                 HwErrVariableTotalSize;
>     > +  UINTN                                 MaxVariableSize;
>     > +  UINTN                                 MaxAuthVariableSize;
>     > +  UINTN                                 MaxVolatileVariableSize;
>     > +  UINTN                                 ScratchBufferSize;
>     > +  CHAR8                                 *PlatformLangCodes;
>     > +  CHAR8                                 *LangCodes;
>     > +  CHAR8                                 *PlatformLang;
>     > +  CHAR8                                 Lang[ISO_639_2_ENTRY_SIZE + 1];
>     > +  EFI_FIRMWARE_VOLUME_BLOCK_PROTOCOL    *FvbInstance;
>     > +} VARIABLE_MODULE_GLOBAL;
>     > +
>     > +/**
>     > +  Flush the HOB variable to flash.
>     > +
>     > +  @param[in] VariableName       Name of variable has been updated or
> deleted.
>     > +  @param[in] VendorGuid         Guid of variable has been updated or deleted.
>     > +
>     > +**/
>     > +VOID
>     > +FlushHobVariableToFlash (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid
>     > +  );
>     > +
>     > +/**
>     > +  Writes a buffer to variable storage space, in the working block.
>     > +
>     > +  This function writes a buffer to variable storage space into a firmware
>     > +  volume block device. The destination is specified by the parameter
>     > +  VariableBase. Fault Tolerant Write protocol is used for writing.
>     > +
>     > +  @param  VariableBase   Base address of the variable to write.
>     > +  @param  VariableBuffer Point to the variable data buffer.
>     > +
>     > +  @retval EFI_SUCCESS    The function completed successfully.
>     > +  @retval EFI_NOT_FOUND  Fail to locate Fault Tolerant Write protocol.
>     > +  @retval EFI_ABORTED    The function could not complete successfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +FtwVariableSpace (
>     > +  IN EFI_PHYSICAL_ADDRESS   VariableBase,
>     > +  IN VARIABLE_STORE_HEADER  *VariableBuffer
>     > +  );
>     > +
>     > +/**
>     > +  Finds variable in storage blocks of volatile and non-volatile storage areas.
>     > +
>     > +  This code finds variable in storage blocks of volatile and non-volatile
> storage
>     > areas.
>     > +  If VariableName is an empty string, then we just return the first
>     > +  qualified variable without comparing VariableName and VendorGuid.
>     > +  If IgnoreRtCheck is TRUE, then we ignore the
>     > EFI_VARIABLE_RUNTIME_ACCESS attribute check
>     > +  at runtime when searching existing variable, only VariableName and
>     > VendorGuid are compared.
>     > +  Otherwise, variables without EFI_VARIABLE_RUNTIME_ACCESS are not
> visible
>     > at runtime.
>     > +
>     > +  @param[in]   VariableName           Name of the variable to be found.
>     > +  @param[in]   VendorGuid             Vendor GUID to be found.
>     > +  @param[out]  PtrTrack               VARIABLE_POINTER_TRACK structure for
>     > output,
>     > +                                      including the range searched and the target position.
>     > +  @param[in]   Global                 Pointer to VARIABLE_GLOBAL structure,
>     > including
>     > +                                      base of volatile variable storage area, base of
>     > +                                      NV variable storage area, and a lock.
>     > +  @param[in]   IgnoreRtCheck          Ignore
> EFI_VARIABLE_RUNTIME_ACCESS
>     > attribute
>     > +                                      check at runtime when searching variable.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER       If VariableName is not an empty
> string,
>     > while
>     > +                                      VendorGuid is NULL.
>     > +  @retval EFI_SUCCESS                 Variable successfully found.
>     > +  @retval EFI_NOT_FOUND               Variable not found
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +FindVariable (
>     > +  IN  CHAR16                  *VariableName,
>     > +  IN  EFI_GUID                *VendorGuid,
>     > +  OUT VARIABLE_POINTER_TRACK  *PtrTrack,
>     > +  IN  VARIABLE_GLOBAL         *Global,
>     > +  IN  BOOLEAN                 IgnoreRtCheck
>     > +  );
>     > +
>     > +/**
>     > +  This function is to check if the remaining variable space is enough to set
>     > +  all Variables from argument list successfully. The purpose of the check
>     > +  is to keep the consistency of the Variables to be in variable storage.
>     > +
>     > +  Note: Variables are assumed to be in same storage.
>     > +  The set sequence of Variables will be same with the sequence of
> VariableEntry
>     > from argument list,
>     > +  so follow the argument sequence to check the Variables.
>     > +
>     > +  @param[in] Attributes         Variable attributes for Variable entries.
>     > +  @param[in] Marker             VA_LIST style variable argument list.
>     > +                                The variable argument list with type
>     > VARIABLE_ENTRY_CONSISTENCY *.
>     > +                                A NULL terminates the list. The VariableSize of
>     > +                                VARIABLE_ENTRY_CONSISTENCY is the variable data size
> as
>     > input.
>     > +                                It will be changed to variable total size as output.
>     > +
>     > +  @retval TRUE                  Have enough variable space to set the Variables
>     > successfully.
>     > +  @retval FALSE                 No enough variable space to set the Variables
>     > successfully.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +EFIAPI
>     > +CheckRemainingSpaceForConsistencyInternal (
>     > +  IN UINT32   Attributes,
>     > +  IN VA_LIST  Marker
>     > +  );
>     > +
>     > +/**
>     > +  Update the variable region with Variable information. If
>     > EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS is set,
>     > +  index of associated public key is needed.
>     > +
>     > +  @param[in] VariableName       Name of variable.
>     > +  @param[in] VendorGuid         Guid of variable.
>     > +  @param[in] Data               Variable data.
>     > +  @param[in] DataSize           Size of data. 0 means delete.
>     > +  @param[in] Attributes         Attributes of the variable.
>     > +  @param[in] KeyIndex           Index of associated public key.
>     > +  @param[in] MonotonicCount     Value of associated monotonic count.
>     > +  @param[in, out] Variable      The variable information that is used to keep
>     > track of variable usage.
>     > +
>     > +  @param[in] TimeStamp          Value of associated TimeStamp.
>     > +
>     > +  @retval EFI_SUCCESS           The update operation is success.
>     > +  @retval EFI_OUT_OF_RESOURCES  Variable region is full, cannot write
> other
>     > data into this region.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +UpdateVariable (
>     > +  IN      CHAR16                  *VariableName,
>     > +  IN      EFI_GUID                *VendorGuid,
>     > +  IN      VOID                    *Data,
>     > +  IN      UINTN                   DataSize,
>     > +  IN      UINT32                  Attributes OPTIONAL,
>     > +  IN      UINT32                  KeyIndex  OPTIONAL,
>     > +  IN      UINT64                  MonotonicCount  OPTIONAL,
>     > +  IN OUT  VARIABLE_POINTER_TRACK  *Variable,
>     > +  IN      EFI_TIME                *TimeStamp  OPTIONAL
>     > +  );
>     > +
>     > +/**
>     > +  Return TRUE if ExitBootServices () has been called.
>     > +
>     > +  @retval TRUE If ExitBootServices () has been called.
>     > +**/
>     > +BOOLEAN
>     > +AtRuntime (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Initializes a basic mutual exclusion lock.
>     > +
>     > +  This function initializes a basic mutual exclusion lock to the released state
>     > +  and returns the lock.  Each lock provides mutual exclusion access at its
> task
>     > +  priority level.  Since there is no preemption or multiprocessor support in
> EFI,
>     > +  acquiring the lock only consists of raising to the locks TPL.
>     > +  If Lock is NULL, then ASSERT().
>     > +  If Priority is not a valid TPL value, then ASSERT().
>     > +
>     > +  @param  Lock       A pointer to the lock data structure to initialize.
>     > +  @param  Priority   EFI TPL is associated with the lock.
>     > +
>     > +  @return The lock.
>     > +
>     > +**/
>     > +EFI_LOCK *
>     > +InitializeLock (
>     > +  IN OUT EFI_LOCK  *Lock,
>     > +  IN EFI_TPL       Priority
>     > +  );
>     > +
>     > +/**
>     > +  Acquires lock only at boot time. Simply returns at runtime.
>     > +
>     > +  This is a temperary function that will be removed when
>     > +  EfiAcquireLock() in UefiLib can handle the call in UEFI
>     > +  Runtimer driver in RT phase.
>     > +  It calls EfiAcquireLock() at boot time, and simply returns
>     > +  at runtime.
>     > +
>     > +  @param  Lock         A pointer to the lock to acquire.
>     > +
>     > +**/
>     > +VOID
>     > +AcquireLockOnlyAtBootTime (
>     > +  IN EFI_LOCK  *Lock
>     > +  );
>     > +
>     > +/**
>     > +  Releases lock only at boot time. Simply returns at runtime.
>     > +
>     > +  This is a temperary function which will be removed when
>     > +  EfiReleaseLock() in UefiLib can handle the call in UEFI
>     > +  Runtimer driver in RT phase.
>     > +  It calls EfiReleaseLock() at boot time and simply returns
>     > +  at runtime.
>     > +
>     > +  @param  Lock         A pointer to the lock to release.
>     > +
>     > +**/
>     > +VOID
>     > +ReleaseLockOnlyAtBootTime (
>     > +  IN EFI_LOCK  *Lock
>     > +  );
>     > +
>     > +/**
>     > +  Retrieve the FVB protocol interface by HANDLE.
>     > +
>     > +  @param[in]  FvBlockHandle     The handle of FVB protocol that provides
>     > services for
>     > +                                reading, writing, and erasing the target block.
>     > +  @param[out] FvBlock           The interface of FVB protocol
>     > +
>     > +  @retval EFI_SUCCESS           The interface information for the specified
>     > protocol was returned.
>     > +  @retval EFI_UNSUPPORTED       The device does not support the FVB
> protocol.
>     > +  @retval EFI_INVALID_PARAMETER FvBlockHandle is not a valid
> EFI_HANDLE
>     > or FvBlock is NULL.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetFvbByHandle (
>     > +  IN  EFI_HANDLE                          FvBlockHandle,
>     > +  OUT EFI_FIRMWARE_VOLUME_BLOCK_PROTOCOL  **FvBlock
>     > +  );
>     > +
>     > +/**
>     > +  Function returns an array of handles that support the FVB protocol
>     > +  in a buffer allocated from pool.
>     > +
>     > +  @param[out]  NumberHandles    The number of handles returned in Buffer.
>     > +  @param[out]  Buffer           A pointer to the buffer to return the requested
>     > +                                array of  handles that support FVB protocol.
>     > +
>     > +  @retval EFI_SUCCESS           The array of handles was returned in Buffer,
> and
>     > the number of
>     > +                                handles in Buffer was returned in NumberHandles.
>     > +  @retval EFI_NOT_FOUND         No FVB handle was found.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough pool memory to
> store
>     > the matching results.
>     > +  @retval EFI_INVALID_PARAMETER NumberHandles is NULL or Buffer is
> NULL.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetFvbCountAndBuffer (
>     > +  OUT UINTN       *NumberHandles,
>     > +  OUT EFI_HANDLE  **Buffer
>     > +  );
>     > +
>     > +/**
>     > +  Initializes variable store area for non-volatile and volatile variable.
>     > +
>     > +  @retval EFI_SUCCESS           Function successfully executed.
>     > +  @retval EFI_OUT_OF_RESOURCES  Fail to allocate enough memory
> resource.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +VariableCommonInitialize (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  This function reclaims variable storage if free size is below the threshold.
>     > +
>     > +**/
>     > +VOID
>     > +ReclaimForOS (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Get maximum variable size, covering both non-volatile and volatile
> variables.
>     > +
>     > +  @return Maximum variable size.
>     > +
>     > +**/
>     > +UINTN
>     > +GetMaxVariableSize (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Initializes variable write service.
>     > +
>     > +  @retval EFI_SUCCESS          Function successfully executed.
>     > +  @retval Others               Fail to initialize the variable service.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +VariableWriteServiceInitialize (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Retrieve the SMM Fault Tolerent Write protocol interface.
>     > +
>     > +  @param[out] FtwProtocol       The interface of SMM Ftw protocol
>     > +
>     > +  @retval EFI_SUCCESS           The SMM SAR protocol instance was found
> and
>     > returned in SarProtocol.
>     > +  @retval EFI_NOT_FOUND         The SMM SAR protocol instance was not
> found.
>     > +  @retval EFI_INVALID_PARAMETER SarProtocol is NULL.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetFtwProtocol (
>     > +  OUT VOID  **FtwProtocol
>     > +  );
>     > +
>     > +/**
>     > +  Get the proper fvb handle and/or fvb protocol by the given Flash address.
>     > +
>     > +  @param[in] Address        The Flash address.
>     > +  @param[out] FvbHandle     In output, if it is not NULL, it points to the
> proper
>     > FVB handle.
>     > +  @param[out] FvbProtocol   In output, if it is not NULL, it points to the
> proper
>     > FVB protocol.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetFvbInfoByAddress (
>     > +  IN  EFI_PHYSICAL_ADDRESS                Address,
>     > +  OUT EFI_HANDLE                          *FvbHandle OPTIONAL,
>     > +  OUT EFI_FIRMWARE_VOLUME_BLOCK_PROTOCOL  **FvbProtocol
> OPTIONAL
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This code finds variable in storage blocks (Volatile or Non-Volatile).
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode, and datasize and data are
>     > external input.
>     > +  This function will do basic validation, before parse the data.
>     > +
>     > +  @param VariableName               Name of Variable to be found.
>     > +  @param VendorGuid                 Variable vendor GUID.
>     > +  @param Attributes                 Attribute value of the variable found.
>     > +  @param DataSize                   Size of Data found. If size is less than the
>     > +                                    data, this value contains the required size.
>     > +  @param Data                       The buffer to return the contents of the
> variable.
>     > May be NULL
>     > +                                    with a zero DataSize in order to determine the size
> buffer
>     > needed.
>     > +
>     > +  @return EFI_INVALID_PARAMETER     Invalid parameter.
>     > +  @return EFI_SUCCESS               Find the specified variable.
>     > +  @return EFI_NOT_FOUND             Not found.
>     > +  @return EFI_BUFFER_TO_SMALL       DataSize is too small for the result.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceGetVariable (
>     > +  IN      CHAR16    *VariableName,
>     > +  IN      EFI_GUID  *VendorGuid,
>     > +  OUT     UINT32    *Attributes OPTIONAL,
>     > +  IN OUT  UINTN     *DataSize,
>     > +  OUT     VOID      *Data OPTIONAL
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This code Finds the Next available variable.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode. This function will do basic
>     > validation, before parse the data.
>     > +
>     > +  @param VariableNameSize           The size of the VariableName buffer. The
>     > size must be large
>     > +                                    enough to fit input string supplied in VariableName
> buffer.
>     > +  @param VariableName               Pointer to variable name.
>     > +  @param VendorGuid                 Variable Vendor Guid.
>     > +
>     > +  @retval EFI_SUCCESS               The function completed successfully.
>     > +  @retval EFI_NOT_FOUND             The next variable was not found.
>     > +  @retval EFI_BUFFER_TOO_SMALL      The VariableNameSize is too small
> for
>     > the result.
>     > +                                    VariableNameSize has been updated with the size
> needed
>     > to complete the request.
>     > +  @retval EFI_INVALID_PARAMETER     VariableNameSize is NULL.
>     > +  @retval EFI_INVALID_PARAMETER     VariableName is NULL.
>     > +  @retval EFI_INVALID_PARAMETER     VendorGuid is NULL.
>     > +  @retval EFI_INVALID_PARAMETER     The input values of VariableName
> and
>     > VendorGuid are not a name and
>     > +                                    GUID of an existing variable.
>     > +  @retval EFI_INVALID_PARAMETER     Null-terminator is not found in the
> first
>     > VariableNameSize bytes of
>     > +                                    the input VariableName buffer.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceGetNextVariableName (
>     > +  IN OUT  UINTN     *VariableNameSize,
>     > +  IN OUT  CHAR16    *VariableName,
>     > +  IN OUT  EFI_GUID  *VendorGuid
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This code sets variable in storage blocks (Volatile or Non-Volatile).
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode, and datasize and data are
>     > external input.
>     > +  This function will do basic validation, before parse the data.
>     > +  This function will parse the authentication carefully to avoid security
> issues,
>     > like
>     > +  buffer overflow, integer overflow.
>     > +  This function will check attribute carefully to avoid authentication bypass.
>     > +
>     > +  @param VariableName                     Name of Variable to be found.
>     > +  @param VendorGuid                       Variable vendor GUID.
>     > +  @param Attributes                       Attribute value of the variable found
>     > +  @param DataSize                         Size of Data found. If size is less than the
>     > +                                          data, this value contains the required size.
>     > +  @param Data                             Data pointer.
>     > +
>     > +  @return EFI_INVALID_PARAMETER           Invalid parameter.
>     > +  @return EFI_SUCCESS                     Set successfully.
>     > +  @return EFI_OUT_OF_RESOURCES            Resource not enough to set
> variable.
>     > +  @return EFI_NOT_FOUND                   Not found.
>     > +  @return EFI_WRITE_PROTECTED             Variable is read-only.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceSetVariable (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid,
>     > +  IN UINT32    Attributes,
>     > +  IN UINTN     DataSize,
>     > +  IN VOID      *Data
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This code returns information about the EFI variables.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode. This function will do basic
>     > validation, before parse the data.
>     > +
>     > +  @param Attributes                     Attributes bitmask to specify the type of
>     > variables
>     > +                                        on which to return information.
>     > +  @param MaximumVariableStorageSize     Pointer to the maximum size of
> the
>     > storage space available
>     > +                                        for the EFI variables associated with the attributes
>     > specified.
>     > +  @param RemainingVariableStorageSize   Pointer to the remaining size of
> the
>     > storage space available
>     > +                                        for EFI variables associated with the attributes
> specified.
>     > +  @param MaximumVariableSize            Pointer to the maximum size of an
>     > individual EFI variables
>     > +                                        associated with the attributes specified.
>     > +
>     > +  @return EFI_SUCCESS                   Query successfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceQueryVariableInfoInternal (
>     > +  IN  UINT32  Attributes,
>     > +  OUT UINT64  *MaximumVariableStorageSize,
>     > +  OUT UINT64  *RemainingVariableStorageSize,
>     > +  OUT UINT64  *MaximumVariableSize
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This code returns information about the EFI variables.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode. This function will do basic
>     > validation, before parse the data.
>     > +
>     > +  @param Attributes                     Attributes bitmask to specify the type of
>     > variables
>     > +                                        on which to return information.
>     > +  @param MaximumVariableStorageSize     Pointer to the maximum size of
> the
>     > storage space available
>     > +                                        for the EFI variables associated with the attributes
>     > specified.
>     > +  @param RemainingVariableStorageSize   Pointer to the remaining size of
> the
>     > storage space available
>     > +                                        for EFI variables associated with the attributes
> specified.
>     > +  @param MaximumVariableSize            Pointer to the maximum size of an
>     > individual EFI variables
>     > +                                        associated with the attributes specified.
>     > +
>     > +  @return EFI_INVALID_PARAMETER         An invalid combination of
> attribute
>     > bits was supplied.
>     > +  @return EFI_SUCCESS                   Query successfully.
>     > +  @return EFI_UNSUPPORTED               The attribute is not supported on this
>     > platform.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceQueryVariableInfo (
>     > +  IN  UINT32  Attributes,
>     > +  OUT UINT64  *MaximumVariableStorageSize,
>     > +  OUT UINT64  *RemainingVariableStorageSize,
>     > +  OUT UINT64  *MaximumVariableSize
>     > +  );
>     > +
>     > +/**
>     > +  Mark a variable that will become read-only after leaving the DXE phase of
>     > execution.
>     > +
>     > +  @param[in] This          The VARIABLE_LOCK_PROTOCOL instance.
>     > +  @param[in] VariableName  A pointer to the variable name that will be
> made
>     > read-only subsequently.
>     > +  @param[in] VendorGuid    A pointer to the vendor GUID that will be made
>     > read-only subsequently.
>     > +
>     > +  @retval EFI_SUCCESS           The variable specified by the VariableName
> and
>     > the VendorGuid was marked
>     > +                                as pending to be read-only.
>     > +  @retval EFI_INVALID_PARAMETER VariableName or VendorGuid is NULL.
>     > +                                Or VariableName is an empty string.
>     > +  @retval EFI_ACCESS_DENIED     EFI_END_OF_DXE_EVENT_GROUP_GUID
> or
>     > EFI_EVENT_GROUP_READY_TO_BOOT has
>     > +                                already been signaled.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough resource to hold
> the
>     > lock request.
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableLockRequestToLock (
>     > +  IN CONST EDKII_VARIABLE_LOCK_PROTOCOL  *This,
>     > +  IN       CHAR16                        *VariableName,
>     > +  IN       EFI_GUID                      *VendorGuid
>     > +  );
>     > +
>     > +/**
>     > +  Register SetVariable check handler.
>     > +
>     > +  @param[in] Handler            Pointer to check handler.
>     > +
>     > +  @retval EFI_SUCCESS           The SetVariable check handler was registered
>     > successfully.
>     > +  @retval EFI_INVALID_PARAMETER Handler is NULL.
>     > +  @retval EFI_ACCESS_DENIED     EFI_END_OF_DXE_EVENT_GROUP_GUID
> or
>     > EFI_EVENT_GROUP_READY_TO_BOOT has
>     > +                                already been signaled.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough resource for the
>     > SetVariable check handler register request.
>     > +  @retval EFI_UNSUPPORTED       This interface is not implemented.
>     > +                                For example, it is unsupported in VarCheck protocol if
> both
>     > VarCheck and SmmVarCheck protocols are present.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VarCheckRegisterSetVariableCheckHandler (
>     > +  IN VAR_CHECK_SET_VARIABLE_CHECK_HANDLER  Handler
>     > +  );
>     > +
>     > +/**
>     > +  Variable property set.
>     > +
>     > +  @param[in] Name               Pointer to the variable name.
>     > +  @param[in] Guid               Pointer to the vendor GUID.
>     > +  @param[in] VariableProperty   Pointer to the input variable property.
>     > +
>     > +  @retval EFI_SUCCESS           The property of variable specified by the
> Name
>     > and Guid was set successfully.
>     > +  @retval EFI_INVALID_PARAMETER Name, Guid or VariableProperty is
> NULL,
>     > or Name is an empty string,
>     > +                                or the fields of VariableProperty are not valid.
>     > +  @retval EFI_ACCESS_DENIED     EFI_END_OF_DXE_EVENT_GROUP_GUID
> or
>     > EFI_EVENT_GROUP_READY_TO_BOOT has
>     > +                                already been signaled.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough resource for the
>     > variable property set request.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VarCheckVariablePropertySet (
>     > +  IN CHAR16                       *Name,
>     > +  IN EFI_GUID                     *Guid,
>     > +  IN VAR_CHECK_VARIABLE_PROPERTY  *VariableProperty
>     > +  );
>     > +
>     > +/**
>     > +  Variable property get.
>     > +
>     > +  @param[in]  Name              Pointer to the variable name.
>     > +  @param[in]  Guid              Pointer to the vendor GUID.
>     > +  @param[out] VariableProperty  Pointer to the output variable property.
>     > +
>     > +  @retval EFI_SUCCESS           The property of variable specified by the
> Name
>     > and Guid was got successfully.
>     > +  @retval EFI_INVALID_PARAMETER Name, Guid or VariableProperty is
> NULL,
>     > or Name is an empty string.
>     > +  @retval EFI_NOT_FOUND         The property of variable specified by the
> Name
>     > and Guid was not found.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VarCheckVariablePropertyGet (
>     > +  IN CHAR16                        *Name,
>     > +  IN EFI_GUID                      *Guid,
>     > +  OUT VAR_CHECK_VARIABLE_PROPERTY  *VariableProperty
>     > +  );
>     > +
>     > +/**
>     > +  Initialize variable quota.
>     > +
>     > +**/
>     > +VOID
>     > +InitializeVariableQuota (
>     > +  VOID
>     > +  );
>     > +
>     > +extern VARIABLE_MODULE_GLOBAL      *mVariableModuleGlobal;
>     > +extern EFI_FIRMWARE_VOLUME_HEADER  *mNvFvHeaderCache;
>     > +extern VARIABLE_STORE_HEADER       *mNvVariableCache;
>     > +extern VARIABLE_INFO_ENTRY         *gVariableInfo;
>     > +extern BOOLEAN                     mEndOfDxe;
>     > +extern VAR_CHECK_REQUEST_SOURCE    mRequestSource;
>     > +
>     > +extern AUTH_VAR_LIB_CONTEXT_OUT  mAuthContextOut;
>     > +
>     > +/**
>     > +  Finds variable in storage blocks of volatile and non-volatile storage areas.
>     > +
>     > +  This code finds variable in storage blocks of volatile and non-volatile
> storage
>     > areas.
>     > +  If VariableName is an empty string, then we just return the first
>     > +  qualified variable without comparing VariableName and VendorGuid.
>     > +
>     > +  @param[in]  VariableName          Name of the variable to be found.
>     > +  @param[in]  VendorGuid            Variable vendor GUID to be found.
>     > +  @param[out] AuthVariableInfo      Pointer to AUTH_VARIABLE_INFO
> structure
>     > for
>     > +                                    output of the variable found.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER     If VariableName is not an empty
> string,
>     > +                                    while VendorGuid is NULL.
>     > +  @retval EFI_SUCCESS               Variable successfully found.
>     > +  @retval EFI_NOT_FOUND             Variable not found
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableExLibFindVariable (
>     > +  IN  CHAR16              *VariableName,
>     > +  IN  EFI_GUID            *VendorGuid,
>     > +  OUT AUTH_VARIABLE_INFO  *AuthVariableInfo
>     > +  );
>     > +
>     > +/**
>     > +  Finds next variable in storage blocks of volatile and non-volatile storage
> areas.
>     > +
>     > +  This code finds next variable in storage blocks of volatile and non-volatile
>     > storage areas.
>     > +  If VariableName is an empty string, then we just return the first
>     > +  qualified variable without comparing VariableName and VendorGuid.
>     > +
>     > +  @param[in]  VariableName          Name of the variable to be found.
>     > +  @param[in]  VendorGuid            Variable vendor GUID to be found.
>     > +  @param[out] AuthVariableInfo      Pointer to AUTH_VARIABLE_INFO
> structure
>     > for
>     > +                                    output of the next variable.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER     If VariableName is not an empty
> string,
>     > +                                    while VendorGuid is NULL.
>     > +  @retval EFI_SUCCESS               Variable successfully found.
>     > +  @retval EFI_NOT_FOUND             Variable not found
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableExLibFindNextVariable (
>     > +  IN  CHAR16              *VariableName,
>     > +  IN  EFI_GUID            *VendorGuid,
>     > +  OUT AUTH_VARIABLE_INFO  *AuthVariableInfo
>     > +  );
>     > +
>     > +/**
>     > +  Update the variable region with Variable information.
>     > +
>     > +  @param[in] AuthVariableInfo       Pointer AUTH_VARIABLE_INFO structure
> for
>     > +                                    input of the variable.
>     > +
>     > +  @retval EFI_SUCCESS               The update operation is success.
>     > +  @retval EFI_INVALID_PARAMETER     Invalid parameter.
>     > +  @retval EFI_WRITE_PROTECTED       Variable is write-protected.
>     > +  @retval EFI_OUT_OF_RESOURCES      There is not enough resource.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableExLibUpdateVariable (
>     > +  IN AUTH_VARIABLE_INFO  *AuthVariableInfo
>     > +  );
>     > +
>     > +/**
>     > +  Get scratch buffer.
>     > +
>     > +  @param[in, out] ScratchBufferSize Scratch buffer size. If input size is
> greater
>     > than
>     > +                                    the maximum supported buffer size, this value contains
>     > +                                    the maximum supported buffer size as output.
>     > +  @param[out]     ScratchBuffer     Pointer to scratch buffer address.
>     > +
>     > +  @retval EFI_SUCCESS       Get scratch buffer successfully.
>     > +  @retval EFI_UNSUPPORTED   If input size is greater than the maximum
>     > supported buffer size.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableExLibGetScratchBuffer (
>     > +  IN OUT UINTN  *ScratchBufferSize,
>     > +  OUT    VOID   **ScratchBuffer
>     > +  );
>     > +
>     > +/**
>     > +  This function is to check if the remaining variable space is enough to set
>     > +  all Variables from argument list successfully. The purpose of the check
>     > +  is to keep the consistency of the Variables to be in variable storage.
>     > +
>     > +  Note: Variables are assumed to be in same storage.
>     > +  The set sequence of Variables will be same with the sequence of
> VariableEntry
>     > from argument list,
>     > +  so follow the argument sequence to check the Variables.
>     > +
>     > +  @param[in] Attributes         Variable attributes for Variable entries.
>     > +  @param ...                    The variable argument list with type
>     > VARIABLE_ENTRY_CONSISTENCY *.
>     > +                                A NULL terminates the list. The VariableSize of
>     > +                                VARIABLE_ENTRY_CONSISTENCY is the variable data size
> as
>     > input.
>     > +                                It will be changed to variable total size as output.
>     > +
>     > +  @retval TRUE                  Have enough variable space to set the Variables
>     > successfully.
>     > +  @retval FALSE                 No enough variable space to set the Variables
>     > successfully.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +EFIAPI
>     > +VariableExLibCheckRemainingSpaceForConsistency (
>     > +  IN UINT32  Attributes,
>     > +  ...
>     > +  );
>     > +
>     > +/**
>     > +  Return TRUE if at OS runtime.
>     > +
>     > +  @retval TRUE If at OS runtime.
>     > +  @retval FALSE If at boot time.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +EFIAPI
>     > +VariableExLibAtRuntime (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Is user variable?
>     > +
>     > +  @param[in] Variable   Pointer to variable header.
>     > +
>     > +  @retval TRUE          User variable.
>     > +  @retval FALSE         System variable.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +IsUserVariable (
>     > +  IN VARIABLE_HEADER  *Variable
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  Variable store garbage collection and reclaim operation.
>     > +
>     > +  @param[in]      VariableBase            Base address of variable store.
>     > +  @param[out]     LastVariableOffset      Offset of last variable.
>     > +  @param[in]      IsVolatile              The variable store is volatile or not;
>     > +                                          if it is non-volatile, need FTW.
>     > +  @param[in, out] UpdatingPtrTrack        Pointer to updating variable
> pointer
>     > track structure.
>     > +  @param[in]      NewVariable             Pointer to new variable.
>     > +  @param[in]      NewVariableSize         New variable size.
>     > +
>     > +  @return EFI_SUCCESS                  Reclaim operation has finished
> successfully.
>     > +  @return EFI_OUT_OF_RESOURCES         No enough memory resources or
>     > variable space.
>     > +  @return Others                       Unexpect error happened during reclaim
>     > operation.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +Reclaim (
>     > +  IN     EFI_PHYSICAL_ADDRESS    VariableBase,
>     > +  OUT    UINTN                   *LastVariableOffset,
>     > +  IN     BOOLEAN                 IsVolatile,
>     > +  IN OUT VARIABLE_POINTER_TRACK  *UpdatingPtrTrack,
>     > +  IN     VARIABLE_HEADER         *NewVariable,
>     > +  IN     UINTN                   NewVariableSize
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This function writes data to the FWH at the correct LBA even if the LBAs
>     > +  are fragmented.
>     > +
>     > +  @param Global                  Pointer to VARIABLE_GLOBAL structure.
>     > +  @param Volatile                Point out the Variable is Volatile or Non-Volatile.
>     > +  @param SetByIndex              TRUE if target pointer is given as index.
>     > +                                 FALSE if target pointer is absolute.
>     > +  @param Fvb                     Pointer to the writable FVB protocol.
>     > +  @param DataPtrIndex            Pointer to the Data from the end of
>     > VARIABLE_STORE_HEADER
>     > +                                 structure.
>     > +  @param DataSize                Size of data to be written.
>     > +  @param Buffer                  Pointer to the buffer from which data is written.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER  Parameters not valid.
>     > +  @retval EFI_UNSUPPORTED        Fvb is a NULL for Non-Volatile variable
>     > update.
>     > +  @retval EFI_OUT_OF_RESOURCES   The remaining size is not enough.
>     > +  @retval EFI_SUCCESS            Variable store successfully updated.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +UpdateVariableStore (
>     > +  IN VARIABLE_GLOBAL                     *Global,
>     > +  IN BOOLEAN                             Volatile,
>     > +  IN BOOLEAN                             SetByIndex,
>     > +  IN EFI_FIRMWARE_VOLUME_BLOCK_PROTOCOL  *Fvb,
>     > +  IN UINTN                               DataPtrIndex,
>     > +  IN UINT32                              DataSize,
>     > +  IN UINT8                               *Buffer
>     > +  );
>     > +
>     > +/**
>     > +  Update partial data of a variable on NV storage and/or cached copy.
>     > +
>     > +  @param[in]  VariableInfo  Pointer to a variable with detailed information.
>     > +  @param[in]  Offset        Offset to write from.
>     > +  @param[in]  Size          Size of data Buffer to update.
>     > +  @param[in]  Buffer        Pointer to data buffer to update.
>     > +
>     > +  @retval EFI_SUCCESS             The variable data was updated successfully.
>     > +  @retval EFI_UNSUPPORTED         If this function is called directly in
> runtime.
>     > +  @retval EFI_INVALID_PARAMETER   If VariableInfo, Buffer or Size are not
>     > valid.
>     > +  @retval Others                  Failed to update NV storage or variable cache.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableExLibUpdateNvVariable (
>     > +  IN  PROTECTED_VARIABLE_INFO  *VariableInfo,
>     > +  IN  UINTN                    Offset,
>     > +  IN  UINT32                   Size,
>     > +  IN  UINT8                    *Buffer
>     > +  );
>     > +
>     > +/**
>     > +  Finds the given variable in a variable store in SMM.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  The data size is external input, so this function will validate it carefully to
>     > avoid buffer overflow.
> 
>     [JianJW] Too long line. Wrap it to within 80 characters for each line.
> 
>     > +
>     > +  @param[in]      VariableName       Name of Variable to be found.
>     > +  @param[in]      VendorGuid         Variable vendor GUID.
>     > +  @param[out]     Attributes         Attribute value of the variable found.
>     > +  @param[in, out] DataSize           Size of Data found. If size is less than the
>     > +                                     data, this value contains the required size.
>     > +  @param[out]     Data               Data pointer.
>     > +
>     > +  @retval EFI_SUCCESS                Found the specified variable.
>     > +  @retval EFI_INVALID_PARAMETER      Invalid parameter.
>     > +  @retval EFI_NOT_FOUND              The specified variable could not be
> found.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +FindVariableInSmm (
>     > +  IN      CHAR16    *VariableName,
>     > +  IN      EFI_GUID  *VendorGuid,
>     > +  OUT     UINT32    *Attributes OPTIONAL,
>     > +  IN OUT  UINTN     *DataSize,
>     > +  OUT     VOID      *Data OPTIONAL
>     > +  );
>     > +
>     > +#endif
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableNonVolat
>     > ile.h
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableNonVolat
>     > ile.h
>     > new file mode 100644
>     > index 000000000000..a84db4877c13
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableNonVolat
>     > ile.h
>     > @@ -0,0 +1,67 @@
>     > +/** @file
>     > +  Common variable non-volatile store routines.
>     > +
>     > +Copyright (c) 2019-2022, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#ifndef VARIABLE_NON_VOLATILE_H_
>     > +#define VARIABLE_NON_VOLATILE_H_
>     > +
>     > +#include "Variable.h"
>     > +
>     > +/**
>     > +  Get non-volatile maximum variable size.
>     > +
>     > +  @return Non-volatile maximum variable size.
>     > +
>     > +**/
>     > +UINTN
>     > +GetNonVolatileMaxVariableSize (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Init emulated non-volatile variable store.
>     > +
>     > +  @param[out] VariableStoreBase Output pointer to emulated non-volatile
>     > variable store base.
>     > +
>     > +  @retval EFI_SUCCESS           Function successfully executed.
>     > +  @retval EFI_OUT_OF_RESOURCES  Fail to allocate enough memory
> resource.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +InitEmuNonVolatileVariableStore (
>     > +  EFI_PHYSICAL_ADDRESS  *VariableStoreBase
>     > +  );
>     > +
>     > +/**
>     > +  Init real non-volatile variable store.
>     > +
>     > +  @param[out] VariableStoreBase Output pointer to real non-volatile
> variable
>     > store base.
>     > +
>     > +  @retval EFI_SUCCESS           Function successfully executed.
>     > +  @retval EFI_OUT_OF_RESOURCES  Fail to allocate enough memory
> resource.
>     > +  @retval EFI_VOLUME_CORRUPTED  Variable Store or Firmware Volume
> for
>     > Variable Store is corrupted.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +InitRealNonVolatileVariableStore (
>     > +  OUT EFI_PHYSICAL_ADDRESS  *VariableStoreBase
>     > +  );
>     > +
>     > +/**
>     > +  Init non-volatile variable store.
>     > +
>     > +  @retval EFI_SUCCESS           Function successfully executed.
>     > +  @retval EFI_OUT_OF_RESOURCES  Fail to allocate enough memory
> resource.
>     > +  @retval EFI_VOLUME_CORRUPTED  Variable Store or Firmware Volume
> for
>     > Variable Store is corrupted.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +InitNonVolatileVariableStore (
>     > +  VOID
>     > +  );
>     > +
>     > +#endif
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableParsing.h
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableParsing.h
>     > new file mode 100644
>     > index 000000000000..5b040e00982f
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableParsing.h
>     > @@ -0,0 +1,424 @@
>     > +/** @file
>     > +  Functions in this module are associated with variable parsing operations
> and
>     > +  are intended to be usable across variable driver source files.
>     > +
>     > +Copyright (c) 2019 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#ifndef VARIABLE_PARSING_H_
>     > +#define VARIABLE_PARSING_H_
>     > +
>     > +#include <Guid/ImageAuthentication.h>
>     > +#include "Variable.h"
>     > +
>     > +/**
>     > +
>     > +  This code checks if variable header is valid or not.
>     > +
>     > +  @param[in] Variable           Pointer to the Variable Header.
>     > +  @param[in] VariableStoreEnd   Pointer to the Variable Store End.
>     > +  @param[in] AuthFormat         Auth-variable indicator.
>     > +
>     > +  @retval TRUE              Variable header is valid.
>     > +  @retval FALSE             Variable header is not valid.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +IsValidVariableHeader (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  VARIABLE_HEADER  *VariableStoreEnd,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This code gets the current status of Variable Store.
>     > +
>     > +  @param[in] VarStoreHeader  Pointer to the Variable Store Header.
>     > +
>     > +  @retval EfiRaw         Variable store status is raw.
>     > +  @retval EfiValid       Variable store status is valid.
>     > +  @retval EfiInvalid     Variable store status is invalid.
>     > +
>     > +**/
>     > +VARIABLE_STORE_STATUS
>     > +GetVariableStoreStatus (
>     > +  IN VARIABLE_STORE_HEADER  *VarStoreHeader
>     > +  );
>     > +
>     > +/**
>     > +  This code gets the size of variable header.
>     > +
>     > +  @param[in]  AuthFormat    TRUE indicates authenticated variables are
> used.
>     > +                            FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Size of variable header in bytes in type UINTN.
>     > +
>     > +**/
>     > +UINTN
>     > +GetVariableHeaderSize (
>     > +  IN  BOOLEAN  AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This code gets the size of name of variable.
>     > +
>     > +  @param[in]  Variable      Pointer to the variable header.
>     > +  @param[in]  AuthFormat    TRUE indicates authenticated variables are
> used.
>     > +                            FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return UINTN          Size of variable in bytes.
>     > +
>     > +**/
>     > +UINTN
>     > +NameSizeOfVariable (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +  This code sets the size of name of variable.
>     > +
>     > +  @param[in]  Variable      Pointer to the Variable Header.
>     > +  @param[in]  NameSize      Name size to set.
>     > +  @param[in]  AuthFormat    TRUE indicates authenticated variables are
> used.
>     > +                            FALSE indicates authenticated variables are not used.
>     > +
>     > +**/
>     > +VOID
>     > +SetNameSizeOfVariable (
>     > +  IN VARIABLE_HEADER  *Variable,
>     > +  IN UINTN            NameSize,
>     > +  IN BOOLEAN          AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This code gets the size of variable data.
>     > +
>     > +  @param[in]  Variable      Pointer to the Variable Header.
>     > +  @param[in]  AuthFormat    TRUE indicates authenticated variables are
> used.
>     > +                            FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Size of variable in bytes.
>     > +
>     > +**/
>     > +UINTN
>     > +DataSizeOfVariable (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +  This code sets the size of variable data.
>     > +
>     > +  @param[in] Variable   Pointer to the Variable Header.
>     > +  @param[in] DataSize   Data size to set.
>     > +  @param[in] AuthFormat TRUE indicates authenticated variables are used.
>     > +                        FALSE indicates authenticated variables are not used.
>     > +
>     > +**/
>     > +VOID
>     > +SetDataSizeOfVariable (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  UINTN            DataSize,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This code gets the pointer to the variable name.
>     > +
>     > +  @param[in] Variable     Pointer to the Variable Header.
>     > +  @param[in] AuthFormat   TRUE indicates authenticated variables are used.
>     > +                          FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Pointer to Variable Name which is Unicode encoding.
>     > +
>     > +**/
>     > +CHAR16 *
>     > +GetVariableNamePtr (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +  This code gets the pointer to the variable guid.
>     > +
>     > +  @param[in] Variable     Pointer to the Variable Header.
>     > +  @param[in] AuthFormat   TRUE indicates authenticated variables are used.
>     > +                          FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return A EFI_GUID* pointer to Vendor Guid.
>     > +
>     > +**/
>     > +EFI_GUID *
>     > +GetVendorGuidPtr (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This code gets the pointer to the variable data.
>     > +
>     > +  @param[in] Variable     Pointer to the Variable Header.
>     > +  @param[in] AuthFormat   TRUE indicates authenticated variables are used.
>     > +                          FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Pointer to Variable Data.
>     > +
>     > +**/
>     > +UINT8 *
>     > +GetVariableDataPtr (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +  This code gets the variable data offset related to variable header.
>     > +
>     > +  @param[in] Variable     Pointer to the Variable Header.
>     > +  @param[in] AuthFormat   TRUE indicates authenticated variables are used.
>     > +                          FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Variable Data offset.
>     > +
>     > +**/
>     > +UINTN
>     > +GetVariableDataOffset (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +  Get variable data payload.
>     > +
>     > +  @param[in]      Variable     Pointer to the Variable Header.
>     > +  @param[out]     Data         Pointer to buffer used to store the variable data.
>     > +  @param[in]      DataSize     Size of buffer passed by Data.
>     > +  @param[out]     DataSize     Size of data copied into Data buffer.
>     > +  @param[in]      AuthFlag     Auth-variable indicator.
>     > +
>     > +  @return EFI_SUCCESS             Data was fetched.
>     > +  @return EFI_INVALID_PARAMETER   DataSize is NULL.
>     > +  @return EFI_BUFFER_TOO_SMALL    DataSize is smaller than size of
> variable
>     > data.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetVariableData (
>     > +  IN      VARIABLE_HEADER  *Variable,
>     > +  IN  OUT VOID             *Data,
>     > +  IN  OUT UINT32           *DataSize,
>     > +  IN      BOOLEAN          AuthFlag
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  This code gets the pointer to the next variable header.
>     > +
>     > +  @param[in] Variable     Pointer to the Variable Header.
>     > +  @param[in] AuthFormat   TRUE indicates authenticated variables are used.
>     > +                          FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Pointer to next variable header.
>     > +
>     > +**/
>     > +VARIABLE_HEADER *
>     > +GetNextVariablePtr (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  Gets the pointer to the first variable header in given variable store area.
>     > +
>     > +  @param[in] VarStoreHeader  Pointer to the Variable Store Header.
>     > +
>     > +  @return Pointer to the first variable header.
>     > +
>     > +**/
>     > +VARIABLE_HEADER *
>     > +GetStartPointer (
>     > +  IN VARIABLE_STORE_HEADER  *VarStoreHeader
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  Gets the pointer to the end of the variable storage area.
>     > +
>     > +  This function gets pointer to the end of the variable storage
>     > +  area, according to the input variable store header.
>     > +
>     > +  @param[in] VarStoreHeader  Pointer to the Variable Store Header.
>     > +
>     > +  @return Pointer to the end of the variable storage area.
>     > +
>     > +**/
>     > +VARIABLE_HEADER *
>     > +GetEndPointer (
>     > +  IN VARIABLE_STORE_HEADER  *VarStoreHeader
>     > +  );
>     > +
>     > +/**
>     > +  Compare two EFI_TIME data.
>     > +
>     > +
>     > +  @param[in] FirstTime       A pointer to the first EFI_TIME data.
>     > +  @param[in] SecondTime      A pointer to the second EFI_TIME data.
>     > +
>     > +  @retval  TRUE              The FirstTime is not later than the SecondTime.
>     > +  @retval  FALSE             The FirstTime is later than the SecondTime.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +VariableCompareTimeStampInternal (
>     > +  IN EFI_TIME  *FirstTime,
>     > +  IN EFI_TIME  *SecondTime
>     > +  );
>     > +
>     > +/**
>     > +  Find the variable in the specified variable store.
>     > +
>     > +  @param[in]       VariableName        Name of the variable to be found
>     > +  @param[in]       VendorGuid          Vendor GUID to be found.
>     > +  @param[in]       IgnoreRtCheck       Ignore
> EFI_VARIABLE_RUNTIME_ACCESS
>     > attribute
>     > +                                       check at runtime when searching variable.
>     > +  @param[in, out]  PtrTrack            Variable Track Pointer structure that
> contains
>     > Variable Information.
>     > +  @param[in]       AuthFormat          TRUE indicates authenticated variables
> are
>     > used.
>     > +                                       FALSE indicates authenticated variables are not used.
>     > +
>     > +  @retval          EFI_SUCCESS         Variable found successfully
>     > +  @retval          EFI_NOT_FOUND       Variable not found
>     > +**/
>     > +EFI_STATUS
>     > +FindVariableEx (
>     > +  IN     CHAR16                  *VariableName,
>     > +  IN     EFI_GUID                *VendorGuid,
>     > +  IN     BOOLEAN                 IgnoreRtCheck,
>     > +  IN OUT VARIABLE_POINTER_TRACK  *PtrTrack,
>     > +  IN     BOOLEAN                 AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +  This code finds the next available variable.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode. This function will do basic
>     > validation, before parse the data.
>     > +
>     > +  @param[in]  VariableName      Pointer to variable name.
>     > +  @param[in]  VendorGuid        Variable Vendor Guid.
>     > +  @param[in]  VariableStoreList A list of variable stores that should be used
> to
>     > get the next variable.
>     > +                                The maximum number of entries is the max value of
>     > VARIABLE_STORE_TYPE.
>     > +  @param[out] VariablePtr       Pointer to variable header address.
>     > +  @param[in]  AuthFormat        TRUE indicates authenticated variables are
> used.
>     > +                                FALSE indicates authenticated variables are not used.
>     > +
>     > +  @retval EFI_SUCCESS           The function completed successfully.
>     > +  @retval EFI_NOT_FOUND         The next variable was not found.
>     > +  @retval EFI_INVALID_PARAMETER If VariableName is not an empty string,
>     > while VendorGuid is NULL.
>     > +  @retval EFI_INVALID_PARAMETER The input values of VariableName and
>     > VendorGuid are not a name and
>     > +                                GUID of an existing variable.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceGetNextVariableInternal (
>     > +  IN  CHAR16                 *VariableName,
>     > +  IN  EFI_GUID               *VendorGuid,
>     > +  IN  VARIABLE_STORE_HEADER  **VariableStoreList,
>     > +  OUT VARIABLE_HEADER        **VariablePtr,
>     > +  IN  BOOLEAN                AuthFormat
>     > +  );
>     > +
>     > +/**
>     > +  Routine used to track statistical information about variable usage.
>     > +  The data is stored in the EFI system table so it can be accessed later.
>     > +  VariableInfo.efi can dump out the table. Only Boot Services variable
>     > +  accesses are tracked by this code. The PcdVariableCollectStatistics
>     > +  build flag controls if this feature is enabled.
>     > +
>     > +  A read that hits in the cache will have Read and Cache true for
>     > +  the transaction. Data is allocated by this routine, but never
>     > +  freed.
>     > +
>     > +  @param[in]      VariableName   Name of the Variable to track.
>     > +  @param[in]      VendorGuid     Guid of the Variable to track.
>     > +  @param[in]      Volatile       TRUE if volatile FALSE if non-volatile.
>     > +  @param[in]      Read           TRUE if GetVariable() was called.
>     > +  @param[in]      Write          TRUE if SetVariable() was called.
>     > +  @param[in]      Delete         TRUE if deleted via SetVariable().
>     > +  @param[in]      Cache          TRUE for a cache hit.
>     > +  @param[in,out]  VariableInfo   Pointer to a pointer of
> VARIABLE_INFO_ENTRY
>     > structures.
>     > +
>     > +**/
>     > +VOID
>     > +UpdateVariableInfo (
>     > +  IN  CHAR16                  *VariableName,
>     > +  IN  EFI_GUID                *VendorGuid,
>     > +  IN  BOOLEAN                 Volatile,
>     > +  IN  BOOLEAN                 Read,
>     > +  IN  BOOLEAN                 Write,
>     > +  IN  BOOLEAN                 Delete,
>     > +  IN  BOOLEAN                 Cache,
>     > +  IN OUT VARIABLE_INFO_ENTRY  **VariableInfo
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  Retrieve details of the variable next to given variable within VariableStore.
>     > +
>     > +  If VariableInfo->StoreIndex is invalid, the first one in VariableStore is
> returned.
>     > +
>     > +  @param[in,out] VariableInfo             Pointer to variable information.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER  VariableInfo or VariableStore is NULL.
>     > +  @retval EFI_NOT_FOUND          If the end of VariableStore is reached.
>     > +  @retval EFI_SUCCESS            The next variable is retrieved successfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +GetNextVariableInfo (
>     > +  IN OUT  PROTECTED_VARIABLE_INFO  *VariableInfo
>     > +  );
>     > +
>     > +/**
>     > +
>     > +  Retrieve details about a variable and return them in VariableInfo->Header.
>     > +
>     > +  If VariableInfo->Buffer is given, this function will calculate its offset
>     > +  relative to given variable storage via VariableStore; Otherwise, it will try
>     > +  other internal variable storages or cached copies. It's assumed that, for all
>     > +  copies of NV variable storage, all variables are stored in the same relative
>     > +  position. If VariableInfo->Buffer is found in the range of any storage
> copies,
>     > +  its offset relative to that storage should be the same in other copies.
>     > +
>     > +  If VariableInfo->Offset is given (non-zero) but not VariableInfo->Buffer,
>     > +  this function will return the variable memory address inside VariableStore,
>     > +  if given, via VariableInfo->Address; Otherwise, the address of other
> storage
>     > +  copies will be returned, if any.
>     > +
>     > +  For a new variable whose offset has not been determined, a value of -1 as
>     > +  VariableInfo->Offset should be passed to skip the offset calculation.
>     > +
>     > +  @param VariableInfo             Pointer to variable information.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER  VariableInfo is NULL or both
> VariableInfo-
>     > >Address
>     > +                                 and VariableInfo->Offset are NULL (0).
>     > +  @retval EFI_NOT_FOUND          If given Address or Offset is out of range
> of
>     > +                                 any given or internal storage copies.
>     > +  @retval EFI_SUCCESS            Variable details are retrieved successfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +GetVariableInfo (
>     > +  IN OUT  PROTECTED_VARIABLE_INFO  *VariableInfo
>     > +  );
>     > +
>     > +#endif
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeC
>     > ache.h
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeC
>     > ache.h
>     > new file mode 100644
>     > index 000000000000..77dbce0f907c
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeC
>     > ache.h
>     > @@ -0,0 +1,51 @@
>     > +/** @file
>     > +  The common variable volatile store routines shared by the DXE_RUNTIME
>     > variable
>     > +  module and the DXE_SMM variable module.
>     > +
>     > +Copyright (c) 2019-2022, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#ifndef VARIABLE_RUNTIME_CACHE_H_
>     > +#define VARIABLE_RUNTIME_CACHE_H_
>     > +
>     > +#include "Variable.h"
>     > +
>     > +/**
>     > +  Copies any pending updates to runtime variable caches.
>     > +
>     > +  @retval EFI_UNSUPPORTED         The volatile store to be updated is not
>     > initialized properly.
>     > +  @retval EFI_SUCCESS             The volatile store was updated successfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +FlushPendingRuntimeVariableCacheUpdates (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Synchronizes the runtime variable caches with all pending updates outside
>     > runtime.
>     > +
>     > +  Ensures all conditions are met to maintain coherency for runtime cache
>     > updates. This function will attempt
>     > +  to write the given update (and any other pending updates) if the ReadLock
> is
>     > available. Otherwise, the
>     > +  update is added as a pending update for the given variable store and it will
> be
>     > flushed to the runtime cache
>     > +  at the next opportunity the ReadLock is available.
>     > +
>     > +  @param[in] VariableRuntimeCache Variable runtime cache structure for
> the
>     > runtime cache being synchronized.
>     > +  @param[in] Offset               Offset in bytes to apply the update.
>     > +  @param[in] Length               Length of data in bytes of the update.
>     > +
>     > +  @retval EFI_SUCCESS             The update was added as a pending update
>     > successfully. If the variable runtime
>     > +                                  cache ReadLock was available, the runtime cache was
>     > updated successfully.
>     > +  @retval EFI_UNSUPPORTED         The volatile store to be updated is not
>     > initialized properly.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +SynchronizeRuntimeVariableCache (
>     > +  IN  VARIABLE_RUNTIME_CACHE  *VariableRuntimeCache,
>     > +  IN  UINTN                   Offset,
>     > +  IN  UINTN                   Length
>     > +  );
>     > +
>     > +#endif
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Measurement.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Measurement.c
>     > new file mode 100644
>     > index 000000000000..c15cce97165d
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Measurement.c
>     > @@ -0,0 +1,343 @@
>     > +/** @file
>     > +  Measure TCG required variable.
>     > +
>     > +Copyright (c) 2013 - 2017, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include <PiDxe.h>
>     > +#include <Guid/ImageAuthentication.h>
>     > +#include <IndustryStandard/UefiTcgPlatform.h>
>     > +
>     > +#include <Library/UefiBootServicesTableLib.h>
>     > +#include <Library/UefiRuntimeServicesTableLib.h>
>     > +#include <Library/MemoryAllocationLib.h>
>     > +#include <Library/BaseMemoryLib.h>
>     > +#include <Library/DebugLib.h>
>     > +#include <Library/BaseLib.h>
>     > +#include <Library/TpmMeasurementLib.h>
>     > +
>     > +#include "PrivilegePolymorphic.h"
>     > +
>     > +typedef struct {
>     > +  CHAR16      *VariableName;
>     > +  EFI_GUID    *VendorGuid;
>     > +} VARIABLE_TYPE;
>     > +
>     > +VARIABLE_TYPE  mVariableType[] = {
>     > +  { EFI_SECURE_BOOT_MODE_NAME,    &gEfiGlobalVariableGuid        },
>     > +  { EFI_PLATFORM_KEY_NAME,        &gEfiGlobalVariableGuid        },
>     > +  { EFI_KEY_EXCHANGE_KEY_NAME,    &gEfiGlobalVariableGuid        },
>     > +  { EFI_IMAGE_SECURITY_DATABASE,  &gEfiImageSecurityDatabaseGuid },
>     > +  { EFI_IMAGE_SECURITY_DATABASE1, &gEfiImageSecurityDatabaseGuid },
>     > +  { EFI_IMAGE_SECURITY_DATABASE2, &gEfiImageSecurityDatabaseGuid },
>     > +};
>     > +
>     > +//
>     > +// "SecureBoot" may update following PK Del/Add
>     > +//  Cache its value to detect value update
>     > +//
>     > +UINT8  *mSecureBootVarData    = NULL;
>     > +UINTN  mSecureBootVarDataSize = 0;
>     > +
>     > +/**
>     > +  This function will return if this variable is SecureBootPolicy Variable.
>     > +
>     > +  @param[in]  VariableName      A Null-terminated string that is the name of
> the
>     > vendor's variable.
>     > +  @param[in]  VendorGuid        A unique identifier for the vendor.
>     > +
>     > +  @retval TRUE  This is SecureBootPolicy Variable
>     > +  @retval FALSE This is not SecureBootPolicy Variable
>     > +**/
>     > +BOOLEAN
>     > +IsSecureBootPolicyVariable (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid
>     > +  )
>     > +{
>     > +  UINTN  Index;
>     > +
>     > +  for (Index = 0; Index < sizeof (mVariableType)/sizeof (mVariableType[0]);
>     > Index++) {
>     > +    if ((StrCmp (VariableName, mVariableType[Index].VariableName) == 0)
> &&
>     > +        (CompareGuid (VendorGuid, mVariableType[Index].VendorGuid)))
>     > +    {
>     > +      return TRUE;
>     > +    }
>     > +  }
>     > +
>     > +  return FALSE;
>     > +}
>     > +
>     > +/**
>     > +  Measure and log an EFI variable, and extend the measurement result into
> a
>     > specific PCR.
>     > +
>     > +  @param[in]  VarName           A Null-terminated string that is the name of
> the
>     > vendor's variable.
>     > +  @param[in]  VendorGuid        A unique identifier for the vendor.
>     > +  @param[in]  VarData           The content of the variable data.
>     > +  @param[in]  VarSize           The size of the variable data.
>     > +
>     > +  @retval EFI_SUCCESS           Operation completed successfully.
>     > +  @retval EFI_OUT_OF_RESOURCES  Out of memory.
>     > +  @retval EFI_DEVICE_ERROR      The operation was unsuccessful.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +MeasureVariable (
>     > +  IN      CHAR16    *VarName,
>     > +  IN      EFI_GUID  *VendorGuid,
>     > +  IN      VOID      *VarData,
>     > +  IN      UINTN     VarSize
>     > +  )
>     > +{
>     > +  EFI_STATUS          Status;
>     > +  UINTN               VarNameLength;
>     > +  UEFI_VARIABLE_DATA  *VarLog;
>     > +  UINT32              VarLogSize;
>     > +
>     > +  ASSERT ((VarSize == 0 && VarData == NULL) || (VarSize != 0 &&
> VarData !=
>     > NULL));
>     > +
>     > +  VarNameLength = StrLen (VarName);
>     > +  VarLogSize    = (UINT32)(sizeof (*VarLog) + VarNameLength * sizeof
>     > (*VarName) + VarSize
>     > +                           - sizeof (VarLog->UnicodeName) - sizeof (VarLog-
>     > >VariableData));
>     > +
>     > +  VarLog = (UEFI_VARIABLE_DATA *)AllocateZeroPool (VarLogSize);
>     > +  if (VarLog == NULL) {
>     > +    return EFI_OUT_OF_RESOURCES;
>     > +  }
>     > +
>     > +  CopyMem (&VarLog->VariableName, VendorGuid, sizeof (VarLog-
>     > >VariableName));
>     > +  VarLog->UnicodeNameLength  = VarNameLength;
>     > +  VarLog->VariableDataLength = VarSize;
>     > +  CopyMem (
>     > +    VarLog->UnicodeName,
>     > +    VarName,
>     > +    VarNameLength * sizeof (*VarName)
>     > +    );
>     > +  if (VarSize != 0) {
>     > +    CopyMem (
>     > +      (CHAR16 *)VarLog->UnicodeName + VarNameLength,
>     > +      VarData,
>     > +      VarSize
>     > +      );
>     > +  }
>     > +
>     > +  DEBUG ((DEBUG_INFO, "VariableDxe: MeasureVariable (Pcr - %x,
> EventType -
>     >  %x, ", (UINTN)7, (UINTN)EV_EFI_VARIABLE_DRIVER_CONFIG));
>     > +  DEBUG ((DEBUG_INFO, "VariableName - %s, VendorGuid - %g)\n",
> VarName,
>     > VendorGuid));
>     > +
>     > +  Status = TpmMeasureAndLogData (
>     > +             7,
>     > +             EV_EFI_VARIABLE_DRIVER_CONFIG,
>     > +             VarLog,
>     > +             VarLogSize,
>     > +             VarLog,
>     > +             VarLogSize
>     > +             );
>     > +  FreePool (VarLog);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Returns the status whether get the variable success. The function
> retrieves
>     > +  variable  through the UEFI Runtime Service GetVariable().  The
>     > +  returned buffer is allocated using AllocatePool().  The caller is responsible
>     > +  for freeing this buffer with FreePool().
>     > +
>     > +  This API is only invoked in boot time. It may NOT be invoked at runtime.
>     > +
>     > +  @param[in]  Name  The pointer to a Null-terminated Unicode string.
>     > +  @param[in]  Guid  The pointer to an EFI_GUID structure
>     > +  @param[out] Value The buffer point saved the variable info.
>     > +  @param[out] Size  The buffer size of the variable.
>     > +
>     > +  @return EFI_OUT_OF_RESOURCES      Allocate buffer failed.
>     > +  @return EFI_SUCCESS               Find the specified variable.
>     > +  @return Others Errors             Return errors from call to gRT->GetVariable.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +InternalGetVariable (
>     > +  IN CONST CHAR16    *Name,
>     > +  IN CONST EFI_GUID  *Guid,
>     > +  OUT VOID           **Value,
>     > +  OUT UINTN          *Size
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  UINTN       BufferSize;
>     > +
>     > +  //
>     > +  // Try to get the variable size.
>     > +  //
>     > +  BufferSize = 0;
>     > +  *Value     = NULL;
>     > +  if (Size != NULL) {
>     > +    *Size = 0;
>     > +  }
>     > +
>     > +  Status = gRT->GetVariable ((CHAR16 *)Name, (EFI_GUID *)Guid, NULL,
>     > &BufferSize, *Value);
>     > +  if (Status != EFI_BUFFER_TOO_SMALL) {
>     > +    return Status;
>     > +  }
>     > +
>     > +  //
>     > +  // Allocate buffer to get the variable.
>     > +  //
>     > +  *Value = AllocatePool (BufferSize);
>     > +  ASSERT (*Value != NULL);
>     > +  if (*Value == NULL) {
>     > +    return EFI_OUT_OF_RESOURCES;
>     > +  }
>     > +
>     > +  //
>     > +  // Get the variable data.
>     > +  //
>     > +  Status = gRT->GetVariable ((CHAR16 *)Name, (EFI_GUID *)Guid, NULL,
>     > &BufferSize, *Value);
>     > +  if (EFI_ERROR (Status)) {
>     > +    FreePool (*Value);
>     > +    *Value = NULL;
>     > +  }
>     > +
>     > +  if (Size != NULL) {
>     > +    *Size = BufferSize;
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  SecureBoot Hook for SetVariable.
>     > +
>     > +  @param[in] VariableName                 Name of Variable to be found.
>     > +  @param[in] VendorGuid                   Variable vendor GUID.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +SecureBootHook (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  UINTN       VariableDataSize;
>     > +  VOID        *VariableData;
>     > +
>     > +  if (!IsSecureBootPolicyVariable (VariableName, VendorGuid)) {
>     > +    return;
>     > +  }
>     > +
>     > +  //
>     > +  // We should NOT use Data and DataSize here,because it may include
>     > signature,
>     > +  // or is just partial with append attributes, or is deleted.
>     > +  // We should GetVariable again, to get full variable content.
>     > +  //
>     > +  Status = InternalGetVariable (
>     > +             VariableName,
>     > +             VendorGuid,
>     > +             &VariableData,
>     > +             &VariableDataSize
>     > +             );
>     > +  if (EFI_ERROR (Status)) {
>     > +    //
>     > +    // Measure DBT only if present and not empty
>     > +    //
>     > +    if ((StrCmp (VariableName, EFI_IMAGE_SECURITY_DATABASE2) == 0) &&
>     > +        CompareGuid (VendorGuid, &gEfiImageSecurityDatabaseGuid))
>     > +    {
>     > +      DEBUG ((DEBUG_INFO, "Skip measuring variable %s since it's deleted\n",
>     > EFI_IMAGE_SECURITY_DATABASE2));
>     > +      return;
>     > +    } else {
>     > +      VariableData     = NULL;
>     > +      VariableDataSize = 0;
>     > +    }
>     > +  }
>     > +
>     > +  Status = MeasureVariable (
>     > +             VariableName,
>     > +             VendorGuid,
>     > +             VariableData,
>     > +             VariableDataSize
>     > +             );
>     > +  DEBUG ((DEBUG_INFO, "MeasureBootPolicyVariable - %r\n", Status));
>     > +
>     > +  if (VariableData != NULL) {
>     > +    FreePool (VariableData);
>     > +  }
>     > +
>     > +  //
>     > +  // "SecureBoot" is 8bit & read-only. It can only be changed according to
> PK
>     > update
>     > +  //
>     > +  if ((StrCmp (VariableName, EFI_PLATFORM_KEY_NAME) == 0) &&
>     > +      CompareGuid (VendorGuid, &gEfiGlobalVariableGuid))
>     > +  {
>     > +    Status = InternalGetVariable (
>     > +               EFI_SECURE_BOOT_MODE_NAME,
>     > +               &gEfiGlobalVariableGuid,
>     > +               &VariableData,
>     > +               &VariableDataSize
>     > +               );
>     > +    if (EFI_ERROR (Status)) {
>     > +      return;
>     > +    }
>     > +
>     > +    //
>     > +    // If PK update is successful. "SecureBoot" shall always exist ever since
>     > variable write service is ready
>     > +    //
>     > +    ASSERT (mSecureBootVarData != NULL);
>     > +
>     > +    if (CompareMem (mSecureBootVarData, VariableData,
> VariableDataSize) !=
>     > 0) {
>     > +      FreePool (mSecureBootVarData);
>     > +      mSecureBootVarData     = VariableData;
>     > +      mSecureBootVarDataSize = VariableDataSize;
>     > +
>     > +      DEBUG ((DEBUG_INFO, "%s variable updated according to PK change.
>     > Remeasure the value!\n", EFI_SECURE_BOOT_MODE_NAME));
>     > +      Status = MeasureVariable (
>     > +                 EFI_SECURE_BOOT_MODE_NAME,
>     > +                 &gEfiGlobalVariableGuid,
>     > +                 mSecureBootVarData,
>     > +                 mSecureBootVarDataSize
>     > +                 );
>     > +      DEBUG ((DEBUG_INFO, "MeasureBootPolicyVariable - %r\n", Status));
>     > +    } else {
>     > +      //
>     > +      // "SecureBoot" variable is not changed
>     > +      //
>     > +      FreePool (VariableData);
>     > +    }
>     > +  }
>     > +
>     > +  return;
>     > +}
>     > +
>     > +/**
>     > +  Some Secure Boot Policy Variable may update following other variable
>     > changes(SecureBoot follows PK change, etc).
>     > +  Record their initial State when variable write service is ready.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +RecordSecureBootPolicyVarData (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  //
>     > +  // Record initial "SecureBoot" variable value.
>     > +  // It is used to detect SecureBoot variable change in SecureBootHook.
>     > +  //
>     > +  Status = InternalGetVariable (
>     > +             EFI_SECURE_BOOT_MODE_NAME,
>     > +             &gEfiGlobalVariableGuid,
>     > +             (VOID **)&mSecureBootVarData,
>     > +             &mSecureBootVarDataSize
>     > +             );
>     > +  if (EFI_ERROR (Status)) {
>     > +    //
>     > +    // Read could fail when Auth Variable solution is not supported
>     > +    //
>     > +    DEBUG ((DEBUG_INFO, "RecordSecureBootPolicyVarData
> GetVariable %s
>     > Status %x\n", EFI_SECURE_BOOT_MODE_NAME, Status));
>     > +  }
>     > +}
>     > diff --git
>     > a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Reclaim.c
>     > b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Reclaim.c
>     > new file mode 100644
>     > index 000000000000..a5b7f8a1fbe2
>     > --- /dev/null
>     > +++ b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Reclaim.c
>     > @@ -0,0 +1,504 @@
>     > +/** @file
>     > +  Handles non-volatile variable store garbage collection, using FTW
>     > +  (Fault Tolerant Write) protocol.
>     > +
>     > +Copyright (c) 2006 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include "Variable.h"
>     > +#include "VariableNonVolatile.h"
>     > +#include "VariableParsing.h"
>     > +#include "VariableRuntimeCache.h"
>     > +
>     > +/**
>     > +  Gets LBA of block and offset by given address.
>     > +
>     > +  This function gets the Logical Block Address (LBA) of a firmware
>     > +  volume block containing the given address, and the offset of the
>     > +  address on the block.
>     > +
>     > +  @param  Address        Address which should be contained
>     > +                         by returned FVB handle.
>     > +  @param  Lba            Pointer to LBA for output.
>     > +  @param  Offset         Pointer to offset for output.
>     > +
>     > +  @retval EFI_SUCCESS    LBA and offset successfully returned.
>     > +  @retval EFI_NOT_FOUND  Fail to find FVB handle by address.
>     > +  @retval EFI_ABORTED    Fail to find valid LBA and offset.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetLbaAndOffsetByAddress (
>     > +  IN  EFI_PHYSICAL_ADDRESS  Address,
>     > +  OUT EFI_LBA               *Lba,
>     > +  OUT UINTN                 *Offset
>     > +  )
>     > +{
>     > +  EFI_STATUS                          Status;
>     > +  EFI_PHYSICAL_ADDRESS                FvbBaseAddress;
>     > +  EFI_FIRMWARE_VOLUME_BLOCK_PROTOCOL  *Fvb;
>     > +  EFI_FIRMWARE_VOLUME_HEADER          *FwVolHeader;
>     > +  EFI_FV_BLOCK_MAP_ENTRY              *FvbMapEntry;
>     > +  UINT32                              LbaIndex;
>     > +
>     > +  Fvb     = NULL;
>     > +  *Lba    = (EFI_LBA)(-1);
>     > +  *Offset = 0;
>     > +
>     > +  //
>     > +  // Get the proper FVB protocol.
>     > +  //
>     > +  Status = GetFvbInfoByAddress (Address, NULL, &Fvb);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return Status;
>     > +  }
>     > +
>     > +  //
>     > +  // Get the Base Address of FV.
>     > +  //
>     > +  Status = Fvb->GetPhysicalAddress (Fvb, &FvbBaseAddress);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return Status;
>     > +  }
>     > +
>     > +  FwVolHeader = (EFI_FIRMWARE_VOLUME_HEADER
>     > *)((UINTN)FvbBaseAddress);
>     > +
>     > +  //
>     > +  // Get the (LBA, Offset) of Address.
>     > +  //
>     > +  if ((FwVolHeader->FvLength) > (FwVolHeader->HeaderLength)) {
>     > +    //
>     > +    // BUGBUG: Assume one FV has one type of BlockLength.
>     > +    //
>     > +    FvbMapEntry = &FwVolHeader->BlockMap[0];
>     > +    for (LbaIndex = 1; LbaIndex <= FvbMapEntry->NumBlocks; LbaIndex += 1)
> {
>     > +      if (Address < (FvbBaseAddress + FvbMapEntry->Length * LbaIndex)) {
>     > +        //
>     > +        // Found the (Lba, Offset).
>     > +        //
>     > +        *Lba    = LbaIndex - 1;
>     > +        *Offset = (UINTN)(Address - (FvbBaseAddress + FvbMapEntry->Length
> *
>     > (LbaIndex - 1)));
>     > +        return EFI_SUCCESS;
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  return EFI_ABORTED;
>     > +}
>     > +
>     > +/**
>     > +  Writes a buffer to variable storage space, in the working block.
>     > +
>     > +  This function writes a buffer to variable storage space into a firmware
>     > +  volume block device. The destination is specified by parameter
>     > +  VariableBase. Fault Tolerant Write protocol is used for writing.
>     > +
>     > +  @param  VariableBase   Base address of variable to write
>     > +  @param  VariableBuffer Point to the variable data buffer.
>     > +
>     > +  @retval EFI_SUCCESS    The function completed successfully.
>     > +  @retval EFI_NOT_FOUND  Fail to locate Fault Tolerant Write protocol.
>     > +  @retval EFI_ABORTED    The function could not complete successfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +FtwVariableSpace (
>     > +  IN EFI_PHYSICAL_ADDRESS   VariableBase,
>     > +  IN VARIABLE_STORE_HEADER  *VariableBuffer
>     > +  )
>     > +{
>     > +  EFI_STATUS                         Status;
>     > +  EFI_HANDLE                         FvbHandle;
>     > +  EFI_LBA                            VarLba;
>     > +  UINTN                              VarOffset;
>     > +  UINTN                              FtwBufferSize;
>     > +  EFI_FAULT_TOLERANT_WRITE_PROTOCOL  *FtwProtocol;
>     > +
>     > +  //
>     > +  // Locate fault tolerant write protocol.
>     > +  //
>     > +  Status = GetFtwProtocol ((VOID **)&FtwProtocol);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return EFI_NOT_FOUND;
>     > +  }
>     > +
>     > +  //
>     > +  // Locate Fvb handle by address.
>     > +  //
>     > +  Status = GetFvbInfoByAddress (VariableBase, &FvbHandle, NULL);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return Status;
>     > +  }
>     > +
>     > +  //
>     > +  // Get LBA and Offset by address.
>     > +  //
>     > +  Status = GetLbaAndOffsetByAddress (VariableBase, &VarLba, &VarOffset);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return EFI_ABORTED;
>     > +  }
>     > +
>     > +  FtwBufferSize = ((VARIABLE_STORE_HEADER *)((UINTN)VariableBase))-
> >Size;
>     > +  ASSERT (FtwBufferSize == VariableBuffer->Size);
>     > +
>     > +  //
>     > +  // FTW write record.
>     > +  //
>     > +  Status = FtwProtocol->Write (
>     > +                          FtwProtocol,
>     > +                          VarLba,                // LBA
>     > +                          VarOffset,             // Offset
>     > +                          FtwBufferSize,         // NumBytes
>     > +                          NULL,                  // PrivateData NULL
>     > +                          FvbHandle,             // Fvb Handle
>     > +                          (VOID *)VariableBuffer // write buffer
>     > +                          );
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  Variable store garbage collection and reclaim operation.
>     > +
>     > +  @param[in]      VariableBase            Base address of variable store.
>     > +  @param[out]     LastVariableOffset      Offset of last variable.
>     > +  @param[in]      IsVolatile              The variable store is volatile or not;
>     > +                                          if it is non-volatile, need FTW.
>     > +  @param[in, out] UpdatingPtrTrack        Pointer to updating variable
> pointer
>     > track structure.
>     > +  @param[in]      NewVariable             Pointer to new variable.
>     > +  @param[in]      NewVariableSize         New variable size.
>     > +
>     > +  @return EFI_SUCCESS                  Reclaim operation has finished
> successfully.
>     > +  @return EFI_OUT_OF_RESOURCES         No enough memory resources or
>     > variable space.
>     > +  @return Others                       Unexpect error happened during reclaim
>     > operation.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +Reclaim (
>     > +  IN     EFI_PHYSICAL_ADDRESS    VariableBase,
>     > +  OUT    UINTN                   *LastVariableOffset,
>     > +  IN     BOOLEAN                 IsVolatile,
>     > +  IN OUT VARIABLE_POINTER_TRACK  *UpdatingPtrTrack,
>     > +  IN     VARIABLE_HEADER         *NewVariable,
>     > +  IN     UINTN                   NewVariableSize
>     > +  )
>     > +{
>     > +  VARIABLE_HEADER        *Variable;
>     > +  VARIABLE_HEADER        *AddedVariable;
>     > +  VARIABLE_HEADER        *NextVariable;
>     > +  VARIABLE_HEADER        *NextAddedVariable;
>     > +  VARIABLE_STORE_HEADER  *VariableStoreHeader;
>     > +  UINT8                  *ValidBuffer;
>     > +  UINTN                  MaximumBufferSize;
>     > +  UINTN                  VariableSize;
>     > +  UINTN                  NameSize;
>     > +  UINT8                  *CurrPtr;
>     > +  VOID                   *Point0;
>     > +  VOID                   *Point1;
>     > +  BOOLEAN                FoundAdded;
>     > +  EFI_STATUS             Status;
>     > +  EFI_STATUS             DoneStatus;
>     > +  UINTN                  CommonVariableTotalSize;
>     > +  UINTN                  CommonUserVariableTotalSize;
>     > +  UINTN                  HwErrVariableTotalSize;
>     > +  VARIABLE_HEADER        *UpdatingVariable;
>     > +  VARIABLE_HEADER        *UpdatingInDeletedTransition;
>     > +  BOOLEAN                AuthFormat;
>     > +
>     > +  AuthFormat                  = mVariableModuleGlobal-
> >VariableGlobal.AuthFormat;
>     > +  UpdatingVariable            = NULL;
>     > +  UpdatingInDeletedTransition = NULL;
>     > +  if (UpdatingPtrTrack != NULL) {
>     > +    UpdatingVariable            = UpdatingPtrTrack->CurrPtr;
>     > +    UpdatingInDeletedTransition = UpdatingPtrTrack-
> >InDeletedTransitionPtr;
>     > +  }
>     > +
>     > +  VariableStoreHeader = (VARIABLE_STORE_HEADER
> *)((UINTN)VariableBase);
>     > +
>     > +  CommonVariableTotalSize     = 0;
>     > +  CommonUserVariableTotalSize = 0;
>     > +  HwErrVariableTotalSize      = 0;
>     > +
>     > +  if (IsVolatile || mVariableModuleGlobal->VariableGlobal.EmuNvMode) {
>     > +    //
>     > +    // Start Pointers for the variable.
>     > +    //
>     > +    Variable          = GetStartPointer (VariableStoreHeader);
>     > +    MaximumBufferSize = sizeof (VARIABLE_STORE_HEADER);
>     > +
>     > +    while (IsValidVariableHeader (Variable, GetEndPointer
> (VariableStoreHeader),
>     > AuthFormat)) {
>     > +      NextVariable = GetNextVariablePtr (Variable, AuthFormat);
>     > +      if (((Variable->State == VAR_ADDED) || (Variable->State ==
>     > (VAR_IN_DELETED_TRANSITION & VAR_ADDED))) &&
>     > +          (Variable != UpdatingVariable) &&
>     > +          (Variable != UpdatingInDeletedTransition)
>     > +          )
>     > +      {
>     > +        VariableSize       = (UINTN)NextVariable - (UINTN)Variable;
>     > +        MaximumBufferSize += VariableSize;
>     > +      }
>     > +
>     > +      Variable = NextVariable;
>     > +    }
>     > +
>     > +    if (NewVariable != NULL) {
>     > +      //
>     > +      // Add the new variable size.
>     > +      //
>     > +      MaximumBufferSize += NewVariableSize;
>     > +    }
>     > +
>     > +    //
>     > +    // Reserve the 1 Bytes with Oxff to identify the
>     > +    // end of the variable buffer.
>     > +    //
>     > +    MaximumBufferSize += 1;
>     > +    ValidBuffer        = AllocatePool (MaximumBufferSize);
>     > +    if (ValidBuffer == NULL) {
>     > +      return EFI_OUT_OF_RESOURCES;
>     > +    }
>     > +  } else {
>     > +    //
>     > +    // For NV variable reclaim, don't allocate pool here and just use
>     > mNvVariableCache
>     > +    // as the buffer to reduce SMRAM consumption for SMM variable driver.
>     > +    //
>     > +    MaximumBufferSize = mNvVariableCache->Size;
>     > +    ValidBuffer       = (UINT8 *)mNvVariableCache;
>     > +  }
>     > +
>     > +  SetMem (ValidBuffer, MaximumBufferSize, 0xff);
>     > +
>     > +  //
>     > +  // Copy variable store header.
>     > +  //
>     > +  CopyMem (ValidBuffer, VariableStoreHeader, sizeof
>     > (VARIABLE_STORE_HEADER));
>     > +  CurrPtr = (UINT8 *)GetStartPointer ((VARIABLE_STORE_HEADER
> *)ValidBuffer);
>     > +
>     > +  //
>     > +  // Reinstall all ADDED variables as long as they are not identical to
> Updating
>     > Variable.
>     > +  //
>     > +  Variable = GetStartPointer (VariableStoreHeader);
>     > +  while (IsValidVariableHeader (Variable, GetEndPointer
> (VariableStoreHeader),
>     > AuthFormat)) {
>     > +    NextVariable = GetNextVariablePtr (Variable, AuthFormat);
>     > +    if ((Variable != UpdatingVariable) && (Variable->State == VAR_ADDED)) {
>     > +      VariableSize = (UINTN)NextVariable - (UINTN)Variable;
>     > +      CopyMem (CurrPtr, (UINT8 *)Variable, VariableSize);
>     > +      if (!IsVolatile) {
>     > +        (VOID)ProtectedVariableLibRefresh (
>     > +                (VARIABLE_HEADER *)CurrPtr,
>     > +                VariableSize,
>     > +                (UINTN)CurrPtr - (UINTN)ValidBuffer,
>     > +                FALSE
>     > +                );
>     > +
>     > +        if ((Variable->Attributes &
> EFI_VARIABLE_HARDWARE_ERROR_RECORD)
>     > +            == EFI_VARIABLE_HARDWARE_ERROR_RECORD)
>     > +        {
>     > +          HwErrVariableTotalSize += VariableSize;
>     > +        } else {
>     > +          CommonVariableTotalSize += VariableSize;
>     > +          if (IsUserVariable (Variable)) {
>     > +            CommonUserVariableTotalSize += VariableSize;
>     > +          }
>     > +        }
>     > +      }
>     > +
>     > +      CurrPtr += VariableSize;
>     > +    }
>     > +
>     > +    Variable = NextVariable;
>     > +  }
>     > +
>     > +  //
>     > +  // Reinstall all in delete transition variables.
>     > +  //
>     > +  Variable = GetStartPointer (VariableStoreHeader);
>     > +  while (IsValidVariableHeader (Variable, GetEndPointer
> (VariableStoreHeader),
>     > AuthFormat)) {
>     > +    NextVariable = GetNextVariablePtr (Variable, AuthFormat);
>     > +    if ((Variable != UpdatingVariable) && (Variable !=
>     > UpdatingInDeletedTransition) && (Variable->State ==
>     > (VAR_IN_DELETED_TRANSITION & VAR_ADDED)) &&
>     > +        (ProtectedVariableLibIsHmac (GetVariableNamePtr (Variable,
> AuthFormat))
>     > == FALSE))
>     > +    {
>     > +      FoundAdded    = FALSE;
>     > +      AddedVariable = GetStartPointer ((VARIABLE_STORE_HEADER
> *)ValidBuffer);
>     > +      while (IsValidVariableHeader (AddedVariable, GetEndPointer
>     > ((VARIABLE_STORE_HEADER *)ValidBuffer), AuthFormat)) {
>     > +        NextAddedVariable = GetNextVariablePtr (AddedVariable, AuthFormat);
>     > +        NameSize          = NameSizeOfVariable (AddedVariable, AuthFormat);
>     > +        if (CompareGuid (
>     > +              GetVendorGuidPtr (AddedVariable, AuthFormat),
>     > +              GetVendorGuidPtr (Variable, AuthFormat)
>     > +              ) && (NameSize == NameSizeOfVariable (Variable, AuthFormat)))
>     > +        {
>     > +          Point0 = (VOID *)GetVariableNamePtr (AddedVariable, AuthFormat);
>     > +          Point1 = (VOID *)GetVariableNamePtr (Variable, AuthFormat);
>     > +          if (CompareMem (Point0, Point1, NameSize) == 0) {
>     > +            FoundAdded = TRUE;
>     > +            break;
>     > +          }
>     > +        }
>     > +
>     > +        AddedVariable = NextAddedVariable;
>     > +      }
>     > +
>     > +      if (!FoundAdded) {
>     > +        //
>     > +        // Promote VAR_IN_DELETED_TRANSITION to VAR_ADDED.
>     > +        //
>     > +        VariableSize = (UINTN)NextVariable - (UINTN)Variable;
>     > +        CopyMem (CurrPtr, (UINT8 *)Variable, VariableSize);
>     > +        ((VARIABLE_HEADER *)CurrPtr)->State = VAR_ADDED;
>     > +        if (!IsVolatile) {
>     > +          (VOID)ProtectedVariableLibRefresh (
>     > +                  (VARIABLE_HEADER *)CurrPtr,
>     > +                  VariableSize,
>     > +                  (UINTN)CurrPtr - (UINTN)ValidBuffer,
>     > +                  FALSE
>     > +                  );
>     > +
>     > +          if ((Variable->Attributes &
> EFI_VARIABLE_HARDWARE_ERROR_RECORD)
>     > +              == EFI_VARIABLE_HARDWARE_ERROR_RECORD)
>     > +          {
>     > +            HwErrVariableTotalSize += VariableSize;
>     > +          } else {
>     > +            CommonVariableTotalSize += VariableSize;
>     > +            if (IsUserVariable (Variable)) {
>     > +              CommonUserVariableTotalSize += VariableSize;
>     > +            }
>     > +          }
>     > +        }
>     > +
>     > +        CurrPtr += VariableSize;
>     > +      }
>     > +    }
>     > +
>     > +    Variable = NextVariable;
>     > +  }
>     > +
>     > +  //
>     > +  // Install the new variable if it is not NULL.
>     > +  //
>     > +  if (NewVariable != NULL) {
>     > +    if (((UINTN)CurrPtr - (UINTN)ValidBuffer) + NewVariableSize >
>     > VariableStoreHeader->Size) {
>     > +      //
>     > +      // No enough space to store the new variable.
>     > +      //
>     > +      Status = EFI_OUT_OF_RESOURCES;
>     > +      goto Done;
>     > +    }
>     > +
>     > +    if (!IsVolatile) {
>     > +      if ((NewVariable->Attributes &
> EFI_VARIABLE_HARDWARE_ERROR_RECORD)
>     > == EFI_VARIABLE_HARDWARE_ERROR_RECORD) {
>     > +        HwErrVariableTotalSize += NewVariableSize;
>     > +      } else if ((NewVariable->Attributes &
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD) !=
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD) {
>     > +        CommonVariableTotalSize += NewVariableSize;
>     > +        if (IsUserVariable (NewVariable)) {
>     > +          CommonUserVariableTotalSize += NewVariableSize;
>     > +        }
>     > +      }
>     > +
>     > +      if ((HwErrVariableTotalSize > PcdGet32 (PcdHwErrStorageSize)) ||
>     > +          (CommonVariableTotalSize > mVariableModuleGlobal-
>     > >CommonVariableSpace) ||
>     > +          (CommonUserVariableTotalSize > mVariableModuleGlobal-
>     > >CommonMaxUserVariableSpace))
>     > +      {
>     > +        //
>     > +        // No enough space to store the new variable by NV or NV+HR
> attribute.
>     > +        //
>     > +        Status = EFI_OUT_OF_RESOURCES;
>     > +        goto Done;
>     > +      }
>     > +    }
>     > +
>     > +    CopyMem (CurrPtr, (UINT8 *)NewVariable, NewVariableSize);
>     > +    ((VARIABLE_HEADER *)CurrPtr)->State = VAR_ADDED;
>     > +    if (UpdatingVariable != NULL) {
>     > +      UpdatingPtrTrack->CurrPtr                = (VARIABLE_HEADER
>     > *)((UINTN)UpdatingPtrTrack->StartPtr + ((UINTN)CurrPtr -
>     > (UINTN)GetStartPointer ((VARIABLE_STORE_HEADER *)ValidBuffer)));
>     > +      UpdatingPtrTrack->InDeletedTransitionPtr = NULL;
>     > +    }
>     > +
>     > +    CurrPtr += NewVariableSize;
>     > +  }
>     > +
>     > +  if (IsVolatile || mVariableModuleGlobal->VariableGlobal.EmuNvMode) {
>     > +    //
>     > +    // If volatile/emulated non-volatile variable store, just copy valid buffer.
>     > +    //
>     > +    SetMem ((UINT8 *)(UINTN)VariableBase, VariableStoreHeader->Size,
> 0xff);
>     > +    CopyMem ((UINT8 *)(UINTN)VariableBase, ValidBuffer, (UINTN)CurrPtr -
>     > (UINTN)ValidBuffer);
>     > +    *LastVariableOffset = (UINTN)CurrPtr - (UINTN)ValidBuffer;
>     > +    if (!IsVolatile) {
>     > +      //
>     > +      // Emulated non-volatile variable mode.
>     > +      //
>     > +      mVariableModuleGlobal->HwErrVariableTotalSize      =
>     > HwErrVariableTotalSize;
>     > +      mVariableModuleGlobal->CommonVariableTotalSize     =
>     > CommonVariableTotalSize;
>     > +      mVariableModuleGlobal->CommonUserVariableTotalSize =
>     > CommonUserVariableTotalSize;
>     > +    }
>     > +
>     > +    Status = EFI_SUCCESS;
>     > +  } else {
>     > +    //
>     > +    // If non-volatile variable store, perform FTW here.
>     > +    //
>     > +    Status = FtwVariableSpace (
>     > +               VariableBase,
>     > +               (VARIABLE_STORE_HEADER *)ValidBuffer
>     > +               );
>     > +    if (!EFI_ERROR (Status)) {
>     > +      *LastVariableOffset                                = (UINTN)CurrPtr -
> (UINTN)ValidBuffer;
>     > +      mVariableModuleGlobal->HwErrVariableTotalSize      =
>     > HwErrVariableTotalSize;
>     > +      mVariableModuleGlobal->CommonVariableTotalSize     =
>     > CommonVariableTotalSize;
>     > +      mVariableModuleGlobal->CommonUserVariableTotalSize =
>     > CommonUserVariableTotalSize;
>     > +    } else {
>     > +      mVariableModuleGlobal->HwErrVariableTotalSize      = 0;
>     > +      mVariableModuleGlobal->CommonVariableTotalSize     = 0;
>     > +      mVariableModuleGlobal->CommonUserVariableTotalSize = 0;
>     > +      Variable                                           = GetStartPointer
>     > ((VARIABLE_STORE_HEADER *)(UINTN)VariableBase);
>     > +      while (IsValidVariableHeader (Variable, GetEndPointer
>     > ((VARIABLE_STORE_HEADER *)(UINTN)VariableBase), AuthFormat)) {
>     > +        NextVariable = GetNextVariablePtr (Variable, AuthFormat);
>     > +        VariableSize = (UINTN)NextVariable - (UINTN)Variable;
>     > +        if ((Variable->Attributes &
> EFI_VARIABLE_HARDWARE_ERROR_RECORD)
>     > == EFI_VARIABLE_HARDWARE_ERROR_RECORD) {
>     > +          mVariableModuleGlobal->HwErrVariableTotalSize += VariableSize;
>     > +        } else if ((Variable->Attributes &
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD) !=
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD) {
>     > +          mVariableModuleGlobal->CommonVariableTotalSize += VariableSize;
>     > +          if (IsUserVariable (Variable)) {
>     > +            mVariableModuleGlobal->CommonUserVariableTotalSize +=
>     > VariableSize;
>     > +          }
>     > +        }
>     > +
>     > +        Variable = NextVariable;
>     > +      }
>     > +
>     > +      *LastVariableOffset = (UINTN)Variable - (UINTN)VariableBase;
>     > +    }
>     > +  }
>     > +
>     > +Done:
>     > +  DoneStatus = EFI_SUCCESS;
>     > +  if (IsVolatile || mVariableModuleGlobal->VariableGlobal.EmuNvMode) {
>     > +    DoneStatus = SynchronizeRuntimeVariableCache (
>     > +                   &mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.VariableRuntimeVolatileCac
> he,
>     > +                   0,
>     > +                   VariableStoreHeader->Size
>     > +                   );
>     > +    ASSERT_EFI_ERROR (DoneStatus);
>     > +    FreePool (ValidBuffer);
>     > +  } else {
>     > +    //
>     > +    // For NV variable reclaim, we use mNvVariableCache as the buffer, so
> copy
>     > the data back.
>     > +    //
>     > +    CopyMem (mNvVariableCache, (UINT8 *)(UINTN)VariableBase,
>     > VariableStoreHeader->Size);
>     > +    DoneStatus = SynchronizeRuntimeVariableCache (
>     > +                   &mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.VariableRuntimeNvCache,
>     > +                   0,
>     > +                   VariableStoreHeader->Size
>     > +                   );
>     > +    ASSERT_EFI_ERROR (DoneStatus);
>     > +  }
>     > +
>     > +  if (!EFI_ERROR (Status) && EFI_ERROR (DoneStatus)) {
>     > +    Status = DoneStatus;
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/RuntimeDxeUnitT
>     > est/VariableLockRequestToLockUnitTest.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/RuntimeDxeUnitT
>     > est/VariableLockRequestToLockUnitTest.c
>     > new file mode 100644
>     > index 000000000000..b2bcb97932ba
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/RuntimeDxeUnitT
>     > est/VariableLockRequestToLockUnitTest.c
>     > @@ -0,0 +1,607 @@
>     > +/** @file
>     > +  This is a host-based unit test for the VariableLockRequestToLock shim.
>     > +
>     > +  Copyright (c) Microsoft Corporation.
>     > +  SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include <stdio.h>
>     > +#include <string.h>
>     > +#include <stdarg.h>
>     > +#include <stddef.h>
>     > +#include <setjmp.h>
>     > +#include <cmocka.h>
>     > +
>     > +#include <Uefi.h>
>     > +#include <Library/DebugLib.h>
>     > +#include <Library/BaseMemoryLib.h>
>     > +#include <Library/MemoryAllocationLib.h>
>     > +#include <Library/UnitTestLib.h>
>     > +#include <Library/VariablePolicyLib.h>
>     > +#include <Library/VariablePolicyHelperLib.h>
>     > +
>     > +#include <Protocol/VariableLock.h>
>     > +
>     > +#define UNIT_TEST_NAME     "VarPol/VarLock Shim Unit Test"
>     > +#define UNIT_TEST_VERSION  "1.0"
>     > +
>     > +/// === CODE UNDER TEST
>     >
> =================================================================
>     > ==========
>     > +
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableLockRequestToLock (
>     > +  IN CONST EDKII_VARIABLE_LOCK_PROTOCOL  *This,
>     > +  IN       CHAR16                        *VariableName,
>     > +  IN       EFI_GUID                      *VendorGuid
>     > +  );
>     > +
>     > +/// === TEST DATA
>     >
> =================================================================
>     > =================
>     > +
>     > +//
>     > +// Test GUID 1 {F955BA2D-4A2C-480C-BFD1-3CC522610592}
>     > +//
>     > +EFI_GUID  mTestGuid1 = {
>     > +  0xf955ba2d, 0x4a2c, 0x480c, { 0xbf, 0xd1, 0x3c, 0xc5, 0x22, 0x61, 0x5,
> 0x92 }
>     > +};
>     > +
>     > +//
>     > +// Test GUID 2 {2DEA799E-5E73-43B9-870E-C945CE82AF3A}
>     > +//
>     > +EFI_GUID  mTestGuid2 = {
>     > +  0x2dea799e, 0x5e73, 0x43b9, { 0x87, 0xe, 0xc9, 0x45, 0xce, 0x82, 0xaf,
> 0x3a }
>     > +};
>     > +
>     > +//
>     > +// Test GUID 3 {698A2BFD-A616-482D-B88C-7100BD6682A9}
>     > +//
>     > +EFI_GUID  mTestGuid3 = {
>     > +  0x698a2bfd, 0xa616, 0x482d, { 0xb8, 0x8c, 0x71, 0x0, 0xbd, 0x66, 0x82,
> 0xa9 }
>     > +};
>     > +
>     > +#define TEST_VAR_1_NAME  L"TestVar1"
>     > +#define TEST_VAR_2_NAME  L"TestVar2"
>     > +#define TEST_VAR_3_NAME  L"TestVar3"
>     > +
>     > +#define TEST_POLICY_ATTRIBUTES_NULL  0
>     > +#define TEST_POLICY_MIN_SIZE_NULL    0
>     > +#define TEST_POLICY_MAX_SIZE_NULL    MAX_UINT32
>     > +
>     > +#define TEST_POLICY_MIN_SIZE_10   10
>     > +#define TEST_POLICY_MAX_SIZE_200  200
>     > +
>     > +/// === HELPER FUNCTIONS
>     >
> =================================================================
>     > ==========
>     > +
>     > +/**
>     > +  Mocked version of GetVariable, for testing.
>     > +
>     > +  @param  VariableName
>     > +  @param  VendorGuid
>     > +  @param  Attributes
>     > +  @param  DataSize
>     > +  @param  Data
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +StubGetVariableNull (
>     > +  IN     CHAR16    *VariableName,
>     > +  IN     EFI_GUID  *VendorGuid,
>     > +  OUT    UINT32    *Attributes   OPTIONAL,
>     > +  IN OUT UINTN     *DataSize,
>     > +  OUT    VOID      *Data         OPTIONAL
>     > +  )
>     > +{
>     > +  UINT32      MockedAttr;
>     > +  UINTN       MockedDataSize;
>     > +  VOID        *MockedData;
>     > +  EFI_STATUS  MockedReturn;
>     > +
>     > +  check_expected_ptr (VariableName);
>     > +  check_expected_ptr (VendorGuid);
>     > +  check_expected_ptr (DataSize);
>     > +
>     > +  MockedAttr     = (UINT32)mock ();
>     > +  MockedDataSize = (UINTN)mock ();
>     > +  MockedData     = (VOID *)(UINTN)mock ();
>     > +  MockedReturn   = (EFI_STATUS)mock ();
>     > +
>     > +  if (Attributes != NULL) {
>     > +    *Attributes = MockedAttr;
>     > +  }
>     > +
>     > +  if ((Data != NULL) && !EFI_ERROR (MockedReturn)) {
>     > +    CopyMem (Data, MockedData, MockedDataSize);
>     > +  }
>     > +
>     > +  *DataSize = MockedDataSize;
>     > +
>     > +  return MockedReturn;
>     > +}
>     > +
>     > +//
>     > +// Anything you think might be helpful that isn't a test itself.
>     > +//
>     > +
>     > +/**
>     > +  This is a common setup function that will ensure the library is always
>     > +  initialized with the stubbed GetVariable.
>     > +
>     > +  Not used by all test cases, but by most.
>     > +
>     > +  @param[in]  Context  Unit test case context
>     > +**/
>     > +STATIC
>     > +UNIT_TEST_STATUS
>     > +EFIAPI
>     > +LibInitMocked (
>     > +  IN UNIT_TEST_CONTEXT  Context
>     > +  )
>     > +{
>     > +  return EFI_ERROR (InitVariablePolicyLib (StubGetVariableNull)) ?
>     > UNIT_TEST_ERROR_PREREQUISITE_NOT_MET : UNIT_TEST_PASSED;
>     > +}
>     > +
>     > +/**
>     > +  Common cleanup function to make sure that the library is always de-
> initialized
>     > +  prior to the next test case.
>     > +
>     > +  @param[in]  Context  Unit test case context
>     > +**/
>     > +STATIC
>     > +VOID
>     > +EFIAPI
>     > +LibCleanup (
>     > +  IN UNIT_TEST_CONTEXT  Context
>     > +  )
>     > +{
>     > +  DeinitVariablePolicyLib ();
>     > +}
>     > +
>     > +/// === TEST CASES
>     >
> =================================================================
>     > ================
>     > +
>     > +/// ===== SHIM SUITE
>     > ===========================================================
>     > +
>     > +/**
>     > +  Test Case that locks a single variable using the Variable Lock Protocol.
>     > +  The call is expected to succeed.
>     > +
>     > +  @param[in]  Context  Unit test case context
>     > +**/
>     > +UNIT_TEST_STATUS
>     > +EFIAPI
>     > +LockingWithoutAnyPoliciesShouldSucceed (
>     > +  IN UNIT_TEST_CONTEXT  Context
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  Status = VariableLockRequestToLock (NULL, TEST_VAR_1_NAME,
>     > &mTestGuid1);
>     > +  UT_ASSERT_NOT_EFI_ERROR (Status);
>     > +
>     > +  return UNIT_TEST_PASSED;
>     > +}
>     > +
>     > +/**
>     > +  Test Case that locks the same variable twice using the Variable Lock
> Protocol.
>     > +  Both calls are expected to succeed.
>     > +
>     > +  @param[in]  Context  Unit test case context
>     > +  **/
>     > +UNIT_TEST_STATUS
>     > +EFIAPI
>     > +LockingTwiceShouldSucceed (
>     > +  IN UNIT_TEST_CONTEXT  Context
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  Status = VariableLockRequestToLock (NULL, TEST_VAR_1_NAME,
>     > &mTestGuid1);
>     > +  UT_ASSERT_NOT_EFI_ERROR (Status);
>     > +
>     > +  Status = VariableLockRequestToLock (NULL, TEST_VAR_1_NAME,
>     > &mTestGuid1);
>     > +  UT_ASSERT_NOT_EFI_ERROR (Status);
>     > +
>     > +  return UNIT_TEST_PASSED;
>     > +}
>     > +
>     > +/**
>     > +  Test Case that locks a variable using the Variable Policy Protocol then
> locks
>     > +  the same variable using the Variable Lock Protocol.
>     > +  Both calls are expected to succeed.
>     > +
>     > +  @param[in]  Context  Unit test case context
>     > +  **/
>     > +UNIT_TEST_STATUS
>     > +EFIAPI
>     > +LockingALockedVariableShouldSucceed (
>     > +  IN UNIT_TEST_CONTEXT  Context
>     > +  )
>     > +{
>     > +  EFI_STATUS             Status;
>     > +  VARIABLE_POLICY_ENTRY  *NewEntry;
>     > +
>     > +  //
>     > +  // Create a variable policy that locks the variable.
>     > +  //
>     > +  Status = CreateBasicVariablePolicy (
>     > +             &mTestGuid1,
>     > +             TEST_VAR_1_NAME,
>     > +             TEST_POLICY_MIN_SIZE_NULL,
>     > +             TEST_POLICY_MAX_SIZE_200,
>     > +             TEST_POLICY_ATTRIBUTES_NULL,
>     > +             TEST_POLICY_ATTRIBUTES_NULL,
>     > +             VARIABLE_POLICY_TYPE_LOCK_NOW,
>     > +             &NewEntry
>     > +             );
>     > +  UT_ASSERT_NOT_EFI_ERROR (Status);
>     > +
>     > +  //
>     > +  // Register the new policy.
>     > +  //
>     > +  Status = RegisterVariablePolicy (NewEntry);
>     > +
>     > +  Status = VariableLockRequestToLock (NULL, TEST_VAR_1_NAME,
>     > &mTestGuid1);
>     > +  UT_ASSERT_NOT_EFI_ERROR (Status);
>     > +
>     > +  FreePool (NewEntry);
>     > +
>     > +  return UNIT_TEST_PASSED;
>     > +}
>     > +
>     > +/**
>     > +  Test Case that locks a variable using the Variable Policy Protocol with a
>     > +  policy other than LOCK_NOW then attempts to lock the same variable
> using
>     > the
>     > +  Variable Lock Protocol.  The call to Variable Policy is expected to succeed
>     > +  and the call to Variable Lock is expected to fail.
>     > +
>     > +  @param[in]  Context  Unit test case context
>     > +  **/
>     > +UNIT_TEST_STATUS
>     > +EFIAPI
>     > +LockingAnUnlockedVariableShouldFail (
>     > +  IN UNIT_TEST_CONTEXT  Context
>     > +  )
>     > +{
>     > +  EFI_STATUS             Status;
>     > +  VARIABLE_POLICY_ENTRY  *NewEntry;
>     > +
>     > +  // Create a variable policy that locks the variable.
>     > +  Status = CreateVarStateVariablePolicy (
>     > +             &mTestGuid1,
>     > +             TEST_VAR_1_NAME,
>     > +             TEST_POLICY_MIN_SIZE_NULL,
>     > +             TEST_POLICY_MAX_SIZE_200,
>     > +             TEST_POLICY_ATTRIBUTES_NULL,
>     > +             TEST_POLICY_ATTRIBUTES_NULL,
>     > +             &mTestGuid2,
>     > +             1,
>     > +             TEST_VAR_2_NAME,
>     > +             &NewEntry
>     > +             );
>     > +  UT_ASSERT_NOT_EFI_ERROR (Status);
>     > +
>     > +  // Register the new policy.
>     > +  Status = RegisterVariablePolicy (NewEntry);
>     > +
>     > +  // Configure the stub to not care about parameters. We're testing errors.
>     > +  expect_any_always (StubGetVariableNull, VariableName);
>     > +  expect_any_always (StubGetVariableNull, VendorGuid);
>     > +  expect_any_always (StubGetVariableNull, DataSize);
>     > +
>     > +  // With a policy, make sure that writes still work, since the variable
> doesn't
>     > exist.
>     > +  will_return (StubGetVariableNull, TEST_POLICY_ATTRIBUTES_NULL);     //
>     > Attributes
>     > +  will_return (StubGetVariableNull, 0);                               // Size
>     > +  will_return (StubGetVariableNull, (UINTN)NULL);                     // DataPtr
>     > +  will_return (StubGetVariableNull, EFI_NOT_FOUND);                   // Status
>     > +
>     > +  Status = VariableLockRequestToLock (NULL, TEST_VAR_1_NAME,
>     > &mTestGuid1);
>     > +  UT_ASSERT_TRUE (EFI_ERROR (Status));
>     > +
>     > +  FreePool (NewEntry);
>     > +
>     > +  return UNIT_TEST_PASSED;
>     > +}
>     > +
>     > +/**
>     > +  Test Case that locks a variable using the Variable Policy Protocol with a
>     > +  policy other than LOCK_NOW, but is currently locked.  Then attempts to
> lock
>     > +  the same variable using the Variable Lock Protocol.  The call to Variable
>     > +  Policy is expected to succeed and the call to Variable Lock also expected
> to
>     > +  succeed.
>     > +
>     > +  @param[in]  Context  Unit test case context
>     > +  **/
>     > +UNIT_TEST_STATUS
>     > +EFIAPI
>     > +LockingALockedVariableWithMatchingDataShouldSucceed (
>     > +  IN UNIT_TEST_CONTEXT  Context
>     > +  )
>     > +{
>     > +  EFI_STATUS             Status;
>     > +  VARIABLE_POLICY_ENTRY  *NewEntry;
>     > +  UINT8                  Data;
>     > +
>     > +  // Create a variable policy that locks the variable.
>     > +  Status = CreateVarStateVariablePolicy (
>     > +             &mTestGuid1,
>     > +             TEST_VAR_1_NAME,
>     > +             TEST_POLICY_MIN_SIZE_NULL,
>     > +             TEST_POLICY_MAX_SIZE_200,
>     > +             TEST_POLICY_ATTRIBUTES_NULL,
>     > +             TEST_POLICY_ATTRIBUTES_NULL,
>     > +             &mTestGuid2,
>     > +             1,
>     > +             TEST_VAR_2_NAME,
>     > +             &NewEntry
>     > +             );
>     > +  UT_ASSERT_NOT_EFI_ERROR (Status);
>     > +
>     > +  // Register the new policy.
>     > +  Status = RegisterVariablePolicy (NewEntry);
>     > +
>     > +  // Configure the stub to not care about parameters. We're testing errors.
>     > +  expect_any_always (StubGetVariableNull, VariableName);
>     > +  expect_any_always (StubGetVariableNull, VendorGuid);
>     > +  expect_any_always (StubGetVariableNull, DataSize);
>     > +
>     > +  // With a policy, make sure that writes still work, since the variable
> doesn't
>     > exist.
>     > +  Data = 1;
>     > +  will_return (StubGetVariableNull, TEST_POLICY_ATTRIBUTES_NULL);     //
>     > Attributes
>     > +  will_return (StubGetVariableNull, sizeof (Data));                   // Size
>     > +  will_return (StubGetVariableNull, (UINTN)&Data);                    // DataPtr
>     > +  will_return (StubGetVariableNull, EFI_SUCCESS);                     // Status
>     > +
>     > +  Status = VariableLockRequestToLock (NULL, TEST_VAR_1_NAME,
>     > &mTestGuid1);
>     > +  UT_ASSERT_TRUE (!EFI_ERROR (Status));
>     > +
>     > +  FreePool (NewEntry);
>     > +
>     > +  return UNIT_TEST_PASSED;
>     > +}
>     > +
>     > +/**
>     > +  Test Case that locks a variable using the Variable Policy Protocol with a
>     > +  policy other than LOCK_NOW, but variable data does not match.  Then
>     > attempts
>     > +  to lock the same variable using the Variable Lock Protocol.  The call to
>     > +  Variable Policy is expected to succeed and the call to Variable Lock is
>     > +  expected to fail.
>     > +
>     > +  @param[in]  Context  Unit test case context
>     > +  **/
>     > +UNIT_TEST_STATUS
>     > +EFIAPI
>     > +LockingALockedVariableWithNonMatchingDataShouldFail (
>     > +  IN UNIT_TEST_CONTEXT  Context
>     > +  )
>     > +{
>     > +  EFI_STATUS             Status;
>     > +  VARIABLE_POLICY_ENTRY  *NewEntry;
>     > +  UINT8                  Data;
>     > +
>     > +  // Create a variable policy that locks the variable.
>     > +  Status = CreateVarStateVariablePolicy (
>     > +             &mTestGuid1,
>     > +             TEST_VAR_1_NAME,
>     > +             TEST_POLICY_MIN_SIZE_NULL,
>     > +             TEST_POLICY_MAX_SIZE_200,
>     > +             TEST_POLICY_ATTRIBUTES_NULL,
>     > +             TEST_POLICY_ATTRIBUTES_NULL,
>     > +             &mTestGuid2,
>     > +             1,
>     > +             TEST_VAR_2_NAME,
>     > +             &NewEntry
>     > +             );
>     > +  UT_ASSERT_NOT_EFI_ERROR (Status);
>     > +
>     > +  // Register the new policy.
>     > +  Status = RegisterVariablePolicy (NewEntry);
>     > +
>     > +  // Configure the stub to not care about parameters. We're testing errors.
>     > +  expect_any_always (StubGetVariableNull, VariableName);
>     > +  expect_any_always (StubGetVariableNull, VendorGuid);
>     > +  expect_any_always (StubGetVariableNull, DataSize);
>     > +
>     > +  // With a policy, make sure that writes still work, since the variable
> doesn't
>     > exist.
>     > +  Data = 2;
>     > +  will_return (StubGetVariableNull, TEST_POLICY_ATTRIBUTES_NULL);     //
>     > Attributes
>     > +  will_return (StubGetVariableNull, sizeof (Data));                   // Size
>     > +  will_return (StubGetVariableNull, (UINTN)&Data);                    // DataPtr
>     > +  will_return (StubGetVariableNull, EFI_SUCCESS);                     // Status
>     > +
>     > +  Status = VariableLockRequestToLock (NULL, TEST_VAR_1_NAME,
>     > &mTestGuid1);
>     > +  UT_ASSERT_TRUE (EFI_ERROR (Status));
>     > +
>     > +  FreePool (NewEntry);
>     > +
>     > +  return UNIT_TEST_PASSED;
>     > +}
>     > +
>     > +/**
>     > +  Test Case that locks a variable using Variable Lock Protocol Policy
> Protocol
>     > +  then and then attempts to lock the same variable using the Variable Policy
>     > +  Protocol.  The call to Variable Lock is expected to succeed and the call to
>     > +  Variable Policy is expected to fail.
>     > +
>     > +  @param[in]  Context  Unit test case context
>     > +  **/
>     > +UNIT_TEST_STATUS
>     > +EFIAPI
>     > +SettingPolicyForALockedVariableShouldFail (
>     > +  IN UNIT_TEST_CONTEXT  Context
>     > +  )
>     > +{
>     > +  EFI_STATUS             Status;
>     > +  VARIABLE_POLICY_ENTRY  *NewEntry;
>     > +
>     > +  // Lock the variable.
>     > +  Status = VariableLockRequestToLock (NULL, TEST_VAR_1_NAME,
>     > &mTestGuid1);
>     > +  UT_ASSERT_NOT_EFI_ERROR (Status);
>     > +
>     > +  // Create a variable policy that locks the variable.
>     > +  Status = CreateVarStateVariablePolicy (
>     > +             &mTestGuid1,
>     > +             TEST_VAR_1_NAME,
>     > +             TEST_POLICY_MIN_SIZE_NULL,
>     > +             TEST_POLICY_MAX_SIZE_200,
>     > +             TEST_POLICY_ATTRIBUTES_NULL,
>     > +             TEST_POLICY_ATTRIBUTES_NULL,
>     > +             &mTestGuid2,
>     > +             1,
>     > +             TEST_VAR_2_NAME,
>     > +             &NewEntry
>     > +             );
>     > +  UT_ASSERT_NOT_EFI_ERROR (Status);
>     > +
>     > +  // Register the new policy.
>     > +  Status = RegisterVariablePolicy (NewEntry);
>     > +  UT_ASSERT_TRUE (EFI_ERROR (Status));
>     > +
>     > +  FreePool (NewEntry);
>     > +
>     > +  return UNIT_TEST_PASSED;
>     > +}
>     > +
>     > +/**
>     > +  Main entry point to this unit test application.
>     > +
>     > +  Sets up and runs the test suites.
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +UnitTestMain (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS                  Status;
>     > +  UNIT_TEST_FRAMEWORK_HANDLE  Framework;
>     > +  UNIT_TEST_SUITE_HANDLE      ShimTests;
>     > +
>     > +  Framework = NULL;
>     > +
>     > +  DEBUG ((DEBUG_INFO, "%a v%a\n", UNIT_TEST_NAME,
>     > UNIT_TEST_VERSION));
>     > +
>     > +  //
>     > +  // Start setting up the test framework for running the tests.
>     > +  //
>     > +  Status = InitUnitTestFramework (&Framework, UNIT_TEST_NAME,
>     > gEfiCallerBaseName, UNIT_TEST_VERSION);
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "Failed in InitUnitTestFramework. Status
> = %r\n",
>     > Status));
>     > +    goto EXIT;
>     > +  }
>     > +
>     > +  //
>     > +  // Add all test suites and tests.
>     > +  //
>     > +  Status = CreateUnitTestSuite (
>     > +             &ShimTests,
>     > +             Framework,
>     > +             "Variable Lock Shim Tests",
>     > +             "VarPolicy.VarLockShim",
>     > +             NULL,
>     > +             NULL
>     > +             );
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "Failed in CreateUnitTestSuite for
> ShimTests\n"));
>     > +    Status = EFI_OUT_OF_RESOURCES;
>     > +    goto EXIT;
>     > +  }
>     > +
>     > +  AddTestCase (
>     > +    ShimTests,
>     > +    "Locking a variable with no matching policies should always work",
>     > +    "EmptyPolicies",
>     > +    LockingWithoutAnyPoliciesShouldSucceed,
>     > +    LibInitMocked,
>     > +    LibCleanup,
>     > +    NULL
>     > +    );
>     > +  AddTestCase (
>     > +    ShimTests,
>     > +    "Locking a variable twice should always work",
>     > +    "DoubleLock",
>     > +    LockingTwiceShouldSucceed,
>     > +    LibInitMocked,
>     > +    LibCleanup,
>     > +    NULL
>     > +    );
>     > +  AddTestCase (
>     > +    ShimTests,
>     > +    "Locking a variable that's already locked by another policy should work",
>     > +    "LockAfterPolicy",
>     > +    LockingALockedVariableShouldSucceed,
>     > +    LibInitMocked,
>     > +    LibCleanup,
>     > +    NULL
>     > +    );
>     > +  AddTestCase (
>     > +    ShimTests,
>     > +    "Locking a variable that already has an unlocked policy should fail",
>     > +    "LockAfterUnlockedPolicy",
>     > +    LockingAnUnlockedVariableShouldFail,
>     > +    LibInitMocked,
>     > +    LibCleanup,
>     > +    NULL
>     > +    );
>     > +  AddTestCase (
>     > +    ShimTests,
>     > +    "Locking a variable that already has an locked policy should succeed",
>     > +    "LockAfterLockedPolicyMatchingData",
>     > +    LockingALockedVariableWithMatchingDataShouldSucceed,
>     > +    LibInitMocked,
>     > +    LibCleanup,
>     > +    NULL
>     > +    );
>     > +  AddTestCase (
>     > +    ShimTests,
>     > +    "Locking a variable that already has an locked policy with matching data
>     > should succeed",
>     > +    "LockAfterLockedPolicyNonMatchingData",
>     > +    LockingALockedVariableWithNonMatchingDataShouldFail,
>     > +    LibInitMocked,
>     > +    LibCleanup,
>     > +    NULL
>     > +    );
>     > +  AddTestCase (
>     > +    ShimTests,
>     > +    "Adding a policy for a variable that has previously been locked should
> always
>     > fail",
>     > +    "SetPolicyAfterLock",
>     > +    SettingPolicyForALockedVariableShouldFail,
>     > +    LibInitMocked,
>     > +    LibCleanup,
>     > +    NULL
>     > +    );
>     > +
>     > +  //
>     > +  // Execute the tests.
>     > +  //
>     > +  Status = RunAllTestSuites (Framework);
>     > +
>     > +EXIT:
>     > +  if (Framework != NULL) {
>     > +    FreeUnitTestFramework (Framework);
>     > +  }
>     > +
>     > +  return;
>     > +}
>     > +
>     > +///
>     > +/// Avoid ECC error for function name that starts with lower case letter
>     > +///
>     > +#define Main  main
>     > +
>     > +/**
>     > +  Standard POSIX C entry point for host based unit test execution.
>     > +
>     > +  @param[in] Argc  Number of arguments
>     > +  @param[in] Argv  Array of pointers to arguments
>     > +
>     > +  @retval 0      Success
>     > +  @retval other  Error
>     > +**/
>     > +INT32
>     > +Main (
>     > +  IN INT32  Argc,
>     > +  IN CHAR8  *Argv[]
>     > +  )
>     > +{
>     > +  UnitTestMain ();
>     > +  return 0;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/SpeculationBarrie
>     > rDxe.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/SpeculationBarrie
>     > rDxe.c
>     > new file mode 100644
>     > index 000000000000..b219ea9ec074
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/SpeculationBarrie
>     > rDxe.c
>     > @@ -0,0 +1,27 @@
>     > +/** @file
>     > +  Barrier to stop speculative execution (DXE version).
>     > +
>     > +Copyright (c) 2018, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include "Variable.h"
>     > +
>     > +/**
>     > +  This service is consumed by the variable modules to place a barrier to stop
>     > +  speculative execution.
>     > +
>     > +  Ensures that no later instruction will execute speculatively, until all prior
>     > +  instructions have completed.
>     > +
>     > +**/
>     > +VOID
>     > +VariableSpeculationBarrier (
>     > +  VOID
>     > +  )
>     > +{
>     > +  //
>     > +  // Do nothing.
>     > +  //
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/SpeculationBarrie
>     > rSmm.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/SpeculationBarrie
>     > rSmm.c
>     > new file mode 100644
>     > index 000000000000..7107c042928e
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/SpeculationBarrie
>     > rSmm.c
>     > @@ -0,0 +1,26 @@
>     > +/** @file
>     > +  Barrier to stop speculative execution (SMM version).
>     > +
>     > +Copyright (c) 2018, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include <Library/BaseLib.h>
>     > +#include "Variable.h"
>     > +
>     > +/**
>     > +  This service is consumed by the variable modules to place a barrier to stop
>     > +  speculative execution.
>     > +
>     > +  Ensures that no later instruction will execute speculatively, until all prior
>     > +  instructions have completed.
>     > +
>     > +**/
>     > +VOID
>     > +VariableSpeculationBarrier (
>     > +  VOID
>     > +  )
>     > +{
>     > +  SpeculationBarrier ();
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/TcgMorLockDxe.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/TcgMorLockDxe.c
>     > new file mode 100644
>     > index 000000000000..88984c31ab4f
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/TcgMorLockDxe.c
>     > @@ -0,0 +1,153 @@
>     > +/** @file
>     > +  TCG MOR (Memory Overwrite Request) Lock Control support (DXE
> version).
>     > +
>     > +  This module clears MemoryOverwriteRequestControlLock variable to
> indicate
>     > +  MOR lock control unsupported.
>     > +
>     > +Copyright (c) 2016, Intel Corporation. All rights reserved.<BR>
>     > +Copyright (c) Microsoft Corporation.
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include <PiDxe.h>
>     > +#include <Guid/MemoryOverwriteControl.h>
>     > +#include <IndustryStandard/MemoryOverwriteRequestControlLock.h>
>     > +#include <Library/DebugLib.h>
>     > +#include <Library/BaseLib.h>
>     > +#include <Library/BaseMemoryLib.h>
>     > +#include "Variable.h"
>     > +
>     > +#include <Protocol/VariablePolicy.h>
>     > +#include <Library/VariablePolicyHelperLib.h>
>     > +
>     > +/**
>     > +  This service is an MOR/MorLock checker handler for the SetVariable().
>     > +
>     > +  @param[in]  VariableName the name of the vendor's variable, as a
>     > +                           Null-Terminated Unicode String
>     > +  @param[in]  VendorGuid   Unify identifier for vendor.
>     > +  @param[in]  Attributes   Attributes bitmask to set for the variable.
>     > +  @param[in]  DataSize     The size in bytes of Data-Buffer.
>     > +  @param[in]  Data         Point to the content of the variable.
>     > +
>     > +  @retval  EFI_SUCCESS            The MOR/MorLock check pass, and Variable
>     > +                                  driver can store the variable data.
>     > +  @retval  EFI_INVALID_PARAMETER  The MOR/MorLock data or data size
> or
>     > +                                  attributes is not allowed for MOR variable.
>     > +  @retval  EFI_ACCESS_DENIED      The MOR/MorLock is locked.
>     > +  @retval  EFI_ALREADY_STARTED    The MorLock variable is handled inside
> this
>     > +                                  function. Variable driver can just return
>     > +                                  EFI_SUCCESS.
>     > +**/
>     > +EFI_STATUS
>     > +SetVariableCheckHandlerMor (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid,
>     > +  IN UINT32    Attributes,
>     > +  IN UINTN     DataSize,
>     > +  IN VOID      *Data
>     > +  )
>     > +{
>     > +  //
>     > +  // Just let it pass. No need provide protection for DXE version.
>     > +  //
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Initialization for MOR Control Lock.
>     > +
>     > +  @retval EFI_SUCCESS     MorLock initialization success.
>     > +  @return Others          Some error occurs.
>     > +**/
>     > +EFI_STATUS
>     > +MorLockInit (
>     > +  VOID
>     > +  )
>     > +{
>     > +  //
>     > +  // Always clear variable to report unsupported to OS.
>     > +  // The reason is that the DXE version is not proper to provide *protection*.
>     > +  // BIOS should use SMM version variable driver to provide such capability.
>     > +  //
>     > +  VariableServiceSetVariable (
>     > +    MEMORY_OVERWRITE_REQUEST_CONTROL_LOCK_NAME,
>     > +    &gEfiMemoryOverwriteRequestControlLockGuid,
>     > +    0,                                          // Attributes
>     > +    0,                                          // DataSize
>     > +    NULL                                        // Data
>     > +    );
>     > +
>     > +  //
>     > +  // The MOR variable can effectively improve platform security only when
> the
>     > +  // MorLock variable protects the MOR variable. In turn MorLock cannot
> be
>     > made
>     > +  // secure without SMM support in the platform firmware (see above).
>     > +  //
>     > +  // Thus, delete the MOR variable, should it exist for any reason (some
> OSes
>     > +  // are known to create MOR unintentionally, in an attempt to set it), then
>     > +  // also lock the MOR variable, in order to prevent other modules from
>     > +  // creating it.
>     > +  //
>     > +  VariableServiceSetVariable (
>     > +    MEMORY_OVERWRITE_REQUEST_VARIABLE_NAME,
>     > +    &gEfiMemoryOverwriteControlDataGuid,
>     > +    0,                                      // Attributes
>     > +    0,                                      // DataSize
>     > +    NULL                                    // Data
>     > +    );
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Delayed initialization for MOR Control Lock at EndOfDxe.
>     > +
>     > +  This function performs any operations queued by MorLockInit().
>     > +**/
>     > +VOID
>     > +MorLockInitAtEndOfDxe (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS                      Status;
>     > +  EDKII_VARIABLE_POLICY_PROTOCOL  *VariablePolicy;
>     > +
>     > +  // First, we obviously need to locate the VariablePolicy protocol.
>     > +  Status = gBS->LocateProtocol (&gEdkiiVariablePolicyProtocolGuid, NULL,
>     > (VOID **)&VariablePolicy);
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "%a - Could not locate VariablePolicy
>     > protocol! %r\n", __FUNCTION__, Status));
>     > +    return;
>     > +  }
>     > +
>     > +  // If we're successful, go ahead and set the policies to protect the target
>     > variables.
>     > +  Status = RegisterBasicVariablePolicy (
>     > +             VariablePolicy,
>     > +             &gEfiMemoryOverwriteRequestControlLockGuid,
>     > +             MEMORY_OVERWRITE_REQUEST_CONTROL_LOCK_NAME,
>     > +             VARIABLE_POLICY_NO_MIN_SIZE,
>     > +             VARIABLE_POLICY_NO_MAX_SIZE,
>     > +             VARIABLE_POLICY_NO_MUST_ATTR,
>     > +             VARIABLE_POLICY_NO_CANT_ATTR,
>     > +             VARIABLE_POLICY_TYPE_LOCK_NOW
>     > +             );
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "%a - Could not lock variable %s! %r\n",
>     > __FUNCTION__, MEMORY_OVERWRITE_REQUEST_CONTROL_LOCK_NAME,
>     > Status));
>     > +  }
>     > +
>     > +  Status = RegisterBasicVariablePolicy (
>     > +             VariablePolicy,
>     > +             &gEfiMemoryOverwriteControlDataGuid,
>     > +             MEMORY_OVERWRITE_REQUEST_VARIABLE_NAME,
>     > +             VARIABLE_POLICY_NO_MIN_SIZE,
>     > +             VARIABLE_POLICY_NO_MAX_SIZE,
>     > +             VARIABLE_POLICY_NO_MUST_ATTR,
>     > +             VARIABLE_POLICY_NO_CANT_ATTR,
>     > +             VARIABLE_POLICY_TYPE_LOCK_NOW
>     > +             );
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "%a - Could not lock variable %s! %r\n",
>     > __FUNCTION__, MEMORY_OVERWRITE_REQUEST_VARIABLE_NAME,
> Status));
>     > +  }
>     > +
>     > +  return;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/TcgMorLockSmm.
>     > c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/TcgMorLockSmm.
>     > c
>     > new file mode 100644
>     > index 000000000000..296afd2ec414
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/TcgMorLockSmm.
>     > c
>     > @@ -0,0 +1,569 @@
>     > +/** @file
>     > +  TCG MOR (Memory Overwrite Request) Lock Control support (SMM
> version).
>     > +
>     > +  This module initilizes MemoryOverwriteRequestControlLock variable.
>     > +  This module adds Variable Hook and check
>     > MemoryOverwriteRequestControlLock.
>     > +
>     > +Copyright (c) 2016 - 2018, Intel Corporation. All rights reserved.<BR>
>     > +Copyright (c) Microsoft Corporation.
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include <PiDxe.h>
>     > +#include <Guid/MemoryOverwriteControl.h>
>     > +#include <IndustryStandard/MemoryOverwriteRequestControlLock.h>
>     > +#include <Library/DebugLib.h>
>     > +#include <Library/BaseLib.h>
>     > +#include <Library/BaseMemoryLib.h>
>     > +#include "Variable.h"
>     > +
>     > +#include <Protocol/VariablePolicy.h>
>     > +#include <Library/VariablePolicyHelperLib.h>
>     > +#include <Library/VariablePolicyLib.h>
>     > +
>     > +typedef struct {
>     > +  CHAR16      *VariableName;
>     > +  EFI_GUID    *VendorGuid;
>     > +} VARIABLE_TYPE;
>     > +
>     > +VARIABLE_TYPE  mMorVariableType[] = {
>     > +  { MEMORY_OVERWRITE_REQUEST_VARIABLE_NAME,
>     > &gEfiMemoryOverwriteControlDataGuid        },
>     > +  { MEMORY_OVERWRITE_REQUEST_CONTROL_LOCK_NAME,
>     > &gEfiMemoryOverwriteRequestControlLockGuid },
>     > +};
>     > +
>     > +BOOLEAN  mMorPassThru = FALSE;
>     > +
>     > +#define MOR_LOCK_DATA_UNLOCKED            0x0
>     > +#define MOR_LOCK_DATA_LOCKED_WITHOUT_KEY  0x1
>     > +#define MOR_LOCK_DATA_LOCKED_WITH_KEY     0x2
>     > +
>     > +#define MOR_LOCK_V1_SIZE      1
>     > +#define MOR_LOCK_V2_KEY_SIZE  8
>     > +
>     > +typedef enum {
>     > +  MorLockStateUnlocked = 0,
>     > +  MorLockStateLocked   = 1,
>     > +} MOR_LOCK_STATE;
>     > +
>     > +BOOLEAN         mMorLockInitializationRequired = FALSE;
>     > +UINT8           mMorLockKey[MOR_LOCK_V2_KEY_SIZE];
>     > +BOOLEAN         mMorLockKeyEmpty = TRUE;
>     > +BOOLEAN         mMorLockPassThru = FALSE;
>     > +MOR_LOCK_STATE  mMorLockState    = MorLockStateUnlocked;
>     > +
>     > +/**
>     > +  Returns if this is MOR related variable.
>     > +
>     > +  @param  VariableName the name of the vendor's variable, it's a Null-
>     > Terminated Unicode String
>     > +  @param  VendorGuid   Unify identifier for vendor.
>     > +
>     > +  @retval  TRUE            The variable is MOR related.
>     > +  @retval  FALSE           The variable is NOT MOR related.
>     > +**/
>     > +BOOLEAN
>     > +IsAnyMorVariable (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid
>     > +  )
>     > +{
>     > +  UINTN  Index;
>     > +
>     > +  for (Index = 0; Index < sizeof (mMorVariableType)/sizeof
>     > (mMorVariableType[0]); Index++) {
>     > +    if ((StrCmp (VariableName, mMorVariableType[Index].VariableName) ==
> 0)
>     > &&
>     > +        (CompareGuid (VendorGuid, mMorVariableType[Index].VendorGuid)))
>     > +    {
>     > +      return TRUE;
>     > +    }
>     > +  }
>     > +
>     > +  return FALSE;
>     > +}
>     > +
>     > +/**
>     > +  Returns if this is MOR lock variable.
>     > +
>     > +  @param  VariableName the name of the vendor's variable, it's a Null-
>     > Terminated Unicode String
>     > +  @param  VendorGuid   Unify identifier for vendor.
>     > +
>     > +  @retval  TRUE            The variable is MOR lock variable.
>     > +  @retval  FALSE           The variable is NOT MOR lock variable.
>     > +**/
>     > +BOOLEAN
>     > +IsMorLockVariable (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid
>     > +  )
>     > +{
>     > +  if ((StrCmp (VariableName,
>     > MEMORY_OVERWRITE_REQUEST_CONTROL_LOCK_NAME) == 0) &&
>     > +      (CompareGuid (VendorGuid,
>     > &gEfiMemoryOverwriteRequestControlLockGuid)))
>     > +  {
>     > +    return TRUE;
>     > +  }
>     > +
>     > +  return FALSE;
>     > +}
>     > +
>     > +/**
>     > +  Set MOR lock variable.
>     > +
>     > +  @param  Data         MOR Lock variable data.
>     > +
>     > +  @retval  EFI_SUCCESS            The firmware has successfully stored the
> variable
>     > and its data as
>     > +                                  defined by the Attributes.
>     > +  @retval  EFI_INVALID_PARAMETER  An invalid combination of attribute
> bits
>     > was supplied, or the
>     > +                                  DataSize exceeds the maximum allowed.
>     > +  @retval  EFI_INVALID_PARAMETER  VariableName is an empty Unicode
> string.
>     > +  @retval  EFI_OUT_OF_RESOURCES   Not enough storage is available to
> hold
>     > the variable and its data.
>     > +  @retval  EFI_DEVICE_ERROR       The variable could not be saved due to a
>     > hardware failure.
>     > +  @retval  EFI_WRITE_PROTECTED    The variable in question is read-only.
>     > +  @retval  EFI_WRITE_PROTECTED    The variable in question cannot be
> deleted.
>     > +  @retval  EFI_SECURITY_VIOLATION The variable could not be written due
> to
>     > EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS
>     > +                                  set but the AuthInfo does NOT pass the validation check
>     > carried
>     > +                                  out by the firmware.
>     > +  @retval  EFI_NOT_FOUND          The variable trying to be updated or
> deleted
>     > was not found.
>     > +**/
>     > +EFI_STATUS
>     > +SetMorLockVariable (
>     > +  IN UINT8  Data
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  mMorLockPassThru = TRUE;
>     > +  Status           = VariableServiceSetVariable (
>     > +                       MEMORY_OVERWRITE_REQUEST_CONTROL_LOCK_NAME,
>     > +                       &gEfiMemoryOverwriteRequestControlLockGuid,
>     > +                       EFI_VARIABLE_NON_VOLATILE |
>     > EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_RUNTIME_ACCESS,
>     > +                       sizeof (Data),
>     > +                       &Data
>     > +                       );
>     > +  mMorLockPassThru = FALSE;
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  This service is an MorLock checker handler for the SetVariable().
>     > +
>     > +  @param  VariableName the name of the vendor's variable, as a
>     > +                       Null-Terminated Unicode String
>     > +  @param  VendorGuid   Unify identifier for vendor.
>     > +  @param  Attributes   Point to memory location to return the attributes of
>     > variable. If the point
>     > +                       is NULL, the parameter would be ignored.
>     > +  @param  DataSize     The size in bytes of Data-Buffer.
>     > +  @param  Data         Point to the content of the variable.
>     > +
>     > +  @retval  EFI_SUCCESS            The MorLock check pass, and Variable driver
> can
>     > store the variable data.
>     > +  @retval  EFI_INVALID_PARAMETER  The MorLock data or data size or
>     > attributes is not allowed.
>     > +  @retval  EFI_ACCESS_DENIED      The MorLock is locked.
>     > +  @retval  EFI_WRITE_PROTECTED    The MorLock deletion is not allowed.
>     > +  @retval  EFI_ALREADY_STARTED    The MorLock variable is handled inside
> this
>     > function.
>     > +                                  Variable driver can just return EFI_SUCCESS.
>     > +**/
>     > +EFI_STATUS
>     > +SetVariableCheckHandlerMorLock (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid,
>     > +  IN UINT32    Attributes,
>     > +  IN UINTN     DataSize,
>     > +  IN VOID      *Data
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  //
>     > +  // Basic Check
>     > +  //
>     > +  if ((Attributes == 0) || (DataSize == 0) || (Data == NULL)) {
>     > +    //
>     > +    // Permit deletion for passthru request, deny it otherwise.
>     > +    //
>     > +    return mMorLockPassThru ? EFI_SUCCESS : EFI_WRITE_PROTECTED;
>     > +  }
>     > +
>     > +  if ((Attributes != (EFI_VARIABLE_NON_VOLATILE |
>     > EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_RUNTIME_ACCESS))
> ||
>     > +      ((DataSize != MOR_LOCK_V1_SIZE) && (DataSize !=
>     > MOR_LOCK_V2_KEY_SIZE)))
>     > +  {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  //
>     > +  // Do not check if the request is passthru.
>     > +  //
>     > +  if (mMorLockPassThru) {
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  if (mMorLockState == MorLockStateUnlocked) {
>     > +    //
>     > +    // In Unlocked State
>     > +    //
>     > +    if (DataSize == MOR_LOCK_V1_SIZE) {
>     > +      //
>     > +      // V1 - lock permanently
>     > +      //
>     > +      if (*(UINT8 *)Data == MOR_LOCK_DATA_UNLOCKED) {
>     > +        //
>     > +        // Unlock
>     > +        //
>     > +        Status = SetMorLockVariable (MOR_LOCK_DATA_UNLOCKED);
>     > +        if (!EFI_ERROR (Status)) {
>     > +          //
>     > +          // return EFI_ALREADY_STARTED to skip variable set.
>     > +          //
>     > +          return EFI_ALREADY_STARTED;
>     > +        } else {
>     > +          //
>     > +          // SetVar fail
>     > +          //
>     > +          return Status;
>     > +        }
>     > +      } else if (*(UINT8 *)Data == MOR_LOCK_DATA_LOCKED_WITHOUT_KEY)
> {
>     > +        //
>     > +        // Lock without key
>     > +        //
>     > +        Status = SetMorLockVariable
> (MOR_LOCK_DATA_LOCKED_WITHOUT_KEY);
>     > +        if (!EFI_ERROR (Status)) {
>     > +          //
>     > +          // Lock success
>     > +          //
>     > +          mMorLockState = MorLockStateLocked;
>     > +          //
>     > +          // return EFI_ALREADY_STARTED to skip variable set.
>     > +          //
>     > +          return EFI_ALREADY_STARTED;
>     > +        } else {
>     > +          //
>     > +          // SetVar fail
>     > +          //
>     > +          return Status;
>     > +        }
>     > +      } else {
>     > +        return EFI_INVALID_PARAMETER;
>     > +      }
>     > +    } else if (DataSize == MOR_LOCK_V2_KEY_SIZE) {
>     > +      //
>     > +      // V2 lock and provision the key
>     > +      //
>     > +
>     > +      //
>     > +      // Need set here because the data value on flash is different
>     > +      //
>     > +      Status = SetMorLockVariable (MOR_LOCK_DATA_LOCKED_WITH_KEY);
>     > +      if (EFI_ERROR (Status)) {
>     > +        //
>     > +        // SetVar fail, do not provision the key
>     > +        //
>     > +        return Status;
>     > +      } else {
>     > +        //
>     > +        // Lock success, provision the key
>     > +        //
>     > +        mMorLockKeyEmpty = FALSE;
>     > +        CopyMem (mMorLockKey, Data, MOR_LOCK_V2_KEY_SIZE);
>     > +        mMorLockState = MorLockStateLocked;
>     > +        //
>     > +        // return EFI_ALREADY_STARTED to skip variable set.
>     > +        //
>     > +        return EFI_ALREADY_STARTED;
>     > +      }
>     > +    } else {
>     > +      ASSERT (FALSE);
>     > +      return EFI_OUT_OF_RESOURCES;
>     > +    }
>     > +  } else {
>     > +    //
>     > +    // In Locked State
>     > +    //
>     > +    if (mMorLockKeyEmpty || (DataSize != MOR_LOCK_V2_KEY_SIZE)) {
>     > +      return EFI_ACCESS_DENIED;
>     > +    }
>     > +
>     > +    if ((CompareMem (Data, mMorLockKey, MOR_LOCK_V2_KEY_SIZE) == 0))
> {
>     > +      //
>     > +      // Key match - unlock
>     > +      //
>     > +
>     > +      //
>     > +      // Need set here because the data value on flash is different
>     > +      //
>     > +      Status = SetMorLockVariable (MOR_LOCK_DATA_UNLOCKED);
>     > +      if (EFI_ERROR (Status)) {
>     > +        //
>     > +        // SetVar fail
>     > +        //
>     > +        return Status;
>     > +      } else {
>     > +        //
>     > +        // Unlock Success
>     > +        //
>     > +        mMorLockState    = MorLockStateUnlocked;
>     > +        mMorLockKeyEmpty = TRUE;
>     > +        ZeroMem (mMorLockKey, sizeof (mMorLockKey));
>     > +        //
>     > +        // return EFI_ALREADY_STARTED to skip variable set.
>     > +        //
>     > +        return EFI_ALREADY_STARTED;
>     > +      }
>     > +    } else {
>     > +      //
>     > +      // Key mismatch - Prevent Dictionary Attack
>     > +      //
>     > +      mMorLockState    = MorLockStateLocked;
>     > +      mMorLockKeyEmpty = TRUE;
>     > +      ZeroMem (mMorLockKey, sizeof (mMorLockKey));
>     > +      return EFI_ACCESS_DENIED;
>     > +    }
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  This service is an MOR/MorLock checker handler for the SetVariable().
>     > +
>     > +  @param[in]  VariableName the name of the vendor's variable, as a
>     > +                           Null-Terminated Unicode String
>     > +  @param[in]  VendorGuid   Unify identifier for vendor.
>     > +  @param[in]  Attributes   Attributes bitmask to set for the variable.
>     > +  @param[in]  DataSize     The size in bytes of Data-Buffer.
>     > +  @param[in]  Data         Point to the content of the variable.
>     > +
>     > +  @retval  EFI_SUCCESS            The MOR/MorLock check pass, and Variable
>     > +                                  driver can store the variable data.
>     > +  @retval  EFI_INVALID_PARAMETER  The MOR/MorLock data or data size
> or
>     > +                                  attributes is not allowed for MOR variable.
>     > +  @retval  EFI_ACCESS_DENIED      The MOR/MorLock is locked.
>     > +  @retval  EFI_ALREADY_STARTED    The MorLock variable is handled inside
> this
>     > +                                  function. Variable driver can just return
>     > +                                  EFI_SUCCESS.
>     > +**/
>     > +EFI_STATUS
>     > +SetVariableCheckHandlerMor (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid,
>     > +  IN UINT32    Attributes,
>     > +  IN UINTN     DataSize,
>     > +  IN VOID      *Data
>     > +  )
>     > +{
>     > +  //
>     > +  // do not handle non-MOR variable
>     > +  //
>     > +  if (!IsAnyMorVariable (VariableName, VendorGuid)) {
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  // Permit deletion when policy is disabled.
>     > +  if (!IsVariablePolicyEnabled () && ((Attributes == 0) || (DataSize == 0))) {
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  //
>     > +  // MorLock variable
>     > +  //
>     > +  if (IsMorLockVariable (VariableName, VendorGuid)) {
>     > +    return SetVariableCheckHandlerMorLock (
>     > +             VariableName,
>     > +             VendorGuid,
>     > +             Attributes,
>     > +             DataSize,
>     > +             Data
>     > +             );
>     > +  }
>     > +
>     > +  //
>     > +  // Mor Variable
>     > +  //
>     > +
>     > +  //
>     > +  // Permit deletion for passthru request.
>     > +  //
>     > +  if (((Attributes == 0) || (DataSize == 0)) && mMorPassThru) {
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  //
>     > +  // Basic Check
>     > +  //
>     > +  if ((Attributes != (EFI_VARIABLE_NON_VOLATILE |
>     > EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_RUNTIME_ACCESS))
> ||
>     > +      (DataSize != sizeof (UINT8)) ||
>     > +      (Data == NULL))
>     > +  {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if (mMorLockState == MorLockStateLocked) {
>     > +    //
>     > +    // If lock, deny access
>     > +    //
>     > +    return EFI_ACCESS_DENIED;
>     > +  }
>     > +
>     > +  //
>     > +  // grant access
>     > +  //
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Initialization for MOR Control Lock.
>     > +
>     > +  @retval EFI_SUCCESS     MorLock initialization success.
>     > +  @return Others          Some error occurs.
>     > +**/
>     > +EFI_STATUS
>     > +MorLockInit (
>     > +  VOID
>     > +  )
>     > +{
>     > +  mMorLockInitializationRequired = TRUE;
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Delayed initialization for MOR Control Lock at EndOfDxe.
>     > +
>     > +  This function performs any operations queued by MorLockInit().
>     > +**/
>     > +VOID
>     > +MorLockInitAtEndOfDxe (
>     > +  VOID
>     > +  )
>     > +{
>     > +  UINTN                  MorSize;
>     > +  EFI_STATUS             MorStatus;
>     > +  EFI_STATUS             Status;
>     > +  VARIABLE_POLICY_ENTRY  *NewPolicy;
>     > +
>     > +  if (!mMorLockInitializationRequired) {
>     > +    //
>     > +    // The EFI_SMM_FAULT_TOLERANT_WRITE_PROTOCOL has never been
>     > installed, thus
>     > +    // the variable write service is unavailable. This should never happen.
>     > +    //
>     > +    ASSERT (FALSE);
>     > +    return;
>     > +  }
>     > +
>     > +  //
>     > +  // Check if the MOR variable exists.
>     > +  //
>     > +  MorSize   = 0;
>     > +  MorStatus = VariableServiceGetVariable (
>     > +                MEMORY_OVERWRITE_REQUEST_VARIABLE_NAME,
>     > +                &gEfiMemoryOverwriteControlDataGuid,
>     > +                NULL,                                   // Attributes
>     > +                &MorSize,
>     > +                NULL                                    // Data
>     > +                );
>     > +  //
>     > +  // We provided a zero-sized buffer, so the above call can never succeed.
>     > +  //
>     > +  ASSERT (EFI_ERROR (MorStatus));
>     > +
>     > +  if (MorStatus == EFI_BUFFER_TOO_SMALL) {
>     > +    //
>     > +    // The MOR variable exists.
>     > +    //
>     > +    // Some OSes don't follow the TCG's Platform Reset Attack Mitigation
> spec
>     > +    // in that the OS should never create the MOR variable, only read and
> write
>     > +    // it -- these OSes (unintentionally) create MOR if the platform firmware
>     > +    // does not produce it. Whether this is the case (from the last OS boot)
>     > +    // can be deduced from the absence of the TCG / TCG2 protocols, as
> edk2's
>     > +    // MOR implementation depends on (one of) those protocols.
>     > +    //
>     > +    if (VariableHaveTcgProtocols ()) {
>     > +      //
>     > +      // The MOR variable originates from the platform firmware; set the
> MOR
>     > +      // Control Lock variable to report the locking capability to the OS.
>     > +      //
>     > +      SetMorLockVariable (0);
>     > +      return;
>     > +    }
>     > +
>     > +    //
>     > +    // The MOR variable's origin is inexplicable; delete it.
>     > +    //
>     > +    DEBUG ((
>     > +      DEBUG_WARN,
>     > +      "%a: deleting unexpected / unsupported variable %g:%s\n",
>     > +      __FUNCTION__,
>     > +      &gEfiMemoryOverwriteControlDataGuid,
>     > +      MEMORY_OVERWRITE_REQUEST_VARIABLE_NAME
>     > +      ));
>     > +
>     > +    mMorPassThru = TRUE;
>     > +    VariableServiceSetVariable (
>     > +      MEMORY_OVERWRITE_REQUEST_VARIABLE_NAME,
>     > +      &gEfiMemoryOverwriteControlDataGuid,
>     > +      0,                                      // Attributes
>     > +      0,                                      // DataSize
>     > +      NULL                                    // Data
>     > +      );
>     > +    mMorPassThru = FALSE;
>     > +  }
>     > +
>     > +  //
>     > +  // The MOR variable is absent; the platform firmware does not support it.
>     > +  // Lock the variable so that no other module may create it.
>     > +  //
>     > +  NewPolicy = NULL;
>     > +  Status    = CreateBasicVariablePolicy (
>     > +                &gEfiMemoryOverwriteControlDataGuid,
>     > +                MEMORY_OVERWRITE_REQUEST_VARIABLE_NAME,
>     > +                VARIABLE_POLICY_NO_MIN_SIZE,
>     > +                VARIABLE_POLICY_NO_MAX_SIZE,
>     > +                VARIABLE_POLICY_NO_MUST_ATTR,
>     > +                VARIABLE_POLICY_NO_CANT_ATTR,
>     > +                VARIABLE_POLICY_TYPE_LOCK_NOW,
>     > +                &NewPolicy
>     > +                );
>     > +  if (!EFI_ERROR (Status)) {
>     > +    Status = RegisterVariablePolicy (NewPolicy);
>     > +  }
>     > +
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "%a - Failed to lock variable %s! %r\n",
>     > __FUNCTION__, MEMORY_OVERWRITE_REQUEST_VARIABLE_NAME,
> Status));
>     > +    ASSERT_EFI_ERROR (Status);
>     > +  }
>     > +
>     > +  if (NewPolicy != NULL) {
>     > +    FreePool (NewPolicy);
>     > +  }
>     > +
>     > +  //
>     > +  // Delete the MOR Control Lock variable too (should it exists for some
>     > +  // reason) and prevent other modules from creating it.
>     > +  //
>     > +  mMorLockPassThru = TRUE;
>     > +  VariableServiceSetVariable (
>     > +    MEMORY_OVERWRITE_REQUEST_CONTROL_LOCK_NAME,
>     > +    &gEfiMemoryOverwriteRequestControlLockGuid,
>     > +    0,                                          // Attributes
>     > +    0,                                          // DataSize
>     > +    NULL                                        // Data
>     > +    );
>     > +  mMorLockPassThru = FALSE;
>     > +
>     > +  NewPolicy = NULL;
>     > +  Status    = CreateBasicVariablePolicy (
>     > +                &gEfiMemoryOverwriteRequestControlLockGuid,
>     > +                MEMORY_OVERWRITE_REQUEST_CONTROL_LOCK_NAME,
>     > +                VARIABLE_POLICY_NO_MIN_SIZE,
>     > +                VARIABLE_POLICY_NO_MAX_SIZE,
>     > +                VARIABLE_POLICY_NO_MUST_ATTR,
>     > +                VARIABLE_POLICY_NO_CANT_ATTR,
>     > +                VARIABLE_POLICY_TYPE_LOCK_NOW,
>     > +                &NewPolicy
>     > +                );
>     > +  if (!EFI_ERROR (Status)) {
>     > +    Status = RegisterVariablePolicy (NewPolicy);
>     > +  }
>     > +
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "%a - Failed to lock variable %s! %r\n",
>     > __FUNCTION__, MEMORY_OVERWRITE_REQUEST_CONTROL_LOCK_NAME,
>     > Status));
>     > +    ASSERT_EFI_ERROR (Status);
>     > +  }
>     > +
>     > +  if (NewPolicy != NULL) {
>     > +    FreePool (NewPolicy);
>     > +  }
>     > +}
>     > diff --git
>     > a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VarCheck.c
>     > b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VarCheck.c
>     > new file mode 100644
>     > index 000000000000..a94b0b02ec15
>     > --- /dev/null
>     > +++
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VarCheck.c
>     > @@ -0,0 +1,101 @@
>     > +/** @file
>     > +  Implementation functions and structures for var check protocol
>     > +  and variable lock protocol based on VarCheckLib.
>     > +
>     > +Copyright (c) 2015, Intel Corporation. All rights reserved.<BR>
>     > +Copyright (c) Microsoft Corporation.
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include "Variable.h"
>     > +
>     > +/**
>     > +  Register SetVariable check handler.
>     > +
>     > +  @param[in] Handler            Pointer to check handler.
>     > +
>     > +  @retval EFI_SUCCESS           The SetVariable check handler was registered
>     > successfully.
>     > +  @retval EFI_INVALID_PARAMETER Handler is NULL.
>     > +  @retval EFI_ACCESS_DENIED     EFI_END_OF_DXE_EVENT_GROUP_GUID
> or
>     > EFI_EVENT_GROUP_READY_TO_BOOT has
>     > +                                already been signaled.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough resource for the
>     > SetVariable check handler register request.
>     > +  @retval EFI_UNSUPPORTED       This interface is not implemented.
>     > +                                For example, it is unsupported in VarCheck protocol if
> both
>     > VarCheck and SmmVarCheck protocols are present.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VarCheckRegisterSetVariableCheckHandler (
>     > +  IN VAR_CHECK_SET_VARIABLE_CHECK_HANDLER  Handler
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +  Status = VarCheckLibRegisterSetVariableCheckHandler (Handler);
>     > +  ReleaseLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Variable property set.
>     > +
>     > +  @param[in] Name               Pointer to the variable name.
>     > +  @param[in] Guid               Pointer to the vendor GUID.
>     > +  @param[in] VariableProperty   Pointer to the input variable property.
>     > +
>     > +  @retval EFI_SUCCESS           The property of variable specified by the
> Name
>     > and Guid was set successfully.
>     > +  @retval EFI_INVALID_PARAMETER Name, Guid or VariableProperty is
> NULL,
>     > or Name is an empty string,
>     > +                                or the fields of VariableProperty are not valid.
>     > +  @retval EFI_ACCESS_DENIED     EFI_END_OF_DXE_EVENT_GROUP_GUID
> or
>     > EFI_EVENT_GROUP_READY_TO_BOOT has
>     > +                                already been signaled.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough resource for the
>     > variable property set request.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VarCheckVariablePropertySet (
>     > +  IN CHAR16                       *Name,
>     > +  IN EFI_GUID                     *Guid,
>     > +  IN VAR_CHECK_VARIABLE_PROPERTY  *VariableProperty
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +  Status = VarCheckLibVariablePropertySet (Name, Guid, VariableProperty);
>     > +  ReleaseLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Variable property get.
>     > +
>     > +  @param[in]  Name              Pointer to the variable name.
>     > +  @param[in]  Guid              Pointer to the vendor GUID.
>     > +  @param[out] VariableProperty  Pointer to the output variable property.
>     > +
>     > +  @retval EFI_SUCCESS           The property of variable specified by the
> Name
>     > and Guid was got successfully.
>     > +  @retval EFI_INVALID_PARAMETER Name, Guid or VariableProperty is
> NULL,
>     > or Name is an empty string.
>     > +  @retval EFI_NOT_FOUND         The property of variable specified by the
> Name
>     > and Guid was not found.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VarCheckVariablePropertyGet (
>     > +  IN CHAR16                        *Name,
>     > +  IN EFI_GUID                      *Guid,
>     > +  OUT VAR_CHECK_VARIABLE_PROPERTY  *VariableProperty
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +  Status = VarCheckLibVariablePropertyGet (Name, Guid, VariableProperty);
>     > +  ReleaseLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +
>     > +  return Status;
>     > +}
>     > diff --git
>     > a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Variable.c
>     > b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Variable.c
>     > new file mode 100644
>     > index 000000000000..19b432b772d7
>     > --- /dev/null
>     > +++ b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/Variable.c
>     > @@ -0,0 +1,4037 @@
>     > +/** @file
>     > +  The common variable operation routines shared by DXE_RUNTIME
> variable
>     > +  module and DXE_SMM variable module.
>     > +
>     > +  Caution: This module requires additional review when modified.
>     > +  This driver will have external input - variable data. They may be input in
> SMM
>     > mode.
>     > +  This external input must be validated carefully to avoid security issue like
>     > +  buffer overflow, integer overflow.
>     > +
>     > +  VariableServiceGetNextVariableName () and
>     > VariableServiceQueryVariableInfo() are external API.
>     > +  They need check input parameter.
>     > +
>     > +  VariableServiceGetVariable() and VariableServiceSetVariable() are external
> API
>     > +  to receive datasize and data buffer. The size should be checked carefully.
>     > +
>     > +  VariableServiceSetVariable() should also check authenticate data to avoid
>     > buffer overflow,
>     > +  integer overflow. It should also check attribute to avoid authentication
> bypass.
>     > +
>     > +Copyright (c) 2006 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +(C) Copyright 2015-2018 Hewlett Packard Enterprise Development LP<BR>
>     > +Copyright (c) Microsoft Corporation.<BR>
>     > +Copyright (c) 2022, ARM Limited. All rights reserved.<BR>
>     > +
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include "Variable.h"
>     > +#include "VariableNonVolatile.h"
>     > +#include "VariableParsing.h"
>     > +#include "VariableRuntimeCache.h"
>     > +
>     > +VARIABLE_MODULE_GLOBAL  *mVariableModuleGlobal = NULL;
>     > +
>     > +///
>     > +/// Define a memory cache that improves the search performance for a
>     > variable.
>     > +/// For EmuNvMode == TRUE, it will be equal to NonVolatileVariableBase.
>     > +///
>     > +VARIABLE_STORE_HEADER  *mNvVariableCache = NULL;
>     > +
>     > +///
>     > +/// Memory cache of Fv Header.
>     > +///
>     > +EFI_FIRMWARE_VOLUME_HEADER  *mNvFvHeaderCache = NULL;
>     > +
>     > +///
>     > +/// The memory entry used for variable statistics data.
>     > +///
>     > +VARIABLE_INFO_ENTRY  *gVariableInfo = NULL;
>     > +
>     > +///
>     > +/// The flag to indicate whether the platform has left the DXE phase of
>     > execution.
>     > +///
>     > +BOOLEAN  mEndOfDxe = FALSE;
>     > +
>     > +///
>     > +/// It indicates the var check request source.
>     > +/// In the implementation, DXE is regarded as untrusted, and SMM is
> trusted.
>     > +///
>     > +VAR_CHECK_REQUEST_SOURCE  mRequestSource =
> VarCheckFromUntrusted;
>     > +
>     > +//
>     > +// It will record the current boot error flag before EndOfDxe.
>     > +//
>     > +VAR_ERROR_FLAG  mCurrentBootVarErrFlag =
> VAR_ERROR_FLAG_NO_ERROR;
>     > +
>     > +VARIABLE_ENTRY_PROPERTY  mVariableEntryProperty[] = {
>     > +  {
>     > +    &gEdkiiVarErrorFlagGuid,
>     > +    VAR_ERROR_FLAG_NAME,
>     > +    {
>     > +      VAR_CHECK_VARIABLE_PROPERTY_REVISION,
>     > +      VAR_CHECK_VARIABLE_PROPERTY_READ_ONLY,
>     > +      VARIABLE_ATTRIBUTE_NV_BS_RT,
>     > +      sizeof (VAR_ERROR_FLAG),
>     > +      sizeof (VAR_ERROR_FLAG)
>     > +    }
>     > +  },
>     > +};
>     > +
>     > +AUTH_VAR_LIB_CONTEXT_IN  mAuthContextIn = {
>     > +  AUTH_VAR_LIB_CONTEXT_IN_STRUCT_VERSION,
>     > +  //
>     > +  // StructSize, TO BE FILLED
>     > +  //
>     > +  0,
>     > +  //
>     > +  // MaxAuthVariableSize, TO BE FILLED
>     > +  //
>     > +  0,
>     > +  VariableExLibFindVariable,
>     > +  VariableExLibFindNextVariable,
>     > +  VariableExLibUpdateVariable,
>     > +  VariableExLibGetScratchBuffer,
>     > +  VariableExLibCheckRemainingSpaceForConsistency,
>     > +  VariableExLibAtRuntime,
>     > +};
>     > +
>     > +AUTH_VAR_LIB_CONTEXT_OUT  mAuthContextOut;
>     > +
>     > +/**
>     > +
>     > +  This function writes data to the FWH at the correct LBA even if the LBAs
>     > +  are fragmented.
>     > +
>     > +  @param Global                  Pointer to VARAIBLE_GLOBAL structure.
>     > +  @param Volatile                Point out the Variable is Volatile or Non-Volatile.
>     > +  @param SetByIndex              TRUE if target pointer is given as index.
>     > +                                 FALSE if target pointer is absolute.
>     > +  @param Fvb                     Pointer to the writable FVB protocol.
>     > +  @param DataPtrIndex            Pointer to the Data from the end of
>     > VARIABLE_STORE_HEADER
>     > +                                 structure.
>     > +  @param DataSize                Size of data to be written.
>     > +  @param Buffer                  Pointer to the buffer from which data is written.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER  Parameters not valid.
>     > +  @retval EFI_UNSUPPORTED        Fvb is a NULL for Non-Volatile variable
>     > update.
>     > +  @retval EFI_OUT_OF_RESOURCES   The remaining size is not enough.
>     > +  @retval EFI_SUCCESS            Variable store successfully updated.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +UpdateVariableStore (
>     > +  IN  VARIABLE_GLOBAL                     *Global,
>     > +  IN  BOOLEAN                             Volatile,
>     > +  IN  BOOLEAN                             SetByIndex,
>     > +  IN  EFI_FIRMWARE_VOLUME_BLOCK_PROTOCOL  *Fvb,
>     > +  IN  UINTN                               DataPtrIndex,
>     > +  IN  UINT32                              DataSize,
>     > +  IN  UINT8                               *Buffer
>     > +  )
>     > +{
>     > +  EFI_FV_BLOCK_MAP_ENTRY  *PtrBlockMapEntry;
>     > +  UINTN                   BlockIndex2;
>     > +  UINTN                   LinearOffset;
>     > +  UINTN                   CurrWriteSize;
>     > +  UINTN                   CurrWritePtr;
>     > +  UINT8                   *CurrBuffer;
>     > +  EFI_LBA                 LbaNumber;
>     > +  UINTN                   Size;
>     > +  VARIABLE_STORE_HEADER   *VolatileBase;
>     > +  EFI_PHYSICAL_ADDRESS    FvVolHdr;
>     > +  EFI_PHYSICAL_ADDRESS    DataPtr;
>     > +  EFI_STATUS              Status;
>     > +
>     > +  FvVolHdr = 0;
>     > +  DataPtr  = DataPtrIndex;
>     > +
>     > +  //
>     > +  // Check if the Data is Volatile.
>     > +  //
>     > +  if (!Volatile && !mVariableModuleGlobal->VariableGlobal.EmuNvMode) {
>     > +    if (Fvb == NULL) {
>     > +      return EFI_UNSUPPORTED;
>     > +    }
>     > +
>     > +    Status = Fvb->GetPhysicalAddress (Fvb, &FvVolHdr);
>     > +    ASSERT_EFI_ERROR (Status);
>     > +
>     > +    //
>     > +    // Data Pointer should point to the actual Address where data is to be
>     > +    // written.
>     > +    //
>     > +    if (SetByIndex) {
>     > +      DataPtr += mVariableModuleGlobal-
>     > >VariableGlobal.NonVolatileVariableBase;
>     > +    }
>     > +
>     > +    if ((DataPtr + DataSize) > (FvVolHdr + mNvFvHeaderCache->FvLength)) {
>     > +      return EFI_OUT_OF_RESOURCES;
>     > +    }
>     > +  } else {
>     > +    //
>     > +    // Data Pointer should point to the actual Address where data is to be
>     > +    // written.
>     > +    //
>     > +    if (Volatile) {
>     > +      VolatileBase = (VARIABLE_STORE_HEADER
>     > *)((UINTN)mVariableModuleGlobal->VariableGlobal.VolatileVariableBase);
>     > +      if (SetByIndex) {
>     > +        DataPtr += mVariableModuleGlobal-
> >VariableGlobal.VolatileVariableBase;
>     > +      }
>     > +
>     > +      if ((DataPtr + DataSize) > ((UINTN)VolatileBase + VolatileBase->Size)) {
>     > +        return EFI_OUT_OF_RESOURCES;
>     > +      }
>     > +    } else {
>     > +      //
>     > +      // Emulated non-volatile variable mode.
>     > +      //
>     > +      if (SetByIndex) {
>     > +        DataPtr += (UINTN)mNvVariableCache;
>     > +      }
>     > +
>     > +      if ((DataPtr + DataSize) > ((UINTN)mNvVariableCache +
> mNvVariableCache-
>     > >Size)) {
>     > +        return EFI_OUT_OF_RESOURCES;
>     > +      }
>     > +    }
>     > +
>     > +    //
>     > +    // If Volatile/Emulated Non-volatile Variable just do a simple mem copy.
>     > +    //
>     > +    CopyMem ((UINT8 *)(UINTN)DataPtr, Buffer, DataSize);
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  //
>     > +  // If we are here we are dealing with Non-Volatile Variables.
>     > +  //
>     > +  LinearOffset  = (UINTN)FvVolHdr;
>     > +  CurrWritePtr  = (UINTN)DataPtr;
>     > +  CurrWriteSize = DataSize;
>     > +  CurrBuffer    = Buffer;
>     > +  LbaNumber     = 0;
>     > +
>     > +  if (CurrWritePtr < LinearOffset) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  for (PtrBlockMapEntry = mNvFvHeaderCache->BlockMap;
> PtrBlockMapEntry-
>     > >NumBlocks != 0; PtrBlockMapEntry++) {
>     > +    for (BlockIndex2 = 0; BlockIndex2 < PtrBlockMapEntry->NumBlocks;
>     > BlockIndex2++) {
>     > +      //
>     > +      // Check to see if the Variable Writes are spanning through multiple
>     > +      // blocks.
>     > +      //
>     > +      if ((CurrWritePtr >= LinearOffset) && (CurrWritePtr < LinearOffset +
>     > PtrBlockMapEntry->Length)) {
>     > +        if ((CurrWritePtr + CurrWriteSize) <= (LinearOffset + PtrBlockMapEntry-
>     > >Length)) {
>     > +          Status = Fvb->Write (
>     > +                          Fvb,
>     > +                          LbaNumber,
>     > +                          (UINTN)(CurrWritePtr - LinearOffset),
>     > +                          &CurrWriteSize,
>     > +                          CurrBuffer
>     > +                          );
>     > +          return Status;
>     > +        } else {
>     > +          Size   = (UINT32)(LinearOffset + PtrBlockMapEntry->Length -
>     > CurrWritePtr);
>     > +          Status = Fvb->Write (
>     > +                          Fvb,
>     > +                          LbaNumber,
>     > +                          (UINTN)(CurrWritePtr - LinearOffset),
>     > +                          &Size,
>     > +                          CurrBuffer
>     > +                          );
>     > +          if (EFI_ERROR (Status)) {
>     > +            return Status;
>     > +          }
>     > +
>     > +          CurrWritePtr  = LinearOffset + PtrBlockMapEntry->Length;
>     > +          CurrBuffer    = CurrBuffer + Size;
>     > +          CurrWriteSize = CurrWriteSize - Size;
>     > +        }
>     > +      }
>     > +
>     > +      LinearOffset += PtrBlockMapEntry->Length;
>     > +      LbaNumber++;
>     > +    }
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Record variable error flag.
>     > +
>     > +  @param[in] Flag               Variable error flag to record.
>     > +  @param[in] VariableName       Name of variable.
>     > +  @param[in] VendorGuid         Guid of variable.
>     > +  @param[in] Attributes         Attributes of the variable.
>     > +  @param[in] VariableSize       Size of the variable.
>     > +
>     > +**/
>     > +VOID
>     > +RecordVarErrorFlag (
>     > +  IN VAR_ERROR_FLAG  Flag,
>     > +  IN CHAR16          *VariableName,
>     > +  IN EFI_GUID        *VendorGuid,
>     > +  IN UINT32          Attributes,
>     > +  IN UINTN           VariableSize
>     > +  )
>     > +{
>     > +  EFI_STATUS              Status;
>     > +  VARIABLE_POINTER_TRACK  Variable;
>     > +  VAR_ERROR_FLAG          *VarErrFlag;
>     > +  VAR_ERROR_FLAG          TempFlag;
>     > +
>     > +  DEBUG_CODE_BEGIN ();
>     > +  DEBUG ((DEBUG_ERROR, "RecordVarErrorFlag (0x%02x) %s:%g - 0x%08x -
>     > 0x%x\n", Flag, VariableName, VendorGuid, Attributes, VariableSize));
>     > +  if (Flag == VAR_ERROR_FLAG_SYSTEM_ERROR) {
>     > +    if (AtRuntime ()) {
>     > +      DEBUG ((DEBUG_ERROR, "CommonRuntimeVariableSpace = 0x%x -
>     > CommonVariableTotalSize = 0x%x\n", mVariableModuleGlobal-
>     > >CommonRuntimeVariableSpace, mVariableModuleGlobal-
>     > >CommonVariableTotalSize));
>     > +    } else {
>     > +      DEBUG ((DEBUG_ERROR, "CommonVariableSpace = 0x%x -
>     > CommonVariableTotalSize = 0x%x\n", mVariableModuleGlobal-
>     > >CommonVariableSpace, mVariableModuleGlobal-
> >CommonVariableTotalSize));
>     > +    }
>     > +  } else {
>     > +    DEBUG ((DEBUG_ERROR, "CommonMaxUserVariableSpace = 0x%x -
>     > CommonUserVariableTotalSize = 0x%x\n", mVariableModuleGlobal-
>     > >CommonMaxUserVariableSpace, mVariableModuleGlobal-
>     > >CommonUserVariableTotalSize));
>     > +  }
>     > +
>     > +  DEBUG_CODE_END ();
>     > +
>     > +  if (!mEndOfDxe) {
>     > +    //
>     > +    // Before EndOfDxe, just record the current boot variable error flag to
> local
>     > variable,
>     > +    // and leave the variable error flag in NV flash as the last boot variable
> error
>     > flag.
>     > +    // After EndOfDxe in InitializeVarErrorFlag (), the variable error flag in NV
>     > flash
>     > +    // will be initialized to this local current boot variable error flag.
>     > +    //
>     > +    mCurrentBootVarErrFlag &= Flag;
>     > +    return;
>     > +  }
>     > +
>     > +  //
>     > +  // Record error flag (it should have be initialized).
>     > +  //
>     > +  Status = FindVariable (
>     > +             VAR_ERROR_FLAG_NAME,
>     > +             &gEdkiiVarErrorFlagGuid,
>     > +             &Variable,
>     > +             &mVariableModuleGlobal->VariableGlobal,
>     > +             FALSE
>     > +             );
>     > +  if (!EFI_ERROR (Status)) {
>     > +    VarErrFlag = (VAR_ERROR_FLAG *)GetVariableDataPtr (Variable.CurrPtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +    TempFlag   = *VarErrFlag;
>     > +    TempFlag  &= Flag;
>     > +    if (TempFlag == *VarErrFlag) {
>     > +      return;
>     > +    }
>     > +
>     > +    Status = UpdateVariableStore (
>     > +               &mVariableModuleGlobal->VariableGlobal,
>     > +               FALSE,
>     > +               FALSE,
>     > +               mVariableModuleGlobal->FvbInstance,
>     > +               (UINTN)VarErrFlag - (UINTN)mNvVariableCache +
>     > (UINTN)mVariableModuleGlobal->VariableGlobal.NonVolatileVariableBase,
>     > +               sizeof (TempFlag),
>     > +               &TempFlag
>     > +               );
>     > +    if (!EFI_ERROR (Status)) {
>     > +      //
>     > +      // Update the data in NV cache.
>     > +      //
>     > +      *VarErrFlag = TempFlag;
>     > +      Status      =  SynchronizeRuntimeVariableCache (
>     > +                       &mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.VariableRuntimeNvCache,
>     > +                       0,
>     > +                       mNvVariableCache->Size
>     > +                       );
>     > +      ASSERT_EFI_ERROR (Status);
>     > +    }
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Initialize variable error flag.
>     > +
>     > +  Before EndOfDxe, the variable indicates the last boot variable error flag,
>     > +  then it means the last boot variable error flag must be got before
> EndOfDxe.
>     > +  After EndOfDxe, the variable indicates the current boot variable error flag,
>     > +  then it means the current boot variable error flag must be got after
> EndOfDxe.
>     > +
>     > +**/
>     > +VOID
>     > +InitializeVarErrorFlag (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS              Status;
>     > +  VARIABLE_POINTER_TRACK  Variable;
>     > +  VAR_ERROR_FLAG          Flag;
>     > +  VAR_ERROR_FLAG          VarErrFlag;
>     > +
>     > +  if (!mEndOfDxe) {
>     > +    return;
>     > +  }
>     > +
>     > +  Flag = mCurrentBootVarErrFlag;
>     > +  DEBUG ((DEBUG_INFO, "Initialize variable error flag (%02x)\n", Flag));
>     > +
>     > +  Status = FindVariable (
>     > +             VAR_ERROR_FLAG_NAME,
>     > +             &gEdkiiVarErrorFlagGuid,
>     > +             &Variable,
>     > +             &mVariableModuleGlobal->VariableGlobal,
>     > +             FALSE
>     > +             );
>     > +  if (!EFI_ERROR (Status)) {
>     > +    VarErrFlag = *((VAR_ERROR_FLAG *)GetVariableDataPtr (Variable.CurrPtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat));
>     > +    if (VarErrFlag == Flag) {
>     > +      return;
>     > +    }
>     > +  }
>     > +
>     > +  UpdateVariable (
>     > +    VAR_ERROR_FLAG_NAME,
>     > +    &gEdkiiVarErrorFlagGuid,
>     > +    &Flag,
>     > +    sizeof (Flag),
>     > +    VARIABLE_ATTRIBUTE_NV_BS_RT,
>     > +    0,
>     > +    0,
>     > +    &Variable,
>     > +    NULL
>     > +    );
>     > +}
>     > +
>     > +/**
>     > +  Is user variable?
>     > +
>     > +  @param[in] Variable   Pointer to variable header.
>     > +
>     > +  @retval TRUE          User variable.
>     > +  @retval FALSE         System variable.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +IsUserVariable (
>     > +  IN VARIABLE_HEADER  *Variable
>     > +  )
>     > +{
>     > +  VAR_CHECK_VARIABLE_PROPERTY  Property;
>     > +
>     > +  //
>     > +  // Only after End Of Dxe, the variables belong to system variable are fixed.
>     > +  // If PcdMaxUserNvStorageVariableSize is 0, it means user variable share
> the
>     > same NV storage with system variable,
>     > +  // then no need to check if the variable is user variable or not specially.
>     > +  //
>     > +  if (mEndOfDxe && (mVariableModuleGlobal-
>     > >CommonMaxUserVariableSpace != mVariableModuleGlobal-
>     > >CommonVariableSpace)) {
>     > +    if (VarCheckLibVariablePropertyGet (
>     > +          GetVariableNamePtr (Variable, mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat),
>     > +          GetVendorGuidPtr (Variable, mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat),
>     > +          &Property
>     > +          ) == EFI_NOT_FOUND)
>     > +    {
>     > +      return TRUE;
>     > +    }
>     > +  }
>     > +
>     > +  return FALSE;
>     > +}
>     > +
>     > +/**
>     > +  Calculate common user variable total size.
>     > +
>     > +**/
>     > +VOID
>     > +CalculateCommonUserVariableTotalSize (
>     > +  VOID
>     > +  )
>     > +{
>     > +  VARIABLE_HEADER              *Variable;
>     > +  VARIABLE_HEADER              *NextVariable;
>     > +  UINTN                        VariableSize;
>     > +  VAR_CHECK_VARIABLE_PROPERTY  Property;
>     > +
>     > +  //
>     > +  // Only after End Of Dxe, the variables belong to system variable are fixed.
>     > +  // If PcdMaxUserNvStorageVariableSize is 0, it means user variable share
> the
>     > same NV storage with system variable,
>     > +  // then no need to calculate the common user variable total size specially.
>     > +  //
>     > +  if (mEndOfDxe && (mVariableModuleGlobal-
>     > >CommonMaxUserVariableSpace != mVariableModuleGlobal-
>     > >CommonVariableSpace)) {
>     > +    Variable = GetStartPointer (mNvVariableCache);
>     > +    while (IsValidVariableHeader (Variable, GetEndPointer
> (mNvVariableCache),
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat)) {
>     > +      NextVariable = GetNextVariablePtr (Variable, mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +      VariableSize = (UINTN)NextVariable - (UINTN)Variable;
>     > +      if ((Variable->Attributes &
> EFI_VARIABLE_HARDWARE_ERROR_RECORD) !=
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD) {
>     > +        if (VarCheckLibVariablePropertyGet (
>     > +              GetVariableNamePtr (Variable, mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat),
>     > +              GetVendorGuidPtr (Variable, mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat),
>     > +              &Property
>     > +              ) == EFI_NOT_FOUND)
>     > +        {
>     > +          //
>     > +          // No property, it is user variable.
>     > +          //
>     > +          mVariableModuleGlobal->CommonUserVariableTotalSize +=
> VariableSize;
>     > +        }
>     > +      }
>     > +
>     > +      Variable = NextVariable;
>     > +    }
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Initialize variable quota.
>     > +
>     > +**/
>     > +VOID
>     > +InitializeVariableQuota (
>     > +  VOID
>     > +  )
>     > +{
>     > +  if (!mEndOfDxe) {
>     > +    return;
>     > +  }
>     > +
>     > +  InitializeVarErrorFlag ();
>     > +  CalculateCommonUserVariableTotalSize ();
>     > +}
>     > +
>     > +/**
>     > +  Finds variable in storage blocks of volatile and non-volatile storage areas.
>     > +
>     > +  This code finds variable in storage blocks of volatile and non-volatile
> storage
>     > areas.
>     > +  If VariableName is an empty string, then we just return the first
>     > +  qualified variable without comparing VariableName and VendorGuid.
>     > +  If IgnoreRtCheck is TRUE, then we ignore the
>     > EFI_VARIABLE_RUNTIME_ACCESS attribute check
>     > +  at runtime when searching existing variable, only VariableName and
>     > VendorGuid are compared.
>     > +  Otherwise, variables without EFI_VARIABLE_RUNTIME_ACCESS are not
> visible
>     > at runtime.
>     > +
>     > +  @param[in]   VariableName           Name of the variable to be found.
>     > +  @param[in]   VendorGuid             Vendor GUID to be found.
>     > +  @param[out]  PtrTrack               VARIABLE_POINTER_TRACK structure for
>     > output,
>     > +                                      including the range searched and the target position.
>     > +  @param[in]   Global                 Pointer to VARIABLE_GLOBAL structure,
>     > including
>     > +                                      base of volatile variable storage area, base of
>     > +                                      NV variable storage area, and a lock.
>     > +  @param[in]   IgnoreRtCheck          Ignore
> EFI_VARIABLE_RUNTIME_ACCESS
>     > attribute
>     > +                                      check at runtime when searching variable.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER       If VariableName is not an empty
> string,
>     > while
>     > +                                      VendorGuid is NULL.
>     > +  @retval EFI_SUCCESS                 Variable successfully found.
>     > +  @retval EFI_NOT_FOUND               Variable not found
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +FindVariable (
>     > +  IN  CHAR16                  *VariableName,
>     > +  IN  EFI_GUID                *VendorGuid,
>     > +  OUT VARIABLE_POINTER_TRACK  *PtrTrack,
>     > +  IN  VARIABLE_GLOBAL         *Global,
>     > +  IN  BOOLEAN                 IgnoreRtCheck
>     > +  )
>     > +{
>     > +  EFI_STATUS             Status;
>     > +  VARIABLE_STORE_HEADER
> *VariableStoreHeader[VariableStoreTypeMax];
>     > +  VARIABLE_STORE_TYPE    Type;
>     > +
>     > +  if ((VariableName[0] != 0) && (VendorGuid == NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  //
>     > +  // 0: Volatile, 1: HOB, 2: Non-Volatile.
>     > +  // The index and attributes mapping must be kept in this order as
>     > RuntimeServiceGetNextVariableName
>     > +  // make use of this mapping to implement search algorithm.
>     > +  //
>     > +  VariableStoreHeader[VariableStoreTypeVolatile] =
>     > (VARIABLE_STORE_HEADER *)(UINTN)Global->VolatileVariableBase;
>     > +  VariableStoreHeader[VariableStoreTypeHob]      =
> (VARIABLE_STORE_HEADER
>     > *)(UINTN)Global->HobVariableBase;
>     > +  VariableStoreHeader[VariableStoreTypeNv]       = mNvVariableCache;
>     > +
>     > +  //
>     > +  // Find the variable by walk through HOB, volatile and non-volatile
> variable
>     > store.
>     > +  //
>     > +  for (Type = (VARIABLE_STORE_TYPE)0; Type < VariableStoreTypeMax;
> Type++)
>     > {
>     > +    if (VariableStoreHeader[Type] == NULL) {
>     > +      continue;
>     > +    }
>     > +
>     > +    PtrTrack->StartPtr = GetStartPointer (VariableStoreHeader[Type]);
>     > +    PtrTrack->EndPtr   = GetEndPointer (VariableStoreHeader[Type]);
>     > +    PtrTrack->Volatile = (BOOLEAN)(Type == VariableStoreTypeVolatile);
>     > +
>     > +    Status =  FindVariableEx (
>     > +                VariableName,
>     > +                VendorGuid,
>     > +                IgnoreRtCheck,
>     > +                PtrTrack,
>     > +                mVariableModuleGlobal->VariableGlobal.AuthFormat
>     > +                );
>     > +    if (!EFI_ERROR (Status)) {
>     > +      return Status;
>     > +    }
>     > +  }
>     > +
>     > +  return EFI_NOT_FOUND;
>     > +}
>     > +
>     > +/**
>     > +  Get index from supported language codes according to language string.
>     > +
>     > +  This code is used to get corresponding index in supported language codes.
> It
>     > can handle
>     > +  RFC4646 and ISO639 language tags.
>     > +  In ISO639 language tags, take 3-characters as a delimitation to find
> matched
>     > string and calculate the index.
>     > +  In RFC4646 language tags, take semicolon as a delimitation to find
> matched
>     > string and calculate the index.
>     > +
>     > +  For example:
>     > +    SupportedLang  = "engfraengfra"
>     > +    Lang           = "eng"
>     > +    Iso639Language = TRUE
>     > +  The return value is "0".
>     > +  Another example:
>     > +    SupportedLang  = "en;fr;en-US;fr-FR"
>     > +    Lang           = "fr-FR"
>     > +    Iso639Language = FALSE
>     > +  The return value is "3".
>     > +
>     > +  @param  SupportedLang               Platform supported language codes.
>     > +  @param  Lang                        Configured language.
>     > +  @param  Iso639Language              A bool value to signify if the handler is
>     > operated on ISO639 or RFC4646.
>     > +
>     > +  @retval The index of language in the language codes.
>     > +
>     > +**/
>     > +UINTN
>     > +GetIndexFromSupportedLangCodes (
>     > +  IN  CHAR8    *SupportedLang,
>     > +  IN  CHAR8    *Lang,
>     > +  IN  BOOLEAN  Iso639Language
>     > +  )
>     > +{
>     > +  UINTN  Index;
>     > +  UINTN  CompareLength;
>     > +  UINTN  LanguageLength;
>     > +
>     > +  if (Iso639Language) {
>     > +    CompareLength = ISO_639_2_ENTRY_SIZE;
>     > +    for (Index = 0; Index < AsciiStrLen (SupportedLang); Index +=
> CompareLength)
>     > {
>     > +      if (AsciiStrnCmp (Lang, SupportedLang + Index, CompareLength) == 0) {
>     > +        //
>     > +        // Successfully find the index of Lang string in SupportedLang string.
>     > +        //
>     > +        Index = Index / CompareLength;
>     > +        return Index;
>     > +      }
>     > +    }
>     > +
>     > +    ASSERT (FALSE);
>     > +    return 0;
>     > +  } else {
>     > +    //
>     > +    // Compare RFC4646 language code
>     > +    //
>     > +    Index = 0;
>     > +    for (LanguageLength = 0; Lang[LanguageLength] != '\0';
> LanguageLength++)
>     > {
>     > +    }
>     > +
>     > +    for (Index = 0; *SupportedLang != '\0'; Index++, SupportedLang +=
>     > CompareLength) {
>     > +      //
>     > +      // Skip ';' characters in SupportedLang
>     > +      //
>     > +      for ( ; *SupportedLang != '\0' && *SupportedLang == ';';
> SupportedLang++) {
>     > +      }
>     > +
>     > +      //
>     > +      // Determine the length of the next language code in SupportedLang
>     > +      //
>     > +      for (CompareLength = 0; SupportedLang[CompareLength] != '\0' &&
>     > SupportedLang[CompareLength] != ';'; CompareLength++) {
>     > +      }
>     > +
>     > +      if ((CompareLength == LanguageLength) &&
>     > +          (AsciiStrnCmp (Lang, SupportedLang, CompareLength) == 0))
>     > +      {
>     > +        //
>     > +        // Successfully find the index of Lang string in SupportedLang string.
>     > +        //
>     > +        return Index;
>     > +      }
>     > +    }
>     > +
>     > +    ASSERT (FALSE);
>     > +    return 0;
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Get language string from supported language codes according to index.
>     > +
>     > +  This code is used to get corresponding language strings in supported
> language
>     > codes. It can handle
>     > +  RFC4646 and ISO639 language tags.
>     > +  In ISO639 language tags, take 3-characters as a delimitation. Find
> language
>     > string according to the index.
>     > +  In RFC4646 language tags, take semicolon as a delimitation. Find
> language
>     > string according to the index.
>     > +
>     > +  For example:
>     > +    SupportedLang  = "engfraengfra"
>     > +    Index          = "1"
>     > +    Iso639Language = TRUE
>     > +  The return value is "fra".
>     > +  Another example:
>     > +    SupportedLang  = "en;fr;en-US;fr-FR"
>     > +    Index          = "1"
>     > +    Iso639Language = FALSE
>     > +  The return value is "fr".
>     > +
>     > +  @param  SupportedLang               Platform supported language codes.
>     > +  @param  Index                       The index in supported language codes.
>     > +  @param  Iso639Language              A bool value to signify if the handler is
>     > operated on ISO639 or RFC4646.
>     > +
>     > +  @retval The language string in the language codes.
>     > +
>     > +**/
>     > +CHAR8 *
>     > +GetLangFromSupportedLangCodes (
>     > +  IN  CHAR8    *SupportedLang,
>     > +  IN  UINTN    Index,
>     > +  IN  BOOLEAN  Iso639Language
>     > +  )
>     > +{
>     > +  UINTN  SubIndex;
>     > +  UINTN  CompareLength;
>     > +  CHAR8  *Supported;
>     > +
>     > +  SubIndex  = 0;
>     > +  Supported = SupportedLang;
>     > +  if (Iso639Language) {
>     > +    //
>     > +    // According to the index of Lang string in SupportedLang string to get
> the
>     > language.
>     > +    // This code will be invoked in RUNTIME, therefore there is not a
> memory
>     > allocate/free operation.
>     > +    // In driver entry, it pre-allocates a runtime attribute memory to
>     > accommodate this string.
>     > +    //
>     > +    CompareLength                              = ISO_639_2_ENTRY_SIZE;
>     > +    mVariableModuleGlobal->Lang[CompareLength] = '\0';
>     > +    return CopyMem (mVariableModuleGlobal->Lang, SupportedLang +
> Index *
>     > CompareLength, CompareLength);
>     > +  } else {
>     > +    while (TRUE) {
>     > +      //
>     > +      // Take semicolon as delimitation, sequentially traverse supported
> language
>     > codes.
>     > +      //
>     > +      for (CompareLength = 0; *Supported != ';' && *Supported != '\0';
>     > CompareLength++) {
>     > +        Supported++;
>     > +      }
>     > +
>     > +      if ((*Supported == '\0') && (SubIndex != Index)) {
>     > +        //
>     > +        // Have completed the traverse, but not find corrsponding string.
>     > +        // This case is not allowed to happen.
>     > +        //
>     > +        ASSERT (FALSE);
>     > +        return NULL;
>     > +      }
>     > +
>     > +      if (SubIndex == Index) {
>     > +        //
>     > +        // According to the index of Lang string in SupportedLang string to get
> the
>     > language.
>     > +        // As this code will be invoked in RUNTIME, therefore there is not
> memory
>     > allocate/free operation.
>     > +        // In driver entry, it pre-allocates a runtime attribute memory to
>     > accommodate this string.
>     > +        //
>     > +        mVariableModuleGlobal->PlatformLang[CompareLength] = '\0';
>     > +        return CopyMem (mVariableModuleGlobal->PlatformLang, Supported -
>     > CompareLength, CompareLength);
>     > +      }
>     > +
>     > +      SubIndex++;
>     > +
>     > +      //
>     > +      // Skip ';' characters in Supported
>     > +      //
>     > +      for ( ; *Supported != '\0' && *Supported == ';'; Supported++) {
>     > +      }
>     > +    }
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Returns a pointer to an allocated buffer that contains the best matching
>     > language
>     > +  from a set of supported languages.
>     > +
>     > +  This function supports both ISO 639-2 and RFC 4646 language codes, but
>     > language
>     > +  code types may not be mixed in a single call to this function. This function
>     > +  supports a variable argument list that allows the caller to pass in a
> prioritized
>     > +  list of language codes to test against all the language codes in
>     > SupportedLanguages.
>     > +
>     > +  If SupportedLanguages is NULL, then ASSERT().
>     > +
>     > +  @param[in]  SupportedLanguages  A pointer to a Null-terminated ASCII
> string
>     > that
>     > +                                  contains a set of language codes in the format
>     > +                                  specified by Iso639Language.
>     > +  @param[in]  Iso639Language      If not zero, then all language codes are
>     > assumed to be
>     > +                                  in ISO 639-2 format.  If zero, then all language
>     > +                                  codes are assumed to be in RFC 4646 language format
>     > +  @param[in]  ...                 A variable argument list that contains pointers to
>     > +                                  Null-terminated ASCII strings that contain one or more
>     > +                                  language codes in the format specified by
> Iso639Language.
>     > +                                  The first language code from each of these language
>     > +                                  code lists is used to determine if it is an exact or
>     > +                                  close match to any of the language codes in
>     > +                                  SupportedLanguages.  Close matches only apply to RFC
> 4646
>     > +                                  language codes, and the matching algorithm from RFC
> 4647
>     > +                                  is used to determine if a close match is present.  If
>     > +                                  an exact or close match is found, then the matching
>     > +                                  language code from SupportedLanguages is returned.  If
>     > +                                  no matches are found, then the next variable argument
>     > +                                  parameter is evaluated.  The variable argument list
>     > +                                  is terminated by a NULL.
>     > +
>     > +  @retval NULL   The best matching language could not be found in
>     > SupportedLanguages.
>     > +  @retval NULL   There are not enough resources available to return the
> best
>     > matching
>     > +                 language.
>     > +  @retval Other  A pointer to a Null-terminated ASCII string that is the best
>     > matching
>     > +                 language in SupportedLanguages.
>     > +
>     > +**/
>     > +CHAR8 *
>     > +EFIAPI
>     > +VariableGetBestLanguage (
>     > +  IN CONST CHAR8  *SupportedLanguages,
>     > +  IN UINTN        Iso639Language,
>     > +  ...
>     > +  )
>     > +{
>     > +  VA_LIST      Args;
>     > +  CHAR8        *Language;
>     > +  UINTN        CompareLength;
>     > +  UINTN        LanguageLength;
>     > +  CONST CHAR8  *Supported;
>     > +  CHAR8        *Buffer;
>     > +
>     > +  if (SupportedLanguages == NULL) {
>     > +    return NULL;
>     > +  }
>     > +
>     > +  VA_START (Args, Iso639Language);
>     > +  while ((Language = VA_ARG (Args, CHAR8 *)) != NULL) {
>     > +    //
>     > +    // Default to ISO 639-2 mode
>     > +    //
>     > +    CompareLength  = 3;
>     > +    LanguageLength = MIN (3, AsciiStrLen (Language));
>     > +
>     > +    //
>     > +    // If in RFC 4646 mode, then determine the length of the first RFC 4646
>     > language code in Language
>     > +    //
>     > +    if (Iso639Language == 0) {
>     > +      for (LanguageLength = 0; Language[LanguageLength] != 0 &&
>     > Language[LanguageLength] != ';'; LanguageLength++) {
>     > +      }
>     > +    }
>     > +
>     > +    //
>     > +    // Trim back the length of Language used until it is empty
>     > +    //
>     > +    while (LanguageLength > 0) {
>     > +      //
>     > +      // Loop through all language codes in SupportedLanguages
>     > +      //
>     > +      for (Supported = SupportedLanguages; *Supported != '\0'; Supported +=
>     > CompareLength) {
>     > +        //
>     > +        // In RFC 4646 mode, then Loop through all language codes in
>     > SupportedLanguages
>     > +        //
>     > +        if (Iso639Language == 0) {
>     > +          //
>     > +          // Skip ';' characters in Supported
>     > +          //
>     > +          for ( ; *Supported != '\0' && *Supported == ';'; Supported++) {
>     > +          }
>     > +
>     > +          //
>     > +          // Determine the length of the next language code in Supported
>     > +          //
>     > +          for (CompareLength = 0; Supported[CompareLength] != 0 &&
>     > Supported[CompareLength] != ';'; CompareLength++) {
>     > +          }
>     > +
>     > +          //
>     > +          // If Language is longer than the Supported, then skip to the next
>     > language
>     > +          //
>     > +          if (LanguageLength > CompareLength) {
>     > +            continue;
>     > +          }
>     > +        }
>     > +
>     > +        //
>     > +        // See if the first LanguageLength characters in Supported match
> Language
>     > +        //
>     > +        if (AsciiStrnCmp (Supported, Language, LanguageLength) == 0) {
>     > +          VA_END (Args);
>     > +
>     > +          Buffer                = (Iso639Language != 0) ? mVariableModuleGlobal-
> >Lang :
>     > mVariableModuleGlobal->PlatformLang;
>     > +          Buffer[CompareLength] = '\0';
>     > +          return CopyMem (Buffer, Supported, CompareLength);
>     > +        }
>     > +      }
>     > +
>     > +      if (Iso639Language != 0) {
>     > +        //
>     > +        // If ISO 639 mode, then each language can only be tested once
>     > +        //
>     > +        LanguageLength = 0;
>     > +      } else {
>     > +        //
>     > +        // If RFC 4646 mode, then trim Language from the right to the next '-'
>     > character
>     > +        //
>     > +        for (LanguageLength--; LanguageLength > 0 &&
>     > Language[LanguageLength] != '-'; LanguageLength--) {
>     > +        }
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  VA_END (Args);
>     > +
>     > +  //
>     > +  // No matches were found
>     > +  //
>     > +  return NULL;
>     > +}
>     > +
>     > +/**
>     > +  This function is to check if the remaining variable space is enough to set
>     > +  all Variables from argument list successfully. The purpose of the check
>     > +  is to keep the consistency of the Variables to be in variable storage.
>     > +
>     > +  Note: Variables are assumed to be in same storage.
>     > +  The set sequence of Variables will be same with the sequence of
> VariableEntry
>     > from argument list,
>     > +  so follow the argument sequence to check the Variables.
>     > +
>     > +  @param[in] Attributes         Variable attributes for Variable entries.
>     > +  @param[in] Marker             VA_LIST style variable argument list.
>     > +                                The variable argument list with type
>     > VARIABLE_ENTRY_CONSISTENCY *.
>     > +                                A NULL terminates the list. The VariableSize of
>     > +                                VARIABLE_ENTRY_CONSISTENCY is the variable data size
> as
>     > input.
>     > +                                It will be changed to variable total size as output.
>     > +
>     > +  @retval TRUE                  Have enough variable space to set the Variables
>     > successfully.
>     > +  @retval FALSE                 No enough variable space to set the Variables
>     > successfully.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +EFIAPI
>     > +CheckRemainingSpaceForConsistencyInternal (
>     > +  IN UINT32   Attributes,
>     > +  IN VA_LIST  Marker
>     > +  )
>     > +{
>     > +  EFI_STATUS                  Status;
>     > +  VA_LIST                     Args;
>     > +  VARIABLE_ENTRY_CONSISTENCY  *VariableEntry;
>     > +  UINT64                      MaximumVariableStorageSize;
>     > +  UINT64                      RemainingVariableStorageSize;
>     > +  UINT64                      MaximumVariableSize;
>     > +  UINTN                       TotalNeededSize;
>     > +  UINTN                       OriginalVarSize;
>     > +  VARIABLE_STORE_HEADER       *VariableStoreHeader;
>     > +  VARIABLE_POINTER_TRACK      VariablePtrTrack;
>     > +  VARIABLE_HEADER             *NextVariable;
>     > +  UINTN                       VarNameSize;
>     > +  UINTN                       VarDataSize;
>     > +
>     > +  //
>     > +  // Non-Volatile related.
>     > +  //
>     > +  VariableStoreHeader = mNvVariableCache;
>     > +
>     > +  Status = VariableServiceQueryVariableInfoInternal (
>     > +             Attributes,
>     > +             &MaximumVariableStorageSize,
>     > +             &RemainingVariableStorageSize,
>     > +             &MaximumVariableSize
>     > +             );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  TotalNeededSize = 0;
>     > +  VA_COPY (Args, Marker);
>     > +  VariableEntry = VA_ARG (Args, VARIABLE_ENTRY_CONSISTENCY *);
>     > +  while (VariableEntry != NULL) {
>     > +    //
>     > +    // Calculate variable total size.
>     > +    //
>     > +    VarNameSize                 = StrSize (VariableEntry->Name);
>     > +    VarNameSize                += GET_PAD_SIZE (VarNameSize);
>     > +    VarDataSize                 = VariableEntry->VariableSize;
>     > +    VarDataSize                += GET_PAD_SIZE (VarDataSize);
>     > +    VariableEntry->VariableSize = HEADER_ALIGN (
>     > +                                    GetVariableHeaderSize (
>     > +                                      mVariableModuleGlobal->VariableGlobal.AuthFormat
>     > +                                      ) + VarNameSize + VarDataSize
>     > +                                    );
>     > +
>     > +    TotalNeededSize += VariableEntry->VariableSize;
>     > +    VariableEntry    = VA_ARG (Args, VARIABLE_ENTRY_CONSISTENCY *);
>     > +  }
>     > +
>     > +  VA_END (Args);
>     > +
>     > +  if (RemainingVariableStorageSize >= TotalNeededSize) {
>     > +    //
>     > +    // Already have enough space.
>     > +    //
>     > +    return TRUE;
>     > +  } else if (AtRuntime ()) {
>     > +    //
>     > +    // At runtime, no reclaim.
>     > +    // The original variable space of Variables can't be reused.
>     > +    //
>     > +    return FALSE;
>     > +  }
>     > +
>     > +  VA_COPY (Args, Marker);
>     > +  VariableEntry = VA_ARG (Args, VARIABLE_ENTRY_CONSISTENCY *);
>     > +  while (VariableEntry != NULL) {
>     > +    //
>     > +    // Check if Variable[Index] has been present and get its size.
>     > +    //
>     > +    OriginalVarSize           = 0;
>     > +    VariablePtrTrack.StartPtr = GetStartPointer (VariableStoreHeader);
>     > +    VariablePtrTrack.EndPtr   = GetEndPointer (VariableStoreHeader);
>     > +    Status                    = FindVariableEx (
>     > +                                  VariableEntry->Name,
>     > +                                  VariableEntry->Guid,
>     > +                                  FALSE,
>     > +                                  &VariablePtrTrack,
>     > +                                  mVariableModuleGlobal->VariableGlobal.AuthFormat
>     > +                                  );
>     > +    if (!EFI_ERROR (Status)) {
>     > +      //
>     > +      // Get size of Variable[Index].
>     > +      //
>     > +      NextVariable    = GetNextVariablePtr (VariablePtrTrack.CurrPtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +      OriginalVarSize = (UINTN)NextVariable -
> (UINTN)VariablePtrTrack.CurrPtr;
>     > +      //
>     > +      // Add the original size of Variable[Index] to remaining variable storage
> size.
>     > +      //
>     > +      RemainingVariableStorageSize += OriginalVarSize;
>     > +    }
>     > +
>     > +    if (VariableEntry->VariableSize > RemainingVariableStorageSize) {
>     > +      //
>     > +      // No enough space for Variable[Index].
>     > +      //
>     > +      VA_END (Args);
>     > +      return FALSE;
>     > +    }
>     > +
>     > +    //
>     > +    // Sub the (new) size of Variable[Index] from remaining variable storage
> size.
>     > +    //
>     > +    RemainingVariableStorageSize -= VariableEntry->VariableSize;
>     > +    VariableEntry                 = VA_ARG (Args, VARIABLE_ENTRY_CONSISTENCY
> *);
>     > +  }
>     > +
>     > +  VA_END (Args);
>     > +
>     > +  return TRUE;
>     > +}
>     > +
>     > +/**
>     > +  This function is to check if the remaining variable space is enough to set
>     > +  all Variables from argument list successfully. The purpose of the check
>     > +  is to keep the consistency of the Variables to be in variable storage.
>     > +
>     > +  Note: Variables are assumed to be in same storage.
>     > +  The set sequence of Variables will be same with the sequence of
> VariableEntry
>     > from argument list,
>     > +  so follow the argument sequence to check the Variables.
>     > +
>     > +  @param[in] Attributes         Variable attributes for Variable entries.
>     > +  @param ...                    The variable argument list with type
>     > VARIABLE_ENTRY_CONSISTENCY *.
>     > +                                A NULL terminates the list. The VariableSize of
>     > +                                VARIABLE_ENTRY_CONSISTENCY is the variable data size
> as
>     > input.
>     > +                                It will be changed to variable total size as output.
>     > +
>     > +  @retval TRUE                  Have enough variable space to set the Variables
>     > successfully.
>     > +  @retval FALSE                 No enough variable space to set the Variables
>     > successfully.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +EFIAPI
>     > +CheckRemainingSpaceForConsistency (
>     > +  IN UINT32  Attributes,
>     > +  ...
>     > +  )
>     > +{
>     > +  VA_LIST  Marker;
>     > +  BOOLEAN  Return;
>     > +
>     > +  VA_START (Marker, Attributes);
>     > +
>     > +  Return = CheckRemainingSpaceForConsistencyInternal (Attributes,
> Marker);
>     > +
>     > +  VA_END (Marker);
>     > +
>     > +  return Return;
>     > +}
>     > +
>     > +/**
>     > +  Hook the operations in PlatformLangCodes, LangCodes, PlatformLang
> and
>     > Lang.
>     > +
>     > +  When setting Lang/LangCodes, simultaneously update
>     > PlatformLang/PlatformLangCodes.
>     > +
>     > +  According to UEFI spec, PlatformLangCodes/LangCodes are only set once
> in
>     > firmware initialization,
>     > +  and are read-only. Therefore, in variable driver, only store the original
> value
>     > for other use.
>     > +
>     > +  @param[in] VariableName       Name of variable.
>     > +
>     > +  @param[in] Data               Variable data.
>     > +
>     > +  @param[in] DataSize           Size of data. 0 means delete.
>     > +
>     > +  @retval EFI_SUCCESS           The update operation is successful or ignored.
>     > +  @retval EFI_WRITE_PROTECTED   Update PlatformLangCodes/LangCodes
> at
>     > runtime.
>     > +  @retval EFI_OUT_OF_RESOURCES  No enough variable space to do the
>     > update operation.
>     > +  @retval Others                Other errors happened during the update
> operation.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +AutoUpdateLangVariable (
>     > +  IN  CHAR16  *VariableName,
>     > +  IN  VOID    *Data,
>     > +  IN  UINTN   DataSize
>     > +  )
>     > +{
>     > +  EFI_STATUS                  Status;
>     > +  CHAR8                       *BestPlatformLang;
>     > +  CHAR8                       *BestLang;
>     > +  UINTN                       Index;
>     > +  UINT32                      Attributes;
>     > +  VARIABLE_POINTER_TRACK      Variable;
>     > +  BOOLEAN                     SetLanguageCodes;
>     > +  VARIABLE_ENTRY_CONSISTENCY  VariableEntry[2];
>     > +
>     > +  //
>     > +  // Don't do updates for delete operation
>     > +  //
>     > +  if (DataSize == 0) {
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  SetLanguageCodes = FALSE;
>     > +
>     > +  if (StrCmp (VariableName,
> EFI_PLATFORM_LANG_CODES_VARIABLE_NAME)
>     > == 0) {
>     > +    //
>     > +    // PlatformLangCodes is a volatile variable, so it can not be updated at
>     > runtime.
>     > +    //
>     > +    if (AtRuntime ()) {
>     > +      return EFI_WRITE_PROTECTED;
>     > +    }
>     > +
>     > +    SetLanguageCodes = TRUE;
>     > +
>     > +    //
>     > +    // According to UEFI spec, PlatformLangCodes is only set once in
> firmware
>     > initialization, and is read-only
>     > +    // Therefore, in variable driver, only store the original value for other use.
>     > +    //
>     > +    if (mVariableModuleGlobal->PlatformLangCodes != NULL) {
>     > +      FreePool (mVariableModuleGlobal->PlatformLangCodes);
>     > +    }
>     > +
>     > +    mVariableModuleGlobal->PlatformLangCodes =
> AllocateRuntimeCopyPool
>     > (DataSize, Data);
>     > +    ASSERT (mVariableModuleGlobal->PlatformLangCodes != NULL);
>     > +
>     > +    //
>     > +    // PlatformLang holds a single language from PlatformLangCodes,
>     > +    // so the size of PlatformLangCodes is enough for the PlatformLang.
>     > +    //
>     > +    if (mVariableModuleGlobal->PlatformLang != NULL) {
>     > +      FreePool (mVariableModuleGlobal->PlatformLang);
>     > +    }
>     > +
>     > +    mVariableModuleGlobal->PlatformLang = AllocateRuntimePool
> (DataSize);
>     > +    ASSERT (mVariableModuleGlobal->PlatformLang != NULL);
>     > +  } else if (StrCmp (VariableName, EFI_LANG_CODES_VARIABLE_NAME) ==
> 0) {
>     > +    //
>     > +    // LangCodes is a volatile variable, so it can not be updated at runtime.
>     > +    //
>     > +    if (AtRuntime ()) {
>     > +      return EFI_WRITE_PROTECTED;
>     > +    }
>     > +
>     > +    SetLanguageCodes = TRUE;
>     > +
>     > +    //
>     > +    // According to UEFI spec, LangCodes is only set once in firmware
>     > initialization, and is read-only
>     > +    // Therefore, in variable driver, only store the original value for other use.
>     > +    //
>     > +    if (mVariableModuleGlobal->LangCodes != NULL) {
>     > +      FreePool (mVariableModuleGlobal->LangCodes);
>     > +    }
>     > +
>     > +    mVariableModuleGlobal->LangCodes = AllocateRuntimeCopyPool
> (DataSize,
>     > Data);
>     > +    ASSERT (mVariableModuleGlobal->LangCodes != NULL);
>     > +  }
>     > +
>     > +  if (  SetLanguageCodes
>     > +     && (mVariableModuleGlobal->PlatformLangCodes != NULL)
>     > +     && (mVariableModuleGlobal->LangCodes != NULL))
>     > +  {
>     > +    //
>     > +    // Update Lang if PlatformLang is already set
>     > +    // Update PlatformLang if Lang is already set
>     > +    //
>     > +    Status = FindVariable (EFI_PLATFORM_LANG_VARIABLE_NAME,
>     > &gEfiGlobalVariableGuid, &Variable, &mVariableModuleGlobal-
> >VariableGlobal,
>     > FALSE);
>     > +    if (!EFI_ERROR (Status)) {
>     > +      //
>     > +      // Update Lang
>     > +      //
>     > +      VariableName = EFI_PLATFORM_LANG_VARIABLE_NAME;
>     > +      Data         = GetVariableDataPtr (Variable.CurrPtr,
> mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +      DataSize     = DataSizeOfVariable (Variable.CurrPtr,
> mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +    } else {
>     > +      Status = FindVariable (EFI_LANG_VARIABLE_NAME,
>     > &gEfiGlobalVariableGuid, &Variable, &mVariableModuleGlobal-
> >VariableGlobal,
>     > FALSE);
>     > +      if (!EFI_ERROR (Status)) {
>     > +        //
>     > +        // Update PlatformLang
>     > +        //
>     > +        VariableName = EFI_LANG_VARIABLE_NAME;
>     > +        Data         = GetVariableDataPtr (Variable.CurrPtr,
> mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +        DataSize     = DataSizeOfVariable (Variable.CurrPtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +      } else {
>     > +        //
>     > +        // Neither PlatformLang nor Lang is set, directly return
>     > +        //
>     > +        return EFI_SUCCESS;
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  Status = EFI_SUCCESS;
>     > +
>     > +  //
>     > +  // According to UEFI spec, "Lang" and "PlatformLang" is NV|BS|RT
>     > attributions.
>     > +  //
>     > +  Attributes = EFI_VARIABLE_NON_VOLATILE |
>     > EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_RUNTIME_ACCESS;
>     > +
>     > +  if (StrCmp (VariableName, EFI_PLATFORM_LANG_VARIABLE_NAME) == 0)
> {
>     > +    //
>     > +    // Update Lang when PlatformLangCodes/LangCodes were set.
>     > +    //
>     > +    if ((mVariableModuleGlobal->PlatformLangCodes != NULL) &&
>     > (mVariableModuleGlobal->LangCodes != NULL)) {
>     > +      //
>     > +      // When setting PlatformLang, firstly get most matched language string
>     > from supported language codes.
>     > +      //
>     > +      BestPlatformLang = VariableGetBestLanguage
> (mVariableModuleGlobal-
>     > >PlatformLangCodes, FALSE, Data, NULL);
>     > +      if (BestPlatformLang != NULL) {
>     > +        //
>     > +        // Get the corresponding index in language codes.
>     > +        //
>     > +        Index = GetIndexFromSupportedLangCodes (mVariableModuleGlobal-
>     > >PlatformLangCodes, BestPlatformLang, FALSE);
>     > +
>     > +        //
>     > +        // Get the corresponding ISO639 language tag according to RFC4646
>     > language tag.
>     > +        //
>     > +        BestLang = GetLangFromSupportedLangCodes
> (mVariableModuleGlobal-
>     > >LangCodes, Index, TRUE);
>     > +
>     > +        //
>     > +        // Check the variable space for both Lang and PlatformLang variable.
>     > +        //
>     > +        VariableEntry[0].VariableSize = ISO_639_2_ENTRY_SIZE + 1;
>     > +        VariableEntry[0].Guid         = &gEfiGlobalVariableGuid;
>     > +        VariableEntry[0].Name         = EFI_LANG_VARIABLE_NAME;
>     > +
>     > +        VariableEntry[1].VariableSize = AsciiStrSize (BestPlatformLang);
>     > +        VariableEntry[1].Guid         = &gEfiGlobalVariableGuid;
>     > +        VariableEntry[1].Name         = EFI_PLATFORM_LANG_VARIABLE_NAME;
>     > +        if (!CheckRemainingSpaceForConsistency
>     > (VARIABLE_ATTRIBUTE_NV_BS_RT, &VariableEntry[0], &VariableEntry[1],
>     > NULL)) {
>     > +          //
>     > +          // No enough variable space to set both Lang and PlatformLang
>     > successfully.
>     > +          //
>     > +          Status = EFI_OUT_OF_RESOURCES;
>     > +        } else {
>     > +          //
>     > +          // Successfully convert PlatformLang to Lang, and set the BestLang
> value
>     > into Lang variable simultaneously.
>     > +          //
>     > +          FindVariable (EFI_LANG_VARIABLE_NAME, &gEfiGlobalVariableGuid,
>     > &Variable, &mVariableModuleGlobal->VariableGlobal, FALSE);
>     > +
>     > +          Status = UpdateVariable (
>     > +                     EFI_LANG_VARIABLE_NAME,
>     > +                     &gEfiGlobalVariableGuid,
>     > +                     BestLang,
>     > +                     ISO_639_2_ENTRY_SIZE + 1,
>     > +                     Attributes,
>     > +                     0,
>     > +                     0,
>     > +                     &Variable,
>     > +                     NULL
>     > +                     );
>     > +        }
>     > +
>     > +        DEBUG ((DEBUG_INFO, "Variable Driver Auto Update PlatformLang,
>     > PlatformLang:%a, Lang:%a Status: %r\n", BestPlatformLang, BestLang,
> Status));
>     > +      }
>     > +    }
>     > +  } else if (StrCmp (VariableName, EFI_LANG_VARIABLE_NAME) == 0) {
>     > +    //
>     > +    // Update PlatformLang when PlatformLangCodes/LangCodes were set.
>     > +    //
>     > +    if ((mVariableModuleGlobal->PlatformLangCodes != NULL) &&
>     > (mVariableModuleGlobal->LangCodes != NULL)) {
>     > +      //
>     > +      // When setting Lang, firstly get most matched language string from
>     > supported language codes.
>     > +      //
>     > +      BestLang = VariableGetBestLanguage (mVariableModuleGlobal-
> >LangCodes,
>     > TRUE, Data, NULL);
>     > +      if (BestLang != NULL) {
>     > +        //
>     > +        // Get the corresponding index in language codes.
>     > +        //
>     > +        Index = GetIndexFromSupportedLangCodes (mVariableModuleGlobal-
>     > >LangCodes, BestLang, TRUE);
>     > +
>     > +        //
>     > +        // Get the corresponding RFC4646 language tag according to ISO639
>     > language tag.
>     > +        //
>     > +        BestPlatformLang = GetLangFromSupportedLangCodes
>     > (mVariableModuleGlobal->PlatformLangCodes, Index, FALSE);
>     > +
>     > +        //
>     > +        // Check the variable space for both PlatformLang and Lang variable.
>     > +        //
>     > +        VariableEntry[0].VariableSize = AsciiStrSize (BestPlatformLang);
>     > +        VariableEntry[0].Guid         = &gEfiGlobalVariableGuid;
>     > +        VariableEntry[0].Name         = EFI_PLATFORM_LANG_VARIABLE_NAME;
>     > +
>     > +        VariableEntry[1].VariableSize = ISO_639_2_ENTRY_SIZE + 1;
>     > +        VariableEntry[1].Guid         = &gEfiGlobalVariableGuid;
>     > +        VariableEntry[1].Name         = EFI_LANG_VARIABLE_NAME;
>     > +        if (!CheckRemainingSpaceForConsistency
>     > (VARIABLE_ATTRIBUTE_NV_BS_RT, &VariableEntry[0], &VariableEntry[1],
>     > NULL)) {
>     > +          //
>     > +          // No enough variable space to set both PlatformLang and Lang
>     > successfully.
>     > +          //
>     > +          Status = EFI_OUT_OF_RESOURCES;
>     > +        } else {
>     > +          //
>     > +          // Successfully convert Lang to PlatformLang, and set the
>     > BestPlatformLang value into PlatformLang variable simultaneously.
>     > +          //
>     > +          FindVariable (EFI_PLATFORM_LANG_VARIABLE_NAME,
>     > &gEfiGlobalVariableGuid, &Variable, &mVariableModuleGlobal-
> >VariableGlobal,
>     > FALSE);
>     > +
>     > +          Status = UpdateVariable (
>     > +                     EFI_PLATFORM_LANG_VARIABLE_NAME,
>     > +                     &gEfiGlobalVariableGuid,
>     > +                     BestPlatformLang,
>     > +                     AsciiStrSize (BestPlatformLang),
>     > +                     Attributes,
>     > +                     0,
>     > +                     0,
>     > +                     &Variable,
>     > +                     NULL
>     > +                     );
>     > +        }
>     > +
>     > +        DEBUG ((DEBUG_INFO, "Variable Driver Auto Update Lang, Lang:%a,
>     > PlatformLang:%a Status: %r\n", BestLang, BestPlatformLang, Status));
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  if (SetLanguageCodes) {
>     > +    //
>     > +    // Continue to set PlatformLangCodes or LangCodes.
>     > +    //
>     > +    return EFI_SUCCESS;
>     > +  } else {
>     > +    return Status;
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Check if there's enough free space in storage to write the new variable.
>     > +
>     > +  @param[in] NewVariable        Pointer to buffer of new variable.
>     > +  @param[in] VariableSize       Size of new variable.
>     > +  @param[in] VariableName       Name of variable.
>     > +  @param[in] VendorGuid         Guid of variable.
>     > +  @param[in] Attributes         Attributes of the variable.
>     > +  @param[in] VolatileFlag       Volatile/non-volatile variable indicator.
>     > +
>     > +  @retval EFI_SUCCESS           Enough free space on variable storage.
>     > +  @retval EFI_BUFFER_TOO_SMALL  There's not enough continuous free
> space.
>     > +  @retval EFI_OUT_OF_RESOURCES  There's not enough free space in total.
>     > +**/
>     > +EFI_STATUS
>     > +CheckVariableStoreSpace (
>     > +  IN  VARIABLE_HEADER  *NewVariable,
>     > +  IN  UINTN            VariableSize,
>     > +  IN  CHAR16           *VariableName,
>     > +  IN  EFI_GUID         *VendorGuid,
>     > +  IN  UINT32           Attributes,
>     > +  IN  BOOLEAN          VolatileFlag
>     > +  )
>     > +{
>     > +  BOOLEAN                IsCommonVariable;
>     > +  BOOLEAN                IsCommonUserVariable;
>     > +  UINTN                  CommonVariableTotalSize;
>     > +  UINTN                  CommonUserVariableTotalSize;
>     > +  UINTN                  HwErrVariableTotalSize;
>     > +  VARIABLE_STORE_HEADER  *VarStore;
>     > +
>     > +  if ((NewVariable == NULL) || (VariableSize == 0)) {
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  if (VolatileFlag) {
>     > +    VarStore = (VARIABLE_STORE_HEADER *)(UINTN)
>     > +               mVariableModuleGlobal->VariableGlobal.VolatileVariableBase;
>     > +    if ((UINT32)(VariableSize + mVariableModuleGlobal-
>     > >VolatileLastVariableOffset)
>     > +        > VarStore->Size)
>     > +    {
>     > +      return EFI_BUFFER_TOO_SMALL;
>     > +    }
>     > +  } else {
>     > +    if ((Attributes & EFI_VARIABLE_HARDWARE_ERROR_RECORD) == 0) {
>     > +      IsCommonVariable     = TRUE;
>     > +      IsCommonUserVariable = IsUserVariable (NewVariable);
>     > +    } else {
>     > +      IsCommonVariable     = FALSE;
>     > +      IsCommonUserVariable = FALSE;
>     > +    }
>     > +
>     > +    CommonVariableTotalSize     = mVariableModuleGlobal-
>     > >CommonVariableTotalSize + VariableSize;
>     > +    CommonUserVariableTotalSize = mVariableModuleGlobal-
>     > >CommonUserVariableTotalSize + VariableSize;
>     > +    HwErrVariableTotalSize      = mVariableModuleGlobal-
>     > >HwErrVariableTotalSize + VariableSize;
>     > +
>     > +    if (  (((Attributes & EFI_VARIABLE_HARDWARE_ERROR_RECORD) != 0) &&
>     > +           (HwErrVariableTotalSize > PcdGet32 (PcdHwErrStorageSize)))
>     > +       || (IsCommonVariable && (CommonVariableTotalSize >
>     > mVariableModuleGlobal->CommonVariableSpace))
>     > +       || (IsCommonVariable &&
>     > +           AtRuntime () &&
>     > +           (CommonVariableTotalSize > mVariableModuleGlobal-
>     > >CommonRuntimeVariableSpace))
>     > +       || (IsCommonUserVariable &&
>     > +           (CommonUserVariableTotalSize > mVariableModuleGlobal-
>     > >CommonMaxUserVariableSpace)))
>     > +    {
>     > +      if (AtRuntime ()) {
>     > +        if (IsCommonUserVariable &&
>     > +            ((VariableSize + mVariableModuleGlobal-
>     > >CommonUserVariableTotalSize)
>     > +             > mVariableModuleGlobal->CommonMaxUserVariableSpace))
>     > +        {
>     > +          RecordVarErrorFlag (
>     > +            VAR_ERROR_FLAG_USER_ERROR,
>     > +            VariableName,
>     > +            VendorGuid,
>     > +            Attributes,
>     > +            VariableSize
>     > +            );
>     > +        }
>     > +
>     > +        if (IsCommonVariable &&
>     > +            ((VariableSize + mVariableModuleGlobal->CommonVariableTotalSize)
>     > +             > mVariableModuleGlobal->CommonRuntimeVariableSpace))
>     > +        {
>     > +          RecordVarErrorFlag (
>     > +            VAR_ERROR_FLAG_SYSTEM_ERROR,
>     > +            VariableName,
>     > +            VendorGuid,
>     > +            Attributes,
>     > +            VariableSize
>     > +            );
>     > +        }
>     > +
>     > +        return EFI_OUT_OF_RESOURCES;
>     > +      }
>     > +
>     > +      return EFI_BUFFER_TOO_SMALL;
>     > +    }
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Fill specific data of auth-variable in buffer.
>     > +
>     > +  @param[in,out]  NewVariable        Pointer to buffer of new variable.
>     > +  @param[in]      OldVariable        Pointer to buffer of old copy of the
> variable.
>     > +  @param[in]      Attributes         Attributes of the variable.
>     > +  @param[in]      KeyIndex           Index of associated public key.
>     > +  @param[in]      MonotonicCount     Value of associated monotonic count.
>     > +  @param[in]      TimeStamp          Value of associated TimeStamp.
>     > +
>     > +**/
>     > +VOID
>     > +SetVariableAuthData (
>     > +  IN  OUT AUTHENTICATED_VARIABLE_HEADER  *NewVariable,
>     > +  IN      AUTHENTICATED_VARIABLE_HEADER  *OldVariable,
>     > +  IN      UINT32                         Attributes,
>     > +  IN      UINT32                         KeyIndex,
>     > +  IN      UINT64                         MonotonicCount,
>     > +  IN      EFI_TIME                       *TimeStamp
>     > +  )
>     > +{
>     > +  NewVariable->PubKeyIndex    = KeyIndex;
>     > +  NewVariable->MonotonicCount = MonotonicCount;
>     > +
>     > +  if ((TimeStamp != NULL) &&
>     > +      ((Attributes &
>     > EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS) != 0))
>     > +  {
>     > +    //
>     > +    // In the case when the EFI_VARIABLE_APPEND_WRITE attribute is set,
> only
>     > +    // when the new TimeStamp value is later than the current timestamp
>     > associated
>     > +    // with the variable, we need associate the new timestamp with the
> updated
>     > value.
>     > +    //
>     > +    if (((Attributes & EFI_VARIABLE_APPEND_WRITE) != 0) &&
>     > +        (OldVariable != NULL) &&
>     > +        !VariableCompareTimeStampInternal (&OldVariable->TimeStamp,
>     > TimeStamp))
>     > +    {
>     > +      TimeStamp = &OldVariable->TimeStamp;
>     > +    }
>     > +
>     > +    CopyMem (&NewVariable->TimeStamp, TimeStamp, sizeof (EFI_TIME));
>     > +  } else {
>     > +    ZeroMem (&NewVariable->TimeStamp, sizeof (EFI_TIME));
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Fill the variable data buffer according to variable format on storage.
>     > +
>     > +  @param[in,out]  NewVariable        Pointer to buffer of new variable.
>     > +  @param[in]      OldVariable        Pointer to buffer of old copy of the
> variable.
>     > +  @param[in]      VariableName       Name of variable.
>     > +  @param[in]      VendorGuid         Guid of variable.
>     > +  @param[in]      Data               Variable data.
>     > +  @param[in]      DataSize           Size of data. 0 means delete.
>     > +  @param[in]      Attributes         Attributes of the variable.
>     > +  @param[in]      KeyIndex           Index of associated public key.
>     > +  @param[in]      MonotonicCount     Value of associated monotonic count.
>     > +  @param[in]      TimeStamp          Value of associated TimeStamp.
>     > +
>     > +  @retval Size of the new variable.
>     > +
>     > +**/
>     > +UINTN
>     > +SetVariableData (
>     > +  IN  OUT VARIABLE_HEADER  *NewVariable,
>     > +  IN      VARIABLE_HEADER  *OldVariable,
>     > +  IN      CHAR16           *VariableName,
>     > +  IN      EFI_GUID         *VendorGuid,
>     > +  IN      VOID             *Data,
>     > +  IN      UINTN            DataSize,
>     > +  IN      UINT32           Attributes,
>     > +  IN      UINT32           KeyIndex,
>     > +  IN      UINT64           MonotonicCount,
>     > +  IN      EFI_TIME         *TimeStamp
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  BOOLEAN     AuthFormat;
>     > +  UINT8       *DataPtr;
>     > +  UINTN       NameSize;
>     > +  UINTN       OldDataSize;
>     > +
>     > +  AuthFormat = mVariableModuleGlobal->VariableGlobal.AuthFormat;
>     > +
>     > +  if (AuthFormat) {
>     > +    SetVariableAuthData (
>     > +      (AUTHENTICATED_VARIABLE_HEADER *)NewVariable,
>     > +      (AUTHENTICATED_VARIABLE_HEADER *)OldVariable,
>     > +      Attributes,
>     > +      KeyIndex,
>     > +      MonotonicCount,
>     > +      TimeStamp
>     > +      );
>     > +  }
>     > +
>     > +  NewVariable->StartId    = VARIABLE_DATA;
>     > +  NewVariable->State      = VAR_ADDED;
>     > +  NewVariable->Reserved   = 0;
>     > +  NewVariable->Attributes = Attributes & (~EFI_VARIABLE_APPEND_WRITE);
>     > +
>     > +  CopyMem (
>     > +    GetVendorGuidPtr (NewVariable, AuthFormat),
>     > +    VendorGuid,
>     > +    sizeof (EFI_GUID)
>     > +    );
>     > +
>     > +  NameSize = StrSize (VariableName);
>     > +  SetNameSizeOfVariable (NewVariable, NameSize, AuthFormat);
>     > +  CopyMem (
>     > +    (UINT8 *)GetVariableNamePtr (NewVariable, AuthFormat),
>     > +    VariableName,
>     > +    NameSize
>     > +    );
>     > +
>     > +  //
>     > +  // Set data size first otherwise we can't get correct data pointer in the
>     > +  // buffer of new variable.
>     > +  //
>     > +  SetDataSizeOfVariable (NewVariable, DataSize, AuthFormat);
>     > +  DataPtr = GetVariableDataPtr (NewVariable, AuthFormat);
>     > +  if (((Attributes & EFI_VARIABLE_APPEND_WRITE) != 0) &&
>     > +      (OldVariable != NULL) &&
>     > +      ((OldVariable->State == VAR_ADDED) ||
>     > +       (OldVariable->State == (VAR_ADDED &
> VAR_IN_DELETED_TRANSITION))))
>     > +  {
>     > +    //
>     > +    // Get old data, which might be encrypted.
>     > +    //
>     > +    OldDataSize = mVariableModuleGlobal->ScratchBufferSize
>     > +                  - ((UINTN)DataPtr - (UINTN)NewVariable);
>     > +    Status = ProtectedVariableLibGetByBuffer (
>     > +               OldVariable,
>     > +               DataPtr,
>     > +               (UINT32 *)&OldDataSize,
>     > +               AuthFormat
>     > +               );
>     > +    if (Status == EFI_UNSUPPORTED) {
>     > +      OldDataSize = DataSizeOfVariable (OldVariable, AuthFormat);
>     > +      CopyMem (DataPtr, GetVariableDataPtr (OldVariable, AuthFormat),
>     > OldDataSize);
>     > +    } else if (EFI_ERROR (Status)) {
>     > +      ASSERT_EFI_ERROR (Status);
>     > +      return 0;
>     > +    }
>     > +
>     > +    DataPtr += OldDataSize;
>     > +    //
>     > +    // Update data size.
>     > +    //
>     > +    SetDataSizeOfVariable (NewVariable, DataSize + OldDataSize,
> AuthFormat);
>     > +  }
>     > +
>     > +  CopyMem (DataPtr, Data, DataSize);
>     > +
>     > +  //
>     > +  // The actual size of the variable stored in storage should include padding.
>     > +  //
>     > +  return ((UINTN)GetNextVariablePtr (NewVariable, AuthFormat) -
>     > (UINTN)NewVariable);
>     > +}
>     > +
>     > +/**
>     > +  Update state of given variable as well as its cached copy.
>     > +
>     > +  @param[in,out]  Variable        Pointer to the buffer of the variable.
>     > +  @param[in,out]  CacheVariable   Cache copy of the variable.
>     > +  @param[in]      NewState        New state value.
>     > +  @param[in]      Volatile        Volatile/non-volatile variable indicator.
>     > +
>     > +  @retval EFI_SUCCESS     Variable state was updated successfully.
>     > +  @retval Others          Failed to update the variable state.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +UpdateVariableState (
>     > +  IN  OUT VARIABLE_HEADER  *Variable,
>     > +  IN  OUT VARIABLE_HEADER  *CacheVariable,
>     > +  IN      UINT8            NewState,
>     > +  IN      BOOLEAN          Volatile
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  Status = UpdateVariableStore (
>     > +             &mVariableModuleGlobal->VariableGlobal,
>     > +             Volatile,
>     > +             FALSE,
>     > +             mVariableModuleGlobal->FvbInstance,
>     > +             (UINTN)&Variable->State,
>     > +             sizeof (NewState),
>     > +             &NewState
>     > +             );
>     > +  if (!EFI_ERROR (Status) && (CacheVariable != NULL)) {
>     > +    CacheVariable->State = NewState;
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Flush variable data to variable storage.
>     > +
>     > +  @param[in]      VarStoreBase    Base address of variable storage.
>     > +  @param[in,out]  Offset          Offset to write the variable from.
>     > +                                  Offset from where next variable can be written.
>     > +  @param[in,out]  NewVariable     Pointer to the buffer of new variable.
>     > +  @param[in]      VariableSize    Size of new variable.
>     > +  @param[in]      Volatile        Volatile/non-volatile variable indicator.
>     > +  @param[in]      AuthFormat      Auth-variable indicator.
>     > +
>     > +  @retval EFI_SUCCESS     Variable(s) were written successfully.
>     > +  @retval Others          Failed to write the variable data.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +WriteVariable (
>     > +  IN  EFI_PHYSICAL_ADDRESS  VarStoreBase,
>     > +  IN  OUT UINTN             *Offset,
>     > +  IN  OUT VARIABLE_HEADER   **NewVariable,
>     > +  IN      UINT32            VariableSize,
>     > +  IN      BOOLEAN           Volatile,
>     > +  IN      BOOLEAN           AuthFormat
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  struct {
>     > +    UINTN     Offset;
>     > +    UINT8     *Buffer;
>     > +    UINT32    Size;
>     > +    UINT8     State;
>     > +  }                   WriteSteps[4];
>     > +  UINTN            Index;
>     > +  UINTN            Steps;
>     > +  VARIABLE_HEADER  *Variable;
>     > +
>     > +  Variable = *NewVariable;
>     > +  if (Volatile) {
>     > +    //
>     > +    // For non-volatile variable, one step only :
>     > +    //
>     > +    WriteSteps[0].Offset = *Offset;
>     > +    WriteSteps[0].Buffer = (UINT8 *)Variable;
>     > +    WriteSteps[0].Size   = VariableSize;
>     > +
>     > +    Steps = 1;
>     > +  } else {
>     > +    //
>     > +    // Four steps for non-volatile variable:
>     > +    //
>     > +    // 1. Write variable header
>     > +    // 2. Set variable state to header valid
>     > +    // 3. Write variable name and data
>     > +    // 4. Set variable state to valid
>     > +    //
>     > +    Variable->State      = 0xff;
>     > +    WriteSteps[0].Offset = *Offset;
>     > +    WriteSteps[0].Buffer = (UINT8 *)Variable;
>     > +    WriteSteps[0].Size   = (UINT32)GetVariableHeaderSize (AuthFormat);
>     > +
>     > +    WriteSteps[1].State  = VAR_HEADER_VALID_ONLY;
>     > +    WriteSteps[1].Offset = *Offset + OFFSET_OF (VARIABLE_HEADER, State);
>     > +    WriteSteps[1].Buffer = &WriteSteps[1].State;
>     > +    WriteSteps[1].Size   = sizeof (Variable->State);
>     > +
>     > +    WriteSteps[2].Offset = *Offset + GetVariableHeaderSize (AuthFormat);
>     > +    WriteSteps[2].Buffer = (UINT8 *)Variable + GetVariableHeaderSize
>     > (AuthFormat);
>     > +    WriteSteps[2].Size   = VariableSize - (UINT32)GetVariableHeaderSize
>     > (AuthFormat);
>     > +
>     > +    WriteSteps[3].State  = VAR_ADDED;
>     > +    WriteSteps[3].Offset = *Offset + OFFSET_OF (VARIABLE_HEADER, State);
>     > +    WriteSteps[3].Buffer = &WriteSteps[3].State;
>     > +    WriteSteps[3].Size   = sizeof (Variable->State);
>     > +
>     > +    Steps = ARRAY_SIZE (WriteSteps);
>     > +  }
>     > +
>     > +  for (Index = 0; Index < Steps; ++Index) {
>     > +    Status = UpdateVariableStore (
>     > +               &mVariableModuleGlobal->VariableGlobal,
>     > +               Volatile,
>     > +               TRUE,
>     > +               mVariableModuleGlobal->FvbInstance,
>     > +               WriteSteps[Index].Offset,
>     > +               WriteSteps[Index].Size,
>     > +               WriteSteps[Index].Buffer
>     > +               );
>     > +    if (EFI_ERROR (Status)) {
>     > +      ASSERT_EFI_ERROR (Status);
>     > +      return Status;
>     > +    }
>     > +  }
>     > +
>     > +  Variable->State = VAR_ADDED;
>     > +  if (!Volatile) {
>     > +    CopyMem ((UINT8 *)mNvVariableCache + *Offset, Variable,
> VariableSize);
>     > +  }
>     > +
>     > +  *NewVariable = (VARIABLE_HEADER *)((UINTN)VarStoreBase + *Offset);
>     > +  *Offset     += HEADER_ALIGN (VariableSize);
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Rebase the given variable pointer(s) to the equivalent one in given variable
>     > +  storage via VarStore.
>     > +
>     > +  @param[in]      InVarTrackPtr     Pointer to current variable in cache.
>     > +  @param[out]     OutVarTrackPtr    Pointer to rebased variable against
> VarStore.
>     > +  @param[in]      VarStore          Start of variable storage to rebase against.
>     > +  @param[in]      VariableName      Name of variable.
>     > +  @param[in]      VendorGuid        Guid of variable.
>     > +  @param[in]      ByOffset          If TRUE, don't do variable search in VarStore.
>     > +
>     > +  @retval EFI_SUCCESS           Variable(s) were deleted successfully.
>     > +  @retval EFI_INVALID_PARAMETER Invalid parameters passed.
>     > +  @retval EFI_NOT_FOUND         Given variable (VariableName &
> VendorGuid)
>     > was
>     > +                                not found in VarStore, if ByOffset is FALSE.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +RebaseVariablePtr (
>     > +  IN      VARIABLE_POINTER_TRACK  *InVarTrackPtr,
>     > +  OUT VARIABLE_POINTER_TRACK      *OutVarTrackPtr,
>     > +  IN      VARIABLE_STORE_HEADER   *VarStore,
>     > +  IN      CHAR16                  *VariableName,
>     > +  IN      EFI_GUID                *VendorGuid,
>     > +  IN      BOOLEAN                 ByOffset
>     > +  )
>     > +{
>     > +  EFI_STATUS       Status;
>     > +  BOOLEAN          AuthFormat;
>     > +  VARIABLE_HEADER  *NewStart;
>     > +
>     > +  if ((InVarTrackPtr == NULL) || (OutVarTrackPtr == NULL) || (VarStore ==
>     > NULL)) {
>     > +    ASSERT (InVarTrackPtr != NULL);
>     > +    ASSERT (OutVarTrackPtr != NULL);
>     > +    ASSERT (VarStore != NULL);
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AuthFormat = mVariableModuleGlobal->VariableGlobal.AuthFormat;
>     > +
>     > +  if (  (InVarTrackPtr->CurrPtr == NULL)
>     > +     || (InVarTrackPtr->StartPtr == GetStartPointer (VarStore)))
>     > +  {
>     > +    CopyMem (OutVarTrackPtr, InVarTrackPtr, sizeof
>     > (VARIABLE_POINTER_TRACK));
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  NewStart = GetStartPointer (VarStore);
>     > +  if (ByOffset) {
>     > +    OutVarTrackPtr->CurrPtr = (VARIABLE_HEADER *)
>     > +                              ((UINTN)NewStart + ((UINTN)InVarTrackPtr->CurrPtr -
>     > +                                                  (UINTN)InVarTrackPtr->StartPtr));
>     > +
>     > +    if (InVarTrackPtr->InDeletedTransitionPtr != NULL) {
>     > +      OutVarTrackPtr->InDeletedTransitionPtr =
>     > +        (VARIABLE_HEADER *)((UINTN)NewStart +
>     > +                            ((UINTN)InVarTrackPtr->InDeletedTransitionPtr -
>     > +                             (UINTN)InVarTrackPtr->StartPtr));
>     > +    } else {
>     > +      OutVarTrackPtr->InDeletedTransitionPtr = NULL;
>     > +    }
>     > +
>     > +    OutVarTrackPtr->StartPtr = NewStart;
>     > +    OutVarTrackPtr->EndPtr   = GetEndPointer (VarStore);
>     > +  } else {
>     > +    OutVarTrackPtr->StartPtr = NewStart;
>     > +    OutVarTrackPtr->EndPtr   = GetEndPointer (VarStore);
>     > +
>     > +    Status = FindVariableEx (VariableName, VendorGuid, FALSE,
> OutVarTrackPtr,
>     > AuthFormat);
>     > +    if ((OutVarTrackPtr->CurrPtr == NULL) || EFI_ERROR (Status)) {
>     > +      return EFI_NOT_FOUND;
>     > +    }
>     > +  }
>     > +
>     > +  if (  (VarStore == mNvVariableCache)
>     > +     || ((UINTN)VarStore == (UINTN)mVariableModuleGlobal-
>     > >VariableGlobal.NonVolatileVariableBase))
>     > +  {
>     > +    OutVarTrackPtr->Volatile = FALSE;
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Check if the given variable is from HOB.
>     > +
>     > +  @param[in] CacheVariable      Pointer to current variable in cache.
>     > +
>     > +  @retval TRUE    The variable is from HOB.
>     > +  @retval FALSE   The variable is NOT from HOB.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +IsHobVariable (
>     > +  IN VARIABLE_POINTER_TRACK  *CacheVariable
>     > +  )
>     > +{
>     > +  VARIABLE_STORE_HEADER  *HobVarStore;
>     > +
>     > +  HobVarStore = (VARIABLE_STORE_HEADER *)(UINTN)
>     > +                mVariableModuleGlobal->VariableGlobal.HobVariableBase;
>     > +  return (CacheVariable->CurrPtr != NULL &&
>     > +          HobVarStore != NULL &&
>     > +          CacheVariable->StartPtr == GetStartPointer (HobVarStore));
>     > +}
>     > +
>     > +/**
>     > +  Get temporary buffer for a new variable data.
>     > +
>     > +  @retval Pointer to the buffer address.
>     > +
>     > +**/
>     > +VARIABLE_HEADER *
>     > +GetNewVariableBuffer (
>     > +  VOID
>     > +  )
>     > +{
>     > +  VARIABLE_HEADER        *NewVariable;
>     > +  VARIABLE_STORE_HEADER  *VarStore;
>     > +
>     > +  //
>     > +  // Tricky part: Use scratch data area at the end of volatile variable store
>     > +  // as a temporary storage.
>     > +  //
>     > +  VarStore = (VARIABLE_STORE_HEADER *)(UINTN)
>     > +             mVariableModuleGlobal->VariableGlobal.VolatileVariableBase;
>     > +  NewVariable = GetEndPointer (VarStore);
>     > +
>     > +  SetMem (NewVariable, mVariableModuleGlobal->ScratchBufferSize, 0xff);
>     > +
>     > +  return NewVariable;
>     > +}
>     > +
>     > +/**
>     > +  Delete old copies of variable completely.
>     > +
>     > +  @param[in]      VariableName       Name of variable.
>     > +  @param[in]      VendorGuid         Guid of variable.
>     > +  @param[in]      Variable           Pointer to current variable on storage.
>     > +  @param[in,out]  CacheVariable      Pointer to current variable in cache.
>     > +  @param[in]      VolatileFlag       Auth-variable indicator.
>     > +
>     > +  @retval EFI_SUCCESS           Variable(s) were deleted successfully.
>     > +  @retval Others                Failed to update variable state.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +DeleteVariable (
>     > +  IN      CHAR16                  *VariableName,
>     > +  IN      EFI_GUID                *VendorGuid,
>     > +  IN      VARIABLE_POINTER_TRACK  *Variable,
>     > +  IN  OUT VARIABLE_POINTER_TRACK  *CacheVariable,
>     > +  IN      BOOLEAN                 VolatileFlag
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  if (Variable->InDeletedTransitionPtr != NULL) {
>     > +    ASSERT (CacheVariable->InDeletedTransitionPtr != NULL);
>     > +    //
>     > +    // Both ADDED and IN_DELETED_TRANSITION variable are present,
>     > +    // set IN_DELETED_TRANSITION one to DELETED state first.
>     > +    //
>     > +    Status = UpdateVariableState (
>     > +               Variable->InDeletedTransitionPtr,
>     > +               CacheVariable->InDeletedTransitionPtr,
>     > +               CacheVariable->InDeletedTransitionPtr->State & VAR_DELETED,
>     > +               VolatileFlag
>     > +               );
>     > +    if (EFI_ERROR (Status)) {
>     > +      return Status;
>     > +    }
>     > +  }
>     > +
>     > +  ASSERT (CacheVariable->CurrPtr != NULL);
>     > +  Status = UpdateVariableState (
>     > +             Variable->CurrPtr,
>     > +             CacheVariable->CurrPtr,
>     > +             CacheVariable->CurrPtr->State & VAR_DELETED,
>     > +             VolatileFlag
>     > +             );
>     > +
>     > +  if (!EFI_ERROR (Status)) {
>     > +    UpdateVariableInfo (
>     > +      VariableName,
>     > +      VendorGuid,
>     > +      Variable->Volatile,
>     > +      FALSE,
>     > +      FALSE,
>     > +      TRUE,
>     > +      FALSE,
>     > +      &gVariableInfo
>     > +      );
>     > +    if (!Variable->Volatile) {
>     > +      FlushHobVariableToFlash (VariableName, VendorGuid);
>     > +    }
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Check if it's the right time to update a variable.
>     > +
>     > +  @param[in] Attributes         Attributes of a variable.
>     > +
>     > +  @retval TRUE    It's ready for variable update.
>     > +  @retval FALSE   It's NOT ready for variable update.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +ReadyForUpdate (
>     > +  IN UINT32  Attributes
>     > +  )
>     > +{
>     > +  if ((mVariableModuleGlobal->FvbInstance == NULL) &&
>     > +      !mVariableModuleGlobal->VariableGlobal.EmuNvMode)
>     > +  {
>     > +    //
>     > +    // The FVB protocol is not ready, so the
>     > EFI_VARIABLE_WRITE_ARCH_PROTOCOL
>     > +    // is not installed.
>     > +    //
>     > +    if ((Attributes & EFI_VARIABLE_NON_VOLATILE) != 0) {
>     > +      //
>     > +      // Trying to update NV variable prior to the installation of
>     > +      // EFI_VARIABLE_WRITE_ARCH_PROTOCOL
>     > +      //
>     > +      DEBUG ((
>     > +        DEBUG_ERROR,
>     > +        "Update NV variable before EFI_VARIABLE_WRITE_ARCH_PROTOCOL
>     > ready - %r\n",
>     > +        EFI_NOT_AVAILABLE_YET
>     > +        ));
>     > +      return FALSE;
>     > +    } else if ((Attributes & VARIABLE_ATTRIBUTE_AT_AW) != 0) {
>     > +      //
>     > +      // Trying to update volatile authenticated variable prior to the
>     > +      // installation of EFI_VARIABLE_WRITE_ARCH_PROTOCOL. The
>     > authenticated
>     > +      // variable perhaps is not initialized, just return here.
>     > +      //
>     > +      DEBUG ((
>     > +        DEBUG_ERROR,
>     > +        "Update AUTH variable before
> EFI_VARIABLE_WRITE_ARCH_PROTOCOL
>     > ready - %r\n",
>     > +        EFI_NOT_AVAILABLE_YET
>     > +        ));
>     > +      return FALSE;
>     > +    }
>     > +  }
>     > +
>     > +  return TRUE;
>     > +}
>     > +
>     > +/**
>     > +  Check parameters associated with the variable to update.
>     > +
>     > +  @param[in] Variable           Pointer to current variable on storage.
>     > +  @param[in] CacheVariable      Pointer to current variable in cache.
>     > +  @param[in] VariableName       Name of variable.
>     > +  @param[in] VendorGuid         Guid of variable.
>     > +  @param[in] Data               Variable data.
>     > +  @param[in] DataSize           Size of data. 0 means delete.
>     > +  @param[in] Attributes         Attributes of the variable.
>     > +  @param[in] KeyIndex           Index of associated public key.
>     > +  @param[in] MonotonicCount     Value of associated monotonic count.
>     > +  @param[in] TimeStamp          Value of associated TimeStamp.
>     > +
>     > +  @retval EFI_SUCCESS           The variable is ok to be updated.
>     > +  @retval EFI_ALREADY_STARTED   No need to update the variable.
>     > +  @retval EFI_WRITE_PROTECTED   The variable cannot be updated.
>     > +  @retval EFI_INVALID_PARAMETER The variable attributes are not valid.
>     > +  @retval EFI_NOT_FOUND         Trying to delete non-existing variable.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +ValidateVariableParameters (
>     > +  IN VARIABLE_POINTER_TRACK  *Variable,
>     > +  IN VARIABLE_POINTER_TRACK  *CacheVariable,
>     > +  IN CHAR16                  *VariableName,
>     > +  IN EFI_GUID                *VendorGuid,
>     > +  IN VOID                    *Data,
>     > +  IN UINTN                   DataSize,
>     > +  IN UINT32                  Attributes,
>     > +  IN UINT32                  KeyIndex,
>     > +  IN UINT64                  MonotonicCount,
>     > +  IN EFI_TIME                *TimeStamp
>     > +  )
>     > +{
>     > +  BOOLEAN  AuthFlag;
>     > +
>     > +  AuthFlag = mVariableModuleGlobal->VariableGlobal.AuthFormat;
>     > +
>     > +  if ((DataSize == 0) && ((Attributes & EFI_VARIABLE_APPEND_WRITE) != 0))
> {
>     > +    return EFI_ALREADY_STARTED;
>     > +  }
>     > +
>     > +  if (Variable->CurrPtr != NULL) {
>     > +    //
>     > +    // Update/Delete existing variable.
>     > +    //
>     > +    if (AtRuntime ()) {
>     > +      //
>     > +      // If AtRuntime and the variable is Volatile and Runtime Access,
>     > +      // the volatile is ReadOnly, and SetVariable should be aborted and
>     > +      // return EFI_WRITE_PROTECTED.
>     > +      //
>     > +      if (Variable->Volatile) {
>     > +        return EFI_WRITE_PROTECTED;
>     > +      }
>     > +
>     > +      //
>     > +      // Only variable that have NV attributes can be updated/deleted in
> Runtime.
>     > +      //
>     > +      if ((CacheVariable->CurrPtr->Attributes &
> EFI_VARIABLE_NON_VOLATILE)
>     > == 0) {
>     > +        return EFI_INVALID_PARAMETER;
>     > +      }
>     > +
>     > +      //
>     > +      // Only variable that have RT attributes can be updated/deleted in
> Runtime.
>     > +      //
>     > +      if ((CacheVariable->CurrPtr->Attributes &
> EFI_VARIABLE_RUNTIME_ACCESS)
>     > == 0) {
>     > +        return EFI_INVALID_PARAMETER;
>     > +      }
>     > +    }
>     > +
>     > +    //
>     > +    // Variable content unchanged and no need to update timestamp, just
> return.
>     > +    //
>     > +    if (  ((Attributes & EFI_VARIABLE_APPEND_WRITE) == 0)
>     > +       && (TimeStamp == NULL)
>     > +       && (DataSizeOfVariable (CacheVariable->CurrPtr, AuthFlag) == DataSize)
>     > +       && (CompareMem (Data, GetVariableDataPtr (CacheVariable->CurrPtr,
>     > AuthFlag), DataSize) == 0))
>     > +    {
>     > +      UpdateVariableInfo (
>     > +        VariableName,
>     > +        VendorGuid,
>     > +        Variable->Volatile,
>     > +        FALSE,
>     > +        TRUE,
>     > +        FALSE,
>     > +        FALSE,
>     > +        &gVariableInfo
>     > +        );
>     > +      return EFI_ALREADY_STARTED;
>     > +    }
>     > +  } else {
>     > +    //
>     > +    // Create a new variable.
>     > +    //
>     > +
>     > +    //
>     > +    // Make sure we are trying to create a new variable. You cannot delete a
>     > new
>     > +    // variable.
>     > +    //
>     > +    if ((DataSize == 0) ||
>     > +        ((Attributes &
>     > (EFI_VARIABLE_RUNTIME_ACCESS|EFI_VARIABLE_BOOTSERVICE_ACCESS))
> ==
>     > 0))
>     > +    {
>     > +      return EFI_NOT_FOUND;
>     > +    }
>     > +
>     > +    //
>     > +    // Only variable have NV|RT attribute can be created in Runtime.
>     > +    //
>     > +    if (  AtRuntime ()
>     > +       && (  ((Attributes & EFI_VARIABLE_RUNTIME_ACCESS) == 0)
>     > +          || ((Attributes & EFI_VARIABLE_NON_VOLATILE) == 0)))
>     > +    {
>     > +      return EFI_INVALID_PARAMETER;
>     > +    }
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Update the variable region with Variable information. If
>     > EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS is set,
>     > +  index of associated public key is needed.
>     > +
>     > +  @param[in]      VariableName       Name of variable.
>     > +  @param[in]      VendorGuid         Guid of variable.
>     > +  @param[in]      Data               Variable data.
>     > +  @param[in]      DataSize           Size of data. 0 means delete.
>     > +  @param[in]      Attributes         Attributes of the variable.
>     > +  @param[in]      KeyIndex           Index of associated public key.
>     > +  @param[in]      MonotonicCount     Value of associated monotonic count.
>     > +  @param[in,out]  CacheVariable      The variable information which is used
>     > +                                     to keep track of variable usage.
>     > +  @param[in]      TimeStamp          Value of associated TimeStamp.
>     > +
>     > +  @retval EFI_SUCCESS           The update operation is success.
>     > +  @retval EFI_OUT_OF_RESOURCES  Variable region is full, can not write
> other
>     > data into this region.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +UpdateVariable (
>     > +  IN      CHAR16                  *VariableName,
>     > +  IN      EFI_GUID                *VendorGuid,
>     > +  IN      VOID                    *Data,
>     > +  IN      UINTN                   DataSize,
>     > +  IN      UINT32                  Attributes      OPTIONAL,
>     > +  IN      UINT32                  KeyIndex        OPTIONAL,
>     > +  IN      UINT64                  MonotonicCount  OPTIONAL,
>     > +  IN OUT  VARIABLE_POINTER_TRACK  *CacheVariable,
>     > +  IN      EFI_TIME                *TimeStamp      OPTIONAL
>     > +  )
>     > +{
>     > +  EFI_STATUS              Status;
>     > +  VARIABLE_GLOBAL         *VarGlobal;
>     > +  VARIABLE_HEADER         *NewVariable;
>     > +  VARIABLE_HEADER         *NextVariable;
>     > +  VARIABLE_HEADER         *UpdatingVariable;
>     > +  UINTN                   VarSize;
>     > +  UINTN                   UpdateSize;
>     > +  UINTN                   Offset;
>     > +  VARIABLE_POINTER_TRACK  *Variable;
>     > +  VARIABLE_POINTER_TRACK  NvVariable;
>     > +  VARIABLE_STORE_HEADER   *VariableStoreHeader;
>     > +  VARIABLE_RUNTIME_CACHE  *VolatileCacheInstance;
>     > +  BOOLEAN                 IsCommonVariable;
>     > +  BOOLEAN                 IsCommonUserVariable;
>     > +  BOOLEAN                 DeleteFlag;
>     > +  BOOLEAN                 VolatileFlag;
>     > +  BOOLEAN                 HobVarOnlyFlag;
>     > +  EFI_PHYSICAL_ADDRESS    VarStoreBase;
>     > +  UINTN                   *LastVariableOffset;
>     > +
>     > +  if (!ReadyForUpdate (Attributes)) {
>     > +    return EFI_NOT_AVAILABLE_YET;
>     > +  }
>     > +
>     > +  VarGlobal = &mVariableModuleGlobal->VariableGlobal;
>     > +
>     > +  if (  (((Attributes & EFI_VARIABLE_APPEND_WRITE) == 0) && (DataSize ==
> 0))
>     > +     || (Attributes == 0)
>     > +     || (AtRuntime () && ((Attributes & (EFI_VARIABLE_RUNTIME_ACCESS
>     > +                                         |EFI_VARIABLE_BOOTSERVICE_ACCESS)) == 0)))
>     > +  {
>     > +    DeleteFlag = TRUE;
>     > +  } else {
>     > +    DeleteFlag = FALSE;
>     > +  }
>     > +
>     > +  if (  ((Attributes & EFI_VARIABLE_NON_VOLATILE) != 0)
>     > +     || ((CacheVariable->CurrPtr != NULL) &&
>     > +         ((CacheVariable->CurrPtr->Attributes &
> EFI_VARIABLE_NON_VOLATILE) !=
>     > 0)))
>     > +  {
>     > +    VolatileFlag = FALSE;
>     > +  } else {
>     > +    VolatileFlag = TRUE;
>     > +  }
>     > +
>     > +  //
>     > +  // Check if CacheVariable points to the variable in variable HOB.
>     > +  // If yes, let CacheVariable points to the variable in NV variable cache.
>     > +  //
>     > +  HobVarOnlyFlag = FALSE;
>     > +  if (IsHobVariable (CacheVariable)) {
>     > +    Status = RebaseVariablePtr (
>     > +               CacheVariable,
>     > +               CacheVariable,
>     > +               mNvVariableCache,
>     > +               VariableName,
>     > +               VendorGuid,
>     > +               FALSE
>     > +               );
>     > +    if ((CacheVariable->CurrPtr == NULL) || EFI_ERROR (Status)) {
>     > +      //
>     > +      // There is no matched variable in NV variable cache.
>     > +      //
>     > +      if (DeleteFlag) {
>     > +        //
>     > +        // Leave the deletion to FlushHobVariableToFlash() before return.
>     > +        //
>     > +        HobVarOnlyFlag = TRUE;
>     > +        Status         = EFI_SUCCESS;
>     > +        goto Done;
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  //
>     > +  // Determine the physical position of variable store to update, due to
> cache
>     > +  // mechanims of variable service.
>     > +  //
>     > +  if ((CacheVariable->CurrPtr == NULL) || CacheVariable->Volatile) {
>     > +    //
>     > +    // - Add new variable (volatile or non-volatile); Or
>     > +    // - Update/delete volatile variable in place.
>     > +    //
>     > +    Variable = CacheVariable;
>     > +  } else {
>     > +    //
>     > +    // - Update/Delete existing NV variable.
>     > +    //    CacheVariable points to the variable in the memory copy of Flash
> area.
>     > +    //    Now let Variable points to the same variable in Flash area.
>     > +    //
>     > +    VariableStoreHeader = (VARIABLE_STORE_HEADER *)(UINTN)
>     > +                          VarGlobal->NonVolatileVariableBase;
>     > +    Variable = &NvVariable;
>     > +    Status   = RebaseVariablePtr (
>     > +                 CacheVariable,
>     > +                 Variable,
>     > +                 VariableStoreHeader,
>     > +                 VariableName,
>     > +                 VendorGuid,
>     > +                 TRUE
>     > +                 );
>     > +    ASSERT_EFI_ERROR (Status);
>     > +  }
>     > +
>     > +  //
>     > +  // Validate variable parameters.
>     > +  //
>     > +  Status = ValidateVariableParameters (
>     > +             Variable,
>     > +             CacheVariable,
>     > +             VariableName,
>     > +             VendorGuid,
>     > +             Data,
>     > +             DataSize,
>     > +             Attributes,
>     > +             KeyIndex,
>     > +             MonotonicCount,
>     > +             TimeStamp
>     > +             );
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  //
>     > +  // Add or update a variable. Allocate a buffer to hold it temporarily.
>     > +  //
>     > +  NewVariable = GetNewVariableBuffer ();
>     > +
>     > +  //
>     > +  // Fill-up variable data first, if necessary.
>     > +  //
>     > +  IsCommonVariable     = FALSE;
>     > +  IsCommonUserVariable = FALSE;
>     > +  if (DeleteFlag) {
>     > +    //
>     > +    // No need to fill up variable buffer when deleting a variable. But the
>     > +    // buffer is still needed if variable protection is employed.
>     > +    //
>     > +    VarSize = 0;
>     > +  } else {
>     > +    VarSize = SetVariableData (
>     > +                NewVariable,
>     > +                CacheVariable->CurrPtr,
>     > +                VariableName,
>     > +                VendorGuid,
>     > +                Data,
>     > +                DataSize,
>     > +                Attributes,
>     > +                KeyIndex,
>     > +                MonotonicCount,
>     > +                TimeStamp
>     > +                );
>     > +
>     > +    if ((Attributes & EFI_VARIABLE_HARDWARE_ERROR_RECORD) == 0) {
>     > +      IsCommonVariable     = TRUE;
>     > +      IsCommonUserVariable = IsUserVariable (NewVariable);
>     > +    }
>     > +  }
>     > +
>     > +  //
>     > +  // We might need to do protection for non-volatile variable before
> flushing
>     > +  // the data to storage. A null version (meaning no protection) of following
>     > +  // APIs should simply return EFI_SUCCESS or EFI_UNSUPPORTED without
> any
>     > +  // changes to original data.
>     > +  //
>     > +  if (!VolatileFlag) {
>     > +    Status = ProtectedVariableLibUpdate (
>     > +               Variable->CurrPtr,
>     > +               Variable->InDeletedTransitionPtr,
>     > +               NewVariable,
>     > +               &VarSize
>     > +               );
>     > +    if (EFI_ERROR (Status) && (Status != EFI_UNSUPPORTED)) {
>     > +      return Status;
>     > +    }
>     > +
>     > +    Status = EFI_SUCCESS;
>     > +  }
>     > +
>     > +  //
>     > +  // Mark the old variable as in delete transition first. There's no such need
>     > +  // for deleting a variable, even if variable protection is employed.
>     > +  //
>     > +  if (  !DeleteFlag
>     > +     && (CacheVariable->CurrPtr != NULL)
>     > +     && (  (CacheVariable->CurrPtr->State == VAR_ADDED)
>     > +        || (CacheVariable->CurrPtr->State == (VAR_ADDED &
>     > VAR_IN_DELETED_TRANSITION))))
>     > +  {
>     > +    Status = UpdateVariableState (
>     > +               Variable->CurrPtr,
>     > +               CacheVariable->CurrPtr,
>     > +               CacheVariable->CurrPtr->State & VAR_IN_DELETED_TRANSITION,
>     > +               Variable->Volatile
>     > +               );
>     > +    if (EFI_ERROR (Status)) {
>     > +      goto Done;
>     > +    }
>     > +  }
>     > +
>     > +  //
>     > +  // Have enough space to store the variable?
>     > +  //
>     > +  Status = CheckVariableStoreSpace (
>     > +             NewVariable,
>     > +             VarSize,
>     > +             VariableName,
>     > +             VendorGuid,
>     > +             Attributes,
>     > +             VolatileFlag
>     > +             );
>     > +  if (Status == EFI_OUT_OF_RESOURCES) {
>     > +    //
>     > +    // Not a chance.
>     > +    //
>     > +    goto Done;
>     > +  }
>     > +
>     > +  //
>     > +  // Maybe not...
>     > +  //
>     > +  VarStoreBase = (VolatileFlag) ? VarGlobal->VolatileVariableBase
>     > +                                : VarGlobal->NonVolatileVariableBase;
>     > +  LastVariableOffset = (VolatileFlag)
>     > +                        ? &mVariableModuleGlobal->VolatileLastVariableOffset
>     > +                        : &mVariableModuleGlobal->NonVolatileLastVariableOffset;
>     > +  if (!EFI_ERROR (Status)) {
>     > +    //
>     > +    // There's enough free space at the tail of variable storage.
>     > +    //
>     > +
>     > +    //
>     > +    // If non-volatile variable is protected, a separate variable
>     > (MetaDataHmacVar)
>     > +    // is always updated along with current updating variable. The buffer
> pointed
>     > +    // by NewVariable must have two variables. They should be written at
> this
>     > +    // time orderly.
>     > +    //
>     > +    NextVariable     = NewVariable;
>     > +    UpdatingVariable = NULL;
>     > +    UpdateSize       = 0;
>     > +    while (  !EFI_ERROR (Status)
>     > +          && ((UINTN)NextVariable - (UINTN)NewVariable) < VarSize)
>     > +    {
>     > +      UpdatingVariable = NextVariable;
>     > +      NextVariable     = GetNextVariablePtr (UpdatingVariable, VarGlobal-
>     > >AuthFormat);
>     > +      UpdateSize       = (UINTN)NextVariable - (UINTN)UpdatingVariable;
>     > +
>     > +      Status = WriteVariable (
>     > +                 VarStoreBase,
>     > +                 LastVariableOffset,
>     > +                 &UpdatingVariable,
>     > +                 (UINT32)UpdateSize,
>     > +                 VolatileFlag,
>     > +                 VarGlobal->AuthFormat
>     > +                 );
>     > +    }
>     > +
>     > +    //
>     > +    // UpdatingVariable must point to the last written variable. Restore it to
>     > +    // the first one so that we can calculate the offset in variable storage.
>     > +    //
>     > +    UpdatingVariable = (VARIABLE_HEADER *)((UINTN)UpdatingVariable +
>     > UpdateSize
>     > +                                           - VarSize);
>     > +    if ((Attributes & EFI_VARIABLE_HARDWARE_ERROR_RECORD) != 0) {
>     > +      mVariableModuleGlobal->HwErrVariableTotalSize += VarSize;
>     > +    } else {
>     > +      mVariableModuleGlobal->CommonVariableTotalSize += VarSize;
>     > +      if (IsCommonUserVariable) {
>     > +        mVariableModuleGlobal->CommonUserVariableTotalSize += VarSize;
>     > +      }
>     > +    }
>     > +
>     > +    //
>     > +    // Mark the old variable(s) as deleted.
>     > +    //
>     > +    if (!EFI_ERROR (Status) && (Variable->CurrPtr != NULL)) {
>     > +      Status = DeleteVariable (
>     > +                 VariableName,
>     > +                 VendorGuid,
>     > +                 Variable,
>     > +                 CacheVariable,
>     > +                 VolatileFlag
>     > +                 );
>     > +    }
>     > +  } else {
>     > +    //
>     > +    // There's not enough space at the tail of variable storage but there's
>     > +    // enough free space holes in the whole storage. Perform garbage
> collection
>     > +    // & reclaim operation, and integrate the new variable at the same time.
>     > +    //
>     > +    Status = Reclaim (
>     > +               VarStoreBase,
>     > +               LastVariableOffset,
>     > +               VolatileFlag,
>     > +               Variable,
>     > +               NewVariable,
>     > +               VarSize
>     > +               );
>     > +
>     > +    if (Variable->CurrPtr != NULL) {
>     > +      UpdatingVariable = Variable->CurrPtr;
>     > +    } else {
>     > +      UpdatingVariable = (VARIABLE_HEADER *)(((UINTN)VarStoreBase +
>     > *LastVariableOffset) - VarSize);
>     > +    }
>     > +
>     > +    if (EFI_ERROR (Status) &&
>     > +        ((Attributes & EFI_VARIABLE_HARDWARE_ERROR_RECORD) == 0))
>     > +    {
>     > +      //
>     > +      // Out of space.
>     > +      //
>     > +      IsCommonUserVariable = IsUserVariable (NewVariable);
>     > +      IsCommonVariable     = TRUE;
>     > +
>     > +      if (IsCommonUserVariable &&
>     > +          ((VarSize + mVariableModuleGlobal->CommonUserVariableTotalSize)
>     > +           > mVariableModuleGlobal->CommonMaxUserVariableSpace))
>     > +      {
>     > +        RecordVarErrorFlag (
>     > +          VAR_ERROR_FLAG_USER_ERROR,
>     > +          VariableName,
>     > +          VendorGuid,
>     > +          Attributes,
>     > +          VarSize
>     > +          );
>     > +      }
>     > +
>     > +      if (IsCommonVariable &&
>     > +          ((VarSize + mVariableModuleGlobal->CommonVariableTotalSize)
>     > +           > mVariableModuleGlobal->CommonVariableSpace))
>     > +      {
>     > +        RecordVarErrorFlag (
>     > +          VAR_ERROR_FLAG_SYSTEM_ERROR,
>     > +          VariableName,
>     > +          VendorGuid,
>     > +          Attributes,
>     > +          VarSize
>     > +          );
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +Done:
>     > +  if (!EFI_ERROR (Status)) {
>     > +    if (!VolatileFlag) {
>     > +      Offset = (UpdatingVariable != NULL) ? (UINTN)UpdatingVariable -
>     > (UINTN)VarStoreBase
>     > +                                          : 0;
>     > +      Status = ProtectedVariableLibWriteFinal (
>     > +                 NewVariable,
>     > +                 VarSize,
>     > +                 Offset
>     > +                 );
>     > +      if (EFI_ERROR (Status) && (Status != EFI_UNSUPPORTED)) {
>     > +        return Status;
>     > +      }
>     > +
>     > +      Status = EFI_SUCCESS;
>     > +    }
>     > +
>     > +    UpdateVariableInfo (
>     > +      VariableName,
>     > +      VendorGuid,
>     > +      VolatileFlag,
>     > +      FALSE,
>     > +      TRUE,
>     > +      FALSE,
>     > +      FALSE,
>     > +      &gVariableInfo
>     > +      );
>     > +    //
>     > +    // HOB copy of the same variable is no longer needed, no matter it has
>     > +    // been deleted, updated or added from/to real variable storage.
>     > +    //
>     > +    if (HobVarOnlyFlag || !VolatileFlag) {
>     > +      FlushHobVariableToFlash (VariableName, VendorGuid);
>     > +    }
>     > +
>     > +    if (!VolatileFlag) {
>     > +      VolatileCacheInstance = &(VarGlobal-
>     > >VariableRuntimeCacheContext.VariableRuntimeNvCache);
>     > +    } else {
>     > +      VolatileCacheInstance = &(VarGlobal-
>     > >VariableRuntimeCacheContext.VariableRuntimeVolatileCache);
>     > +    }
>     > +
>     > +    if (VolatileCacheInstance->Store != NULL) {
>     > +      Status =  SynchronizeRuntimeVariableCache (
>     > +                  VolatileCacheInstance,
>     > +                  0,
>     > +                  VolatileCacheInstance->Store->Size
>     > +                  );
>     > +      ASSERT_EFI_ERROR (Status);
>     > +    }
>     > +  } else if (Status == EFI_ALREADY_STARTED) {
>     > +    //
>     > +    // Meaning nothing needs to be done. Just return success.
>     > +    //
>     > +    Status = EFI_SUCCESS;
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code finds variable in storage blocks (Volatile or Non-Volatile).
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode, and datasize is external input.
>     > +  This function will do basic validation, before parse the data.
>     > +
>     > +  @param VariableName               Name of Variable to be found.
>     > +  @param VendorGuid                 Variable vendor GUID.
>     > +  @param Attributes                 Attribute value of the variable found.
>     > +  @param DataSize                   Size of Data found. If size is less than the
>     > +                                    data, this value contains the required size.
>     > +  @param Data                       The buffer to return the contents of the
> variable.
>     > May be NULL
>     > +                                    with a zero DataSize in order to determine the size
> buffer
>     > needed.
>     > +
>     > +  @return EFI_INVALID_PARAMETER     Invalid parameter.
>     > +  @return EFI_SUCCESS               Find the specified variable.
>     > +  @return EFI_NOT_FOUND             Not found.
>     > +  @return EFI_BUFFER_TO_SMALL       DataSize is too small for the result.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceGetVariable (
>     > +  IN      CHAR16    *VariableName,
>     > +  IN      EFI_GUID  *VendorGuid,
>     > +  OUT     UINT32    *Attributes OPTIONAL,
>     > +  IN OUT  UINTN     *DataSize,
>     > +  OUT     VOID      *Data OPTIONAL
>     > +  )
>     > +{
>     > +  EFI_STATUS              Status;
>     > +  VARIABLE_POINTER_TRACK  Variable;
>     > +
>     > +  if ((VariableName == NULL) || (VendorGuid == NULL) || (DataSize ==
> NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if (VariableName[0] == 0) {
>     > +    return EFI_NOT_FOUND;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +
>     > +  Status = FindVariable (VariableName, VendorGuid, &Variable,
>     > &mVariableModuleGlobal->VariableGlobal, FALSE);
>     > +  if ((Variable.CurrPtr == NULL) || EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  //
>     > +  // Get data and its size
>     > +  //
>     > +  if (!Variable.Volatile) {
>     > +    //
>     > +    // Currently only non-volatile variable needs protection.
>     > +    //
>     > +    Status = ProtectedVariableLibGetByBuffer (
>     > +               Variable.CurrPtr,
>     > +               Data,
>     > +               (UINT32 *)DataSize,
>     > +               mVariableModuleGlobal->VariableGlobal.AuthFormat
>     > +               );
>     > +  }
>     > +
>     > +  if (Variable.Volatile || (Status == EFI_UNSUPPORTED)) {
>     > +    Status = GetVariableData (Variable.CurrPtr, Data, (UINT32 *)DataSize,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +  }
>     > +
>     > +  if (!EFI_ERROR (Status)) {
>     > +    UpdateVariableInfo (VariableName, VendorGuid, Variable.Volatile, TRUE,
>     > FALSE, FALSE, FALSE, &gVariableInfo);
>     > +  }
>     > +
>     > +Done:
>     > +  if ((Status == EFI_SUCCESS) || (Status == EFI_BUFFER_TOO_SMALL)) {
>     > +    if ((Attributes != NULL) && (Variable.CurrPtr != NULL)) {
>     > +      *Attributes = Variable.CurrPtr->Attributes;
>     > +    }
>     > +  }
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code Finds the Next available variable.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode. This function will do basic
>     > validation, before parse the data.
>     > +
>     > +  @param VariableNameSize           The size of the VariableName buffer. The
>     > size must be large
>     > +                                    enough to fit input string supplied in VariableName
> buffer.
>     > +  @param VariableName               Pointer to variable name.
>     > +  @param VendorGuid                 Variable Vendor Guid.
>     > +
>     > +  @retval EFI_SUCCESS               The function completed successfully.
>     > +  @retval EFI_NOT_FOUND             The next variable was not found.
>     > +  @retval EFI_BUFFER_TOO_SMALL      The VariableNameSize is too small
> for
>     > the result.
>     > +                                    VariableNameSize has been updated with the size
> needed
>     > to complete the request.
>     > +  @retval EFI_INVALID_PARAMETER     VariableNameSize is NULL.
>     > +  @retval EFI_INVALID_PARAMETER     VariableName is NULL.
>     > +  @retval EFI_INVALID_PARAMETER     VendorGuid is NULL.
>     > +  @retval EFI_INVALID_PARAMETER     The input values of VariableName
> and
>     > VendorGuid are not a name and
>     > +                                    GUID of an existing variable.
>     > +  @retval EFI_INVALID_PARAMETER     Null-terminator is not found in the
> first
>     > VariableNameSize bytes of
>     > +                                    the input VariableName buffer.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceGetNextVariableName (
>     > +  IN OUT  UINTN     *VariableNameSize,
>     > +  IN OUT  CHAR16    *VariableName,
>     > +  IN OUT  EFI_GUID  *VendorGuid
>     > +  )
>     > +{
>     > +  EFI_STATUS             Status;
>     > +  UINTN                  MaxLen;
>     > +  UINTN                  VarNameSize;
>     > +  BOOLEAN                AuthFormat;
>     > +  VARIABLE_HEADER        *VariablePtr;
>     > +  VARIABLE_STORE_HEADER
> *VariableStoreHeader[VariableStoreTypeMax];
>     > +
>     > +  if ((VariableNameSize == NULL) || (VariableName == NULL) ||
> (VendorGuid ==
>     > NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AuthFormat = mVariableModuleGlobal->VariableGlobal.AuthFormat;
>     > +
>     > +  //
>     > +  // Calculate the possible maximum length of name string, including the
> Null
>     > terminator.
>     > +  //
>     > +  MaxLen = *VariableNameSize / sizeof (CHAR16);
>     > +  if ((MaxLen == 0) || (StrnLenS (VariableName, MaxLen) == MaxLen)) {
>     > +    //
>     > +    // Null-terminator is not found in the first VariableNameSize bytes of the
>     > input VariableName buffer,
>     > +    // follow spec to return EFI_INVALID_PARAMETER.
>     > +    //
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +
>     > +  //
>     > +  // 0: Volatile, 1: HOB, 2: Non-Volatile.
>     > +  // The index and attributes mapping must be kept in this order as
> FindVariable
>     > +  // makes use of this mapping to implement search algorithm.
>     > +  //
>     > +  VariableStoreHeader[VariableStoreTypeVolatile] =
>     > (VARIABLE_STORE_HEADER *)(UINTN)mVariableModuleGlobal-
>     > >VariableGlobal.VolatileVariableBase;
>     > +  VariableStoreHeader[VariableStoreTypeHob]      =
> (VARIABLE_STORE_HEADER
>     > *)(UINTN)mVariableModuleGlobal->VariableGlobal.HobVariableBase;
>     > +  VariableStoreHeader[VariableStoreTypeNv]       = mNvVariableCache;
>     > +
>     > +  Status =  VariableServiceGetNextVariableInternal (
>     > +              VariableName,
>     > +              VendorGuid,
>     > +              VariableStoreHeader,
>     > +              &VariablePtr,
>     > +              AuthFormat
>     > +              );
>     > +  if (!EFI_ERROR (Status)) {
>     > +    VarNameSize = NameSizeOfVariable (VariablePtr, AuthFormat);
>     > +    ASSERT (VarNameSize != 0);
>     > +    if (VarNameSize <= *VariableNameSize) {
>     > +      CopyMem (
>     > +        VariableName,
>     > +        GetVariableNamePtr (VariablePtr, AuthFormat),
>     > +        VarNameSize
>     > +        );
>     > +      CopyMem (
>     > +        VendorGuid,
>     > +        GetVendorGuidPtr (VariablePtr, AuthFormat),
>     > +        sizeof (EFI_GUID)
>     > +        );
>     > +      Status = EFI_SUCCESS;
>     > +    } else {
>     > +      Status = EFI_BUFFER_TOO_SMALL;
>     > +    }
>     > +
>     > +    *VariableNameSize = VarNameSize;
>     > +  }
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code sets variable in storage blocks (Volatile or Non-Volatile).
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode, and datasize and data are
>     > external input.
>     > +  This function will do basic validation, before parse the data.
>     > +  This function will parse the authentication carefully to avoid security
> issues,
>     > like
>     > +  buffer overflow, integer overflow.
>     > +  This function will check attribute carefully to avoid authentication bypass.
>     > +
>     > +  @param VariableName                     Name of Variable to be found.
>     > +  @param VendorGuid                       Variable vendor GUID.
>     > +  @param Attributes                       Attribute value of the variable found
>     > +  @param DataSize                         Size of Data found. If size is less than the
>     > +                                          data, this value contains the required size.
>     > +  @param Data                             Data pointer.
>     > +
>     > +  @return EFI_INVALID_PARAMETER           Invalid parameter.
>     > +  @return EFI_SUCCESS                     Set successfully.
>     > +  @return EFI_OUT_OF_RESOURCES            Resource not enough to set
> variable.
>     > +  @return EFI_NOT_FOUND                   Not found.
>     > +  @return EFI_WRITE_PROTECTED             Variable is read-only.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceSetVariable (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid,
>     > +  IN UINT32    Attributes,
>     > +  IN UINTN     DataSize,
>     > +  IN VOID      *Data
>     > +  )
>     > +{
>     > +  VARIABLE_POINTER_TRACK  Variable;
>     > +  EFI_STATUS              Status;
>     > +  VARIABLE_HEADER         *NextVariable;
>     > +  EFI_PHYSICAL_ADDRESS    Point;
>     > +  UINTN                   PayloadSize;
>     > +  BOOLEAN                 AuthFormat;
>     > +
>     > +  AuthFormat = mVariableModuleGlobal->VariableGlobal.AuthFormat;
>     > +
>     > +  //
>     > +  // Check input parameters.
>     > +  //
>     > +  if ((VariableName == NULL) || (VariableName[0] == 0) || (VendorGuid ==
>     > NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if ((DataSize != 0) && (Data == NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  //
>     > +  // Check for reserverd bit in variable attribute.
>     > +  // EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS is deprecated but we
> still
>     > allow
>     > +  // the delete operation of common authenticated variable at user physical
>     > presence.
>     > +  // So leave EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS attribute
> check
>     > to AuthVariableLib
>     > +  //
>     > +  if ((Attributes & (~(EFI_VARIABLE_ATTRIBUTES_MASK |
>     > EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS))) != 0) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  //
>     > +  // Check if the combination of attribute bits is valid.
>     > +  //
>     > +  if ((Attributes & (EFI_VARIABLE_RUNTIME_ACCESS |
>     > EFI_VARIABLE_BOOTSERVICE_ACCESS)) ==
> EFI_VARIABLE_RUNTIME_ACCESS) {
>     > +    //
>     > +    // Make sure if runtime bit is set, boot service bit is set also.
>     > +    //
>     > +    if ((Attributes & EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS) != 0) {
>     > +      return EFI_UNSUPPORTED;
>     > +    } else {
>     > +      return EFI_INVALID_PARAMETER;
>     > +    }
>     > +  } else if ((Attributes & EFI_VARIABLE_ATTRIBUTES_MASK) ==
>     > EFI_VARIABLE_NON_VOLATILE) {
>     > +    //
>     > +    // Only EFI_VARIABLE_NON_VOLATILE attribute is invalid
>     > +    //
>     > +    return EFI_INVALID_PARAMETER;
>     > +  } else if ((Attributes & VARIABLE_ATTRIBUTE_AT_AW) != 0) {
>     > +    if (!mVariableModuleGlobal->VariableGlobal.AuthSupport) {
>     > +      //
>     > +      // Not support authenticated variable write.
>     > +      //
>     > +      return EFI_INVALID_PARAMETER;
>     > +    }
>     > +  } else if ((Attributes & EFI_VARIABLE_HARDWARE_ERROR_RECORD) != 0) {
>     > +    if (PcdGet32 (PcdHwErrStorageSize) == 0) {
>     > +      //
>     > +      // Not support harware error record variable variable.
>     > +      //
>     > +      return EFI_INVALID_PARAMETER;
>     > +    }
>     > +  }
>     > +
>     > +  //
>     > +  // EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS and
>     > EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS attribute
>     > +  // cannot be set both.
>     > +  //
>     > +  if (  ((Attributes & EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS) ==
>     > EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS)
>     > +     && ((Attributes &
>     > EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS) ==
>     > EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS))
>     > +  {
>     > +    return EFI_UNSUPPORTED;
>     > +  }
>     > +
>     > +  if ((Attributes & EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS) ==
>     > EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS) {
>     > +    //
>     > +    //  If DataSize == AUTHINFO_SIZE and then PayloadSize is 0.
>     > +    //  Maybe it's the delete operation of common authenticated variable at
> user
>     > physical presence.
>     > +    //
>     > +    if (DataSize != AUTHINFO_SIZE) {
>     > +      return EFI_UNSUPPORTED;
>     > +    }
>     > +
>     > +    PayloadSize = DataSize - AUTHINFO_SIZE;
>     > +  } else if ((Attributes &
>     > EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS) ==
>     > EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS) {
>     > +    //
>     > +    // Sanity check for EFI_VARIABLE_AUTHENTICATION_2 descriptor.
>     > +    //
>     > +    if ((DataSize < OFFSET_OF_AUTHINFO2_CERT_DATA) ||
>     > +        (((EFI_VARIABLE_AUTHENTICATION_2 *)Data)-
> >AuthInfo.Hdr.dwLength >
>     > DataSize - (OFFSET_OF (EFI_VARIABLE_AUTHENTICATION_2, AuthInfo))) ||
>     > +        (((EFI_VARIABLE_AUTHENTICATION_2 *)Data)-
> >AuthInfo.Hdr.dwLength <
>     > OFFSET_OF (WIN_CERTIFICATE_UEFI_GUID, CertData)))
>     > +    {
>     > +      return EFI_SECURITY_VIOLATION;
>     > +    }
>     > +
>     > +    //
>     > +    // The VariableSpeculationBarrier() call here is to ensure the above sanity
>     > +    // check for the EFI_VARIABLE_AUTHENTICATION_2 descriptor has been
>     > completed
>     > +    // before the execution of subsequent codes.
>     > +    //
>     > +    VariableSpeculationBarrier ();
>     > +    PayloadSize = DataSize - AUTHINFO2_SIZE (Data);
>     > +  } else {
>     > +    PayloadSize = DataSize;
>     > +  }
>     > +
>     > +  if ((UINTN)(~0) - PayloadSize < StrSize (VariableName)) {
>     > +    //
>     > +    // Prevent whole variable size overflow
>     > +    //
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  //
>     > +  //  The size of the VariableName, including the Unicode Null in bytes plus
>     > +  //  the DataSize is limited to maximum size of PcdGet32
>     > (PcdMaxHardwareErrorVariableSize)
>     > +  //  bytes for HwErrRec#### variable.
>     > +  //
>     > +  if ((Attributes & EFI_VARIABLE_HARDWARE_ERROR_RECORD) ==
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD) {
>     > +    if (StrSize (VariableName) + PayloadSize >
>     > +        PcdGet32 (PcdMaxHardwareErrorVariableSize) -
> GetVariableHeaderSize
>     > (AuthFormat))
>     > +    {
>     > +      return EFI_INVALID_PARAMETER;
>     > +    }
>     > +  } else {
>     > +    //
>     > +    //  The size of the VariableName, including the Unicode Null in bytes plus
>     > +    //  the DataSize is limited to maximum size of
> Max(Auth|Volatile)VariableSize
>     > bytes.
>     > +    //
>     > +    if ((Attributes & VARIABLE_ATTRIBUTE_AT_AW) != 0) {
>     > +      if (StrSize (VariableName) + PayloadSize >
>     > +          mVariableModuleGlobal->MaxAuthVariableSize -
>     > +          GetVariableHeaderSize (AuthFormat))
>     > +      {
>     > +        DEBUG ((
>     > +          DEBUG_ERROR,
>     > +          "%a: Failed to set variable '%s' with Guid %g\n",
>     > +          __FUNCTION__,
>     > +          VariableName,
>     > +          VendorGuid
>     > +          ));
>     > +        DEBUG ((
>     > +          DEBUG_ERROR,
>     > +          "NameSize(0x%x) + PayloadSize(0x%x) > "
>     > +          "MaxAuthVariableSize(0x%x) - HeaderSize(0x%x)\n",
>     > +          StrSize (VariableName),
>     > +          PayloadSize,
>     > +          mVariableModuleGlobal->MaxAuthVariableSize,
>     > +          GetVariableHeaderSize (AuthFormat)
>     > +          ));
>     > +        return EFI_INVALID_PARAMETER;
>     > +      }
>     > +    } else if ((Attributes & EFI_VARIABLE_NON_VOLATILE) != 0) {
>     > +      if (StrSize (VariableName) + PayloadSize >
>     > +          mVariableModuleGlobal->MaxVariableSize - GetVariableHeaderSize
>     > (AuthFormat))
>     > +      {
>     > +        DEBUG ((
>     > +          DEBUG_ERROR,
>     > +          "%a: Failed to set variable '%s' with Guid %g\n",
>     > +          __FUNCTION__,
>     > +          VariableName,
>     > +          VendorGuid
>     > +          ));
>     > +        DEBUG ((
>     > +          DEBUG_ERROR,
>     > +          "NameSize(0x%x) + PayloadSize(0x%x) > "
>     > +          "MaxVariableSize(0x%x) - HeaderSize(0x%x)\n",
>     > +          StrSize (VariableName),
>     > +          PayloadSize,
>     > +          mVariableModuleGlobal->MaxVariableSize,
>     > +          GetVariableHeaderSize (AuthFormat)
>     > +          ));
>     > +        return EFI_INVALID_PARAMETER;
>     > +      }
>     > +    } else {
>     > +      if (StrSize (VariableName) + PayloadSize >
>     > +          mVariableModuleGlobal->MaxVolatileVariableSize -
>     > GetVariableHeaderSize (AuthFormat))
>     > +      {
>     > +        DEBUG ((
>     > +          DEBUG_ERROR,
>     > +          "%a: Failed to set variable '%s' with Guid %g\n",
>     > +          __FUNCTION__,
>     > +          VariableName,
>     > +          VendorGuid
>     > +          ));
>     > +        DEBUG ((
>     > +          DEBUG_ERROR,
>     > +          "NameSize(0x%x) + PayloadSize(0x%x) > "
>     > +          "MaxVolatileVariableSize(0x%x) - HeaderSize(0x%x)\n",
>     > +          StrSize (VariableName),
>     > +          PayloadSize,
>     > +          mVariableModuleGlobal->MaxVolatileVariableSize,
>     > +          GetVariableHeaderSize (AuthFormat)
>     > +          ));
>     > +        return EFI_INVALID_PARAMETER;
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  //
>     > +  // Special Handling for MOR Lock variable.
>     > +  //
>     > +  Status = SetVariableCheckHandlerMor (VariableName, VendorGuid,
> Attributes,
>     > PayloadSize, (VOID *)((UINTN)Data + DataSize - PayloadSize));
>     > +  if (Status == EFI_ALREADY_STARTED) {
>     > +    //
>     > +    // EFI_ALREADY_STARTED means the SetVariable() action is handled
> inside of
>     > SetVariableCheckHandlerMor().
>     > +    // Variable driver can just return SUCCESS.
>     > +    //
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  if (EFI_ERROR (Status)) {
>     > +    return Status;
>     > +  }
>     > +
>     > +  Status = VarCheckLibSetVariableCheck (VariableName, VendorGuid,
> Attributes,
>     > PayloadSize, (VOID *)((UINTN)Data + DataSize - PayloadSize),
> mRequestSource);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return Status;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +
>     > +  //
>     > +  // Consider reentrant in MCA/INIT/NMI. It needs be reupdated.
>     > +  //
>     > +  if (1 < InterlockedIncrement (&mVariableModuleGlobal-
>     > >VariableGlobal.ReentrantState)) {
>     > +    Point = mVariableModuleGlobal-
> >VariableGlobal.NonVolatileVariableBase;
>     > +    //
>     > +    // Parse non-volatile variable data and get last variable offset.
>     > +    //
>     > +    NextVariable = GetStartPointer ((VARIABLE_STORE_HEADER
> *)(UINTN)Point);
>     > +    while (IsValidVariableHeader (NextVariable, GetEndPointer
>     > ((VARIABLE_STORE_HEADER *)(UINTN)Point), AuthFormat)) {
>     > +      NextVariable = GetNextVariablePtr (NextVariable, AuthFormat);
>     > +    }
>     > +
>     > +    mVariableModuleGlobal->NonVolatileLastVariableOffset =
>     > (UINTN)NextVariable - (UINTN)Point;
>     > +  }
>     > +
>     > +  //
>     > +  // Check whether the input variable is already existed.
>     > +  //
>     > +  Status = FindVariable (VariableName, VendorGuid, &Variable,
>     > &mVariableModuleGlobal->VariableGlobal, TRUE);
>     > +  if (!EFI_ERROR (Status)) {
>     > +    if (((Variable.CurrPtr->Attributes & EFI_VARIABLE_RUNTIME_ACCESS) ==
> 0)
>     > && AtRuntime ()) {
>     > +      Status = EFI_WRITE_PROTECTED;
>     > +      goto Done;
>     > +    }
>     > +
>     > +    if ((Attributes != 0) && ((Attributes &
> (~EFI_VARIABLE_APPEND_WRITE)) !=
>     > Variable.CurrPtr->Attributes)) {
>     > +      //
>     > +      // If a preexisting variable is rewritten with different attributes,
> SetVariable()
>     > shall not
>     > +      // modify the variable and shall return EFI_INVALID_PARAMETER. Two
>     > exceptions to this rule:
>     > +      // 1. No access attributes specified
>     > +      // 2. The only attribute differing is EFI_VARIABLE_APPEND_WRITE
>     > +      //
>     > +      Status = EFI_INVALID_PARAMETER;
>     > +      DEBUG ((DEBUG_INFO, "[Variable]: Rewritten a preexisting
> variable(0x%08x)
>     > with different attributes(0x%08x) - %g:%s\n", Variable.CurrPtr->Attributes,
>     > Attributes, VendorGuid, VariableName));
>     > +      goto Done;
>     > +    }
>     > +  }
>     > +
>     > +  if (!FeaturePcdGet (PcdUefiVariableDefaultLangDeprecate)) {
>     > +    //
>     > +    // Hook the operation of setting PlatformLangCodes/PlatformLang and
>     > LangCodes/Lang.
>     > +    //
>     > +    Status = AutoUpdateLangVariable (VariableName, Data, DataSize);
>     > +    if (EFI_ERROR (Status)) {
>     > +      //
>     > +      // The auto update operation failed, directly return to avoid
> inconsistency
>     > between PlatformLang and Lang.
>     > +      //
>     > +      goto Done;
>     > +    }
>     > +  }
>     > +
>     > +  if (mVariableModuleGlobal->VariableGlobal.AuthSupport) {
>     > +    Status = AuthVariableLibProcessVariable (VariableName, VendorGuid,
> Data,
>     > DataSize, Attributes);
>     > +  } else {
>     > +    Status = UpdateVariable (VariableName, VendorGuid, Data, DataSize,
>     > Attributes, 0, 0, &Variable, NULL);
>     > +  }
>     > +
>     > +Done:
>     > +  InterlockedDecrement (&mVariableModuleGlobal-
>     > >VariableGlobal.ReentrantState);
>     > +  ReleaseLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +
>     > +  if (!AtRuntime ()) {
>     > +    if (!EFI_ERROR (Status)) {
>     > +      SecureBootHook (
>     > +        VariableName,
>     > +        VendorGuid
>     > +        );
>     > +    }
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code returns information about the EFI variables.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode. This function will do basic
>     > validation, before parse the data.
>     > +
>     > +  @param Attributes                     Attributes bitmask to specify the type of
>     > variables
>     > +                                        on which to return information.
>     > +  @param MaximumVariableStorageSize     Pointer to the maximum size of
> the
>     > storage space available
>     > +                                        for the EFI variables associated with the attributes
>     > specified.
>     > +  @param RemainingVariableStorageSize   Pointer to the remaining size of
> the
>     > storage space available
>     > +                                        for EFI variables associated with the attributes
> specified.
>     > +  @param MaximumVariableSize            Pointer to the maximum size of an
>     > individual EFI variables
>     > +                                        associated with the attributes specified.
>     > +
>     > +  @return EFI_SUCCESS                   Query successfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceQueryVariableInfoInternal (
>     > +  IN  UINT32  Attributes,
>     > +  OUT UINT64  *MaximumVariableStorageSize,
>     > +  OUT UINT64  *RemainingVariableStorageSize,
>     > +  OUT UINT64  *MaximumVariableSize
>     > +  )
>     > +{
>     > +  VARIABLE_HEADER         *Variable;
>     > +  VARIABLE_HEADER         *NextVariable;
>     > +  UINT64                  VariableSize;
>     > +  VARIABLE_STORE_HEADER   *VariableStoreHeader;
>     > +  UINT64                  CommonVariableTotalSize;
>     > +  UINT64                  HwErrVariableTotalSize;
>     > +  EFI_STATUS              Status;
>     > +  VARIABLE_POINTER_TRACK  VariablePtrTrack;
>     > +
>     > +  CommonVariableTotalSize = 0;
>     > +  HwErrVariableTotalSize  = 0;
>     > +
>     > +  if ((Attributes & EFI_VARIABLE_NON_VOLATILE) == 0) {
>     > +    //
>     > +    // Query is Volatile related.
>     > +    //
>     > +    VariableStoreHeader = (VARIABLE_STORE_HEADER
>     > *)((UINTN)mVariableModuleGlobal->VariableGlobal.VolatileVariableBase);
>     > +  } else {
>     > +    //
>     > +    // Query is Non-Volatile related.
>     > +    //
>     > +    VariableStoreHeader = mNvVariableCache;
>     > +  }
>     > +
>     > +  //
>     > +  // Now let's fill *MaximumVariableStorageSize
>     > *RemainingVariableStorageSize
>     > +  // with the storage size (excluding the storage header size).
>     > +  //
>     > +  *MaximumVariableStorageSize = VariableStoreHeader->Size - sizeof
>     > (VARIABLE_STORE_HEADER);
>     > +
>     > +  //
>     > +  // Harware error record variable needs larger size.
>     > +  //
>     > +  if ((Attributes & (EFI_VARIABLE_NON_VOLATILE |
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD)) ==
>     > (EFI_VARIABLE_NON_VOLATILE |
> EFI_VARIABLE_HARDWARE_ERROR_RECORD))
>     > {
>     > +    *MaximumVariableStorageSize = PcdGet32 (PcdHwErrStorageSize);
>     > +    *MaximumVariableSize        =  PcdGet32
> (PcdMaxHardwareErrorVariableSize)
>     > -
>     > +                                  GetVariableHeaderSize (mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +  } else {
>     > +    if ((Attributes & EFI_VARIABLE_NON_VOLATILE) != 0) {
>     > +      if (AtRuntime ()) {
>     > +        *MaximumVariableStorageSize = mVariableModuleGlobal-
>     > >CommonRuntimeVariableSpace;
>     > +      } else {
>     > +        *MaximumVariableStorageSize = mVariableModuleGlobal-
>     > >CommonVariableSpace;
>     > +      }
>     > +    }
>     > +
>     > +    //
>     > +    // Let *MaximumVariableSize be Max(Auth|Volatile)VariableSize with the
>     > exception of the variable header size.
>     > +    //
>     > +    if ((Attributes & VARIABLE_ATTRIBUTE_AT_AW) != 0) {
>     > +      *MaximumVariableSize =  mVariableModuleGlobal-
> >MaxAuthVariableSize -
>     > +                             GetVariableHeaderSize (mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +    } else if ((Attributes & EFI_VARIABLE_NON_VOLATILE) != 0) {
>     > +      *MaximumVariableSize =  mVariableModuleGlobal->MaxVariableSize -
>     > +                             GetVariableHeaderSize (mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +    } else {
>     > +      *MaximumVariableSize =   mVariableModuleGlobal-
>     > >MaxVolatileVariableSize -
>     > +                             GetVariableHeaderSize (mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +    }
>     > +  }
>     > +
>     > +  //
>     > +  // Point to the starting address of the variables.
>     > +  //
>     > +  Variable = GetStartPointer (VariableStoreHeader);
>     > +
>     > +  //
>     > +  // Now walk through the related variable store.
>     > +  //
>     > +  while (IsValidVariableHeader (
>     > +           Variable,
>     > +           GetEndPointer (VariableStoreHeader),
>     > +           mVariableModuleGlobal->VariableGlobal.AuthFormat
>     > +           ))
>     > +  {
>     > +    NextVariable = GetNextVariablePtr (Variable, mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +    VariableSize = (UINT64)(UINTN)NextVariable - (UINT64)(UINTN)Variable;
>     > +
>     > +    if (AtRuntime ()) {
>     > +      //
>     > +      // We don't take the state of the variables in mind
>     > +      // when calculating RemainingVariableStorageSize,
>     > +      // since the space occupied by variables not marked with
>     > +      // VAR_ADDED is not allowed to be reclaimed in Runtime.
>     > +      //
>     > +      if ((Variable->Attributes & EFI_VARIABLE_HARDWARE_ERROR_RECORD)
> ==
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD) {
>     > +        HwErrVariableTotalSize += VariableSize;
>     > +      } else {
>     > +        CommonVariableTotalSize += VariableSize;
>     > +      }
>     > +    } else {
>     > +      //
>     > +      // Only care about Variables with State VAR_ADDED, because
>     > +      // the space not marked as VAR_ADDED is reclaimable now.
>     > +      //
>     > +      if (Variable->State == VAR_ADDED) {
>     > +        if ((Variable->Attributes &
> EFI_VARIABLE_HARDWARE_ERROR_RECORD)
>     > == EFI_VARIABLE_HARDWARE_ERROR_RECORD) {
>     > +          HwErrVariableTotalSize += VariableSize;
>     > +        } else {
>     > +          CommonVariableTotalSize += VariableSize;
>     > +        }
>     > +      } else if (Variable->State == (VAR_IN_DELETED_TRANSITION &
> VAR_ADDED))
>     > {
>     > +        //
>     > +        // If it is a IN_DELETED_TRANSITION variable,
>     > +        // and there is not also a same ADDED one at the same time,
>     > +        // this IN_DELETED_TRANSITION variable is valid.
>     > +        //
>     > +        VariablePtrTrack.StartPtr = GetStartPointer (VariableStoreHeader);
>     > +        VariablePtrTrack.EndPtr   = GetEndPointer (VariableStoreHeader);
>     > +        Status                    = FindVariableEx (
>     > +                                      GetVariableNamePtr (Variable,
> mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat),
>     > +                                      GetVendorGuidPtr (Variable, mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat),
>     > +                                      FALSE,
>     > +                                      &VariablePtrTrack,
>     > +                                      mVariableModuleGlobal->VariableGlobal.AuthFormat
>     > +                                      );
>     > +        if (!EFI_ERROR (Status) && (VariablePtrTrack.CurrPtr->State !=
>     > VAR_ADDED)) {
>     > +          if ((Variable->Attributes &
> EFI_VARIABLE_HARDWARE_ERROR_RECORD)
>     > == EFI_VARIABLE_HARDWARE_ERROR_RECORD) {
>     > +            HwErrVariableTotalSize += VariableSize;
>     > +          } else {
>     > +            CommonVariableTotalSize += VariableSize;
>     > +          }
>     > +        }
>     > +      }
>     > +    }
>     > +
>     > +    //
>     > +    // Go to the next one.
>     > +    //
>     > +    Variable = NextVariable;
>     > +  }
>     > +
>     > +  if ((Attributes  & EFI_VARIABLE_HARDWARE_ERROR_RECORD) ==
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD) {
>     > +    *RemainingVariableStorageSize = *MaximumVariableStorageSize -
>     > HwErrVariableTotalSize;
>     > +  } else {
>     > +    if (*MaximumVariableStorageSize < CommonVariableTotalSize) {
>     > +      *RemainingVariableStorageSize = 0;
>     > +    } else {
>     > +      *RemainingVariableStorageSize = *MaximumVariableStorageSize -
>     > CommonVariableTotalSize;
>     > +    }
>     > +  }
>     > +
>     > +  if (*RemainingVariableStorageSize < GetVariableHeaderSize
>     > (mVariableModuleGlobal->VariableGlobal.AuthFormat)) {
>     > +    *MaximumVariableSize = 0;
>     > +  } else if ((*RemainingVariableStorageSize - GetVariableHeaderSize
>     > (mVariableModuleGlobal->VariableGlobal.AuthFormat)) <
>     > +             *MaximumVariableSize
>     > +             )
>     > +  {
>     > +    *MaximumVariableSize = *RemainingVariableStorageSize -
>     > +                           GetVariableHeaderSize (mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code returns information about the EFI variables.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode. This function will do basic
>     > validation, before parse the data.
>     > +
>     > +  @param Attributes                     Attributes bitmask to specify the type of
>     > variables
>     > +                                        on which to return information.
>     > +  @param MaximumVariableStorageSize     Pointer to the maximum size of
> the
>     > storage space available
>     > +                                        for the EFI variables associated with the attributes
>     > specified.
>     > +  @param RemainingVariableStorageSize   Pointer to the remaining size of
> the
>     > storage space available
>     > +                                        for EFI variables associated with the attributes
> specified.
>     > +  @param MaximumVariableSize            Pointer to the maximum size of an
>     > individual EFI variables
>     > +                                        associated with the attributes specified.
>     > +
>     > +  @return EFI_INVALID_PARAMETER         An invalid combination of
> attribute
>     > bits was supplied.
>     > +  @return EFI_SUCCESS                   Query successfully.
>     > +  @return EFI_UNSUPPORTED               The attribute is not supported on this
>     > platform.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceQueryVariableInfo (
>     > +  IN  UINT32  Attributes,
>     > +  OUT UINT64  *MaximumVariableStorageSize,
>     > +  OUT UINT64  *RemainingVariableStorageSize,
>     > +  OUT UINT64  *MaximumVariableSize
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  if ((MaximumVariableStorageSize == NULL) ||
> (RemainingVariableStorageSize
>     > == NULL) || (MaximumVariableSize == NULL) || (Attributes == 0)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if ((Attributes & EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS) != 0) {
>     > +    //
>     > +    //  Deprecated attribute, make this check as highest priority.
>     > +    //
>     > +    return EFI_UNSUPPORTED;
>     > +  }
>     > +
>     > +  if ((Attributes & EFI_VARIABLE_ATTRIBUTES_MASK) == 0) {
>     > +    //
>     > +    // Make sure the Attributes combination is supported by the platform.
>     > +    //
>     > +    return EFI_UNSUPPORTED;
>     > +  } else if ((Attributes & EFI_VARIABLE_ATTRIBUTES_MASK) ==
>     > EFI_VARIABLE_NON_VOLATILE) {
>     > +    //
>     > +    // Only EFI_VARIABLE_NON_VOLATILE attribute is invalid
>     > +    //
>     > +    return EFI_INVALID_PARAMETER;
>     > +  } else if ((Attributes & (EFI_VARIABLE_RUNTIME_ACCESS |
>     > EFI_VARIABLE_BOOTSERVICE_ACCESS)) ==
> EFI_VARIABLE_RUNTIME_ACCESS) {
>     > +    //
>     > +    // Make sure if runtime bit is set, boot service bit is set also.
>     > +    //
>     > +    return EFI_INVALID_PARAMETER;
>     > +  } else if (AtRuntime () && ((Attributes & EFI_VARIABLE_RUNTIME_ACCESS)
> ==
>     > 0)) {
>     > +    //
>     > +    // Make sure RT Attribute is set if we are in Runtime phase.
>     > +    //
>     > +    return EFI_INVALID_PARAMETER;
>     > +  } else if ((Attributes & (EFI_VARIABLE_NON_VOLATILE |
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD)) ==
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD) {
>     > +    //
>     > +    // Make sure Hw Attribute is set with NV.
>     > +    //
>     > +    return EFI_INVALID_PARAMETER;
>     > +  } else if ((Attributes & VARIABLE_ATTRIBUTE_AT_AW) != 0) {
>     > +    if (!mVariableModuleGlobal->VariableGlobal.AuthSupport) {
>     > +      //
>     > +      // Not support authenticated variable write.
>     > +      //
>     > +      return EFI_UNSUPPORTED;
>     > +    }
>     > +  } else if ((Attributes & EFI_VARIABLE_HARDWARE_ERROR_RECORD) != 0) {
>     > +    if (PcdGet32 (PcdHwErrStorageSize) == 0) {
>     > +      //
>     > +      // Not support harware error record variable variable.
>     > +      //
>     > +      return EFI_UNSUPPORTED;
>     > +    }
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +
>     > +  Status = VariableServiceQueryVariableInfoInternal (
>     > +             Attributes,
>     > +             MaximumVariableStorageSize,
>     > +             RemainingVariableStorageSize,
>     > +             MaximumVariableSize
>     > +             );
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  This function reclaims variable storage if free size is below the threshold.
>     > +
>     > +  Caution: This function may be invoked at SMM mode.
>     > +  Care must be taken to make sure not security issue.
>     > +
>     > +**/
>     > +VOID
>     > +ReclaimForOS (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS      Status;
>     > +  UINTN           RemainingCommonRuntimeVariableSpace;
>     > +  UINTN           RemainingHwErrVariableSpace;
>     > +  STATIC BOOLEAN  Reclaimed;
>     > +
>     > +  //
>     > +  // This function will be called only once at EndOfDxe or ReadyToBoot
> event.
>     > +  //
>     > +  if (Reclaimed) {
>     > +    return;
>     > +  }
>     > +
>     > +  Reclaimed = TRUE;
>     > +
>     > +  Status = EFI_SUCCESS;
>     > +
>     > +  if (mVariableModuleGlobal->CommonRuntimeVariableSpace <
>     > mVariableModuleGlobal->CommonVariableTotalSize) {
>     > +    RemainingCommonRuntimeVariableSpace = 0;
>     > +  } else {
>     > +    RemainingCommonRuntimeVariableSpace = mVariableModuleGlobal-
>     > >CommonRuntimeVariableSpace - mVariableModuleGlobal-
>     > >CommonVariableTotalSize;
>     > +  }
>     > +
>     > +  RemainingHwErrVariableSpace = PcdGet32 (PcdHwErrStorageSize) -
>     > mVariableModuleGlobal->HwErrVariableTotalSize;
>     > +
>     > +  //
>     > +  // Check if the free area is below a threshold.
>     > +  //
>     > +  if (((RemainingCommonRuntimeVariableSpace < mVariableModuleGlobal-
>     > >MaxVariableSize) ||
>     > +       (RemainingCommonRuntimeVariableSpace < mVariableModuleGlobal-
>     > >MaxAuthVariableSize)) ||
>     > +      ((PcdGet32 (PcdHwErrStorageSize) != 0) &&
>     > +       (RemainingHwErrVariableSpace < PcdGet32
>     > (PcdMaxHardwareErrorVariableSize))))
>     > +  {
>     > +    Status = Reclaim (
>     > +               mVariableModuleGlobal->VariableGlobal.NonVolatileVariableBase,
>     > +               &mVariableModuleGlobal->NonVolatileLastVariableOffset,
>     > +               FALSE,
>     > +               NULL,
>     > +               NULL,
>     > +               0
>     > +               );
>     > +    ASSERT_EFI_ERROR (Status);
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Get maximum variable size, covering both non-volatile and volatile
> variables.
>     > +
>     > +  @return Maximum variable size.
>     > +
>     > +**/
>     > +UINTN
>     > +GetMaxVariableSize (
>     > +  VOID
>     > +  )
>     > +{
>     > +  UINTN  MaxVariableSize;
>     > +
>     > +  MaxVariableSize = GetNonVolatileMaxVariableSize ();
>     > +  //
>     > +  // The condition below fails implicitly if PcdMaxVolatileVariableSize equals
>     > +  // the default zero value.
>     > +  //
>     > +  if (MaxVariableSize < PcdGet32 (PcdMaxVolatileVariableSize)) {
>     > +    MaxVariableSize = PcdGet32 (PcdMaxVolatileVariableSize);
>     > +  }
>     > +
>     > +  return MaxVariableSize;
>     > +}
>     > +
>     > +/**
>     > +  Flush the HOB variable to flash.
>     > +
>     > +  @param[in] VariableName       Name of variable has been updated or
> deleted.
>     > +  @param[in] VendorGuid         Guid of variable has been updated or deleted.
>     > +
>     > +**/
>     > +VOID
>     > +FlushHobVariableToFlash (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid
>     > +  )
>     > +{
>     > +  EFI_STATUS              Status;
>     > +  VARIABLE_STORE_HEADER   *VariableStoreHeader;
>     > +  VARIABLE_HEADER         *Variable;
>     > +  VOID                    *VariableData;
>     > +  VARIABLE_POINTER_TRACK  VariablePtrTrack;
>     > +  BOOLEAN                 ErrorFlag;
>     > +  BOOLEAN                 AuthFormat;
>     > +
>     > +  ErrorFlag  = FALSE;
>     > +  AuthFormat = mVariableModuleGlobal->VariableGlobal.AuthFormat;
>     > +
>     > +  //
>     > +  // Flush the HOB variable to flash.
>     > +  //
>     > +  if (mVariableModuleGlobal->VariableGlobal.HobVariableBase != 0) {
>     > +    VariableStoreHeader = (VARIABLE_STORE_HEADER
>     > *)(UINTN)mVariableModuleGlobal->VariableGlobal.HobVariableBase;
>     > +    //
>     > +    // Set HobVariableBase to 0, it can avoid SetVariable to call back.
>     > +    //
>     > +    mVariableModuleGlobal->VariableGlobal.HobVariableBase = 0;
>     > +    for ( Variable = GetStartPointer (VariableStoreHeader)
>     > +          ; IsValidVariableHeader (Variable, GetEndPointer
> (VariableStoreHeader),
>     > AuthFormat)
>     > +          ; Variable = GetNextVariablePtr (Variable, AuthFormat)
>     > +          )
>     > +    {
>     > +      if (Variable->State != VAR_ADDED) {
>     > +        //
>     > +        // The HOB variable has been set to DELETED state in local.
>     > +        //
>     > +        continue;
>     > +      }
>     > +
>     > +      ASSERT ((Variable->Attributes & EFI_VARIABLE_NON_VOLATILE) != 0);
>     > +      if ((VendorGuid == NULL) || (VariableName == NULL) ||
>     > +          !CompareGuid (VendorGuid, GetVendorGuidPtr (Variable,
> AuthFormat)) ||
>     > +          (StrCmp (VariableName, GetVariableNamePtr (Variable,
> AuthFormat)) !=
>     > 0))
>     > +      {
>     > +        VariableData = GetVariableDataPtr (Variable, AuthFormat);
>     > +        FindVariable (
>     > +          GetVariableNamePtr (Variable, AuthFormat),
>     > +          GetVendorGuidPtr (Variable, AuthFormat),
>     > +          &VariablePtrTrack,
>     > +          &mVariableModuleGlobal->VariableGlobal,
>     > +          FALSE
>     > +          );
>     > +        Status = UpdateVariable (
>     > +                   GetVariableNamePtr (Variable, AuthFormat),
>     > +                   GetVendorGuidPtr (Variable, AuthFormat),
>     > +                   VariableData,
>     > +                   DataSizeOfVariable (Variable, AuthFormat),
>     > +                   Variable->Attributes,
>     > +                   0,
>     > +                   0,
>     > +                   &VariablePtrTrack,
>     > +                   NULL
>     > +                   );
>     > +        DEBUG ((
>     > +          DEBUG_INFO,
>     > +          "Variable driver flush the HOB variable to flash: %g %s %r\n",
>     > +          GetVendorGuidPtr (Variable, AuthFormat),
>     > +          GetVariableNamePtr (Variable, AuthFormat),
>     > +          Status
>     > +          ));
>     > +      } else {
>     > +        //
>     > +        // The updated or deleted variable is matched with this HOB variable.
>     > +        // Don't break here because we will try to set other HOB variables
>     > +        // since this variable could be set successfully.
>     > +        //
>     > +        Status = EFI_SUCCESS;
>     > +      }
>     > +
>     > +      if (!EFI_ERROR (Status)) {
>     > +        //
>     > +        // If set variable successful, or the updated or deleted variable is
> matched
>     > with the HOB variable,
>     > +        // set the HOB variable to DELETED state in local.
>     > +        //
>     > +        DEBUG ((
>     > +          DEBUG_INFO,
>     > +          "Variable driver set the HOB variable to DELETED state in
> local: %g %s\n",
>     > +          GetVendorGuidPtr (Variable, AuthFormat),
>     > +          GetVariableNamePtr (Variable, AuthFormat)
>     > +          ));
>     > +        Variable->State &= VAR_DELETED;
>     > +      } else {
>     > +        ErrorFlag = TRUE;
>     > +      }
>     > +    }
>     > +
>     > +    if (mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.VariableRuntimeHobCache.S
> tor
>     > e != NULL) {
>     > +      Status =  SynchronizeRuntimeVariableCache (
>     > +                  &mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.VariableRuntimeHobCache,
>     > +                  0,
>     > +                  mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.VariableRuntimeHobCache.S
> tor
>     > e->Size
>     > +                  );
>     > +      ASSERT_EFI_ERROR (Status);
>     > +    }
>     > +
>     > +    if (ErrorFlag) {
>     > +      //
>     > +      // We still have HOB variable(s) not flushed in flash.
>     > +      //
>     > +      mVariableModuleGlobal->VariableGlobal.HobVariableBase =
>     > (EFI_PHYSICAL_ADDRESS)(UINTN)VariableStoreHeader;
>     > +    } else {
>     > +      //
>     > +      // All HOB variables have been flushed in flash.
>     > +      //
>     > +      DEBUG ((DEBUG_INFO, "Variable driver: all HOB variables have been
>     > flushed in flash.\n"));
>     > +      if (mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.HobFlushComplete != NULL)
> {
>     > +        *(mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.HobFlushComplete) = TRUE;
>     > +      }
>     > +
>     > +      if (!AtRuntime ()) {
>     > +        FreePool ((VOID *)VariableStoreHeader);
>     > +      }
>     > +    }
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Initializes variable write service.
>     > +
>     > +  @retval EFI_SUCCESS          Function successfully executed.
>     > +  @retval Others               Fail to initialize the variable service.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +VariableWriteServiceInitialize (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS               Status;
>     > +  UINTN                    Index;
>     > +  UINT8                    Data;
>     > +  VARIABLE_ENTRY_PROPERTY  *VariableEntry;
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +
>     > +  //
>     > +  // Check if the free area is really free.
>     > +  //
>     > +  for (Index = mVariableModuleGlobal->NonVolatileLastVariableOffset;
> Index <
>     > mNvVariableCache->Size; Index++) {
>     > +    Data = ((UINT8 *)mNvVariableCache)[Index];
>     > +    if (Data != 0xff) {
>     > +      //
>     > +      // There must be something wrong in variable store, do reclaim
> operation.
>     > +      //
>     > +      Status = Reclaim (
>     > +                 mVariableModuleGlobal-
> >VariableGlobal.NonVolatileVariableBase,
>     > +                 &mVariableModuleGlobal->NonVolatileLastVariableOffset,
>     > +                 FALSE,
>     > +                 NULL,
>     > +                 NULL,
>     > +                 0
>     > +                 );
>     > +      if (EFI_ERROR (Status)) {
>     > +        ReleaseLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +        return Status;
>     > +      }
>     > +
>     > +      break;
>     > +    }
>     > +  }
>     > +
>     > +  FlushHobVariableToFlash (NULL, NULL);
>     > +
>     > +  Status = EFI_SUCCESS;
>     > +  ZeroMem (&mAuthContextOut, sizeof (mAuthContextOut));
>     > +  if (mVariableModuleGlobal->VariableGlobal.AuthFormat) {
>     > +    //
>     > +    // Authenticated variable initialize.
>     > +    //
>     > +    mAuthContextIn.StructSize          = sizeof (AUTH_VAR_LIB_CONTEXT_IN);
>     > +    mAuthContextIn.MaxAuthVariableSize =  mVariableModuleGlobal-
>     > >MaxAuthVariableSize -
>     > +                                         GetVariableHeaderSize (mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +    Status = AuthVariableLibInitialize (&mAuthContextIn,
> &mAuthContextOut);
>     > +    if (!EFI_ERROR (Status)) {
>     > +      DEBUG ((DEBUG_INFO, "Variable driver will work with auth variable
>     > support!\n"));
>     > +      mVariableModuleGlobal->VariableGlobal.AuthSupport = TRUE;
>     > +      if (mAuthContextOut.AuthVarEntry != NULL) {
>     > +        for (Index = 0; Index < mAuthContextOut.AuthVarEntryCount; Index++)
> {
>     > +          VariableEntry = &mAuthContextOut.AuthVarEntry[Index];
>     > +          Status        = VarCheckLibVariablePropertySet (
>     > +                            VariableEntry->Name,
>     > +                            VariableEntry->Guid,
>     > +                            &VariableEntry->VariableProperty
>     > +                            );
>     > +          ASSERT_EFI_ERROR (Status);
>     > +        }
>     > +      }
>     > +    } else if (Status == EFI_UNSUPPORTED) {
>     > +      DEBUG ((DEBUG_INFO, "NOTICE - AuthVariableLibInitialize()
> returns %r!\n",
>     > Status));
>     > +      DEBUG ((DEBUG_INFO, "Variable driver will continue to work without
> auth
>     > variable support!\n"));
>     > +      mVariableModuleGlobal->VariableGlobal.AuthSupport = FALSE;
>     > +      Status                                            = EFI_SUCCESS;
>     > +    }
>     > +  }
>     > +
>     > +  if (!EFI_ERROR (Status)) {
>     > +    for (Index = 0; Index < ARRAY_SIZE (mVariableEntryProperty); Index++) {
>     > +      VariableEntry = &mVariableEntryProperty[Index];
>     > +      Status        = VarCheckLibVariablePropertySet (VariableEntry->Name,
>     > VariableEntry->Guid, &VariableEntry->VariableProperty);
>     > +      ASSERT_EFI_ERROR (Status);
>     > +    }
>     > +  }
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock);
>     > +
>     > +  //
>     > +  // Initialize MOR Lock variable.
>     > +  //
>     > +  MorLockInit ();
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Convert normal variable storage to the allocated auth variable storage.
>     > +
>     > +  @param[in]  NormalVarStorage  Pointer to the normal variable storage
>     > header
>     > +
>     > +  @retval the allocated auth variable storage
>     > +**/
>     > +VOID *
>     > +ConvertNormalVarStorageToAuthVarStorage (
>     > +  VARIABLE_STORE_HEADER  *NormalVarStorage
>     > +  )
>     > +{
>     > +  VARIABLE_HEADER                *StartPtr;
>     > +  UINT8                          *NextPtr;
>     > +  VARIABLE_HEADER                *EndPtr;
>     > +  UINTN                          AuthVarStorageSize;
>     > +  AUTHENTICATED_VARIABLE_HEADER  *AuthStartPtr;
>     > +  VARIABLE_STORE_HEADER          *AuthVarStorage;
>     > +
>     > +  AuthVarStorageSize = sizeof (VARIABLE_STORE_HEADER);
>     > +  //
>     > +  // Set AuthFormat as FALSE for normal variable storage
>     > +  //
>     > +  mVariableModuleGlobal->VariableGlobal.AuthFormat = FALSE;
>     > +
>     > +  //
>     > +  // Calculate Auth Variable Storage Size
>     > +  //
>     > +  StartPtr = GetStartPointer (NormalVarStorage);
>     > +  EndPtr   = GetEndPointer (NormalVarStorage);
>     > +  while (StartPtr < EndPtr) {
>     > +    if (StartPtr->State == VAR_ADDED) {
>     > +      AuthVarStorageSize  = HEADER_ALIGN (AuthVarStorageSize);
>     > +      AuthVarStorageSize += sizeof (AUTHENTICATED_VARIABLE_HEADER);
>     > +      AuthVarStorageSize += StartPtr->NameSize + GET_PAD_SIZE (StartPtr-
>     > >NameSize);
>     > +      AuthVarStorageSize += StartPtr->DataSize + GET_PAD_SIZE (StartPtr-
>     > >DataSize);
>     > +    }
>     > +
>     > +    StartPtr = GetNextVariablePtr (StartPtr, mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +  }
>     > +
>     > +  //
>     > +  // Allocate Runtime memory for Auth Variable Storage
>     > +  //
>     > +  AuthVarStorage = AllocateRuntimeZeroPool (AuthVarStorageSize);
>     > +  ASSERT (AuthVarStorage != NULL);
>     > +  if (AuthVarStorage == NULL) {
>     > +    return NULL;
>     > +  }
>     > +
>     > +  //
>     > +  // Copy Variable from Normal storage to Auth storage
>     > +  //
>     > +  StartPtr     = GetStartPointer (NormalVarStorage);
>     > +  EndPtr       = GetEndPointer (NormalVarStorage);
>     > +  AuthStartPtr = (AUTHENTICATED_VARIABLE_HEADER *)GetStartPointer
>     > (AuthVarStorage);
>     > +  while (StartPtr < EndPtr) {
>     > +    if (StartPtr->State == VAR_ADDED) {
>     > +      AuthStartPtr = (AUTHENTICATED_VARIABLE_HEADER *)HEADER_ALIGN
>     > (AuthStartPtr);
>     > +      //
>     > +      // Copy Variable Header
>     > +      //
>     > +      AuthStartPtr->StartId    = StartPtr->StartId;
>     > +      AuthStartPtr->State      = StartPtr->State;
>     > +      AuthStartPtr->Attributes = StartPtr->Attributes;
>     > +      AuthStartPtr->NameSize   = StartPtr->NameSize;
>     > +      AuthStartPtr->DataSize   = StartPtr->DataSize;
>     > +      CopyGuid (&AuthStartPtr->VendorGuid, &StartPtr->VendorGuid);
>     > +      //
>     > +      // Copy Variable Name
>     > +      //
>     > +      NextPtr = (UINT8 *)(AuthStartPtr + 1);
>     > +      CopyMem (
>     > +        NextPtr,
>     > +        GetVariableNamePtr (StartPtr, mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat),
>     > +        AuthStartPtr->NameSize
>     > +        );
>     > +      //
>     > +      // Copy Variable Data
>     > +      //
>     > +      NextPtr = NextPtr + AuthStartPtr->NameSize + GET_PAD_SIZE
> (AuthStartPtr-
>     > >NameSize);
>     > +      CopyMem (NextPtr, GetVariableDataPtr (StartPtr,
> mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat), AuthStartPtr->DataSize);
>     > +      //
>     > +      // Go to next variable
>     > +      //
>     > +      AuthStartPtr = (AUTHENTICATED_VARIABLE_HEADER *)(NextPtr +
>     > AuthStartPtr->DataSize + GET_PAD_SIZE (AuthStartPtr->DataSize));
>     > +    }
>     > +
>     > +    StartPtr = GetNextVariablePtr (StartPtr, mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +  }
>     > +
>     > +  //
>     > +  // Update Auth Storage Header
>     > +  //
>     > +  AuthVarStorage->Format = NormalVarStorage->Format;
>     > +  AuthVarStorage->State  = NormalVarStorage->State;
>     > +  AuthVarStorage->Size   = (UINT32)((UINTN)AuthStartPtr -
>     > (UINTN)AuthVarStorage);
>     > +  CopyGuid (&AuthVarStorage->Signature, &gEfiAuthenticatedVariableGuid);
>     > +  ASSERT (AuthVarStorage->Size <= AuthVarStorageSize);
>     > +
>     > +  //
>     > +  // Restore AuthFormat
>     > +  //
>     > +  mVariableModuleGlobal->VariableGlobal.AuthFormat = TRUE;
>     > +  return AuthVarStorage;
>     > +}
>     > +
>     > +/**
>     > +  Get HOB variable store.
>     > +
>     > +  @param[in] VariableGuid       NV variable store signature.
>     > +
>     > +  @retval EFI_SUCCESS           Function successfully executed.
>     > +  @retval EFI_OUT_OF_RESOURCES  Fail to allocate enough memory
> resource.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetHobVariableStore (
>     > +  IN EFI_GUID  *VariableGuid
>     > +  )
>     > +{
>     > +  VARIABLE_STORE_HEADER  *VariableStoreHeader;
>     > +  UINT64                 VariableStoreLength;
>     > +  EFI_HOB_GUID_TYPE      *GuidHob;
>     > +  BOOLEAN                NeedConvertNormalToAuth;
>     > +
>     > +  //
>     > +  // Make sure there is no more than one Variable HOB.
>     > +  //
>     > +  DEBUG_CODE_BEGIN ();
>     > +  GuidHob = GetFirstGuidHob (&gEfiAuthenticatedVariableGuid);
>     > +  if (GuidHob != NULL) {
>     > +    if ((GetNextGuidHob (&gEfiAuthenticatedVariableGuid, GET_NEXT_HOB
>     > (GuidHob)) != NULL)) {
>     > +      DEBUG ((DEBUG_ERROR, "ERROR: Found two Auth Variable HOBs\n"));
>     > +      ASSERT (FALSE);
>     > +    } else if (GetFirstGuidHob (&gEfiVariableGuid) != NULL) {
>     > +      DEBUG ((DEBUG_ERROR, "ERROR: Found one Auth + one Normal
> Variable
>     > HOBs\n"));
>     > +      ASSERT (FALSE);
>     > +    }
>     > +  } else {
>     > +    GuidHob = GetFirstGuidHob (&gEfiVariableGuid);
>     > +    if (GuidHob != NULL) {
>     > +      if ((GetNextGuidHob (&gEfiVariableGuid, GET_NEXT_HOB (GuidHob)) !=
>     > NULL)) {
>     > +        DEBUG ((DEBUG_ERROR, "ERROR: Found two Normal Variable
> HOBs\n"));
>     > +        ASSERT (FALSE);
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  DEBUG_CODE_END ();
>     > +
>     > +  //
>     > +  // Combinations supported:
>     > +  // 1. Normal NV variable store +
>     > +  //    Normal HOB variable store
>     > +  // 2. Auth NV variable store +
>     > +  //    Auth HOB variable store
>     > +  // 3. Auth NV variable store +
>     > +  //    Normal HOB variable store (code will convert it to Auth Format)
>     > +  //
>     > +  NeedConvertNormalToAuth = FALSE;
>     > +  GuidHob                 = GetFirstGuidHob (VariableGuid);
>     > +  if ((GuidHob == NULL) && (VariableGuid ==
> &gEfiAuthenticatedVariableGuid)) {
>     > +    //
>     > +    // Try getting it from normal variable HOB
>     > +    //
>     > +    GuidHob                 = GetFirstGuidHob (&gEfiVariableGuid);
>     > +    NeedConvertNormalToAuth = TRUE;
>     > +  }
>     > +
>     > +  if (GuidHob != NULL) {
>     > +    VariableStoreHeader = GET_GUID_HOB_DATA (GuidHob);
>     > +    VariableStoreLength = GuidHob->Header.HobLength - sizeof
>     > (EFI_HOB_GUID_TYPE);
>     > +    if (GetVariableStoreStatus (VariableStoreHeader) == EfiValid) {
>     > +      if (!NeedConvertNormalToAuth) {
>     > +        mVariableModuleGlobal->VariableGlobal.HobVariableBase =
>     > (EFI_PHYSICAL_ADDRESS)(UINTN)AllocateRuntimeCopyPool
>     > ((UINTN)VariableStoreLength, (VOID *)VariableStoreHeader);
>     > +      } else {
>     > +        mVariableModuleGlobal->VariableGlobal.HobVariableBase =
>     >
> (EFI_PHYSICAL_ADDRESS)(UINTN)ConvertNormalVarStorageToAuthVarStorage
>     > ((VOID *)VariableStoreHeader);
>     > +      }
>     > +
>     > +      if (mVariableModuleGlobal->VariableGlobal.HobVariableBase == 0) {
>     > +        return EFI_OUT_OF_RESOURCES;
>     > +      }
>     > +    } else {
>     > +      DEBUG ((DEBUG_ERROR, "HOB Variable Store header is corrupted!\n"));
>     > +    }
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Initializes variable store area for non-volatile and volatile variable.
>     > +
>     > +  @retval EFI_SUCCESS           Function successfully executed.
>     > +  @retval EFI_OUT_OF_RESOURCES  Fail to allocate enough memory
> resource.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +VariableCommonInitialize (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS             Status;
>     > +  VARIABLE_STORE_HEADER  *VolatileVariableStore;
>     > +  UINTN                  ScratchSize;
>     > +  EFI_GUID               *VariableGuid;
>     > +
>     > +  //
>     > +  // Allocate runtime memory for variable driver global structure.
>     > +  //
>     > +  mVariableModuleGlobal = AllocateRuntimeZeroPool (sizeof
>     > (VARIABLE_MODULE_GLOBAL));
>     > +  if (mVariableModuleGlobal == NULL) {
>     > +    return EFI_OUT_OF_RESOURCES;
>     > +  }
>     > +
>     > +  InitializeLock (&mVariableModuleGlobal-
>     > >VariableGlobal.VariableServicesLock, TPL_NOTIFY);
>     > +
>     > +  //
>     > +  // Init non-volatile variable store.
>     > +  //
>     > +  Status = InitNonVolatileVariableStore ();
>     > +  if (EFI_ERROR (Status)) {
>     > +    FreePool (mVariableModuleGlobal);
>     > +    return Status;
>     > +  }
>     > +
>     > +  //
>     > +  // mVariableModuleGlobal->VariableGlobal.AuthFormat
>     > +  // has been initialized in InitNonVolatileVariableStore().
>     > +  //
>     > +  if (mVariableModuleGlobal->VariableGlobal.AuthFormat) {
>     > +    DEBUG ((DEBUG_INFO, "Variable driver will work with auth variable
>     > format!\n"));
>     > +    //
>     > +    // Set AuthSupport to FALSE first, VariableWriteServiceInitialize() will
> initialize
>     > it.
>     > +    //
>     > +    mVariableModuleGlobal->VariableGlobal.AuthSupport = FALSE;
>     > +    VariableGuid                                      = &gEfiAuthenticatedVariableGuid;
>     > +  } else {
>     > +    DEBUG ((DEBUG_INFO, "Variable driver will work without auth variable
>     > support!\n"));
>     > +    mVariableModuleGlobal->VariableGlobal.AuthSupport = FALSE;
>     > +    VariableGuid                                      = &gEfiVariableGuid;
>     > +  }
>     > +
>     > +  //
>     > +  // Get HOB variable store.
>     > +  //
>     > +  Status = GetHobVariableStore (VariableGuid);
>     > +  if (EFI_ERROR (Status)) {
>     > +    if (mNvFvHeaderCache != NULL) {
>     > +      FreePool (mNvFvHeaderCache);
>     > +    }
>     > +
>     > +    FreePool (mVariableModuleGlobal);
>     > +    return Status;
>     > +  }
>     > +
>     > +  mVariableModuleGlobal->MaxVolatileVariableSize = ((PcdGet32
>     > (PcdMaxVolatileVariableSize) != 0) ?
>     > +                                                    PcdGet32 (PcdMaxVolatileVariableSize) :
>     > +                                                    mVariableModuleGlobal->MaxVariableSize
>     > +                                                    );
>     > +  //
>     > +  // Allocate memory for volatile variable store, note that there is a scratch
>     > space to store scratch data.
>     > +  //
>     > +  ScratchSize                              = GetMaxVariableSize () * 2;
>     > +  mVariableModuleGlobal->ScratchBufferSize = ScratchSize;
>     > +  VolatileVariableStore                    = AllocateRuntimePool (PcdGet32
>     > (PcdVariableStoreSize) + ScratchSize);
>     > +  if (VolatileVariableStore == NULL) {
>     > +    if (mVariableModuleGlobal->VariableGlobal.HobVariableBase != 0) {
>     > +      FreePool ((VOID *)(UINTN)mVariableModuleGlobal-
>     > >VariableGlobal.HobVariableBase);
>     > +    }
>     > +
>     > +    if (mNvFvHeaderCache != NULL) {
>     > +      FreePool (mNvFvHeaderCache);
>     > +    }
>     > +
>     > +    FreePool (mVariableModuleGlobal);
>     > +    return EFI_OUT_OF_RESOURCES;
>     > +  }
>     > +
>     > +  SetMem (VolatileVariableStore, PcdGet32 (PcdVariableStoreSize) +
> ScratchSize,
>     > 0xff);
>     > +
>     > +  //
>     > +  // Initialize Variable Specific Data.
>     > +  //
>     > +  mVariableModuleGlobal->VariableGlobal.VolatileVariableBase =
>     > (EFI_PHYSICAL_ADDRESS)(UINTN)VolatileVariableStore;
>     > +  mVariableModuleGlobal->VolatileLastVariableOffset          =
>     > (UINTN)GetStartPointer (VolatileVariableStore) -
> (UINTN)VolatileVariableStore;
>     > +
>     > +  CopyGuid (&VolatileVariableStore->Signature, VariableGuid);
>     > +  VolatileVariableStore->Size      = PcdGet32 (PcdVariableStoreSize);
>     > +  VolatileVariableStore->Format    = VARIABLE_STORE_FORMATTED;
>     > +  VolatileVariableStore->State     = VARIABLE_STORE_HEALTHY;
>     > +  VolatileVariableStore->Reserved  = 0;
>     > +  VolatileVariableStore->Reserved1 = 0;
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Get the proper fvb handle and/or fvb protocol by the given Flash address.
>     > +
>     > +  @param[in]  Address       The Flash address.
>     > +  @param[out] FvbHandle     In output, if it is not NULL, it points to the
> proper
>     > FVB handle.
>     > +  @param[out] FvbProtocol   In output, if it is not NULL, it points to the
> proper
>     > FVB protocol.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetFvbInfoByAddress (
>     > +  IN  EFI_PHYSICAL_ADDRESS                Address,
>     > +  OUT EFI_HANDLE                          *FvbHandle OPTIONAL,
>     > +  OUT EFI_FIRMWARE_VOLUME_BLOCK_PROTOCOL  **FvbProtocol
> OPTIONAL
>     > +  )
>     > +{
>     > +  EFI_STATUS                          Status;
>     > +  EFI_HANDLE                          *HandleBuffer;
>     > +  UINTN                               HandleCount;
>     > +  UINTN                               Index;
>     > +  EFI_PHYSICAL_ADDRESS                FvbBaseAddress;
>     > +  EFI_FIRMWARE_VOLUME_BLOCK_PROTOCOL  *Fvb;
>     > +  EFI_FVB_ATTRIBUTES_2                Attributes;
>     > +  UINTN                               BlockSize;
>     > +  UINTN                               NumberOfBlocks;
>     > +
>     > +  HandleBuffer = NULL;
>     > +  //
>     > +  // Get all FVB handles.
>     > +  //
>     > +  Status = GetFvbCountAndBuffer (&HandleCount, &HandleBuffer);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return EFI_NOT_FOUND;
>     > +  }
>     > +
>     > +  //
>     > +  // Get the FVB to access variable store.
>     > +  //
>     > +  Fvb = NULL;
>     > +  for (Index = 0; Index < HandleCount; Index += 1, Status = EFI_NOT_FOUND,
>     > Fvb = NULL) {
>     > +    Status = GetFvbByHandle (HandleBuffer[Index], &Fvb);
>     > +    if (EFI_ERROR (Status)) {
>     > +      Status = EFI_NOT_FOUND;
>     > +      break;
>     > +    }
>     > +
>     > +    //
>     > +    // Ensure this FVB protocol supported Write operation.
>     > +    //
>     > +    Status = Fvb->GetAttributes (Fvb, &Attributes);
>     > +    if (EFI_ERROR (Status) || ((Attributes & EFI_FVB2_WRITE_STATUS) == 0))
> {
>     > +      continue;
>     > +    }
>     > +
>     > +    //
>     > +    // Compare the address and select the right one.
>     > +    //
>     > +    Status = Fvb->GetPhysicalAddress (Fvb, &FvbBaseAddress);
>     > +    if (EFI_ERROR (Status)) {
>     > +      continue;
>     > +    }
>     > +
>     > +    //
>     > +    // Assume one FVB has one type of BlockSize.
>     > +    //
>     > +    Status = Fvb->GetBlockSize (Fvb, 0, &BlockSize, &NumberOfBlocks);
>     > +    if (EFI_ERROR (Status)) {
>     > +      continue;
>     > +    }
>     > +
>     > +    if ((Address >= FvbBaseAddress) && (Address < (FvbBaseAddress +
> BlockSize *
>     > NumberOfBlocks))) {
>     > +      if (FvbHandle != NULL) {
>     > +        *FvbHandle = HandleBuffer[Index];
>     > +      }
>     > +
>     > +      if (FvbProtocol != NULL) {
>     > +        *FvbProtocol = Fvb;
>     > +      }
>     > +
>     > +      Status = EFI_SUCCESS;
>     > +      break;
>     > +    }
>     > +  }
>     > +
>     > +  FreePool (HandleBuffer);
>     > +
>     > +  if (Fvb == NULL) {
>     > +    Status = EFI_NOT_FOUND;
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > diff --git
>     > a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableDxe.c
>     > b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableDxe.c
>     > new file mode 100644
>     > index 000000000000..4595bf8c9d02
>     > --- /dev/null
>     > +++
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableDxe.c
>     > @@ -0,0 +1,670 @@
>     > +/** @file
>     > +  Implement all four UEFI Runtime Variable services for the nonvolatile
>     > +  and volatile storage space and install variable architecture protocol.
>     > +
>     > +Copyright (C) 2013, Red Hat, Inc.
>     > +Copyright (c) 2006 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +(C) Copyright 2015 Hewlett Packard Enterprise Development LP<BR>
>     > +Copyright (c) Microsoft Corporation.
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include "Variable.h"
>     > +
>     > +#include <Protocol/VariablePolicy.h>
>     > +#include <Library/VariablePolicyLib.h>
>     > +#include "VariableParsing.h"
>     > +
>     > +EFI_STATUS
>     > +EFIAPI
>     > +ProtocolIsVariablePolicyEnabled (
>     > +  OUT BOOLEAN  *State
>     > +  );
>     > +
>     > +EFI_HANDLE                      mHandle                      = NULL;
>     > +EFI_EVENT                       mVirtualAddressChangeEvent   = NULL;
>     > +VOID                            *mFtwRegistration            = NULL;
>     > +VOID                            ***mVarCheckAddressPointer   = NULL;
>     > +UINTN                           mVarCheckAddressPointerCount = 0;
>     > +EDKII_VARIABLE_LOCK_PROTOCOL    mVariableLock                =
>     > { VariableLockRequestToLock };
>     > +EDKII_VARIABLE_POLICY_PROTOCOL  mVariablePolicyProtocol      = {
>     > +  EDKII_VARIABLE_POLICY_PROTOCOL_REVISION,
>     > +  DisableVariablePolicy,
>     > +  ProtocolIsVariablePolicyEnabled,
>     > +  RegisterVariablePolicy,
>     > +  DumpVariablePolicy,
>     > +  LockVariablePolicy
>     > +};
>     > +EDKII_VAR_CHECK_PROTOCOL        mVarCheck = {
>     > +  VarCheckRegisterSetVariableCheckHandler,
>     > +  VarCheckVariablePropertySet,
>     > +  VarCheckVariablePropertyGet
>     > +};
>     > +
>     > +/**
>     > +  Some Secure Boot Policy Variable may update following other variable
>     > changes(SecureBoot follows PK change, etc).
>     > +  Record their initial State when variable write service is ready.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +RecordSecureBootPolicyVarData (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Return TRUE if ExitBootServices () has been called.
>     > +
>     > +  @retval TRUE If ExitBootServices () has been called.
>     > +**/
>     > +BOOLEAN
>     > +AtRuntime (
>     > +  VOID
>     > +  )
>     > +{
>     > +  return EfiAtRuntime ();
>     > +}
>     > +
>     > +/**
>     > +  Initializes a basic mutual exclusion lock.
>     > +
>     > +  This function initializes a basic mutual exclusion lock to the released state
>     > +  and returns the lock.  Each lock provides mutual exclusion access at its
> task
>     > +  priority level.  Since there is no preemption or multiprocessor support in
> EFI,
>     > +  acquiring the lock only consists of raising to the locks TPL.
>     > +  If Lock is NULL, then ASSERT().
>     > +  If Priority is not a valid TPL value, then ASSERT().
>     > +
>     > +  @param  Lock       A pointer to the lock data structure to initialize.
>     > +  @param  Priority   EFI TPL is associated with the lock.
>     > +
>     > +  @return The lock.
>     > +
>     > +**/
>     > +EFI_LOCK *
>     > +InitializeLock (
>     > +  IN OUT EFI_LOCK  *Lock,
>     > +  IN     EFI_TPL   Priority
>     > +  )
>     > +{
>     > +  return EfiInitializeLock (Lock, Priority);
>     > +}
>     > +
>     > +/**
>     > +  Acquires lock only at boot time. Simply returns at runtime.
>     > +
>     > +  This is a temperary function that will be removed when
>     > +  EfiAcquireLock() in UefiLib can handle the call in UEFI
>     > +  Runtimer driver in RT phase.
>     > +  It calls EfiAcquireLock() at boot time, and simply returns
>     > +  at runtime.
>     > +
>     > +  @param  Lock         A pointer to the lock to acquire.
>     > +
>     > +**/
>     > +VOID
>     > +AcquireLockOnlyAtBootTime (
>     > +  IN EFI_LOCK  *Lock
>     > +  )
>     > +{
>     > +  if (!AtRuntime ()) {
>     > +    EfiAcquireLock (Lock);
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Releases lock only at boot time. Simply returns at runtime.
>     > +
>     > +  This is a temperary function which will be removed when
>     > +  EfiReleaseLock() in UefiLib can handle the call in UEFI
>     > +  Runtimer driver in RT phase.
>     > +  It calls EfiReleaseLock() at boot time and simply returns
>     > +  at runtime.
>     > +
>     > +  @param  Lock         A pointer to the lock to release.
>     > +
>     > +**/
>     > +VOID
>     > +ReleaseLockOnlyAtBootTime (
>     > +  IN EFI_LOCK  *Lock
>     > +  )
>     > +{
>     > +  if (!AtRuntime ()) {
>     > +    EfiReleaseLock (Lock);
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Retrieve the Fault Tolerent Write protocol interface.
>     > +
>     > +  @param[out] FtwProtocol       The interface of Ftw protocol
>     > +
>     > +  @retval EFI_SUCCESS           The FTW protocol instance was found and
>     > returned in FtwProtocol.
>     > +  @retval EFI_NOT_FOUND         The FTW protocol instance was not found.
>     > +  @retval EFI_INVALID_PARAMETER SarProtocol is NULL.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetFtwProtocol (
>     > +  OUT VOID  **FtwProtocol
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  //
>     > +  // Locate Fault Tolerent Write protocol
>     > +  //
>     > +  Status = gBS->LocateProtocol (
>     > +                  &gEfiFaultTolerantWriteProtocolGuid,
>     > +                  NULL,
>     > +                  FtwProtocol
>     > +                  );
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Retrieve the FVB protocol interface by HANDLE.
>     > +
>     > +  @param[in]  FvBlockHandle     The handle of FVB protocol that provides
>     > services for
>     > +                                reading, writing, and erasing the target block.
>     > +  @param[out] FvBlock           The interface of FVB protocol
>     > +
>     > +  @retval EFI_SUCCESS           The interface information for the specified
>     > protocol was returned.
>     > +  @retval EFI_UNSUPPORTED       The device does not support the FVB
> protocol.
>     > +  @retval EFI_INVALID_PARAMETER FvBlockHandle is not a valid
> EFI_HANDLE
>     > or FvBlock is NULL.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetFvbByHandle (
>     > +  IN  EFI_HANDLE                          FvBlockHandle,
>     > +  OUT EFI_FIRMWARE_VOLUME_BLOCK_PROTOCOL  **FvBlock
>     > +  )
>     > +{
>     > +  //
>     > +  // To get the FVB protocol interface on the handle
>     > +  //
>     > +  return gBS->HandleProtocol (
>     > +                FvBlockHandle,
>     > +                &gEfiFirmwareVolumeBlockProtocolGuid,
>     > +                (VOID **)FvBlock
>     > +                );
>     > +}
>     > +
>     > +/**
>     > +  Function returns an array of handles that support the FVB protocol
>     > +  in a buffer allocated from pool.
>     > +
>     > +  @param[out]  NumberHandles    The number of handles returned in Buffer.
>     > +  @param[out]  Buffer           A pointer to the buffer to return the requested
>     > +                                array of  handles that support FVB protocol.
>     > +
>     > +  @retval EFI_SUCCESS           The array of handles was returned in Buffer,
> and
>     > the number of
>     > +                                handles in Buffer was returned in NumberHandles.
>     > +  @retval EFI_NOT_FOUND         No FVB handle was found.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough pool memory to
> store
>     > the matching results.
>     > +  @retval EFI_INVALID_PARAMETER NumberHandles is NULL or Buffer is
> NULL.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetFvbCountAndBuffer (
>     > +  OUT UINTN       *NumberHandles,
>     > +  OUT EFI_HANDLE  **Buffer
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  //
>     > +  // Locate all handles of Fvb protocol
>     > +  //
>     > +  Status = gBS->LocateHandleBuffer (
>     > +                  ByProtocol,
>     > +                  &gEfiFirmwareVolumeBlockProtocolGuid,
>     > +                  NULL,
>     > +                  NumberHandles,
>     > +                  Buffer
>     > +                  );
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Notification function of EVT_SIGNAL_VIRTUAL_ADDRESS_CHANGE.
>     > +
>     > +  This is a notification function registered on
>     > EVT_SIGNAL_VIRTUAL_ADDRESS_CHANGE event.
>     > +  It convers pointer to new virtual address.
>     > +
>     > +  @param  Event        Event whose notification function is being invoked.
>     > +  @param  Context      Pointer to the notification function's context.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +VariableClassAddressChangeEvent (
>     > +  IN EFI_EVENT  Event,
>     > +  IN VOID       *Context
>     > +  )
>     > +{
>     > +  UINTN  Index;
>     > +
>     > +  if (mVariableModuleGlobal->FvbInstance != NULL) {
>     > +    EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
> >FvbInstance-
>     > >GetBlockSize);
>     > +    EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
> >FvbInstance-
>     > >GetPhysicalAddress);
>     > +    EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
> >FvbInstance-
>     > >GetAttributes);
>     > +    EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
> >FvbInstance-
>     > >SetAttributes);
>     > +    EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
> >FvbInstance-
>     > >Read);
>     > +    EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
> >FvbInstance-
>     > >Write);
>     > +    EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
> >FvbInstance-
>     > >EraseBlocks);
>     > +    EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
> >FvbInstance);
>     > +  }
>     > +
>     > +  EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
>     > >PlatformLangCodes);
>     > +  EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal->LangCodes);
>     > +  EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
> >PlatformLang);
>     > +  EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
>     > >VariableGlobal.NonVolatileVariableBase);
>     > +  EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
>     > >VariableGlobal.VolatileVariableBase);
>     > +  EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal-
>     > >VariableGlobal.HobVariableBase);
>     > +  EfiConvertPointer (0x0, (VOID **)&mVariableModuleGlobal);
>     > +  EfiConvertPointer (0x0, (VOID **)&mNvVariableCache);
>     > +  EfiConvertPointer (0x0, (VOID **)&mNvFvHeaderCache);
>     > +
>     > +  if (mAuthContextOut.AddressPointer != NULL) {
>     > +    for (Index = 0; Index < mAuthContextOut.AddressPointerCount; Index++)
> {
>     > +      EfiConvertPointer (0x0, (VOID
> **)mAuthContextOut.AddressPointer[Index]);
>     > +    }
>     > +  }
>     > +
>     > +  if (mVarCheckAddressPointer != NULL) {
>     > +    for (Index = 0; Index < mVarCheckAddressPointerCount; Index++) {
>     > +      EfiConvertPointer (0x0, (VOID **)mVarCheckAddressPointer[Index]);
>     > +    }
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Notification function of EVT_GROUP_READY_TO_BOOT event group.
>     > +
>     > +  This is a notification function registered on
> EVT_GROUP_READY_TO_BOOT
>     > event group.
>     > +  When the Boot Manager is about to load and execute a boot option, it
>     > reclaims variable
>     > +  storage if free size is below the threshold.
>     > +
>     > +  @param  Event        Event whose notification function is being invoked.
>     > +  @param  Context      Pointer to the notification function's context.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +OnReadyToBoot (
>     > +  EFI_EVENT  Event,
>     > +  VOID       *Context
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  if (!mEndOfDxe) {
>     > +    MorLockInitAtEndOfDxe ();
>     > +
>     > +    Status = LockVariablePolicy ();
>     > +    ASSERT_EFI_ERROR (Status);
>     > +    //
>     > +    // Set the End Of DXE bit in case the
> EFI_END_OF_DXE_EVENT_GROUP_GUID
>     > event is not signaled.
>     > +    //
>     > +    mEndOfDxe               = TRUE;
>     > +    mVarCheckAddressPointer = VarCheckLibInitializeAtEndOfDxe
>     > (&mVarCheckAddressPointerCount);
>     > +    //
>     > +    // The initialization for variable quota.
>     > +    //
>     > +    InitializeVariableQuota ();
>     > +  }
>     > +
>     > +  ReclaimForOS ();
>     > +  if (FeaturePcdGet (PcdVariableCollectStatistics)) {
>     > +    if (mVariableModuleGlobal->VariableGlobal.AuthFormat) {
>     > +      gBS->InstallConfigurationTable (&gEfiAuthenticatedVariableGuid,
>     > gVariableInfo);
>     > +    } else {
>     > +      gBS->InstallConfigurationTable (&gEfiVariableGuid, gVariableInfo);
>     > +    }
>     > +  }
>     > +
>     > +  gBS->CloseEvent (Event);
>     > +}
>     > +
>     > +/**
>     > +  Notification function of EFI_END_OF_DXE_EVENT_GROUP_GUID event
> group.
>     > +
>     > +  This is a notification function registered on
>     > EFI_END_OF_DXE_EVENT_GROUP_GUID event group.
>     > +
>     > +  @param  Event        Event whose notification function is being invoked.
>     > +  @param  Context      Pointer to the notification function's context.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +OnEndOfDxe (
>     > +  EFI_EVENT  Event,
>     > +  VOID       *Context
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  DEBUG ((DEBUG_INFO, "[Variable]END_OF_DXE is signaled\n"));
>     > +  MorLockInitAtEndOfDxe ();
>     > +  Status = LockVariablePolicy ();
>     > +  ASSERT_EFI_ERROR (Status);
>     > +  mEndOfDxe               = TRUE;
>     > +  mVarCheckAddressPointer = VarCheckLibInitializeAtEndOfDxe
>     > (&mVarCheckAddressPointerCount);
>     > +  //
>     > +  // The initialization for variable quota.
>     > +  //
>     > +  InitializeVariableQuota ();
>     > +  if (PcdGetBool (PcdReclaimVariableSpaceAtEndOfDxe)) {
>     > +    ReclaimForOS ();
>     > +  }
>     > +
>     > +  gBS->CloseEvent (Event);
>     > +}
>     > +
>     > +/**
>     > +  Initializes variable write service for DXE.
>     > +
>     > +**/
>     > +VOID
>     > +VariableWriteServiceInitializeDxe (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  Status = VariableWriteServiceInitialize ();
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "Variable write service initialization failed.
> Status
>     > = %r\n", Status));
>     > +  }
>     > +
>     > +  //
>     > +  // Some Secure Boot Policy Var (SecureBoot, etc) updates following other
>     > +  // Secure Boot Policy Variable change. Record their initial value.
>     > +  //
>     > +  RecordSecureBootPolicyVarData ();
>     > +
>     > +  //
>     > +  // Install the Variable Write Architectural protocol.
>     > +  //
>     > +  Status = gBS->InstallProtocolInterface (
>     > +                  &mHandle,
>     > +                  &gEfiVariableWriteArchProtocolGuid,
>     > +                  EFI_NATIVE_INTERFACE,
>     > +                  NULL
>     > +                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +}
>     > +
>     > +/**
>     > +  Fault Tolerant Write protocol notification event handler.
>     > +
>     > +  Non-Volatile variable write may needs FTW protocol to reclaim when
>     > +  writting variable.
>     > +
>     > +  @param[in] Event    Event whose notification function is being invoked.
>     > +  @param[in] Context  Pointer to the notification function's context.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +FtwNotificationEvent (
>     > +  IN  EFI_EVENT  Event,
>     > +  IN  VOID       *Context
>     > +  )
>     > +{
>     > +  EFI_STATUS                          Status;
>     > +  EFI_FIRMWARE_VOLUME_BLOCK_PROTOCOL  *FvbProtocol;
>     > +  EFI_FAULT_TOLERANT_WRITE_PROTOCOL   *FtwProtocol;
>     > +  EFI_PHYSICAL_ADDRESS                NvStorageVariableBase;
>     > +  EFI_GCD_MEMORY_SPACE_DESCRIPTOR     GcdDescriptor;
>     > +  EFI_PHYSICAL_ADDRESS                BaseAddress;
>     > +  UINT64                              Length;
>     > +  EFI_PHYSICAL_ADDRESS                VariableStoreBase;
>     > +  UINT64                              VariableStoreLength;
>     > +  UINTN                               FtwMaxBlockSize;
>     > +  UINT32                              NvStorageVariableSize;
>     > +  UINT64                              NvStorageVariableSize64;
>     > +
>     > +  //
>     > +  // Ensure FTW protocol is installed.
>     > +  //
>     > +  Status = GetFtwProtocol ((VOID **)&FtwProtocol);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return;
>     > +  }
>     > +
>     > +  Status = GetVariableFlashNvStorageInfo (&NvStorageVariableBase,
>     > &NvStorageVariableSize64);
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  Status = SafeUint64ToUint32 (NvStorageVariableSize64,
>     > &NvStorageVariableSize);
>     > +  // This driver currently assumes the size will be UINT32 so assert the value
> is
>     > safe for now.
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  VariableStoreBase = NvStorageVariableBase + mNvFvHeaderCache-
>     > >HeaderLength;
>     > +
>     > +  Status = FtwProtocol->GetMaxBlockSize (FtwProtocol,
> &FtwMaxBlockSize);
>     > +  if (!EFI_ERROR (Status)) {
>     > +    ASSERT (NvStorageVariableSize <= FtwMaxBlockSize);
>     > +  }
>     > +
>     > +  //
>     > +  // Let NonVolatileVariableBase point to flash variable store base directly
> after
>     > FTW ready.
>     > +  //
>     > +  mVariableModuleGlobal->VariableGlobal.NonVolatileVariableBase =
>     > VariableStoreBase;
>     > +
>     > +  //
>     > +  // Find the proper FVB protocol for variable.
>     > +  //
>     > +  Status = GetFvbInfoByAddress (NvStorageVariableBase, NULL,
> &FvbProtocol);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return;
>     > +  }
>     > +
>     > +  mVariableModuleGlobal->FvbInstance = FvbProtocol;
>     > +
>     > +  //
>     > +  // Mark the variable storage region of the FLASH as RUNTIME.
>     > +  //
>     > +  VariableStoreLength = mNvVariableCache->Size;
>     > +  BaseAddress         = VariableStoreBase & (~EFI_PAGE_MASK);
>     > +  Length              = VariableStoreLength + (VariableStoreBase - BaseAddress);
>     > +  Length              = (Length + EFI_PAGE_SIZE - 1) & (~EFI_PAGE_MASK);
>     > +
>     > +  Status = gDS->GetMemorySpaceDescriptor (BaseAddress,
> &GcdDescriptor);
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_WARN, "Variable driver failed to get flash memory
>     > attribute.\n"));
>     > +  } else {
>     > +    if ((GcdDescriptor.Attributes & EFI_MEMORY_RUNTIME) == 0) {
>     > +      Status = gDS->SetMemorySpaceAttributes (
>     > +                      BaseAddress,
>     > +                      Length,
>     > +                      GcdDescriptor.Attributes | EFI_MEMORY_RUNTIME
>     > +                      );
>     > +      if (EFI_ERROR (Status)) {
>     > +        DEBUG ((DEBUG_WARN, "Variable driver failed to add
>     > EFI_MEMORY_RUNTIME attribute to Flash.\n"));
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  //
>     > +  // Initializes variable write service after FTW was ready.
>     > +  //
>     > +  VariableWriteServiceInitializeDxe ();
>     > +
>     > +  //
>     > +  // Close the notify event to avoid install
> gEfiVariableWriteArchProtocolGuid
>     > again.
>     > +  //
>     > +  gBS->CloseEvent (Event);
>     > +}
>     > +
>     > +/**
>     > +  This API function returns whether or not the policy engine is
>     > +  currently being enforced.
>     > +
>     > +  @param[out]   State       Pointer to a return value for whether the policy
>     > enforcement
>     > +                            is currently enabled.
>     > +
>     > +  @retval     EFI_SUCCESS
>     > +  @retval     Others        An error has prevented this command from
> completing.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +ProtocolIsVariablePolicyEnabled (
>     > +  OUT BOOLEAN  *State
>     > +  )
>     > +{
>     > +  *State = IsVariablePolicyEnabled ();
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Variable Driver main entry point. The Variable driver places the 4 EFI
>     > +  runtime services in the EFI System Table and installs arch protocols
>     > +  for variable read and write services being available. It also registers
>     > +  a notification function for an EVT_SIGNAL_VIRTUAL_ADDRESS_CHANGE
>     > event.
>     > +
>     > +  @param[in] ImageHandle    The firmware allocated handle for the EFI
> image.
>     > +  @param[in] SystemTable    A pointer to the EFI System Table.
>     > +
>     > +  @retval EFI_SUCCESS       Variable service successfully initialized.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceInitialize (
>     > +  IN EFI_HANDLE        ImageHandle,
>     > +  IN EFI_SYSTEM_TABLE  *SystemTable
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  EFI_EVENT   ReadyToBootEvent;
>     > +  EFI_EVENT   EndOfDxeEvent;
>     > +
>     > +  PROTECTED_VARIABLE_CONTEXT_IN  ContextIn;
>     > +
>     > +  //
>     > +  // Initialze protected variable service, if enabled.
>     > +  //
>     > +  ContextIn.StructSize    = sizeof (ContextIn);
>     > +  ContextIn.StructVersion =
>     > PROTECTED_VARIABLE_CONTEXT_IN_STRUCT_VERSION;
>     > +
>     > +  ContextIn.FindVariableSmm     = NULL;
>     > +  ContextIn.GetVariableInfo     = GetVariableInfo;
>     > +  ContextIn.GetNextVariableInfo = GetNextVariableInfo;
>     > +  ContextIn.UpdateVariableStore = VariableExLibUpdateNvVariable;
>     > +  ContextIn.UpdateVariable      = VariableExLibUpdateVariable;
>     > +
>     > +  ContextIn.MaxVariableSize     = (UINT32)GetMaxVariableSize ();
>     > +  ContextIn.VariableServiceUser = FromSmmModule;
>     > +
>     > +  Status = ProtectedVariableLibInitialize (&ContextIn);
>     > +  if (EFI_ERROR (Status) && (Status != EFI_UNSUPPORTED)) {
>     > +    ASSERT_EFI_ERROR (Status);
>     > +    return Status;
>     > +  }
>     > +
>     > +  Status = VariableCommonInitialize ();
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  Status = gBS->InstallMultipleProtocolInterfaces (
>     > +                  &mHandle,
>     > +                  &gEdkiiVariableLockProtocolGuid,
>     > +                  &mVariableLock,
>     > +                  NULL
>     > +                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  Status = gBS->InstallMultipleProtocolInterfaces (
>     > +                  &mHandle,
>     > +                  &gEdkiiVarCheckProtocolGuid,
>     > +                  &mVarCheck,
>     > +                  NULL
>     > +                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  SystemTable->RuntimeServices->GetVariable         =
>     > VariableServiceGetVariable;
>     > +  SystemTable->RuntimeServices->GetNextVariableName =
>     > VariableServiceGetNextVariableName;
>     > +  SystemTable->RuntimeServices->SetVariable         =
> VariableServiceSetVariable;
>     > +  SystemTable->RuntimeServices->QueryVariableInfo   =
>     > VariableServiceQueryVariableInfo;
>     > +
>     > +  //
>     > +  // Now install the Variable Runtime Architectural protocol on a new
> handle.
>     > +  //
>     > +  Status = gBS->InstallProtocolInterface (
>     > +                  &mHandle,
>     > +                  &gEfiVariableArchProtocolGuid,
>     > +                  EFI_NATIVE_INTERFACE,
>     > +                  NULL
>     > +                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  if (!PcdGetBool (PcdEmuVariableNvModeEnable)) {
>     > +    //
>     > +    // Register FtwNotificationEvent () notify function.
>     > +    //
>     > +    EfiCreateProtocolNotifyEvent (
>     > +      &gEfiFaultTolerantWriteProtocolGuid,
>     > +      TPL_CALLBACK,
>     > +      FtwNotificationEvent,
>     > +      (VOID *)SystemTable,
>     > +      &mFtwRegistration
>     > +      );
>     > +  } else {
>     > +    //
>     > +    // Emulated non-volatile variable mode does not depend on FVB and
> FTW.
>     > +    //
>     > +    VariableWriteServiceInitializeDxe ();
>     > +  }
>     > +
>     > +  Status = gBS->CreateEventEx (
>     > +                  EVT_NOTIFY_SIGNAL,
>     > +                  TPL_NOTIFY,
>     > +                  VariableClassAddressChangeEvent,
>     > +                  NULL,
>     > +                  &gEfiEventVirtualAddressChangeGuid,
>     > +                  &mVirtualAddressChangeEvent
>     > +                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  //
>     > +  // Register the event handling function to reclaim variable for OS usage.
>     > +  //
>     > +  Status = EfiCreateEventReadyToBootEx (
>     > +             TPL_NOTIFY,
>     > +             OnReadyToBoot,
>     > +             NULL,
>     > +             &ReadyToBootEvent
>     > +             );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  //
>     > +  // Register the event handling function to set the End Of DXE flag.
>     > +  //
>     > +  Status = gBS->CreateEventEx (
>     > +                  EVT_NOTIFY_SIGNAL,
>     > +                  TPL_CALLBACK,
>     > +                  OnEndOfDxe,
>     > +                  NULL,
>     > +                  &gEfiEndOfDxeEventGroupGuid,
>     > +                  &EndOfDxeEvent
>     > +                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  // Register and initialize the VariablePolicy engine.
>     > +  Status = InitVariablePolicyLib (VariableServiceGetVariable);
>     > +  ASSERT_EFI_ERROR (Status);
>     > +  Status = VarCheckRegisterSetVariableCheckHandler (ValidateSetVariable);
>     > +  ASSERT_EFI_ERROR (Status);
>     > +  Status = gBS->InstallMultipleProtocolInterfaces (
>     > +                  &mHandle,
>     > +                  &gEdkiiVariablePolicyProtocolGuid,
>     > +                  &mVariablePolicyProtocol,
>     > +                  NULL
>     > +                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableExLib.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableExLib.c
>     > new file mode 100644
>     > index 000000000000..5904bcbff78a
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableExLib.c
>     > @@ -0,0 +1,417 @@
>     > +/** @file
>     > +  Provides variable driver extended services.
>     > +
>     > +Copyright (c) 2015 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include "Variable.h"
>     > +#include "VariableParsing.h"
>     > +#include "VariableRuntimeCache.h"
>     > +
>     > +/**
>     > +  Finds variable in storage blocks of volatile and non-volatile storage areas.
>     > +
>     > +  This code finds variable in storage blocks of volatile and non-volatile
> storage
>     > areas.
>     > +  If VariableName is an empty string, then we just return the first
>     > +  qualified variable without comparing VariableName and VendorGuid.
>     > +
>     > +  @param[in]  VariableName          Name of the variable to be found.
>     > +  @param[in]  VendorGuid            Variable vendor GUID to be found.
>     > +  @param[out] AuthVariableInfo      Pointer to AUTH_VARIABLE_INFO
> structure
>     > for
>     > +                                    output of the variable found.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER     If VariableName is not an empty
> string,
>     > +                                    while VendorGuid is NULL.
>     > +  @retval EFI_SUCCESS               Variable successfully found.
>     > +  @retval EFI_NOT_FOUND             Variable not found
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableExLibFindVariable (
>     > +  IN  CHAR16              *VariableName,
>     > +  IN  EFI_GUID            *VendorGuid,
>     > +  OUT AUTH_VARIABLE_INFO  *AuthVariableInfo
>     > +  )
>     > +{
>     > +  EFI_STATUS                     Status;
>     > +  VARIABLE_POINTER_TRACK         Variable;
>     > +  AUTHENTICATED_VARIABLE_HEADER  *AuthVariable;
>     > +  PROTECTED_VARIABLE_INFO        VarInfo;
>     > +
>     > +  Status = FindVariable (
>     > +             VariableName,
>     > +             VendorGuid,
>     > +             &Variable,
>     > +             &mVariableModuleGlobal->VariableGlobal,
>     > +             FALSE
>     > +             );
>     > +  if (EFI_ERROR (Status)) {
>     > +    AuthVariableInfo->Data           = NULL;
>     > +    AuthVariableInfo->DataSize       = 0;
>     > +    AuthVariableInfo->Attributes     = 0;
>     > +    AuthVariableInfo->PubKeyIndex    = 0;
>     > +    AuthVariableInfo->MonotonicCount = 0;
>     > +    AuthVariableInfo->TimeStamp      = NULL;
>     > +    return Status;
>     > +  }
>     > +
>     > +  AuthVariableInfo->NameSize     = NameSizeOfVariable (Variable.CurrPtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +  AuthVariableInfo->VariableName = GetVariableNamePtr (Variable.CurrPtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +  AuthVariableInfo->VendorGuid   = GetVendorGuidPtr (Variable.CurrPtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +  AuthVariableInfo->DataSize     = DataSizeOfVariable (Variable.CurrPtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +  AuthVariableInfo->Data         = GetVariableDataPtr (Variable.CurrPtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +  AuthVariableInfo->Attributes   = Variable.CurrPtr->Attributes;
>     > +  if (mVariableModuleGlobal->VariableGlobal.AuthFormat) {
>     > +    AuthVariable                     = (AUTHENTICATED_VARIABLE_HEADER
>     > *)Variable.CurrPtr;
>     > +    AuthVariableInfo->PubKeyIndex    = AuthVariable->PubKeyIndex;
>     > +    AuthVariableInfo->MonotonicCount = ReadUnaligned64
> (&(AuthVariable-
>     > >MonotonicCount));
>     > +    AuthVariableInfo->TimeStamp      = &AuthVariable->TimeStamp;
>     > +  }
>     > +
>     > +  CopyMem (&VarInfo.Header, AuthVariableInfo, sizeof (VarInfo.Header));
>     > +
>     > +  VarInfo.Buffer        = Variable.CurrPtr;
>     > +  VarInfo.PlainData     = NULL;
>     > +  VarInfo.PlainDataSize = 0;
>     > +  VarInfo.Flags.Auth    = mVariableModuleGlobal-
> >VariableGlobal.AuthFormat;
>     > +
>     > +  //
>     > +  // In case the variable is encrypted.
>     > +  //
>     > +  Status = ProtectedVariableLibGetByInfo (&VarInfo);
>     > +  if (!EFI_ERROR (Status)) {
>     > +    if (VarInfo.PlainData != NULL) {
>     > +      AuthVariableInfo->Data     = VarInfo.PlainData;
>     > +      AuthVariableInfo->DataSize = VarInfo.PlainDataSize;
>     > +    }
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Finds next variable in storage blocks of volatile and non-volatile storage
> areas.
>     > +
>     > +  This code finds next variable in storage blocks of volatile and non-volatile
>     > storage areas.
>     > +  If VariableName is an empty string, then we just return the first
>     > +  qualified variable without comparing VariableName and VendorGuid.
>     > +
>     > +  @param[in]  VariableName          Name of the variable to be found.
>     > +  @param[in]  VendorGuid            Variable vendor GUID to be found.
>     > +  @param[out] AuthVariableInfo      Pointer to AUTH_VARIABLE_INFO
> structure
>     > for
>     > +                                    output of the next variable.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER     If VariableName is not an empty
> string,
>     > +                                    while VendorGuid is NULL.
>     > +  @retval EFI_SUCCESS               Variable successfully found.
>     > +  @retval EFI_NOT_FOUND             Variable not found
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableExLibFindNextVariable (
>     > +  IN  CHAR16              *VariableName,
>     > +  IN  EFI_GUID            *VendorGuid,
>     > +  OUT AUTH_VARIABLE_INFO  *AuthVariableInfo
>     > +  )
>     > +{
>     > +  EFI_STATUS                     Status;
>     > +  VARIABLE_HEADER                *VariablePtr;
>     > +  AUTHENTICATED_VARIABLE_HEADER  *AuthVariablePtr;
>     > +  VARIABLE_STORE_HEADER
>     > *VariableStoreHeader[VariableStoreTypeMax];
>     > +  PROTECTED_VARIABLE_INFO        VarInfo;
>     > +
>     > +  VariableStoreHeader[VariableStoreTypeVolatile] =
>     > (VARIABLE_STORE_HEADER *)(UINTN)mVariableModuleGlobal-
>     > >VariableGlobal.VolatileVariableBase;
>     > +  VariableStoreHeader[VariableStoreTypeHob]      =
> (VARIABLE_STORE_HEADER
>     > *)(UINTN)mVariableModuleGlobal->VariableGlobal.HobVariableBase;
>     > +  VariableStoreHeader[VariableStoreTypeNv]       = mNvVariableCache;
>     > +
>     > +  Status = VariableServiceGetNextVariableInternal (
>     > +             VariableName,
>     > +             VendorGuid,
>     > +             VariableStoreHeader,
>     > +             &VariablePtr,
>     > +             mVariableModuleGlobal->VariableGlobal.AuthFormat
>     > +             );
>     > +  if (EFI_ERROR (Status)) {
>     > +    AuthVariableInfo->VariableName   = NULL;
>     > +    AuthVariableInfo->VendorGuid     = NULL;
>     > +    AuthVariableInfo->Data           = NULL;
>     > +    AuthVariableInfo->DataSize       = 0;
>     > +    AuthVariableInfo->Attributes     = 0;
>     > +    AuthVariableInfo->PubKeyIndex    = 0;
>     > +    AuthVariableInfo->MonotonicCount = 0;
>     > +    AuthVariableInfo->TimeStamp      = NULL;
>     > +    return Status;
>     > +  }
>     > +
>     > +  AuthVariableInfo->NameSize     = NameSizeOfVariable (VariablePtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +  AuthVariableInfo->VariableName = GetVariableNamePtr (VariablePtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +  AuthVariableInfo->VendorGuid   = GetVendorGuidPtr (VariablePtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +  AuthVariableInfo->DataSize     = DataSizeOfVariable (VariablePtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +  AuthVariableInfo->Data         = GetVariableDataPtr (VariablePtr,
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat);
>     > +  AuthVariableInfo->Attributes   = VariablePtr->Attributes;
>     > +  if (mVariableModuleGlobal->VariableGlobal.AuthFormat) {
>     > +    AuthVariablePtr                  = (AUTHENTICATED_VARIABLE_HEADER
>     > *)VariablePtr;
>     > +    AuthVariableInfo->PubKeyIndex    = AuthVariablePtr->PubKeyIndex;
>     > +    AuthVariableInfo->MonotonicCount = ReadUnaligned64
> (&(AuthVariablePtr-
>     > >MonotonicCount));
>     > +    AuthVariableInfo->TimeStamp      = &AuthVariablePtr->TimeStamp;
>     > +  }
>     > +
>     > +  CopyMem (&VarInfo.Header, AuthVariableInfo, sizeof (VarInfo.Header));
>     > +
>     > +  VarInfo.Buffer        = VariablePtr;
>     > +  VarInfo.PlainData     = NULL;
>     > +  VarInfo.PlainDataSize = 0;
>     > +
>     > +  Status = ProtectedVariableLibGetByInfo (&VarInfo);
>     > +  if (!EFI_ERROR (Status)) {
>     > +    if (VarInfo.PlainData != NULL) {
>     > +      AuthVariableInfo->Data     = VarInfo.PlainData;
>     > +      AuthVariableInfo->DataSize = VarInfo.PlainDataSize;
>     > +    }
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Update the variable region with Variable information.
>     > +
>     > +  @param[in] AuthVariableInfo       Pointer AUTH_VARIABLE_INFO structure
> for
>     > +                                    input of the variable.
>     > +
>     > +  @retval EFI_SUCCESS               The update operation is success.
>     > +  @retval EFI_INVALID_PARAMETER     Invalid parameter.
>     > +  @retval EFI_WRITE_PROTECTED       Variable is write-protected.
>     > +  @retval EFI_OUT_OF_RESOURCES      There is not enough resource.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableExLibUpdateVariable (
>     > +  IN AUTH_VARIABLE_INFO  *AuthVariableInfo
>     > +  )
>     > +{
>     > +  VARIABLE_POINTER_TRACK  Variable;
>     > +
>     > +  FindVariable (AuthVariableInfo->VariableName, AuthVariableInfo-
>     > >VendorGuid, &Variable, &mVariableModuleGlobal->VariableGlobal, FALSE);
>     > +  return UpdateVariable (
>     > +           AuthVariableInfo->VariableName,
>     > +           AuthVariableInfo->VendorGuid,
>     > +           AuthVariableInfo->Data,
>     > +           AuthVariableInfo->DataSize,
>     > +           AuthVariableInfo->Attributes,
>     > +           AuthVariableInfo->PubKeyIndex,
>     > +           AuthVariableInfo->MonotonicCount,
>     > +           &Variable,
>     > +           AuthVariableInfo->TimeStamp
>     > +           );
>     > +}
>     > +
>     > +/**
>     > +  Get scratch buffer.
>     > +
>     > +  @param[in, out] ScratchBufferSize Scratch buffer size. If input size is
> greater
>     > than
>     > +                                    the maximum supported buffer size, this value contains
>     > +                                    the maximum supported buffer size as output.
>     > +  @param[out]     ScratchBuffer     Pointer to scratch buffer address.
>     > +
>     > +  @retval EFI_SUCCESS       Get scratch buffer successfully.
>     > +  @retval EFI_UNSUPPORTED   If input size is greater than the maximum
>     > supported buffer size.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableExLibGetScratchBuffer (
>     > +  IN OUT UINTN  *ScratchBufferSize,
>     > +  OUT    VOID   **ScratchBuffer
>     > +  )
>     > +{
>     > +  UINTN  MaxBufferSize;
>     > +
>     > +  MaxBufferSize = mVariableModuleGlobal->ScratchBufferSize;
>     > +  if (*ScratchBufferSize > MaxBufferSize) {
>     > +    *ScratchBufferSize = MaxBufferSize;
>     > +    return EFI_UNSUPPORTED;
>     > +  }
>     > +
>     > +  *ScratchBuffer = GetEndPointer ((VARIABLE_STORE_HEADER
>     > *)((UINTN)mVariableModuleGlobal->VariableGlobal.VolatileVariableBase));
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  This function is to check if the remaining variable space is enough to set
>     > +  all Variables from argument list successfully. The purpose of the check
>     > +  is to keep the consistency of the Variables to be in variable storage.
>     > +
>     > +  Note: Variables are assumed to be in same storage.
>     > +  The set sequence of Variables will be same with the sequence of
> VariableEntry
>     > from argument list,
>     > +  so follow the argument sequence to check the Variables.
>     > +
>     > +  @param[in] Attributes         Variable attributes for Variable entries.
>     > +  @param ...                    The variable argument list with type
>     > VARIABLE_ENTRY_CONSISTENCY *.
>     > +                                A NULL terminates the list. The VariableSize of
>     > +                                VARIABLE_ENTRY_CONSISTENCY is the variable data size
> as
>     > input.
>     > +                                It will be changed to variable total size as output.
>     > +
>     > +  @retval TRUE                  Have enough variable space to set the Variables
>     > successfully.
>     > +  @retval FALSE                 No enough variable space to set the Variables
>     > successfully.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +EFIAPI
>     > +VariableExLibCheckRemainingSpaceForConsistency (
>     > +  IN UINT32  Attributes,
>     > +  ...
>     > +  )
>     > +{
>     > +  VA_LIST  Marker;
>     > +  BOOLEAN  Return;
>     > +
>     > +  VA_START (Marker, Attributes);
>     > +
>     > +  Return = CheckRemainingSpaceForConsistencyInternal (Attributes,
> Marker);
>     > +
>     > +  VA_END (Marker);
>     > +
>     > +  return Return;
>     > +}
>     > +
>     > +/**
>     > +  Return TRUE if at OS runtime.
>     > +
>     > +  @retval TRUE If at OS runtime.
>     > +  @retval FALSE If at boot time.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +EFIAPI
>     > +VariableExLibAtRuntime (
>     > +  VOID
>     > +  )
>     > +{
>     > +  return AtRuntime ();
>     > +}
>     > +
>     > +/**
>     > +  Update partial data of a variable on NV storage and/or cached copy.
>     > +
>     > +  @param[in]  VariableInfo  Pointer to a variable with detailed information.
>     > +  @param[in]  Offset        Offset to write from.
>     > +  @param[in]  Size          Size of data Buffer to update.
>     > +  @param[in]  Buffer        Pointer to data buffer to update.
>     > +
>     > +  @retval EFI_SUCCESS             The variable data was updated successfully.
>     > +  @retval EFI_UNSUPPORTED         If this function is called directly in
> runtime.
>     > +  @retval EFI_INVALID_PARAMETER   If VariableInfo, Buffer or Size are not
>     > valid.
>     > +  @retval Others                  Failed to update NV storage or variable cache.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableExLibUpdateNvVariable (
>     > +  IN  PROTECTED_VARIABLE_INFO  *VariableInfo,
>     > +  IN  UINTN                    Offset,
>     > +  IN  UINT32                   Size,
>     > +  IN  UINT8                    *Buffer
>     > +  )
>     > +{
>     > +  EFI_STATUS              Status;
>     > +  VARIABLE_GLOBAL         *Global;
>     > +  VARIABLE_RUNTIME_CACHE  *CacheInstance;
>     > +  VARIABLE_HEADER         *VariableCache;
>     > +
>     > +  if ((mVariableModuleGlobal == NULL) || (mNvVariableCache == NULL)) {
>     > +    return EFI_UNSUPPORTED;
>     > +  }
>     > +
>     > +  //
>     > +  // Flush the cache to store.
>     > +  //
>     > +  if (Size == (UINT32)-1) {
>     > +    Status = FtwVariableSpace (
>     > +               mVariableModuleGlobal->VariableGlobal.NonVolatileVariableBase,
>     > +               mNvVariableCache
>     > +               );
>     > +    if (  !EFI_ERROR (Status)
>     > +       && (mVariableModuleGlobal->VariableGlobal.HobVariableBase != 0))
>     > +    {
>     > +      FlushHobVariableToFlash (NULL, NULL);
>     > +      if (mVariableModuleGlobal->VariableGlobal.HobVariableBase != 0) {
>     > +        FreePool ((VOID *)(UINTN)mVariableModuleGlobal-
>     > >VariableGlobal.HobVariableBase);
>     > +        mVariableModuleGlobal->VariableGlobal.HobVariableBase = 0;
>     > +      }
>     > +    }
>     > +
>     > +    return Status;
>     > +  }
>     > +
>     > +  if (  (VariableInfo == NULL)
>     > +     || (VariableInfo->StoreIndex == VAR_INDEX_INVALID)
>     > +     || (Buffer == NULL)
>     > +     || (Size == 0))
>     > +  {
>     > +    ASSERT (VariableInfo != NULL);
>     > +    ASSERT (VariableInfo->StoreIndex != VAR_INDEX_INVALID);
>     > +    ASSERT (Buffer != NULL);
>     > +    ASSERT (Size != 0);
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  Global = &mVariableModuleGlobal->VariableGlobal;
>     > +
>     > +  VariableCache = (VARIABLE_HEADER *)((UINTN)mNvVariableCache +
>     > (UINTN)VariableInfo->StoreIndex);
>     > +
>     > +  ASSERT (
>     > +    StrCmp (
>     > +      VariableInfo->Header.VariableName,
>     > +      GetVariableNamePtr (VariableCache, Global->AuthFormat)
>     > +      ) == 0
>     > +    );
>     > +  ASSERT (
>     > +    CompareGuid (
>     > +      VariableInfo->Header.VendorGuid,
>     > +      GetVendorGuidPtr (VariableCache, Global->AuthFormat)
>     > +      )
>     > +    );
>     > +
>     > +  //
>     > +  // Forcibly update part data of flash copy of the variable ...
>     > +  //
>     > +  Status =  UpdateVariableStore (
>     > +              Global,
>     > +              FALSE,
>     > +              FALSE,
>     > +              mVariableModuleGlobal->FvbInstance,
>     > +              (UINTN)(Global->NonVolatileVariableBase + VariableInfo-
> >StoreIndex +
>     > Offset),
>     > +              Size,
>     > +              Buffer
>     > +              );
>     > +  if (EFI_ERROR (Status)) {
>     > +    ASSERT_EFI_ERROR (Status);
>     > +    return Status;
>     > +  }
>     > +
>     > +  //
>     > +  // ... as well as the local cached copy.
>     > +  //
>     > +  CopyMem ((VOID *)((UINTN)VariableCache + Offset), Buffer, Size);
>     > +
>     > +  //
>     > +  // Sync remote cached copy.
>     > +  //
>     > +  CacheInstance = &Global-
>     > >VariableRuntimeCacheContext.VariableRuntimeNvCache;
>     > +  if (CacheInstance->Store != NULL) {
>     > +    Status =  SynchronizeRuntimeVariableCache (
>     > +                CacheInstance,
>     > +                (UINTN)VariableInfo->StoreIndex + Offset,
>     > +                Size
>     > +                );
>     > +    ASSERT_EFI_ERROR (Status);
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableLockRequ
>     > estToLock.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableLockRequ
>     > estToLock.c
>     > new file mode 100644
>     > index 000000000000..d849ee9ce292
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableLockRequ
>     > estToLock.c
>     > @@ -0,0 +1,96 @@
>     > +/** @file
>     > +  Temporary location of the RequestToLock shim code while projects
>     > +  are moved to VariablePolicy. Should be removed when deprecated.
>     > +
>     > +  Copyright (c) Microsoft Corporation.
>     > +  SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include <Uefi.h>
>     > +#include <Library/DebugLib.h>
>     > +#include <Library/MemoryAllocationLib.h>
>     > +#include <Library/VariablePolicyLib.h>
>     > +#include <Library/VariablePolicyHelperLib.h>
>     > +#include <Protocol/VariableLock.h>
>     > +
>     > +/**
>     > +  DEPRECATED. THIS IS ONLY HERE AS A CONVENIENCE WHILE PORTING.
>     > +  Mark a variable that will become read-only after leaving the DXE phase of
>     > +  execution. Write request coming from SMM environment through
>     > +  EFI_SMM_VARIABLE_PROTOCOL is allowed.
>     > +
>     > +  @param[in] This          The VARIABLE_LOCK_PROTOCOL instance.
>     > +  @param[in] VariableName  A pointer to the variable name that will be
> made
>     > +                           read-only subsequently.
>     > +  @param[in] VendorGuid    A pointer to the vendor GUID that will be made
>     > +                           read-only subsequently.
>     > +
>     > +  @retval EFI_SUCCESS           The variable specified by the VariableName
> and
>     > +                                the VendorGuid was marked as pending to be
>     > +                                read-only.
>     > +  @retval EFI_INVALID_PARAMETER VariableName or VendorGuid is NULL.
>     > +                                Or VariableName is an empty string.
>     > +  @retval EFI_ACCESS_DENIED     EFI_END_OF_DXE_EVENT_GROUP_GUID
> or
>     > +                                EFI_EVENT_GROUP_READY_TO_BOOT has already been
>     > +                                signaled.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough resource to hold
> the
>     > lock
>     > +                                request.
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableLockRequestToLock (
>     > +  IN CONST EDKII_VARIABLE_LOCK_PROTOCOL  *This,
>     > +  IN CHAR16                              *VariableName,
>     > +  IN EFI_GUID                            *VendorGuid
>     > +  )
>     > +{
>     > +  EFI_STATUS             Status;
>     > +  VARIABLE_POLICY_ENTRY  *NewPolicy;
>     > +
>     > +  DEBUG ((DEBUG_WARN, "!!! DEPRECATED INTERFACE !!! %a() will go
> away
>     > soon!\n", __FUNCTION__));
>     > +  DEBUG ((DEBUG_WARN, "!!! DEPRECATED INTERFACE !!! Please move to
> use
>     > Variable Policy!\n"));
>     > +  DEBUG ((DEBUG_WARN, "!!! DEPRECATED INTERFACE !!!
> Variable: %g %s\n",
>     > VendorGuid, VariableName));
>     > +
>     > +  NewPolicy = NULL;
>     > +  Status    = CreateBasicVariablePolicy (
>     > +                VendorGuid,
>     > +                VariableName,
>     > +                VARIABLE_POLICY_NO_MIN_SIZE,
>     > +                VARIABLE_POLICY_NO_MAX_SIZE,
>     > +                VARIABLE_POLICY_NO_MUST_ATTR,
>     > +                VARIABLE_POLICY_NO_CANT_ATTR,
>     > +                VARIABLE_POLICY_TYPE_LOCK_NOW,
>     > +                &NewPolicy
>     > +                );
>     > +  if (!EFI_ERROR (Status)) {
>     > +    Status = RegisterVariablePolicy (NewPolicy);
>     > +
>     > +    //
>     > +    // If the error returned is EFI_ALREADY_STARTED, we need to check the
>     > +    // current database for the variable and see whether it's locked. If it's
>     > +    // locked, we're still fine, but also generate a DEBUG_WARN message so
> the
>     > +    // duplicate lock can be removed.
>     > +    //
>     > +    if (Status == EFI_ALREADY_STARTED) {
>     > +      Status = ValidateSetVariable (VariableName, VendorGuid, 0, 0, NULL);
>     > +      if (Status == EFI_WRITE_PROTECTED) {
>     > +        DEBUG ((DEBUG_WARN, "  Variable: %g %s is already locked!\n",
>     > VendorGuid, VariableName));
>     > +        Status = EFI_SUCCESS;
>     > +      } else {
>     > +        DEBUG ((DEBUG_ERROR, "  Variable: %g %s can not be locked!\n",
>     > VendorGuid, VariableName));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "%a - Failed to lock variable %s! %r\n",
>     > __FUNCTION__, VariableName, Status));
>     > +  }
>     > +
>     > +  if (NewPolicy != NULL) {
>     > +    FreePool (NewPolicy);
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableNonVolat
>     > ile.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableNonVolat
>     > ile.c
>     > new file mode 100644
>     > index 000000000000..32dd9901b260
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableNonVolat
>     > ile.c
>     > @@ -0,0 +1,537 @@
>     > +/** @file
>     > +  Common variable non-volatile store routines.
>     > +
>     > +Copyright (c) 2019 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include "VariableNonVolatile.h"
>     > +#include "VariableParsing.h"
>     > +
>     > +extern VARIABLE_MODULE_GLOBAL  *mVariableModuleGlobal;
>     > +
>     > +/**
>     > +  Get non-volatile maximum variable size.
>     > +
>     > +  @return Non-volatile maximum variable size.
>     > +
>     > +**/
>     > +UINTN
>     > +GetNonVolatileMaxVariableSize (
>     > +  VOID
>     > +  )
>     > +{
>     > +  if (PcdGet32 (PcdHwErrStorageSize) != 0) {
>     > +    return MAX (
>     > +             MAX (PcdGet32 (PcdMaxVariableSize), PcdGet32
>     > (PcdMaxAuthVariableSize)),
>     > +             PcdGet32 (PcdMaxHardwareErrorVariableSize)
>     > +             );
>     > +  } else {
>     > +    return MAX (PcdGet32 (PcdMaxVariableSize), PcdGet32
>     > (PcdMaxAuthVariableSize));
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Init emulated non-volatile variable store.
>     > +
>     > +  @param[out] VariableStoreBase Output pointer to emulated non-volatile
>     > variable store base.
>     > +
>     > +  @retval EFI_SUCCESS           Function successfully executed.
>     > +  @retval EFI_OUT_OF_RESOURCES  Fail to allocate enough memory
> resource.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +InitEmuNonVolatileVariableStore (
>     > +  OUT EFI_PHYSICAL_ADDRESS  *VariableStoreBase
>     > +  )
>     > +{
>     > +  VARIABLE_STORE_HEADER  *VariableStore;
>     > +  UINT32                 VariableStoreLength;
>     > +  BOOLEAN                FullyInitializeStore;
>     > +  UINT32                 HwErrStorageSize;
>     > +
>     > +  FullyInitializeStore = TRUE;
>     > +
>     > +  VariableStoreLength = PcdGet32 (PcdVariableStoreSize);
>     > +  ASSERT (sizeof (VARIABLE_STORE_HEADER) <= VariableStoreLength);
>     > +
>     > +  //
>     > +  // Allocate memory for variable store.
>     > +  //
>     > +  if (PcdGet64 (PcdEmuVariableNvStoreReserved) == 0) {
>     > +    VariableStore = (VARIABLE_STORE_HEADER *)AllocateRuntimePool
>     > (VariableStoreLength);
>     > +    if (VariableStore == NULL) {
>     > +      return EFI_OUT_OF_RESOURCES;
>     > +    }
>     > +  } else {
>     > +    //
>     > +    // A memory location has been reserved for the NV variable store.
> Certain
>     > +    // platforms may be able to preserve a memory range across system
> resets,
>     > +    // thereby providing better NV variable emulation.
>     > +    //
>     > +    VariableStore =
>     > +      (VARIABLE_STORE_HEADER *)(VOID *)(UINTN)
>     > +      PcdGet64 (PcdEmuVariableNvStoreReserved);
>     > +    if ((VariableStore->Size == VariableStoreLength) &&
>     > +        (CompareGuid (&VariableStore->Signature,
>     > &gEfiAuthenticatedVariableGuid) ||
>     > +         CompareGuid (&VariableStore->Signature, &gEfiVariableGuid)) &&
>     > +        (VariableStore->Format == VARIABLE_STORE_FORMATTED) &&
>     > +        (VariableStore->State == VARIABLE_STORE_HEALTHY))
>     > +    {
>     > +      DEBUG ((
>     > +        DEBUG_INFO,
>     > +        "Variable Store reserved at %p appears to be valid\n",
>     > +        VariableStore
>     > +        ));
>     > +      FullyInitializeStore = FALSE;
>     > +    }
>     > +  }
>     > +
>     > +  if (FullyInitializeStore) {
>     > +    SetMem (VariableStore, VariableStoreLength, 0xff);
>     > +    //
>     > +    // Use gEfiAuthenticatedVariableGuid for potential auth variable support.
>     > +    //
>     > +    CopyGuid (&VariableStore->Signature, &gEfiAuthenticatedVariableGuid);
>     > +    VariableStore->Size      = VariableStoreLength;
>     > +    VariableStore->Format    = VARIABLE_STORE_FORMATTED;
>     > +    VariableStore->State     = VARIABLE_STORE_HEALTHY;
>     > +    VariableStore->Reserved  = 0;
>     > +    VariableStore->Reserved1 = 0;
>     > +  }
>     > +
>     > +  *VariableStoreBase = (EFI_PHYSICAL_ADDRESS)(UINTN)VariableStore;
>     > +
>     > +  HwErrStorageSize = PcdGet32 (PcdHwErrStorageSize);
>     > +
>     > +  //
>     > +  // Note that in EdkII variable driver implementation, Hardware Error
> Record
>     > type variable
>     > +  // is stored with common variable in the same NV region. So the platform
>     > integrator should
>     > +  // ensure that the value of PcdHwErrStorageSize is less than the value of
>     > +  // (VariableStoreLength - sizeof (VARIABLE_STORE_HEADER)).
>     > +  //
>     > +  ASSERT (HwErrStorageSize < (VariableStoreLength - sizeof
>     > (VARIABLE_STORE_HEADER)));
>     > +
>     > +  mVariableModuleGlobal->CommonVariableSpace        =
>     > ((UINTN)VariableStoreLength - sizeof (VARIABLE_STORE_HEADER) -
>     > HwErrStorageSize);
>     > +  mVariableModuleGlobal->CommonMaxUserVariableSpace =
>     > mVariableModuleGlobal->CommonVariableSpace;
>     > +  mVariableModuleGlobal->CommonRuntimeVariableSpace =
>     > mVariableModuleGlobal->CommonVariableSpace;
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  Create a dummy variable used to fill the gap in NV variable storage caused
> by
>     > +  the invalid variables found in HMAC verification phase.
>     > +
>     > +  @param[out] Variable    Variable buffer.
>     > +  @param[in]  Name        Variable Name.
>     > +  @param[in]  Guid        Vendor GUID of the variable.
>     > +  @param[in]  Size        Whole size of the variable requested.
>     > +  @param[in]  AuthFlag    Variable format flag.
>     > +
>     > +**/
>     > +STATIC
>     > +VOID
>     > +CreateDummyVariable (
>     > +  OUT VARIABLE_HEADER  *Variable,
>     > +  IN  CHAR16           *Name,
>     > +  IN  EFI_GUID         *Guid,
>     > +  IN  UINT32           Size,
>     > +  IN  BOOLEAN          AuthFlag
>     > +  )
>     > +{
>     > +  AUTHENTICATED_VARIABLE_HEADER  *AuthVariable;
>     > +
>     > +  ASSERT (Variable != NULL);
>     > +
>     > +  if (Name == NULL) {
>     > +    Name = L"Dummy";
>     > +  }
>     > +
>     > +  if (AuthFlag) {
>     > +    AuthVariable = (AUTHENTICATED_VARIABLE_HEADER *)Variable;
>     > +
>     > +    AuthVariable->StartId    = VARIABLE_DATA;
>     > +    AuthVariable->State      = VAR_ADDED & VAR_DELETED;
>     > +    AuthVariable->Attributes = EFI_VARIABLE_NON_VOLATILE;
>     > +    AuthVariable->NameSize   = (UINT32)StrSize (Name);
>     > +    AuthVariable->DataSize   = Size - sizeof
>     > (AUTHENTICATED_VARIABLE_HEADER)
>     > +                               - AuthVariable->NameSize;
>     > +    if (Guid != NULL) {
>     > +      CopyMem ((VOID *)&AuthVariable->VendorGuid, (VOID *)Guid, sizeof
>     > (EFI_GUID));
>     > +    }
>     > +
>     > +    CopyMem (GetVariableNamePtr (Variable, AuthFlag), (VOID *)Name,
>     > AuthVariable->NameSize);
>     > +  } else {
>     > +    Variable->StartId    = VARIABLE_DATA;
>     > +    Variable->State      = VAR_ADDED & VAR_DELETED;
>     > +    Variable->Attributes = EFI_VARIABLE_NON_VOLATILE;
>     > +    Variable->NameSize   = (UINT32)StrSize (Name);
>     > +    Variable->DataSize   = Size - sizeof (VARIABLE_HEADER) - Variable-
>     > >NameSize;
>     > +    if (Guid != NULL) {
>     > +      CopyMem ((VOID *)&Variable->VendorGuid, (VOID *)Guid, sizeof
>     > (EFI_GUID));
>     > +    }
>     > +
>     > +    CopyMem (GetVariableNamePtr (Variable, AuthFlag), (VOID *)Name,
>     > Variable->NameSize);
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +
>     > +  Init protected variable store.
>     > +
>     > +  @param[in, out]  VariableStore  Pointer to real protected variable store
> base.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +InitProtectedVariableStore (
>     > +  IN  OUT VARIABLE_STORE_HEADER  *VariableStore
>     > +  )
>     > +{
>     > +  EFI_STATUS               Status;
>     > +  PROTECTED_VARIABLE_INFO  VarInfo;
>     > +  UINTN                    Size;
>     > +  UINTN                    Index;
>     > +  BOOLEAN                  AuthFlag;
>     > +  EFI_PHYSICAL_ADDRESS     NextVariableStore;
>     > +  EFI_PHYSICAL_ADDRESS     *VarList;
>     > +  UINTN                    NumVars;
>     > +  UINTN                    CurrVar;
>     > +
>     > +  SetMem (
>     > +    (UINT8 *)VariableStore + sizeof (VARIABLE_STORE_HEADER),
>     > +    VariableStore->Size - sizeof (VARIABLE_STORE_HEADER),
>     > +    0xFF
>     > +    );
>     > +  Index = sizeof (VARIABLE_STORE_HEADER);
>     > +
>     > +  VarList = NULL;
>     > +  NumVars = 0;
>     > +  ProtectedVariableLibGetSortedList (&VarList, &NumVars);
>     > +
>     > +  //
>     > +  // Search variable in the order of StoreIndex
>     > +  //
>     > +  ZeroMem (&VarInfo, sizeof (VarInfo));
>     > +
>     > +  for (CurrVar = 0; CurrVar < NumVars; CurrVar++) {
>     > +    VarInfo.Buffer     = NULL;
>     > +    VarInfo.StoreIndex = VarList[CurrVar];
>     > +    if (VarInfo.StoreIndex == VAR_INDEX_INVALID) {
>     > +      break;
>     > +    }
>     > +
>     > +    Status = ProtectedVariableLibFind (&VarInfo);
>     > +    if (EFI_ERROR (Status)) {
>     > +      break;
>     > +    }
>     > +
>     > +    ASSERT (VarInfo.Buffer != NULL);
>     > +
>     > +    AuthFlag = VarInfo.Flags.Auth;
>     > +    if (VarInfo.StoreIndex == VAR_INDEX_INVALID) {
>     > +      continue;
>     > +    } else {
>     > +      ASSERT (VarInfo.StoreIndex == HEADER_ALIGN (VarInfo.StoreIndex));
>     > +      ASSERT (VarInfo.StoreIndex < (VariableStore->Size - sizeof
>     > (VARIABLE_STORE_HEADER)));
>     > +      ASSERT ((VariableStore->Size - VarInfo.StoreIndex) >
> GetVariableHeaderSize
>     > (AuthFlag));
>     > +    }
>     > +
>     > +    //
>     > +    // Fill gap caused by invalid variable.
>     > +    //
>     > +    if (VarInfo.StoreIndex > Index) {
>     > +      Size = (UINTN)VarInfo.StoreIndex - Index;
>     > +      CreateDummyVariable (
>     > +        (VARIABLE_HEADER *)((UINT8 *)VariableStore + Index),
>     > +        NULL,
>     > +        NULL,
>     > +        (UINT32)Size,
>     > +        AuthFlag
>     > +        );
>     > +      Index += Size;
>     > +    }
>     > +
>     > +    Size = (UINTN)GetNextVariablePtr (VarInfo.Buffer, AuthFlag)
>     > +           - (UINTN)VarInfo.Buffer;
>     > +    CopyMem ((UINT8 *)VariableStore + VarInfo.StoreIndex, VarInfo.Buffer,
>     > Size);
>     > +
>     > +    Index += Size;
>     > +    Index  = HEADER_ALIGN (Index);
>     > +
>     > +    NextVariableStore = (EFI_PHYSICAL_ADDRESS)((UINTN)VariableStore +
>     > VarInfo.StoreIndex + Size);
>     > +  }
>     > +
>     > +  //
>     > +  // Search variable in the order of StoreIndex
>     > +  //
>     > +  ZeroMem (&VarInfo, sizeof (VarInfo));
>     > +  for ( ; CurrVar < NumVars; CurrVar++) {
>     > +    VarInfo.Buffer     = NULL;
>     > +    VarInfo.StoreIndex = VarList[CurrVar];
>     > +    Status             = ProtectedVariableLibFind (&VarInfo);
>     > +    if (EFI_ERROR (Status)) {
>     > +      break;
>     > +    }
>     > +
>     > +    ASSERT (VarInfo.Buffer != NULL);
>     > +
>     > +    AuthFlag = VarInfo.Flags.Auth;
>     > +    if (VarInfo.StoreIndex == VAR_INDEX_INVALID) {
>     > +      Size = (UINTN)GetNextVariablePtr (VarInfo.Buffer, AuthFlag)
>     > +             - (UINTN)VarInfo.Buffer;
>     > +      CopyMem ((VOID *)(UINTN)NextVariableStore, VarInfo.Buffer, Size);
>     > +      Status            = ProtectedVariableLibRefresh (VarInfo.Buffer, 0,
>     > NextVariableStore - (UINTN)VariableStore, FALSE);
>     > +      NextVariableStore = NextVariableStore + Size;
>     > +    }
>     > +  }
>     > +
>     > +  if (Status == EFI_UNSUPPORTED) {
>     > +    return Status;
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Init real non-volatile variable store.
>     > +
>     > +  @param[out] VariableStoreBase Output pointer to real non-volatile
> variable
>     > store base.
>     > +
>     > +  @retval EFI_SUCCESS           Function successfully executed.
>     > +  @retval EFI_OUT_OF_RESOURCES  Fail to allocate enough memory
> resource.
>     > +  @retval EFI_VOLUME_CORRUPTED  Variable Store or Firmware Volume
> for
>     > Variable Store is corrupted.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +InitRealNonVolatileVariableStore (
>     > +  OUT EFI_PHYSICAL_ADDRESS  *VariableStoreBase
>     > +  )
>     > +{
>     > +  EFI_FIRMWARE_VOLUME_HEADER            *FvHeader;
>     > +  VARIABLE_STORE_HEADER                 *VariableStore;
>     > +  UINT32                                VariableStoreLength;
>     > +  EFI_HOB_GUID_TYPE                     *GuidHob;
>     > +  EFI_PHYSICAL_ADDRESS                  NvStorageBase;
>     > +  UINT8                                 *NvStorageData;
>     > +  UINT32                                NvStorageSize;
>     > +  UINT64                                NvStorageSize64;
>     > +  FAULT_TOLERANT_WRITE_LAST_WRITE_DATA  *FtwLastWriteData;
>     > +  UINT32                                BackUpOffset;
>     > +  UINT32                                BackUpSize;
>     > +  UINT32                                HwErrStorageSize;
>     > +  UINT32                                MaxUserNvVariableSpaceSize;
>     > +  UINT32                                BoottimeReservedNvVariableSpaceSize;
>     > +  EFI_STATUS                            Status;
>     > +  VOID                                  *FtwProtocol;
>     > +
>     > +  mVariableModuleGlobal->FvbInstance = NULL;
>     > +
>     > +  Status = GetVariableFlashNvStorageInfo (&NvStorageBase,
>     > &NvStorageSize64);
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  Status = SafeUint64ToUint32 (NvStorageSize64, &NvStorageSize);
>     > +  // This driver currently assumes the size will be UINT32 so assert the value
> is
>     > safe for now.
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  ASSERT (NvStorageBase != 0);
>     > +
>     > +  //
>     > +  // Allocate runtime memory used for a memory copy of the FLASH region.
>     > +  // Keep the memory and the FLASH in sync as updates occur.
>     > +  //
>     > +  NvStorageData = AllocateRuntimeZeroPool (NvStorageSize);
>     > +  if (NvStorageData == NULL) {
>     > +    return EFI_OUT_OF_RESOURCES;
>     > +  }
>     > +
>     > +  //
>     > +  // Copy NV storage data to the memory buffer.
>     > +  //
>     > +  CopyMem (NvStorageData, (UINT8 *)(UINTN)NvStorageBase,
> NvStorageSize);
>     > +
>     > +  Status = GetFtwProtocol ((VOID **)&FtwProtocol);
>     > +  //
>     > +  // If FTW protocol has been installed, no need to check FTW last write
> data
>     > hob.
>     > +  //
>     > +  if (EFI_ERROR (Status)) {
>     > +    //
>     > +    // Check the FTW last write data hob.
>     > +    //
>     > +    GuidHob = GetFirstGuidHob (&gEdkiiFaultTolerantWriteGuid);
>     > +    if (GuidHob != NULL) {
>     > +      FtwLastWriteData = (FAULT_TOLERANT_WRITE_LAST_WRITE_DATA
>     > *)GET_GUID_HOB_DATA (GuidHob);
>     > +      if (FtwLastWriteData->TargetAddress == NvStorageBase) {
>     > +        DEBUG ((DEBUG_INFO, "Variable: NV storage is backed up in spare
> block:
>     > 0x%x\n", (UINTN)FtwLastWriteData->SpareAddress));
>     > +        //
>     > +        // Copy the backed up NV storage data to the memory buffer from
> spare
>     > block.
>     > +        //
>     > +        CopyMem (NvStorageData, (UINT8 *)(UINTN)(FtwLastWriteData-
>     > >SpareAddress), NvStorageSize);
>     > +      } else if ((FtwLastWriteData->TargetAddress > NvStorageBase) &&
>     > +                 (FtwLastWriteData->TargetAddress < (NvStorageBase +
>     > NvStorageSize)))
>     > +      {
>     > +        //
>     > +        // Flash NV storage from the Offset is backed up in spare block.
>     > +        //
>     > +        BackUpOffset = (UINT32)(FtwLastWriteData->TargetAddress -
>     > NvStorageBase);
>     > +        BackUpSize   = NvStorageSize - BackUpOffset;
>     > +        DEBUG ((DEBUG_INFO, "Variable: High partial NV storage from
> offset: %x
>     > is backed up in spare block: 0x%x\n", BackUpOffset,
> (UINTN)FtwLastWriteData-
>     > >SpareAddress));
>     > +        //
>     > +        // Copy the partial backed up NV storage data to the memory buffer
> from
>     > spare block.
>     > +        //
>     > +        CopyMem (NvStorageData + BackUpOffset, (UINT8
>     > *)(UINTN)FtwLastWriteData->SpareAddress, BackUpSize);
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  FvHeader = (EFI_FIRMWARE_VOLUME_HEADER *)NvStorageData;
>     > +
>     > +  //
>     > +  // Check if the Firmware Volume is not corrupted
>     > +  //
>     > +  if ((FvHeader->Signature != EFI_FVH_SIGNATURE) || (!CompareGuid
>     > (&gEfiSystemNvDataFvGuid, &FvHeader->FileSystemGuid))) {
>     > +    FreePool (NvStorageData);
>     > +    DEBUG ((DEBUG_ERROR, "Firmware Volume for Variable Store is
>     > corrupted\n"));
>     > +    return EFI_VOLUME_CORRUPTED;
>     > +  }
>     > +
>     > +  VariableStore       = (VARIABLE_STORE_HEADER *)((UINTN)FvHeader +
>     > FvHeader->HeaderLength);
>     > +  VariableStoreLength = NvStorageSize - FvHeader->HeaderLength;
>     > +  ASSERT (sizeof (VARIABLE_STORE_HEADER) <= VariableStoreLength);
>     > +  ASSERT (VariableStore->Size == VariableStoreLength);
>     > +
>     > +  //
>     > +  // Check if the Variable Store header is not corrupted
>     > +  //
>     > +  if (GetVariableStoreStatus (VariableStore) != EfiValid) {
>     > +    FreePool (NvStorageData);
>     > +    DEBUG ((DEBUG_ERROR, "Variable Store header is corrupted\n"));
>     > +    return EFI_VOLUME_CORRUPTED;
>     > +  }
>     > +
>     > +  //
>     > +  // Overwrite the store with verified copy of protected variables, if enabled.
>     > +  //
>     > +  Status = InitProtectedVariableStore (VariableStore);
>     > +  if ((Status != EFI_SUCCESS) && (Status != EFI_UNSUPPORTED)) {
>     > +    FreePool (NvStorageData);
>     > +    DEBUG ((DEBUG_ERROR, "Variable integrity might have been
>     > compromised\n"));
>     > +    return Status;
>     > +  }
>     > +
>     > +  mNvFvHeaderCache = FvHeader;
>     > +
>     > +  *VariableStoreBase = (EFI_PHYSICAL_ADDRESS)(UINTN)VariableStore;
>     > +
>     > +  HwErrStorageSize                    = PcdGet32 (PcdHwErrStorageSize);
>     > +  MaxUserNvVariableSpaceSize          = PcdGet32
>     > (PcdMaxUserNvVariableSpaceSize);
>     > +  BoottimeReservedNvVariableSpaceSize = PcdGet32
>     > (PcdBoottimeReservedNvVariableSpaceSize);
>     > +
>     > +  //
>     > +  // Note that in EdkII variable driver implementation, Hardware Error
> Record
>     > type variable
>     > +  // is stored with common variable in the same NV region. So the platform
>     > integrator should
>     > +  // ensure that the value of PcdHwErrStorageSize is less than the value of
>     > +  // (VariableStoreLength - sizeof (VARIABLE_STORE_HEADER)).
>     > +  //
>     > +  ASSERT (HwErrStorageSize < (VariableStoreLength - sizeof
>     > (VARIABLE_STORE_HEADER)));
>     > +  //
>     > +  // Ensure that the value of PcdMaxUserNvVariableSpaceSize is less than
> the
>     > value of
>     > +  // (VariableStoreLength - sizeof (VARIABLE_STORE_HEADER)) - PcdGet32
>     > (PcdHwErrStorageSize).
>     > +  //
>     > +  ASSERT (MaxUserNvVariableSpaceSize < (VariableStoreLength - sizeof
>     > (VARIABLE_STORE_HEADER) - HwErrStorageSize));
>     > +  //
>     > +  // Ensure that the value of PcdBoottimeReservedNvVariableSpaceSize is
> less
>     > than the value of
>     > +  // (VariableStoreLength - sizeof (VARIABLE_STORE_HEADER)) - PcdGet32
>     > (PcdHwErrStorageSize).
>     > +  //
>     > +  ASSERT (BoottimeReservedNvVariableSpaceSize < (VariableStoreLength -
>     > sizeof (VARIABLE_STORE_HEADER) - HwErrStorageSize));
>     > +
>     > +  mVariableModuleGlobal->CommonVariableSpace        =
>     > ((UINTN)VariableStoreLength - sizeof (VARIABLE_STORE_HEADER) -
>     > HwErrStorageSize);
>     > +  mVariableModuleGlobal->CommonMaxUserVariableSpace =
>     > ((MaxUserNvVariableSpaceSize != 0) ? MaxUserNvVariableSpaceSize :
>     > mVariableModuleGlobal->CommonVariableSpace);
>     > +  mVariableModuleGlobal->CommonRuntimeVariableSpace =
>     > mVariableModuleGlobal->CommonVariableSpace -
>     > BoottimeReservedNvVariableSpaceSize;
>     > +
>     > +  DEBUG ((
>     > +    DEBUG_INFO,
>     > +    "Variable driver common space: 0x%x 0x%x 0x%x\n",
>     > +    mVariableModuleGlobal->CommonVariableSpace,
>     > +    mVariableModuleGlobal->CommonMaxUserVariableSpace,
>     > +    mVariableModuleGlobal->CommonRuntimeVariableSpace
>     > +    ));
>     > +
>     > +  //
>     > +  // The max NV variable size should be < (VariableStoreLength - sizeof
>     > (VARIABLE_STORE_HEADER)).
>     > +  //
>     > +  ASSERT (GetNonVolatileMaxVariableSize () < (VariableStoreLength - sizeof
>     > (VARIABLE_STORE_HEADER)));
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Init non-volatile variable store.
>     > +
>     > +  @retval EFI_SUCCESS           Function successfully executed.
>     > +  @retval EFI_OUT_OF_RESOURCES  Fail to allocate enough memory
> resource.
>     > +  @retval EFI_VOLUME_CORRUPTED  Variable Store or Firmware Volume
> for
>     > Variable Store is corrupted.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +InitNonVolatileVariableStore (
>     > +  VOID
>     > +  )
>     > +{
>     > +  VARIABLE_HEADER       *Variable;
>     > +  VARIABLE_HEADER       *NextVariable;
>     > +  EFI_PHYSICAL_ADDRESS  VariableStoreBase;
>     > +  UINTN                 VariableSize;
>     > +  EFI_STATUS            Status;
>     > +
>     > +  if (PcdGetBool (PcdEmuVariableNvModeEnable)) {
>     > +    Status = InitEmuNonVolatileVariableStore (&VariableStoreBase);
>     > +    if (EFI_ERROR (Status)) {
>     > +      return Status;
>     > +    }
>     > +
>     > +    mVariableModuleGlobal->VariableGlobal.EmuNvMode = TRUE;
>     > +    DEBUG ((DEBUG_INFO, "Variable driver will work at emulated non-
> volatile
>     > variable mode!\n"));
>     > +  } else {
>     > +    Status = InitRealNonVolatileVariableStore (&VariableStoreBase);
>     > +    if (EFI_ERROR (Status)) {
>     > +      return Status;
>     > +    }
>     > +
>     > +    mVariableModuleGlobal->VariableGlobal.EmuNvMode = FALSE;
>     > +  }
>     > +
>     > +  mVariableModuleGlobal->VariableGlobal.NonVolatileVariableBase =
>     > VariableStoreBase;
>     > +  mNvVariableCache                                              = (VARIABLE_STORE_HEADER
>     > *)(UINTN)VariableStoreBase;
>     > +  mVariableModuleGlobal->VariableGlobal.AuthFormat              =
>     > (BOOLEAN)(CompareGuid (&mNvVariableCache->Signature,
>     > &gEfiAuthenticatedVariableGuid));
>     > +
>     > +  mVariableModuleGlobal->MaxVariableSize     = PcdGet32
>     > (PcdMaxVariableSize);
>     > +  mVariableModuleGlobal->MaxAuthVariableSize = ((PcdGet32
>     > (PcdMaxAuthVariableSize) != 0) ? PcdGet32 (PcdMaxAuthVariableSize) :
>     > mVariableModuleGlobal->MaxVariableSize);
>     > +
>     > +  //
>     > +  // Parse non-volatile variable data and get last variable offset.
>     > +  //
>     > +  Variable = GetStartPointer (mNvVariableCache);
>     > +  while (IsValidVariableHeader (
>     > +           Variable,
>     > +           GetEndPointer (mNvVariableCache),
>     > +           mVariableModuleGlobal->VariableGlobal.AuthFormat
>     > +           ))
>     > +  {
>     > +    NextVariable = GetNextVariablePtr (Variable, mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +    VariableSize = (UINTN)NextVariable - (UINTN)Variable;
>     > +    if ((Variable->Attributes & (EFI_VARIABLE_NON_VOLATILE |
>     > EFI_VARIABLE_HARDWARE_ERROR_RECORD)) ==
>     > (EFI_VARIABLE_NON_VOLATILE |
> EFI_VARIABLE_HARDWARE_ERROR_RECORD))
>     > {
>     > +      mVariableModuleGlobal->HwErrVariableTotalSize += VariableSize;
>     > +    } else {
>     > +      mVariableModuleGlobal->CommonVariableTotalSize += VariableSize;
>     > +    }
>     > +
>     > +    Variable = NextVariable;
>     > +  }
>     > +
>     > +  mVariableModuleGlobal->NonVolatileLastVariableOffset =
> (UINTN)Variable -
>     > (UINTN)mNvVariableCache;
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableParsing.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableParsing.c
>     > new file mode 100644
>     > index 000000000000..be3f59341c1e
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableParsing.c
>     > @@ -0,0 +1,1110 @@
>     > +/** @file
>     > +  Functions in this module are associated with variable parsing operations
> and
>     > +  are intended to be usable across variable driver source files.
>     > +
>     > +Copyright (c) 2019 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include "Variable.h"
>     > +#include "VariableParsing.h"
>     > +
>     > +/**
>     > +
>     > +  This code checks if variable header is valid or not.
>     > +
>     > +  @param[in] Variable           Pointer to the Variable Header.
>     > +  @param[in] VariableStoreEnd   Pointer to the Variable Store End.
>     > +  @param[in] AuthFormat         TRUE indicates authenticated variables are
> used.
>     > +                                FALSE indicates authenticated variables are not used.
>     > +
>     > +  @retval TRUE              Variable header is valid.
>     > +  @retval FALSE             Variable header is not valid.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +IsValidVariableHeader (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  VARIABLE_HEADER  *VariableStoreEnd,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  )
>     > +{
>     > +  if (  (Variable == NULL)
>     > +     || (((UINTN)Variable + GetVariableHeaderSize (AuthFormat)) >=
>     > (UINTN)VariableStoreEnd)
>     > +     || (Variable->StartId != VARIABLE_DATA))
>     > +  {
>     > +    //
>     > +    // Variable is NULL or has reached the end of variable store,
>     > +    // or the StartId is not correct.
>     > +    //
>     > +    return FALSE;
>     > +  }
>     > +
>     > +  return TRUE;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code gets the current status of Variable Store.
>     > +
>     > +  @param[in] VarStoreHeader  Pointer to the Variable Store Header.
>     > +
>     > +  @retval EfiRaw         Variable store status is raw.
>     > +  @retval EfiValid       Variable store status is valid.
>     > +  @retval EfiInvalid     Variable store status is invalid.
>     > +
>     > +**/
>     > +VARIABLE_STORE_STATUS
>     > +GetVariableStoreStatus (
>     > +  IN VARIABLE_STORE_HEADER  *VarStoreHeader
>     > +  )
>     > +{
>     > +  if ((CompareGuid (&VarStoreHeader->Signature,
>     > &gEfiAuthenticatedVariableGuid) ||
>     > +       CompareGuid (&VarStoreHeader->Signature, &gEfiVariableGuid)) &&
>     > +      (VarStoreHeader->Format == VARIABLE_STORE_FORMATTED) &&
>     > +      (VarStoreHeader->State == VARIABLE_STORE_HEALTHY)
>     > +      )
>     > +  {
>     > +    return EfiValid;
>     > +  } else if ((((UINT32 *)(&VarStoreHeader->Signature))[0] == 0xffffffff) &&
>     > +             (((UINT32 *)(&VarStoreHeader->Signature))[1] == 0xffffffff) &&
>     > +             (((UINT32 *)(&VarStoreHeader->Signature))[2] == 0xffffffff) &&
>     > +             (((UINT32 *)(&VarStoreHeader->Signature))[3] == 0xffffffff) &&
>     > +             (VarStoreHeader->Size == 0xffffffff) &&
>     > +             (VarStoreHeader->Format == 0xff) &&
>     > +             (VarStoreHeader->State == 0xff)
>     > +             )
>     > +  {
>     > +    return EfiRaw;
>     > +  } else {
>     > +    return EfiInvalid;
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  This code gets the size of variable header.
>     > +
>     > +  @param[in]  AuthFormat    TRUE indicates authenticated variables are
> used.
>     > +                            FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Size of variable header in bytes in type UINTN.
>     > +
>     > +**/
>     > +UINTN
>     > +GetVariableHeaderSize (
>     > +  IN  BOOLEAN  AuthFormat
>     > +  )
>     > +{
>     > +  UINTN  Value;
>     > +
>     > +  if (AuthFormat) {
>     > +    Value = sizeof (AUTHENTICATED_VARIABLE_HEADER);
>     > +  } else {
>     > +    Value = sizeof (VARIABLE_HEADER);
>     > +  }
>     > +
>     > +  return Value;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code gets the size of name of variable.
>     > +
>     > +  @param[in]  Variable      Pointer to the variable header.
>     > +  @param[in]  AuthFormat    TRUE indicates authenticated variables are
> used.
>     > +                            FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return UINTN          Size of variable in bytes.
>     > +
>     > +**/
>     > +UINTN
>     > +NameSizeOfVariable (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  )
>     > +{
>     > +  AUTHENTICATED_VARIABLE_HEADER  *AuthVariable;
>     > +
>     > +  AuthVariable = (AUTHENTICATED_VARIABLE_HEADER *)Variable;
>     > +  if (AuthFormat) {
>     > +    if ((AuthVariable->State == (UINT8)(-1)) ||
>     > +        (AuthVariable->DataSize == (UINT32)(-1)) ||
>     > +        (AuthVariable->NameSize == (UINT32)(-1)) ||
>     > +        (AuthVariable->Attributes == (UINT32)(-1)))
>     > +    {
>     > +      return 0;
>     > +    }
>     > +
>     > +    return (UINTN)AuthVariable->NameSize;
>     > +  } else {
>     > +    if ((Variable->State == (UINT8)(-1)) ||
>     > +        (Variable->DataSize == (UINT32)(-1)) ||
>     > +        (Variable->NameSize == (UINT32)(-1)) ||
>     > +        (Variable->Attributes == (UINT32)(-1)))
>     > +    {
>     > +      return 0;
>     > +    }
>     > +
>     > +    return (UINTN)Variable->NameSize;
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  This code sets the size of name of variable.
>     > +
>     > +  @param[in]  Variable      Pointer to the Variable Header.
>     > +  @param[in]  NameSize      Name size to set.
>     > +  @param[in]  AuthFormat    TRUE indicates authenticated variables are
> used.
>     > +                            FALSE indicates authenticated variables are not used.
>     > +
>     > +**/
>     > +VOID
>     > +SetNameSizeOfVariable (
>     > +  IN VARIABLE_HEADER  *Variable,
>     > +  IN UINTN            NameSize,
>     > +  IN BOOLEAN          AuthFormat
>     > +  )
>     > +{
>     > +  AUTHENTICATED_VARIABLE_HEADER  *AuthVariable;
>     > +
>     > +  AuthVariable = (AUTHENTICATED_VARIABLE_HEADER *)Variable;
>     > +  if (AuthFormat) {
>     > +    AuthVariable->NameSize = (UINT32)NameSize;
>     > +  } else {
>     > +    Variable->NameSize = (UINT32)NameSize;
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code gets the size of variable data.
>     > +
>     > +  @param[in]  Variable      Pointer to the Variable Header.
>     > +  @param[in]  AuthFormat    TRUE indicates authenticated variables are
> used.
>     > +                            FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Size of variable in bytes.
>     > +
>     > +**/
>     > +UINTN
>     > +DataSizeOfVariable (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  )
>     > +{
>     > +  AUTHENTICATED_VARIABLE_HEADER  *AuthVariable;
>     > +
>     > +  AuthVariable = (AUTHENTICATED_VARIABLE_HEADER *)Variable;
>     > +  if (AuthFormat) {
>     > +    if ((AuthVariable->State == (UINT8)(-1)) ||
>     > +        (AuthVariable->DataSize == (UINT32)(-1)) ||
>     > +        (AuthVariable->NameSize == (UINT32)(-1)) ||
>     > +        (AuthVariable->Attributes == (UINT32)(-1)))
>     > +    {
>     > +      return 0;
>     > +    }
>     > +
>     > +    return (UINTN)AuthVariable->DataSize;
>     > +  } else {
>     > +    if ((Variable->State == (UINT8)(-1)) ||
>     > +        (Variable->DataSize == (UINT32)(-1)) ||
>     > +        (Variable->NameSize == (UINT32)(-1)) ||
>     > +        (Variable->Attributes == (UINT32)(-1)))
>     > +    {
>     > +      return 0;
>     > +    }
>     > +
>     > +    return (UINTN)Variable->DataSize;
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  This code sets the size of variable data.
>     > +
>     > +  @param[in] Variable   Pointer to the Variable Header.
>     > +  @param[in] DataSize   Data size to set.
>     > +  @param[in] AuthFormat TRUE indicates authenticated variables are used.
>     > +                        FALSE indicates authenticated variables are not used.
>     > +
>     > +**/
>     > +VOID
>     > +SetDataSizeOfVariable (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  UINTN            DataSize,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  )
>     > +{
>     > +  AUTHENTICATED_VARIABLE_HEADER  *AuthVariable;
>     > +
>     > +  AuthVariable = (AUTHENTICATED_VARIABLE_HEADER *)Variable;
>     > +  if (AuthFormat) {
>     > +    AuthVariable->DataSize = (UINT32)DataSize;
>     > +  } else {
>     > +    Variable->DataSize = (UINT32)DataSize;
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code gets the pointer to the variable name.
>     > +
>     > +  @param[in] Variable     Pointer to the Variable Header.
>     > +  @param[in] AuthFormat   TRUE indicates authenticated variables are used.
>     > +                          FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Pointer to Variable Name which is Unicode encoding.
>     > +
>     > +**/
>     > +CHAR16 *
>     > +GetVariableNamePtr (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  )
>     > +{
>     > +  return (CHAR16 *)((UINTN)Variable + GetVariableHeaderSize
> (AuthFormat));
>     > +}
>     > +
>     > +/**
>     > +  This code gets the pointer to the variable guid.
>     > +
>     > +  @param[in] Variable     Pointer to the Variable Header.
>     > +  @param[in] AuthFormat   TRUE indicates authenticated variables are used.
>     > +                          FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return A EFI_GUID* pointer to Vendor Guid.
>     > +
>     > +**/
>     > +EFI_GUID *
>     > +GetVendorGuidPtr (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  )
>     > +{
>     > +  AUTHENTICATED_VARIABLE_HEADER  *AuthVariable;
>     > +
>     > +  AuthVariable = (AUTHENTICATED_VARIABLE_HEADER *)Variable;
>     > +  if (AuthFormat) {
>     > +    return &AuthVariable->VendorGuid;
>     > +  } else {
>     > +    return &Variable->VendorGuid;
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code gets the pointer to the variable data.
>     > +
>     > +  @param[in] Variable     Pointer to the Variable Header.
>     > +  @param[in] AuthFormat   TRUE indicates authenticated variables are used.
>     > +                          FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Pointer to Variable Data.
>     > +
>     > +**/
>     > +UINT8 *
>     > +GetVariableDataPtr (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  )
>     > +{
>     > +  UINTN  Value;
>     > +
>     > +  //
>     > +  // Be careful about pad size for alignment.
>     > +  //
>     > +  Value  =  (UINTN)GetVariableNamePtr (Variable, AuthFormat);
>     > +  Value += NameSizeOfVariable (Variable, AuthFormat);
>     > +  Value += GET_PAD_SIZE (NameSizeOfVariable (Variable, AuthFormat));
>     > +
>     > +  return (UINT8 *)Value;
>     > +}
>     > +
>     > +/**
>     > +  This code gets the variable data offset related to variable header.
>     > +
>     > +  @param[in] Variable     Pointer to the Variable Header.
>     > +  @param[in] AuthFormat   TRUE indicates authenticated variables are used.
>     > +                          FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Variable Data offset.
>     > +
>     > +**/
>     > +UINTN
>     > +GetVariableDataOffset (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  )
>     > +{
>     > +  UINTN  Value;
>     > +
>     > +  //
>     > +  // Be careful about pad size for alignment
>     > +  //
>     > +  Value  = GetVariableHeaderSize (AuthFormat);
>     > +  Value += NameSizeOfVariable (Variable, AuthFormat);
>     > +  Value += GET_PAD_SIZE (NameSizeOfVariable (Variable, AuthFormat));
>     > +
>     > +  return Value;
>     > +}
>     > +
>     > +/**
>     > +  Get variable data payload.
>     > +
>     > +  @param[in]      Variable     Pointer to the Variable Header.
>     > +  @param[in,out]  Data         Pointer to buffer used to store the variable
> data.
>     > +  @param[in,out]  DataSize     Size of buffer passed by Data.
>     > +                               Size of data copied into Data buffer.
>     > +  @param[in]      AuthFlag     Auth-variable indicator.
>     > +
>     > +  @return EFI_SUCCESS             Data was fetched.
>     > +  @return EFI_INVALID_PARAMETER   DataSize is NULL.
>     > +  @return EFI_BUFFER_TOO_SMALL    DataSize is smaller than size of
> variable
>     > data.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetVariableData (
>     > +  IN      VARIABLE_HEADER  *Variable,
>     > +  IN  OUT VOID             *Data,
>     > +  IN  OUT UINT32           *DataSize,
>     > +  IN      BOOLEAN          AuthFlag
>     > +  )
>     > +{
>     > +  UINT32  Size;
>     > +
>     > +  if (DataSize == NULL) {
>     > +    ASSERT (DataSize != NULL);
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  Size = (UINT32)DataSizeOfVariable (Variable, AuthFlag);
>     > +  if (*DataSize < Size) {
>     > +    *DataSize = Size;
>     > +    return EFI_BUFFER_TOO_SMALL;
>     > +  }
>     > +
>     > +  if (Data == NULL) {
>     > +    ASSERT (Data != NULL);
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  CopyMem (Data, GetVariableDataPtr (Variable, AuthFlag), Size);
>     > +  *DataSize = Size;
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code gets the pointer to the next variable header.
>     > +
>     > +  @param[in] Variable     Pointer to the Variable Header.
>     > +  @param[in] AuthFormat   TRUE indicates authenticated variables are used.
>     > +                          FALSE indicates authenticated variables are not used.
>     > +
>     > +  @return Pointer to next variable header.
>     > +
>     > +**/
>     > +VARIABLE_HEADER *
>     > +GetNextVariablePtr (
>     > +  IN  VARIABLE_HEADER  *Variable,
>     > +  IN  BOOLEAN          AuthFormat
>     > +  )
>     > +{
>     > +  UINTN  Value;
>     > +
>     > +  Value  =  (UINTN)GetVariableDataPtr (Variable, AuthFormat);
>     > +  Value += DataSizeOfVariable (Variable, AuthFormat);
>     > +  Value += GET_PAD_SIZE (DataSizeOfVariable (Variable, AuthFormat));
>     > +
>     > +  //
>     > +  // Be careful about pad size for alignment.
>     > +  //
>     > +  return (VARIABLE_HEADER *)HEADER_ALIGN (Value);
>     > +}
>     > +
>     > +/**
>     > +
>     > +  Gets the pointer to the first variable header in given variable store area.
>     > +
>     > +  @param[in] VarStoreHeader  Pointer to the Variable Store Header.
>     > +
>     > +  @return Pointer to the first variable header.
>     > +
>     > +**/
>     > +VARIABLE_HEADER *
>     > +GetStartPointer (
>     > +  IN VARIABLE_STORE_HEADER  *VarStoreHeader
>     > +  )
>     > +{
>     > +  //
>     > +  // The start of variable store.
>     > +  //
>     > +  return (VARIABLE_HEADER *)HEADER_ALIGN (VarStoreHeader + 1);
>     > +}
>     > +
>     > +/**
>     > +
>     > +  Gets the pointer to the end of the variable storage area.
>     > +
>     > +  This function gets pointer to the end of the variable storage
>     > +  area, according to the input variable store header.
>     > +
>     > +  @param[in] VarStoreHeader  Pointer to the Variable Store Header.
>     > +
>     > +  @return Pointer to the end of the variable storage area.
>     > +
>     > +**/
>     > +VARIABLE_HEADER *
>     > +GetEndPointer (
>     > +  IN VARIABLE_STORE_HEADER  *VarStoreHeader
>     > +  )
>     > +{
>     > +  //
>     > +  // The end of variable store
>     > +  //
>     > +  return (VARIABLE_HEADER *)HEADER_ALIGN ((UINTN)VarStoreHeader +
>     > VarStoreHeader->Size);
>     > +}
>     > +
>     > +/**
>     > +  Compare two EFI_TIME data.
>     > +
>     > +
>     > +  @param[in] FirstTime       A pointer to the first EFI_TIME data.
>     > +  @param[in] SecondTime      A pointer to the second EFI_TIME data.
>     > +
>     > +  @retval  TRUE              The FirstTime is not later than the SecondTime.
>     > +  @retval  FALSE             The FirstTime is later than the SecondTime.
>     > +
>     > +**/
>     > +BOOLEAN
>     > +VariableCompareTimeStampInternal (
>     > +  IN EFI_TIME  *FirstTime,
>     > +  IN EFI_TIME  *SecondTime
>     > +  )
>     > +{
>     > +  if (FirstTime->Year != SecondTime->Year) {
>     > +    return (BOOLEAN)(FirstTime->Year < SecondTime->Year);
>     > +  } else if (FirstTime->Month != SecondTime->Month) {
>     > +    return (BOOLEAN)(FirstTime->Month < SecondTime->Month);
>     > +  } else if (FirstTime->Day != SecondTime->Day) {
>     > +    return (BOOLEAN)(FirstTime->Day < SecondTime->Day);
>     > +  } else if (FirstTime->Hour != SecondTime->Hour) {
>     > +    return (BOOLEAN)(FirstTime->Hour < SecondTime->Hour);
>     > +  } else if (FirstTime->Minute != SecondTime->Minute) {
>     > +    return (BOOLEAN)(FirstTime->Minute < SecondTime->Minute);
>     > +  }
>     > +
>     > +  return (BOOLEAN)(FirstTime->Second <= SecondTime->Second);
>     > +}
>     > +
>     > +/**
>     > +  Find the variable in the specified variable store.
>     > +
>     > +  @param[in]       VariableName        Name of the variable to be found
>     > +  @param[in]       VendorGuid          Vendor GUID to be found.
>     > +  @param[in]       IgnoreRtCheck       Ignore
> EFI_VARIABLE_RUNTIME_ACCESS
>     > attribute
>     > +                                       check at runtime when searching variable.
>     > +  @param[in, out]  PtrTrack            Variable Track Pointer structure that
> contains
>     > Variable Information.
>     > +  @param[in]       AuthFormat          TRUE indicates authenticated variables
> are
>     > used.
>     > +                                       FALSE indicates authenticated variables are not used.
>     > +
>     > +  @retval          EFI_SUCCESS         Variable found successfully
>     > +  @retval          EFI_NOT_FOUND       Variable not found
>     > +**/
>     > +EFI_STATUS
>     > +FindVariableEx (
>     > +  IN     CHAR16                  *VariableName,
>     > +  IN     EFI_GUID                *VendorGuid,
>     > +  IN     BOOLEAN                 IgnoreRtCheck,
>     > +  IN OUT VARIABLE_POINTER_TRACK  *PtrTrack,
>     > +  IN     BOOLEAN                 AuthFormat
>     > +  )
>     > +{
>     > +  VARIABLE_HEADER  *InDeletedVariable;
>     > +  VOID             *Point;
>     > +
>     > +  PtrTrack->InDeletedTransitionPtr = NULL;
>     > +
>     > +  //
>     > +  // Find the variable by walk through HOB, volatile and non-volatile
> variable
>     > store.
>     > +  //
>     > +  InDeletedVariable = NULL;
>     > +
>     > +  for ( PtrTrack->CurrPtr = PtrTrack->StartPtr
>     > +        ; IsValidVariableHeader (PtrTrack->CurrPtr, PtrTrack->EndPtr,
> AuthFormat)
>     > +        ; PtrTrack->CurrPtr = GetNextVariablePtr (PtrTrack->CurrPtr,
> AuthFormat)
>     > +        )
>     > +  {
>     > +    if ((PtrTrack->CurrPtr->State == VAR_ADDED) ||
>     > +        (PtrTrack->CurrPtr->State == (VAR_IN_DELETED_TRANSITION &
>     > VAR_ADDED))
>     > +        )
>     > +    {
>     > +      if (IgnoreRtCheck || !AtRuntime () || ((PtrTrack->CurrPtr->Attributes &
>     > EFI_VARIABLE_RUNTIME_ACCESS) != 0)) {
>     > +        if (VariableName[0] == 0) {
>     > +          if (PtrTrack->CurrPtr->State == (VAR_IN_DELETED_TRANSITION &
>     > VAR_ADDED)) {
>     > +            InDeletedVariable = PtrTrack->CurrPtr;
>     > +          } else {
>     > +            PtrTrack->InDeletedTransitionPtr = InDeletedVariable;
>     > +            return EFI_SUCCESS;
>     > +          }
>     > +        } else {
>     > +          if (CompareGuid (VendorGuid, GetVendorGuidPtr (PtrTrack->CurrPtr,
>     > AuthFormat))) {
>     > +            Point = (VOID *)GetVariableNamePtr (PtrTrack->CurrPtr,
> AuthFormat);
>     > +
>     > +            ASSERT (NameSizeOfVariable (PtrTrack->CurrPtr, AuthFormat) != 0);
>     > +            if (CompareMem (VariableName, Point, NameSizeOfVariable
> (PtrTrack-
>     > >CurrPtr, AuthFormat)) == 0) {
>     > +              if (PtrTrack->CurrPtr->State == (VAR_IN_DELETED_TRANSITION &
>     > VAR_ADDED)) {
>     > +                InDeletedVariable = PtrTrack->CurrPtr;
>     > +              } else {
>     > +                PtrTrack->InDeletedTransitionPtr = InDeletedVariable;
>     > +                return EFI_SUCCESS;
>     > +              }
>     > +            }
>     > +          }
>     > +        }
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  PtrTrack->CurrPtr = InDeletedVariable;
>     > +  return (PtrTrack->CurrPtr  == NULL) ? EFI_NOT_FOUND : EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  This code finds the next available variable.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This function may be invoked in SMM mode. This function will do basic
>     > validation, before parse the data.
>     > +
>     > +  @param[in]  VariableName      Pointer to variable name.
>     > +  @param[in]  VendorGuid        Variable Vendor Guid.
>     > +  @param[in]  VariableStoreList A list of variable stores that should be used
> to
>     > get the next variable.
>     > +                                The maximum number of entries is the max value of
>     > VARIABLE_STORE_TYPE.
>     > +  @param[out] VariablePtr       Pointer to variable header address.
>     > +  @param[in]  AuthFormat        TRUE indicates authenticated variables are
> used.
>     > +                                FALSE indicates authenticated variables are not used.
>     > +
>     > +  @retval EFI_SUCCESS           The function completed successfully.
>     > +  @retval EFI_NOT_FOUND         The next variable was not found.
>     > +  @retval EFI_INVALID_PARAMETER If VariableName is not an empty string,
>     > while VendorGuid is NULL.
>     > +  @retval EFI_INVALID_PARAMETER The input values of VariableName and
>     > VendorGuid are not a name and
>     > +                                GUID of an existing variable.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceGetNextVariableInternal (
>     > +  IN  CHAR16                 *VariableName,
>     > +  IN  EFI_GUID               *VendorGuid,
>     > +  IN  VARIABLE_STORE_HEADER  **VariableStoreList,
>     > +  OUT VARIABLE_HEADER        **VariablePtr,
>     > +  IN  BOOLEAN                AuthFormat
>     > +  )
>     > +{
>     > +  EFI_STATUS              Status;
>     > +  VARIABLE_STORE_TYPE     StoreType;
>     > +  VARIABLE_POINTER_TRACK  Variable;
>     > +  VARIABLE_POINTER_TRACK  VariableInHob;
>     > +  VARIABLE_POINTER_TRACK  VariablePtrTrack;
>     > +
>     > +  Status = EFI_NOT_FOUND;
>     > +
>     > +  if (VariableStoreList == NULL) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  ZeroMem (&Variable, sizeof (Variable));
>     > +
>     > +  // Check if the variable exists in the given variable store list
>     > +  for (StoreType = (VARIABLE_STORE_TYPE)0; StoreType <
>     > VariableStoreTypeMax; StoreType++) {
>     > +    if (VariableStoreList[StoreType] == NULL) {
>     > +      continue;
>     > +    }
>     > +
>     > +    Variable.StartPtr = GetStartPointer (VariableStoreList[StoreType]);
>     > +    Variable.EndPtr   = GetEndPointer (VariableStoreList[StoreType]);
>     > +    Variable.Volatile = (BOOLEAN)(StoreType == VariableStoreTypeVolatile);
>     > +
>     > +    Status = FindVariableEx (VariableName, VendorGuid, FALSE, &Variable,
>     > AuthFormat);
>     > +    if (!EFI_ERROR (Status)) {
>     > +      break;
>     > +    }
>     > +  }
>     > +
>     > +  if ((Variable.CurrPtr == NULL) || EFI_ERROR (Status)) {
>     > +    //
>     > +    // For VariableName is an empty string, FindVariableEx() will try to find
> and
>     > return
>     > +    // the first qualified variable, and if FindVariableEx() returns error
>     > (EFI_NOT_FOUND)
>     > +    // as no any variable is found, still go to return the error
> (EFI_NOT_FOUND).
>     > +    //
>     > +    if (VariableName[0] != 0) {
>     > +      //
>     > +      // For VariableName is not an empty string, and FindVariableEx() returns
>     > error as
>     > +      // VariableName and VendorGuid are not a name and GUID of an
> existing
>     > variable,
>     > +      // there is no way to get next variable, follow spec to return
>     > EFI_INVALID_PARAMETER.
>     > +      //
>     > +      Status = EFI_INVALID_PARAMETER;
>     > +    }
>     > +
>     > +    goto Done;
>     > +  }
>     > +
>     > +  if (VariableName[0] != 0) {
>     > +    //
>     > +    // If variable name is not empty, get next variable.
>     > +    //
>     > +    Variable.CurrPtr = GetNextVariablePtr (Variable.CurrPtr, AuthFormat);
>     > +  }
>     > +
>     > +  while (TRUE) {
>     > +    //
>     > +    // Switch to the next variable store if needed
>     > +    //
>     > +    while (!IsValidVariableHeader (Variable.CurrPtr, Variable.EndPtr,
>     > AuthFormat)) {
>     > +      //
>     > +      // Find current storage index
>     > +      //
>     > +      for (StoreType = (VARIABLE_STORE_TYPE)0; StoreType <
>     > VariableStoreTypeMax; StoreType++) {
>     > +        if ((VariableStoreList[StoreType] != NULL) && (Variable.StartPtr ==
>     > GetStartPointer (VariableStoreList[StoreType]))) {
>     > +          break;
>     > +        }
>     > +      }
>     > +
>     > +      ASSERT (StoreType < VariableStoreTypeMax);
>     > +      //
>     > +      // Switch to next storage
>     > +      //
>     > +      for (StoreType++; StoreType < VariableStoreTypeMax; StoreType++) {
>     > +        if (VariableStoreList[StoreType] != NULL) {
>     > +          break;
>     > +        }
>     > +      }
>     > +
>     > +      //
>     > +      // Capture the case that
>     > +      // 1. current storage is the last one, or
>     > +      // 2. no further storage
>     > +      //
>     > +      if (StoreType == VariableStoreTypeMax) {
>     > +        Status = EFI_NOT_FOUND;
>     > +        goto Done;
>     > +      }
>     > +
>     > +      Variable.StartPtr = GetStartPointer (VariableStoreList[StoreType]);
>     > +      Variable.EndPtr   = GetEndPointer (VariableStoreList[StoreType]);
>     > +      Variable.CurrPtr  = Variable.StartPtr;
>     > +    }
>     > +
>     > +    //
>     > +    // Variable is found
>     > +    //
>     > +    if ((Variable.CurrPtr->State == VAR_ADDED) || (Variable.CurrPtr->State
> ==
>     > (VAR_IN_DELETED_TRANSITION & VAR_ADDED))) {
>     > +      if (!AtRuntime () || ((Variable.CurrPtr->Attributes &
>     > EFI_VARIABLE_RUNTIME_ACCESS) != 0)) {
>     > +        if (Variable.CurrPtr->State == (VAR_IN_DELETED_TRANSITION &
>     > VAR_ADDED)) {
>     > +          //
>     > +          // If it is a IN_DELETED_TRANSITION variable,
>     > +          // and there is also a same ADDED one at the same time,
>     > +          // don't return it.
>     > +          //
>     > +          VariablePtrTrack.StartPtr = Variable.StartPtr;
>     > +          VariablePtrTrack.EndPtr   = Variable.EndPtr;
>     > +          Status                    = FindVariableEx (
>     > +                                        GetVariableNamePtr (Variable.CurrPtr, AuthFormat),
>     > +                                        GetVendorGuidPtr (Variable.CurrPtr, AuthFormat),
>     > +                                        FALSE,
>     > +                                        &VariablePtrTrack,
>     > +                                        AuthFormat
>     > +                                        );
>     > +          if (!EFI_ERROR (Status) && (VariablePtrTrack.CurrPtr->State ==
>     > VAR_ADDED)) {
>     > +            Variable.CurrPtr = GetNextVariablePtr (Variable.CurrPtr,
> AuthFormat);
>     > +            continue;
>     > +          }
>     > +        }
>     > +
>     > +        //
>     > +        // Don't return NV variable when HOB overrides it
>     > +        //
>     > +        if ((VariableStoreList[VariableStoreTypeHob] != NULL) &&
>     > (VariableStoreList[VariableStoreTypeNv] != NULL) &&
>     > +            (Variable.StartPtr == GetStartPointer
>     > (VariableStoreList[VariableStoreTypeNv]))
>     > +            )
>     > +        {
>     > +          VariableInHob.StartPtr = GetStartPointer
>     > (VariableStoreList[VariableStoreTypeHob]);
>     > +          VariableInHob.EndPtr   = GetEndPointer
>     > (VariableStoreList[VariableStoreTypeHob]);
>     > +          Status                 = FindVariableEx (
>     > +                                     GetVariableNamePtr (Variable.CurrPtr, AuthFormat),
>     > +                                     GetVendorGuidPtr (Variable.CurrPtr, AuthFormat),
>     > +                                     FALSE,
>     > +                                     &VariableInHob,
>     > +                                     AuthFormat
>     > +                                     );
>     > +          if (!EFI_ERROR (Status)) {
>     > +            Variable.CurrPtr = GetNextVariablePtr (Variable.CurrPtr,
> AuthFormat);
>     > +            continue;
>     > +          }
>     > +        }
>     > +
>     > +        *VariablePtr = Variable.CurrPtr;
>     > +        Status       = EFI_SUCCESS;
>     > +        goto Done;
>     > +      }
>     > +    }
>     > +
>     > +    Variable.CurrPtr = GetNextVariablePtr (Variable.CurrPtr, AuthFormat);
>     > +  }
>     > +
>     > +Done:
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Routine used to track statistical information about variable usage.
>     > +  The data is stored in the EFI system table so it can be accessed later.
>     > +  VariableInfo.efi can dump out the table. Only Boot Services variable
>     > +  accesses are tracked by this code. The PcdVariableCollectStatistics
>     > +  build flag controls if this feature is enabled.
>     > +
>     > +  A read that hits in the cache will have Read and Cache true for
>     > +  the transaction. Data is allocated by this routine, but never
>     > +  freed.
>     > +
>     > +  @param[in]      VariableName   Name of the Variable to track.
>     > +  @param[in]      VendorGuid     Guid of the Variable to track.
>     > +  @param[in]      Volatile       TRUE if volatile FALSE if non-volatile.
>     > +  @param[in]      Read           TRUE if GetVariable() was called.
>     > +  @param[in]      Write          TRUE if SetVariable() was called.
>     > +  @param[in]      Delete         TRUE if deleted via SetVariable().
>     > +  @param[in]      Cache          TRUE for a cache hit.
>     > +  @param[in,out]  VariableInfo   Pointer to a pointer of
> VARIABLE_INFO_ENTRY
>     > structures.
>     > +
>     > +**/
>     > +VOID
>     > +UpdateVariableInfo (
>     > +  IN  CHAR16                  *VariableName,
>     > +  IN  EFI_GUID                *VendorGuid,
>     > +  IN  BOOLEAN                 Volatile,
>     > +  IN  BOOLEAN                 Read,
>     > +  IN  BOOLEAN                 Write,
>     > +  IN  BOOLEAN                 Delete,
>     > +  IN  BOOLEAN                 Cache,
>     > +  IN OUT VARIABLE_INFO_ENTRY  **VariableInfo
>     > +  )
>     > +{
>     > +  VARIABLE_INFO_ENTRY  *Entry;
>     > +
>     > +  if (FeaturePcdGet (PcdVariableCollectStatistics)) {
>     > +    if ((VariableName == NULL) || (VendorGuid == NULL) || (VariableInfo ==
>     > NULL)) {
>     > +      return;
>     > +    }
>     > +
>     > +    if (AtRuntime ()) {
>     > +      // Don't collect statistics at runtime.
>     > +      return;
>     > +    }
>     > +
>     > +    if (*VariableInfo == NULL) {
>     > +      //
>     > +      // On the first call allocate a entry and place a pointer to it in
>     > +      // the EFI System Table.
>     > +      //
>     > +      *VariableInfo = AllocateZeroPool (sizeof (VARIABLE_INFO_ENTRY));
>     > +      ASSERT (*VariableInfo != NULL);
>     > +
>     > +      CopyGuid (&(*VariableInfo)->VendorGuid, VendorGuid);
>     > +      (*VariableInfo)->Name = AllocateZeroPool (StrSize (VariableName));
>     > +      ASSERT ((*VariableInfo)->Name != NULL);
>     > +      StrCpyS ((*VariableInfo)->Name, StrSize (VariableName)/sizeof
> (CHAR16),
>     > VariableName);
>     > +      (*VariableInfo)->Volatile = Volatile;
>     > +    }
>     > +
>     > +    for (Entry = (*VariableInfo); Entry != NULL; Entry = Entry->Next) {
>     > +      if (CompareGuid (VendorGuid, &Entry->VendorGuid)) {
>     > +        if (StrCmp (VariableName, Entry->Name) == 0) {
>     > +          if (Read) {
>     > +            Entry->ReadCount++;
>     > +          }
>     > +
>     > +          if (Write) {
>     > +            Entry->WriteCount++;
>     > +          }
>     > +
>     > +          if (Delete) {
>     > +            Entry->DeleteCount++;
>     > +          }
>     > +
>     > +          if (Cache) {
>     > +            Entry->CacheCount++;
>     > +          }
>     > +
>     > +          return;
>     > +        }
>     > +      }
>     > +
>     > +      if (Entry->Next == NULL) {
>     > +        //
>     > +        // If the entry is not in the table add it.
>     > +        // Next iteration of the loop will fill in the data.
>     > +        //
>     > +        Entry->Next = AllocateZeroPool (sizeof (VARIABLE_INFO_ENTRY));
>     > +        ASSERT (Entry->Next != NULL);
>     > +
>     > +        CopyGuid (&Entry->Next->VendorGuid, VendorGuid);
>     > +        Entry->Next->Name = AllocateZeroPool (StrSize (VariableName));
>     > +        ASSERT (Entry->Next->Name != NULL);
>     > +        StrCpyS (Entry->Next->Name, StrSize (VariableName)/sizeof (CHAR16),
>     > VariableName);
>     > +        Entry->Next->Volatile = Volatile;
>     > +      }
>     > +    }
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +
>     > +  Retrieve details about a variable and return them in VariableInfo->Header.
>     > +
>     > +  If VariableInfo->Buffer is given, this function will calculate its offset
>     > +  relative to given variable storage via VariableStore; Otherwise, it will try
>     > +  other internal variable storages or cached copies. It's assumed that, for all
>     > +  copies of NV variable storage, all variables are stored in the same relative
>     > +  position. If VariableInfo->Buffer is found in the range of any storage
> copies,
>     > +  its offset relative to that storage should be the same in other copies.
>     > +
>     > +  If VariableInfo->Offset is given (non-zero) but not VariableInfo->Buffer,
>     > +  this function will return the variable memory address inside VariableStore,
>     > +  if given, via VariableInfo->Address; Otherwise, the address of other
> storage
>     > +  copies will be returned, if any.
>     > +
>     > +  For a new variable whose offset has not been determined, a value of -1 as
>     > +  VariableInfo->Offset should be passed to skip the offset calculation.
>     > +
>     > +  @param[in,out] VariableInfo             Pointer to variable information.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER  VariableInfo is NULL or both
> VariableInfo-
>     > >Address
>     > +                                 and VariableInfo->Offset are NULL (0).
>     > +  @retval EFI_NOT_FOUND          If given Address or Offset is out of range
> of
>     > +                                 any given or internal storage copies.
>     > +  @retval EFI_SUCCESS            Variable details are retrieved successfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +GetVariableInfo (
>     > +  IN OUT  PROTECTED_VARIABLE_INFO  *VariableInfo
>     > +  )
>     > +{
>     > +  VARIABLE_STORE_HEADER          *Stores[2];
>     > +  UINTN                          Index;
>     > +  VARIABLE_HEADER                *VariablePtr;
>     > +  VARIABLE_HEADER                *VariableBuffer;
>     > +  AUTHENTICATED_VARIABLE_HEADER  *AuthVariablePtr;
>     > +  BOOLEAN                        AuthFlag;
>     > +  UINTN                          NameSize;
>     > +  UINTN                          DataSize;
>     > +  UINTN                          VariableSize;
>     > +
>     > +  if ((VariableInfo == NULL) || (  (VariableInfo->Buffer == NULL)
>     > +                                && (VariableInfo->StoreIndex == VAR_INDEX_INVALID)))
>     > +  {
>     > +    ASSERT (VariableInfo != NULL);
>     > +    ASSERT (VariableInfo->Buffer != NULL || VariableInfo->StoreIndex !=
>     > VAR_INDEX_INVALID);
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  Stores[0] = mNvVariableCache;
>     > +  Stores[1] = (mVariableModuleGlobal != NULL)
>     > +              ? (VARIABLE_STORE_HEADER *)(UINTN)mVariableModuleGlobal-
>     > >VariableGlobal.NonVolatileVariableBase
>     > +              : NULL;
>     > +
>     > +  VariableBuffer = VariableInfo->Buffer;
>     > +  VariablePtr    = NULL;
>     > +  if (VariableInfo->StoreIndex != VAR_INDEX_INVALID) {
>     > +    for (Index = 0; Index < ARRAY_SIZE (Stores); ++Index) {
>     > +      if (Stores[Index] == NULL) {
>     > +        continue;
>     > +      }
>     > +
>     > +      if ((UINTN)VariableInfo->StoreIndex
>     > +          < ((UINTN)GetEndPointer (Stores[Index]) - (UINTN)Stores[Index]))
>     > +      {
>     > +        VariablePtr          = (VARIABLE_HEADER *)((UINTN)Stores[Index] +
>     > (UINTN)VariableInfo->StoreIndex);
>     > +        VariableInfo->Buffer = VariablePtr;
>     > +        break;
>     > +      }
>     > +    }
>     > +  } else {
>     > +    VariablePtr = VariableInfo->Buffer;
>     > +  }
>     > +
>     > +  if (VariablePtr == NULL) {
>     > +    return EFI_NOT_FOUND;
>     > +  }
>     > +
>     > +  AuthFlag = VariableInfo->Flags.Auth;
>     > +  ASSERT (AuthFlag == TRUE || AuthFlag == FALSE);
>     > +
>     > +  //
>     > +  // Make a copy of the whole variable if a buffer is passed in.
>     > +  //
>     > +  if ((VariableBuffer != NULL) && (VariableBuffer != VariablePtr)) {
>     > +    VariableSize = (UINTN)GetNextVariablePtr (VariablePtr, AuthFlag)
>     > +                   - (UINTN)VariablePtr;
>     > +    CopyMem (VariableBuffer, VariablePtr, VariableSize);
>     > +  }
>     > +
>     > +  //
>     > +  // AuthVariable header
>     > +  //
>     > +  if (AuthFlag) {
>     > +    AuthVariablePtr = (AUTHENTICATED_VARIABLE_HEADER *)VariablePtr;
>     > +
>     > +    VariableInfo->Header.State          = AuthVariablePtr->State;
>     > +    VariableInfo->Header.Attributes     = AuthVariablePtr->Attributes;
>     > +    VariableInfo->Header.PubKeyIndex    = AuthVariablePtr->PubKeyIndex;
>     > +    VariableInfo->Header.MonotonicCount = ReadUnaligned64 (
>     > +                                            &(AuthVariablePtr->MonotonicCount)
>     > +                                            );
>     > +    if (VariableInfo->Header.TimeStamp != NULL) {
>     > +      CopyMem (
>     > +        VariableInfo->Header.TimeStamp,
>     > +        &AuthVariablePtr->TimeStamp,
>     > +        sizeof (EFI_TIME)
>     > +        );
>     > +    } else if (VariableBuffer != NULL) {
>     > +      AuthVariablePtr                = (AUTHENTICATED_VARIABLE_HEADER
>     > *)VariableBuffer;
>     > +      VariableInfo->Header.TimeStamp = &AuthVariablePtr->TimeStamp;
>     > +    }
>     > +  } else {
>     > +    VariableInfo->Header.State          = VariablePtr->State;
>     > +    VariableInfo->Header.Attributes     = VariablePtr->Attributes;
>     > +    VariableInfo->Header.PubKeyIndex    = 0;
>     > +    VariableInfo->Header.MonotonicCount = 0;
>     > +    VariableInfo->Header.TimeStamp      = NULL;
>     > +  }
>     > +
>     > +  //
>     > +  // VendorGuid
>     > +  //
>     > +  if (VariableInfo->Header.VendorGuid != NULL) {
>     > +    CopyGuid (
>     > +      VariableInfo->Header.VendorGuid,
>     > +      GetVendorGuidPtr (VariablePtr, AuthFlag)
>     > +      );
>     > +  } else {
>     > +    VariableInfo->Header.VendorGuid = GetVendorGuidPtr (VariablePtr,
>     > AuthFlag);
>     > +  }
>     > +
>     > +  //
>     > +  // VariableName
>     > +  //
>     > +  NameSize = NameSizeOfVariable (VariablePtr, AuthFlag);
>     > +  if (  (VariableInfo->Header.VariableName != NULL)
>     > +     && (VariableInfo->Header.NameSize >= NameSize))
>     > +  {
>     > +    CopyMem (
>     > +      VariableInfo->Header.VariableName,
>     > +      GetVariableNamePtr (VariablePtr, AuthFlag),
>     > +      NameSize
>     > +      );
>     > +  } else if (VariableInfo->Header.VariableName != NULL) {
>     > +    return EFI_BUFFER_TOO_SMALL;
>     > +  } else {
>     > +    VariableInfo->Header.VariableName = GetVariableNamePtr (VariablePtr,
>     > AuthFlag);
>     > +  }
>     > +
>     > +  //
>     > +  // Data
>     > +  //
>     > +  DataSize = DataSizeOfVariable (VariablePtr, AuthFlag);
>     > +  if (  (VariableInfo->Header.Data != NULL)
>     > +     && (VariableInfo->Header.DataSize >= DataSize))
>     > +  {
>     > +    CopyMem (
>     > +      VariableInfo->Header.Data,
>     > +      GetVariableDataPtr (VariablePtr, AuthFlag),
>     > +      NameSize
>     > +      );
>     > +  } else if (VariableInfo->Header.Data != NULL) {
>     > +    return EFI_BUFFER_TOO_SMALL;
>     > +  } else {
>     > +    VariableInfo->Header.Data = GetVariableDataPtr (VariablePtr, AuthFlag);
>     > +  }
>     > +
>     > +  //
>     > +  // Update size information about name & data.
>     > +  //
>     > +  VariableInfo->Header.NameSize = NameSize;
>     > +  VariableInfo->Header.DataSize = DataSize;
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  Retrieve details of the variable next to given variable within VariableStore.
>     > +
>     > +  If VariableInfo->StoreIndex is invalid, the first one in VariableStore is
> returned.
>     > +
>     > +  @param[in,out] VariableInfo             Pointer to variable information.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER  VariableInfo or VariableStore is NULL.
>     > +  @retval EFI_NOT_FOUND          If the end of VariableStore is reached.
>     > +  @retval EFI_SUCCESS            The next variable is retrieved successfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +GetNextVariableInfo (
>     > +  IN OUT  PROTECTED_VARIABLE_INFO  *VariableInfo
>     > +  )
>     > +{
>     > +  VARIABLE_STORE_HEADER  *VarStore;
>     > +  VARIABLE_HEADER        *VariablePtr;
>     > +  VARIABLE_HEADER        *VariableStart;
>     > +  VARIABLE_HEADER        *VariableEnd;
>     > +  BOOLEAN                AuthFlag;
>     > +
>     > +  if (VariableInfo == NULL) {
>     > +    ASSERT (VariableInfo != NULL);
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if (mNvVariableCache != NULL) {
>     > +    VarStore = mNvVariableCache;
>     > +  } else if (mVariableModuleGlobal != NULL) {
>     > +    VarStore = (VARIABLE_STORE_HEADER *)(UINTN)
>     > +               mVariableModuleGlobal->VariableGlobal.NonVolatileVariableBase;
>     > +  } else {
>     > +    return EFI_NOT_FOUND;
>     > +  }
>     > +
>     > +  VariableStart = GetStartPointer (VarStore);
>     > +  VariableEnd   = GetEndPointer (VarStore);
>     > +
>     > +  if ((VariableInfo->Flags.Auth != TRUE) && (VariableInfo->Flags.Auth !=
> FALSE))
>     > {
>     > +    VariableInfo->Flags.Auth = CompareGuid (
>     > +                                 &VarStore->Signature,
>     > +                                 &gEfiAuthenticatedVariableGuid
>     > +                                 );
>     > +  }
>     > +
>     > +  AuthFlag = VariableInfo->Flags.Auth;
>     > +
>     > +  if (VariableInfo->StoreIndex == VAR_INDEX_INVALID) {
>     > +    VariablePtr = VariableStart;
>     > +  } else {
>     > +    VariablePtr = (VARIABLE_HEADER *)
>     > +                  ((UINTN)VarStore + (UINTN)VariableInfo->StoreIndex);
>     > +    if (VariablePtr >= VariableEnd) {
>     > +      return EFI_NOT_FOUND;
>     > +    }
>     > +
>     > +    VariablePtr = GetNextVariablePtr (VariablePtr, AuthFlag);
>     > +  }
>     > +
>     > +  if (!IsValidVariableHeader (VariablePtr, VariableEnd, AuthFlag)) {
>     > +    return EFI_NOT_FOUND;
>     > +  }
>     > +
>     > +  VariableInfo->StoreIndex = (UINTN)VariablePtr - (UINTN)VarStore;
>     > +  return GetVariableInfo (VariableInfo);
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariablePolicySm
>     > mDxe.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariablePolicySm
>     > mDxe.c
>     > new file mode 100644
>     > index 000000000000..b2094fbcd6ea
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariablePolicySm
>     > mDxe.c
>     > @@ -0,0 +1,575 @@
>     > +/** @file -- VariablePolicySmmDxe.c
>     > +This protocol allows communication with Variable Policy Engine.
>     > +
>     > +Copyright (c) Microsoft Corporation.
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include <Library/BaseLib.h>
>     > +#include <Library/UefiLib.h>
>     > +#include <Library/DebugLib.h>
>     > +#include <Library/SafeIntLib.h>
>     > +#include <Library/UefiBootServicesTableLib.h>
>     > +#include <Library/BaseMemoryLib.h>
>     > +#include <Library/MemoryAllocationLib.h>
>     > +
>     > +#include <Protocol/VariablePolicy.h>
>     > +#include <Protocol/MmCommunication2.h>
>     > +
>     > +#include <Guid/VarCheckPolicyMmi.h>
>     > +
>     > +#include "Variable.h"
>     > +
>     > +EDKII_VARIABLE_POLICY_PROTOCOL  mVariablePolicyProtocol;
>     > +EFI_MM_COMMUNICATION2_PROTOCOL  *mMmCommunication;
>     > +
>     > +VOID      *mMmCommunicationBuffer;
>     > +UINTN     mMmCommunicationBufferSize;
>     > +EFI_LOCK  mMmCommunicationLock;
>     > +
>     > +/**
>     > +  Internal helper function to consolidate communication method.
>     > +
>     > +  @param[in,out]  CommBuffer
>     > +  @param[in,out]  CommSize    Size of the CommBuffer.
>     > +
>     > +  @retval   EFI_STATUS    Result from communication method.
>     > +
>     > +**/
>     > +STATIC
>     > +EFI_STATUS
>     > +InternalMmCommunicate (
>     > +  IN OUT VOID   *CommBuffer,
>     > +  IN OUT UINTN  *CommSize
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  if ((CommBuffer == NULL) || (CommSize == NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  Status = mMmCommunication->Communicate (mMmCommunication,
>     > CommBuffer, CommBuffer, CommSize);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  This API function disables the variable policy enforcement. If it's
>     > +  already been called once, will return EFI_ALREADY_STARTED.
>     > +
>     > +  @retval     EFI_SUCCESS
>     > +  @retval     EFI_ALREADY_STARTED   Has already been called once this
> boot.
>     > +  @retval     EFI_WRITE_PROTECTED   Interface has been locked until
> reboot.
>     > +  @retval     EFI_WRITE_PROTECTED   Interface option is disabled by
> platform
>     > PCD.
>     > +
>     > +**/
>     > +STATIC
>     > +EFI_STATUS
>     > +EFIAPI
>     > +ProtocolDisableVariablePolicy (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS                    Status;
>     > +  EFI_MM_COMMUNICATE_HEADER     *CommHeader;
>     > +  VAR_CHECK_POLICY_COMM_HEADER  *PolicyHeader;
>     > +  UINTN                         BufferSize;
>     > +
>     > +  // Check the PCD for convenience.
>     > +  // This would also be rejected by the lib, but why go to MM if we don't
> have to?
>     > +  if (!PcdGetBool (PcdAllowVariablePolicyEnforcementDisable)) {
>     > +    return EFI_WRITE_PROTECTED;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mMmCommunicationLock);
>     > +
>     > +  // Set up the MM communication.
>     > +  BufferSize   = mMmCommunicationBufferSize;
>     > +  CommHeader   = mMmCommunicationBuffer;
>     > +  PolicyHeader = (VAR_CHECK_POLICY_COMM_HEADER *)&CommHeader-
>     > >Data;
>     > +  CopyGuid (&CommHeader->HeaderGuid,
>     > &gVarCheckPolicyLibMmiHandlerGuid);
>     > +  CommHeader->MessageLength = BufferSize - OFFSET_OF
>     > (EFI_MM_COMMUNICATE_HEADER, Data);
>     > +  PolicyHeader->Signature   = VAR_CHECK_POLICY_COMM_SIG;
>     > +  PolicyHeader->Revision    = VAR_CHECK_POLICY_COMM_REVISION;
>     > +  PolicyHeader->Command     = VAR_CHECK_POLICY_COMMAND_DISABLE;
>     > +
>     > +  Status = InternalMmCommunicate (CommHeader, &BufferSize);
>     > +  DEBUG ((DEBUG_VERBOSE, "%a - MmCommunication returned %r.\n",
>     > __FUNCTION__, Status));
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mMmCommunicationLock);
>     > +
>     > +  return (EFI_ERROR (Status)) ? Status : PolicyHeader->Result;
>     > +}
>     > +
>     > +/**
>     > +  This API function returns whether or not the policy engine is
>     > +  currently being enforced.
>     > +
>     > +  @param[out]   State       Pointer to a return value for whether the policy
>     > enforcement
>     > +                            is currently enabled.
>     > +
>     > +  @retval     EFI_SUCCESS
>     > +  @retval     Others        An error has prevented this command from
> completing.
>     > +
>     > +**/
>     > +STATIC
>     > +EFI_STATUS
>     > +EFIAPI
>     > +ProtocolIsVariablePolicyEnabled (
>     > +  OUT BOOLEAN  *State
>     > +  )
>     > +{
>     > +  EFI_STATUS                               Status;
>     > +  EFI_MM_COMMUNICATE_HEADER                *CommHeader;
>     > +  VAR_CHECK_POLICY_COMM_HEADER             *PolicyHeader;
>     > +  VAR_CHECK_POLICY_COMM_IS_ENABLED_PARAMS  *CommandParams;
>     > +  UINTN                                    BufferSize;
>     > +
>     > +  if (State == NULL) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mMmCommunicationLock);
>     > +
>     > +  // Set up the MM communication.
>     > +  BufferSize    = mMmCommunicationBufferSize;
>     > +  CommHeader    = mMmCommunicationBuffer;
>     > +  PolicyHeader  = (VAR_CHECK_POLICY_COMM_HEADER *)&CommHeader-
>     > >Data;
>     > +  CommandParams = (VAR_CHECK_POLICY_COMM_IS_ENABLED_PARAMS
>     > *)(PolicyHeader + 1);
>     > +  CopyGuid (&CommHeader->HeaderGuid,
>     > &gVarCheckPolicyLibMmiHandlerGuid);
>     > +  CommHeader->MessageLength = BufferSize - OFFSET_OF
>     > (EFI_MM_COMMUNICATE_HEADER, Data);
>     > +  PolicyHeader->Signature   = VAR_CHECK_POLICY_COMM_SIG;
>     > +  PolicyHeader->Revision    = VAR_CHECK_POLICY_COMM_REVISION;
>     > +  PolicyHeader->Command     =
> VAR_CHECK_POLICY_COMMAND_IS_ENABLED;
>     > +
>     > +  Status = InternalMmCommunicate (CommHeader, &BufferSize);
>     > +  DEBUG ((DEBUG_VERBOSE, "%a - MmCommunication returned %r.\n",
>     > __FUNCTION__, Status));
>     > +
>     > +  if (!EFI_ERROR (Status)) {
>     > +    Status = PolicyHeader->Result;
>     > +    *State = CommandParams->State;
>     > +  }
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mMmCommunicationLock);
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  This API function validates and registers a new policy with
>     > +  the policy enforcement engine.
>     > +
>     > +  @param[in]  NewPolicy     Pointer to the incoming policy structure.
>     > +
>     > +  @retval     EFI_SUCCESS
>     > +  @retval     EFI_INVALID_PARAMETER   NewPolicy is NULL or is internally
>     > inconsistent.
>     > +  @retval     EFI_ALREADY_STARTED     An identical matching policy already
>     > exists.
>     > +  @retval     EFI_WRITE_PROTECTED     The interface has been locked until
> the
>     > next reboot.
>     > +  @retval     EFI_UNSUPPORTED         Policy enforcement has been disabled.
> No
>     > reason to add more policies.
>     > +  @retval     EFI_ABORTED             A calculation error has prevented this
> function
>     > from completing.
>     > +  @retval     EFI_OUT_OF_RESOURCES    Cannot grow the table to hold any
>     > more policies.
>     > +
>     > +**/
>     > +STATIC
>     > +EFI_STATUS
>     > +EFIAPI
>     > +ProtocolRegisterVariablePolicy (
>     > +  IN CONST VARIABLE_POLICY_ENTRY  *NewPolicy
>     > +  )
>     > +{
>     > +  EFI_STATUS                    Status;
>     > +  EFI_MM_COMMUNICATE_HEADER     *CommHeader;
>     > +  VAR_CHECK_POLICY_COMM_HEADER  *PolicyHeader;
>     > +  VOID                          *PolicyBuffer;
>     > +  UINTN                         BufferSize;
>     > +  UINTN                         RequiredSize;
>     > +
>     > +  if (NewPolicy == NULL) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  // First, make sure that the required size does not exceed the capabilities
>     > +  // of the MmCommunication buffer.
>     > +  RequiredSize = OFFSET_OF (EFI_MM_COMMUNICATE_HEADER, Data) +
> sizeof
>     > (VAR_CHECK_POLICY_COMM_HEADER);
>     > +  Status       = SafeUintnAdd (RequiredSize, NewPolicy->Size, &RequiredSize);
>     > +  if (EFI_ERROR (Status) || (RequiredSize > mMmCommunicationBufferSize))
> {
>     > +    DEBUG ((
>     > +      DEBUG_ERROR,
>     > +      "%a - Policy too large for buffer! %r, %d > %d \n",
>     > +      __FUNCTION__,
>     > +      Status,
>     > +      RequiredSize,
>     > +      mMmCommunicationBufferSize
>     > +      ));
>     > +    return EFI_OUT_OF_RESOURCES;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mMmCommunicationLock);
>     > +
>     > +  // Set up the MM communication.
>     > +  BufferSize   = mMmCommunicationBufferSize;
>     > +  CommHeader   = mMmCommunicationBuffer;
>     > +  PolicyHeader = (VAR_CHECK_POLICY_COMM_HEADER *)&CommHeader-
>     > >Data;
>     > +  PolicyBuffer = (VOID *)(PolicyHeader + 1);
>     > +  CopyGuid (&CommHeader->HeaderGuid,
>     > &gVarCheckPolicyLibMmiHandlerGuid);
>     > +  CommHeader->MessageLength = BufferSize - OFFSET_OF
>     > (EFI_MM_COMMUNICATE_HEADER, Data);
>     > +  PolicyHeader->Signature   = VAR_CHECK_POLICY_COMM_SIG;
>     > +  PolicyHeader->Revision    = VAR_CHECK_POLICY_COMM_REVISION;
>     > +  PolicyHeader->Command     =
> VAR_CHECK_POLICY_COMMAND_REGISTER;
>     > +
>     > +  // Copy the policy into place. This copy is safe because we've already
> tested
>     > above.
>     > +  CopyMem (PolicyBuffer, NewPolicy, NewPolicy->Size);
>     > +
>     > +  Status = InternalMmCommunicate (CommHeader, &BufferSize);
>     > +  DEBUG ((DEBUG_VERBOSE, "%a - MmCommunication returned %r.\n",
>     > __FUNCTION__, Status));
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mMmCommunicationLock);
>     > +
>     > +  return (EFI_ERROR (Status)) ? Status : PolicyHeader->Result;
>     > +}
>     > +
>     > +/**
>     > +  This helper function takes care of the overhead of formatting, sending,
> and
>     > interpreting
>     > +  the results for a single DumpVariablePolicy request.
>     > +
>     > +  @param[in]      PageRequested   The page of the paginated results from
> MM.
>     > 0 for metadata.
>     > +  @param[out]     TotalSize       The total size of the entire buffer. Returned
> as
>     > part of metadata.
>     > +  @param[out]     PageSize        The size of the current page being returned.
> Not
>     > valid as part of metadata.
>     > +  @param[out]     HasMore         A flag indicating whether there are more
> pages
>     > after this one.
>     > +  @param[out]     Buffer          The start of the current page from MM.
>     > +
>     > +  @retval     EFI_SUCCESS             Output params have been updated (either
>     > metadata or dump page).
>     > +  @retval     EFI_INVALID_PARAMETER   One of the output params is NULL.
>     > +  @retval     Others                  Response from MM handler.
>     > +
>     > +**/
>     > +STATIC
>     > +EFI_STATUS
>     > +DumpVariablePolicyHelper (
>     > +  IN  UINT32   PageRequested,
>     > +  OUT UINT32   *TotalSize,
>     > +  OUT UINT32   *PageSize,
>     > +  OUT BOOLEAN  *HasMore,
>     > +  OUT UINT8    **Buffer
>     > +  )
>     > +{
>     > +  EFI_STATUS                         Status;
>     > +  EFI_MM_COMMUNICATE_HEADER          *CommHeader;
>     > +  VAR_CHECK_POLICY_COMM_HEADER       *PolicyHeader;
>     > +  VAR_CHECK_POLICY_COMM_DUMP_PARAMS  *CommandParams;
>     > +  UINTN                              BufferSize;
>     > +
>     > +  if ((TotalSize == NULL) || (PageSize == NULL) || (HasMore == NULL) ||
> (Buffer
>     > == NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  // Set up the MM communication.
>     > +  BufferSize    = mMmCommunicationBufferSize;
>     > +  CommHeader    = mMmCommunicationBuffer;
>     > +  PolicyHeader  = (VAR_CHECK_POLICY_COMM_HEADER *)&CommHeader-
>     > >Data;
>     > +  CommandParams = (VAR_CHECK_POLICY_COMM_DUMP_PARAMS
>     > *)(PolicyHeader + 1);
>     > +  CopyGuid (&CommHeader->HeaderGuid,
>     > &gVarCheckPolicyLibMmiHandlerGuid);
>     > +  CommHeader->MessageLength = BufferSize - OFFSET_OF
>     > (EFI_MM_COMMUNICATE_HEADER, Data);
>     > +  PolicyHeader->Signature   = VAR_CHECK_POLICY_COMM_SIG;
>     > +  PolicyHeader->Revision    = VAR_CHECK_POLICY_COMM_REVISION;
>     > +  PolicyHeader->Command     = VAR_CHECK_POLICY_COMMAND_DUMP;
>     > +
>     > +  CommandParams->PageRequested = PageRequested;
>     > +
>     > +  Status = InternalMmCommunicate (CommHeader, &BufferSize);
>     > +  DEBUG ((DEBUG_VERBOSE, "%a - MmCommunication returned %r.\n",
>     > __FUNCTION__, Status));
>     > +
>     > +  if (!EFI_ERROR (Status)) {
>     > +    Status     = PolicyHeader->Result;
>     > +    *TotalSize = CommandParams->TotalSize;
>     > +    *PageSize  = CommandParams->PageSize;
>     > +    *HasMore   = CommandParams->HasMore;
>     > +    *Buffer    = (UINT8 *)(CommandParams + 1);
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  This API function will dump the entire contents of the variable policy table.
>     > +
>     > +  Similar to GetVariable, the first call can be made with a 0 size and it will
> return
>     > +  the size of the buffer required to hold the entire table.
>     > +
>     > +  @param[out]     Policy  Pointer to the policy buffer. Can be NULL if Size is
> 0.
>     > +  @param[in,out]  Size    On input, the size of the output buffer. On output,
> the
>     > size
>     > +                          of the data returned.
>     > +
>     > +  @retval     EFI_SUCCESS             Policy data is in the output buffer and Size
> has
>     > been updated.
>     > +  @retval     EFI_INVALID_PARAMETER   Size is NULL, or Size is non-zero and
>     > Policy is NULL.
>     > +  @retval     EFI_BUFFER_TOO_SMALL    Size is insufficient to hold policy.
> Size
>     > updated with required size.
>     > +
>     > +**/
>     > +STATIC
>     > +EFI_STATUS
>     > +EFIAPI
>     > +ProtocolDumpVariablePolicy (
>     > +  OUT UINT8      *Policy OPTIONAL,
>     > +  IN OUT UINT32  *Size
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  UINT8       *Source;
>     > +  UINT8       *Destination;
>     > +  UINT32      PolicySize;
>     > +  UINT32      PageSize;
>     > +  BOOLEAN     HasMore;
>     > +  UINT32      PageIndex;
>     > +
>     > +  if ((Size == NULL) || ((*Size > 0) && (Policy == NULL))) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mMmCommunicationLock);
>     > +
>     > +  // Repeat this whole process until we either have a failure case or get the
>     > entire buffer.
>     > +  do {
>     > +    // First, we must check the zero page to determine the buffer size and
>     > +    // reset the internal state.
>     > +    PolicySize = 0;
>     > +    PageSize   = 0;
>     > +    HasMore    = FALSE;
>     > +    Status     = DumpVariablePolicyHelper (0, &PolicySize, &PageSize,
> &HasMore,
>     > &Source);
>     > +    if (EFI_ERROR (Status)) {
>     > +      break;
>     > +    }
>     > +
>     > +    // If we're good, we can at least check the required size now.
>     > +    if (*Size < PolicySize) {
>     > +      *Size  = PolicySize;
>     > +      Status = EFI_BUFFER_TOO_SMALL;
>     > +      break;
>     > +    }
>     > +
>     > +    // On further thought, let's update the size either way.
>     > +    *Size = PolicySize;
>     > +    // And get ready to ROCK.
>     > +    Destination = Policy;
>     > +
>     > +    // Keep looping and copying until we're either done or freak out.
>     > +    for (PageIndex = 1; !EFI_ERROR (Status) && HasMore && PageIndex <
>     > MAX_UINT32; PageIndex++) {
>     > +      Status = DumpVariablePolicyHelper (PageIndex, &PolicySize, &PageSize,
>     > &HasMore, &Source);
>     > +      if (!EFI_ERROR (Status)) {
>     > +        CopyMem (Destination, Source, PageSize);
>     > +        Destination += PageSize;
>     > +      }
>     > +    }
>     > +
>     > +    // Next, we check to see whether
>     > +  } while (Status == EFI_TIMEOUT);
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mMmCommunicationLock);
>     > +
>     > +  // There's currently no use for this, but it shouldn't be hard to implement.
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  This API function locks the interface so that no more policy updates
>     > +  can be performed or changes made to the enforcement until the next
> boot.
>     > +
>     > +  @retval     EFI_SUCCESS
>     > +  @retval     Others        An error has prevented this command from
> completing.
>     > +
>     > +**/
>     > +STATIC
>     > +EFI_STATUS
>     > +EFIAPI
>     > +ProtocolLockVariablePolicy (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS                    Status;
>     > +  EFI_MM_COMMUNICATE_HEADER     *CommHeader;
>     > +  VAR_CHECK_POLICY_COMM_HEADER  *PolicyHeader;
>     > +  UINTN                         BufferSize;
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mMmCommunicationLock);
>     > +
>     > +  // Set up the MM communication.
>     > +  BufferSize   = mMmCommunicationBufferSize;
>     > +  CommHeader   = mMmCommunicationBuffer;
>     > +  PolicyHeader = (VAR_CHECK_POLICY_COMM_HEADER *)&CommHeader-
>     > >Data;
>     > +  CopyGuid (&CommHeader->HeaderGuid,
>     > &gVarCheckPolicyLibMmiHandlerGuid);
>     > +  CommHeader->MessageLength = BufferSize - OFFSET_OF
>     > (EFI_MM_COMMUNICATE_HEADER, Data);
>     > +  PolicyHeader->Signature   = VAR_CHECK_POLICY_COMM_SIG;
>     > +  PolicyHeader->Revision    = VAR_CHECK_POLICY_COMM_REVISION;
>     > +  PolicyHeader->Command     = VAR_CHECK_POLICY_COMMAND_LOCK;
>     > +
>     > +  Status = InternalMmCommunicate (CommHeader, &BufferSize);
>     > +  DEBUG ((DEBUG_VERBOSE, "%a - MmCommunication returned %r.\n",
>     > __FUNCTION__, Status));
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mMmCommunicationLock);
>     > +
>     > +  return (EFI_ERROR (Status)) ? Status : PolicyHeader->Result;
>     > +}
>     > +
>     > +/**
>     > +  This helper function locates the shared comm buffer and assigns it to
> input
>     > pointers.
>     > +
>     > +  @param[in,out]  BufferSize      On input, the minimum buffer size required
>     > INCLUDING the MM communicate header.
>     > +                                  On output, the size of the matching buffer found.
>     > +  @param[out]     LocatedBuffer   A pointer to the matching buffer.
>     > +
>     > +  @retval     EFI_SUCCESS
>     > +  @retval     EFI_INVALID_PARAMETER   One of the output pointers was
> NULL.
>     > +  @retval     EFI_OUT_OF_RESOURCES    Not enough memory to allocate a
>     > comm buffer.
>     > +
>     > +**/
>     > +STATIC
>     > +EFI_STATUS
>     > +InitMmCommonCommBuffer (
>     > +  IN OUT  UINTN  *BufferSize,
>     > +  OUT     VOID   **LocatedBuffer
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  Status = EFI_SUCCESS;
>     > +
>     > +  // Make sure that we're working with good pointers.
>     > +  if ((BufferSize == NULL) || (LocatedBuffer == NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  // Allocate the runtime memory for the comm buffer.
>     > +  *LocatedBuffer = AllocateRuntimePool (*BufferSize);
>     > +  if (*LocatedBuffer == NULL) {
>     > +    Status      = EFI_OUT_OF_RESOURCES;
>     > +    *BufferSize = 0;
>     > +  }
>     > +
>     > +  EfiInitializeLock (&mMmCommunicationLock, TPL_NOTIFY);
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Convert internal pointer addresses to virtual addresses.
>     > +
>     > +  @param[in] Event      Event whose notification function is being invoked.
>     > +  @param[in] Context    The pointer to the notification function's context,
>     > which
>     > +                        is implementation-dependent.
>     > +**/
>     > +STATIC
>     > +VOID
>     > +EFIAPI
>     > +VariablePolicyVirtualAddressCallback (
>     > +  IN  EFI_EVENT  Event,
>     > +  IN  VOID       *Context
>     > +  )
>     > +{
>     > +  EfiConvertPointer (0, (VOID **)&mMmCommunication);
>     > +  EfiConvertPointer (0, (VOID **)&mMmCommunicationBuffer);
>     > +}
>     > +
>     > +/**
>     > +  The driver's entry point.
>     > +
>     > +  @param[in] ImageHandle  The firmware allocated handle for the EFI
> image.
>     > +  @param[in] SystemTable  A pointer to the EFI System Table.
>     > +
>     > +  @retval EFI_SUCCESS     The entry point executed successfully.
>     > +  @retval other           Some error occured when executing this entry point.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariablePolicySmmDxeMain (
>     > +  IN    EFI_HANDLE        ImageHandle,
>     > +  IN    EFI_SYSTEM_TABLE  *SystemTable
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  BOOLEAN     ProtocolInstalled;
>     > +  BOOLEAN     VirtualAddressChangeRegistered;
>     > +  EFI_EVENT   VirtualAddressChangeEvent;
>     > +
>     > +  Status                         = EFI_SUCCESS;
>     > +  ProtocolInstalled              = FALSE;
>     > +  VirtualAddressChangeRegistered = FALSE;
>     > +
>     > +  // Update the minimum buffer size.
>     > +  mMmCommunicationBufferSize =
>     > VAR_CHECK_POLICY_MM_COMM_BUFFER_SIZE;
>     > +  // Locate the shared comm buffer to use for sending MM commands.
>     > +  Status = InitMmCommonCommBuffer (&mMmCommunicationBufferSize,
>     > &mMmCommunicationBuffer);
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "%a - Failed to locate a viable MM comm
>     > buffer! %r\n", __FUNCTION__, Status));
>     > +    ASSERT_EFI_ERROR (Status);
>     > +    return Status;
>     > +  }
>     > +
>     > +  // Locate the MmCommunication protocol.
>     > +  Status = gBS->LocateProtocol (&gEfiMmCommunication2ProtocolGuid,
> NULL,
>     > (VOID **)&mMmCommunication);
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "%a - Failed to locate MmCommunication
>     > protocol! %r\n", __FUNCTION__, Status));
>     > +    ASSERT_EFI_ERROR (Status);
>     > +    return Status;
>     > +  }
>     > +
>     > +  // Configure the VariablePolicy protocol structure.
>     > +  mVariablePolicyProtocol.Revision                =
>     > EDKII_VARIABLE_POLICY_PROTOCOL_REVISION;
>     > +  mVariablePolicyProtocol.DisableVariablePolicy   =
>     > ProtocolDisableVariablePolicy;
>     > +  mVariablePolicyProtocol.IsVariablePolicyEnabled =
>     > ProtocolIsVariablePolicyEnabled;
>     > +  mVariablePolicyProtocol.RegisterVariablePolicy  =
>     > ProtocolRegisterVariablePolicy;
>     > +  mVariablePolicyProtocol.DumpVariablePolicy      =
>     > ProtocolDumpVariablePolicy;
>     > +  mVariablePolicyProtocol.LockVariablePolicy      =
> ProtocolLockVariablePolicy;
>     > +
>     > +  // Register all the protocols and return the status.
>     > +  Status = gBS->InstallMultipleProtocolInterfaces (
>     > +                  &ImageHandle,
>     > +                  &gEdkiiVariablePolicyProtocolGuid,
>     > +                  &mVariablePolicyProtocol,
>     > +                  NULL
>     > +                  );
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "%a - Failed to install protocol! %r\n",
>     > __FUNCTION__, Status));
>     > +    goto Exit;
>     > +  } else {
>     > +    ProtocolInstalled = TRUE;
>     > +  }
>     > +
>     > +  // Normally, we might want to register a callback
>     > +  // to lock the interface, but this is integrated
>     > +  // into the existing callbacks in VaraiableSmm.c
>     > +  // and VariableDxe.c.
>     > +
>     > +  //
>     > +  // Register a VirtualAddressChange callback for the MmComm protocol
> and
>     > Comm buffer.
>     > +  Status = gBS->CreateEventEx (
>     > +                  EVT_NOTIFY_SIGNAL,
>     > +                  TPL_NOTIFY,
>     > +                  VariablePolicyVirtualAddressCallback,
>     > +                  NULL,
>     > +                  &gEfiEventVirtualAddressChangeGuid,
>     > +                  &VirtualAddressChangeEvent
>     > +                  );
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "%a - Failed to create VirtualAddressChange
>     > event! %r\n", __FUNCTION__, Status));
>     > +    goto Exit;
>     > +  } else {
>     > +    VirtualAddressChangeRegistered = TRUE;
>     > +  }
>     > +
>     > +Exit:
>     > +  //
>     > +  // If we're about to return a failed status (and unload this driver), we must
> first
>     > undo anything that
>     > +  // has been successfully done.
>     > +  if (EFI_ERROR (Status)) {
>     > +    if (ProtocolInstalled) {
>     > +      gBS->UninstallProtocolInterface (&ImageHandle,
>     > &gEdkiiVariablePolicyProtocolGuid, &mVariablePolicyProtocol);
>     > +    }
>     > +
>     > +    if (VirtualAddressChangeRegistered) {
>     > +      gBS->CloseEvent (VirtualAddressChangeEvent);
>     > +    }
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeC
>     > ache.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeC
>     > ache.c
>     > new file mode 100644
>     > index 000000000000..9bb30bc1e804
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeC
>     > ache.c
>     > @@ -0,0 +1,158 @@
>     > +/** @file
>     > +  Functions related to managing the UEFI variable runtime cache. This file
>     > should only include functions
>     > +  used by the SMM UEFI variable driver.
>     > +
>     > +  Caution: This module requires additional review when modified.
>     > +  This driver will have external input - variable data. They may be input in
> SMM
>     > mode.
>     > +  This external input must be validated carefully to avoid security issue like
>     > +  buffer overflow, integer overflow.
>     > +
>     > +Copyright (c) 2019, Intel Corporation. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include "VariableParsing.h"
>     > +#include "VariableRuntimeCache.h"
>     > +
>     > +extern VARIABLE_MODULE_GLOBAL  *mVariableModuleGlobal;
>     > +extern VARIABLE_STORE_HEADER   *mNvVariableCache;
>     > +
>     > +/**
>     > +  Copies any pending updates to runtime variable caches.
>     > +
>     > +  @retval EFI_UNSUPPORTED         The volatile store to be updated is not
>     > initialized properly.
>     > +  @retval EFI_SUCCESS             The volatile store was updated successfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +FlushPendingRuntimeVariableCacheUpdates (
>     > +  VOID
>     > +  )
>     > +{
>     > +  VARIABLE_RUNTIME_CACHE_CONTEXT  *VariableRuntimeCacheContext;
>     > +
>     > +  VariableRuntimeCacheContext = &mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext;
>     > +
>     > +  if ((VariableRuntimeCacheContext->VariableRuntimeNvCache.Store ==
> NULL)
>     > ||
>     > +      (VariableRuntimeCacheContext->VariableRuntimeVolatileCache.Store
> ==
>     > NULL) ||
>     > +      (VariableRuntimeCacheContext->PendingUpdate == NULL))
>     > +  {
>     > +    return EFI_UNSUPPORTED;
>     > +  }
>     > +
>     > +  if (*(VariableRuntimeCacheContext->PendingUpdate)) {
>     > +    if ((VariableRuntimeCacheContext->VariableRuntimeHobCache.Store !=
>     > NULL) &&
>     > +        (mVariableModuleGlobal->VariableGlobal.HobVariableBase > 0))
>     > +    {
>     > +      CopyMem (
>     > +        (VOID *)(
>     > +                 ((UINT8 *)(UINTN)VariableRuntimeCacheContext-
>     > >VariableRuntimeHobCache.Store) +
>     > +                 VariableRuntimeCacheContext-
>     > >VariableRuntimeHobCache.PendingUpdateOffset
>     > +                 ),
>     > +        (VOID *)(
>     > +                 ((UINT8 *)(UINTN)mVariableModuleGlobal-
>     > >VariableGlobal.HobVariableBase) +
>     > +                 VariableRuntimeCacheContext-
>     > >VariableRuntimeHobCache.PendingUpdateOffset
>     > +                 ),
>     > +        VariableRuntimeCacheContext-
>     > >VariableRuntimeHobCache.PendingUpdateLength
>     > +        );
>     > +      VariableRuntimeCacheContext-
>     > >VariableRuntimeHobCache.PendingUpdateLength = 0;
>     > +      VariableRuntimeCacheContext-
>     > >VariableRuntimeHobCache.PendingUpdateOffset = 0;
>     > +    }
>     > +
>     > +    CopyMem (
>     > +      (VOID *)(
>     > +               ((UINT8 *)(UINTN)VariableRuntimeCacheContext-
>     > >VariableRuntimeNvCache.Store) +
>     > +               VariableRuntimeCacheContext-
>     > >VariableRuntimeNvCache.PendingUpdateOffset
>     > +               ),
>     > +      (VOID *)(
>     > +               ((UINT8 *)(UINTN)mNvVariableCache) +
>     > +               VariableRuntimeCacheContext-
>     > >VariableRuntimeNvCache.PendingUpdateOffset
>     > +               ),
>     > +      VariableRuntimeCacheContext-
>     > >VariableRuntimeNvCache.PendingUpdateLength
>     > +      );
>     > +    VariableRuntimeCacheContext-
>     > >VariableRuntimeNvCache.PendingUpdateLength = 0;
>     > +    VariableRuntimeCacheContext-
>     > >VariableRuntimeNvCache.PendingUpdateOffset = 0;
>     > +
>     > +    CopyMem (
>     > +      (VOID *)(
>     > +               ((UINT8 *)(UINTN)VariableRuntimeCacheContext-
>     > >VariableRuntimeVolatileCache.Store) +
>     > +               VariableRuntimeCacheContext-
>     > >VariableRuntimeVolatileCache.PendingUpdateOffset
>     > +               ),
>     > +      (VOID *)(
>     > +               ((UINT8 *)(UINTN)mVariableModuleGlobal-
>     > >VariableGlobal.VolatileVariableBase) +
>     > +               VariableRuntimeCacheContext-
>     > >VariableRuntimeVolatileCache.PendingUpdateOffset
>     > +               ),
>     > +      VariableRuntimeCacheContext-
>     > >VariableRuntimeVolatileCache.PendingUpdateLength
>     > +      );
>     > +    VariableRuntimeCacheContext-
>     > >VariableRuntimeVolatileCache.PendingUpdateLength = 0;
>     > +    VariableRuntimeCacheContext-
>     > >VariableRuntimeVolatileCache.PendingUpdateOffset = 0;
>     > +    *(VariableRuntimeCacheContext->PendingUpdate)                                 =
> FALSE;
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Synchronizes the runtime variable caches with all pending updates outside
>     > runtime.
>     > +
>     > +  Ensures all conditions are met to maintain coherency for runtime cache
>     > updates. This function will attempt
>     > +  to write the given update (and any other pending updates) if the ReadLock
> is
>     > available. Otherwise, the
>     > +  update is added as a pending update for the given variable store and it will
> be
>     > flushed to the runtime cache
>     > +  at the next opportunity the ReadLock is available.
>     > +
>     > +  @param[in] VariableRuntimeCache Variable runtime cache structure for
> the
>     > runtime cache being synchronized.
>     > +  @param[in] Offset               Offset in bytes to apply the update.
>     > +  @param[in] Length               Length of data in bytes of the update.
>     > +
>     > +  @retval EFI_SUCCESS             The update was added as a pending update
>     > successfully. If the variable runtime
>     > +                                  cache ReadLock was available, the runtime cache was
>     > updated successfully.
>     > +  @retval EFI_UNSUPPORTED         The volatile store to be updated is not
>     > initialized properly.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +SynchronizeRuntimeVariableCache (
>     > +  IN  VARIABLE_RUNTIME_CACHE  *VariableRuntimeCache,
>     > +  IN  UINTN                   Offset,
>     > +  IN  UINTN                   Length
>     > +  )
>     > +{
>     > +  if (VariableRuntimeCache == NULL) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  } else if (VariableRuntimeCache->Store == NULL) {
>     > +    // The runtime cache may not be active or allocated yet.
>     > +    // In either case, return EFI_SUCCESS instead of
> EFI_NOT_AVAILABLE_YET.
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  if ((mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.PendingUpdate == NULL) ||
>     > +      (mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.ReadLock == NULL))
>     > +  {
>     > +    return EFI_UNSUPPORTED;
>     > +  }
>     > +
>     > +  if (*(mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.PendingUpdate) &&
>     > +      (VariableRuntimeCache->PendingUpdateLength > 0))
>     > +  {
>     > +    VariableRuntimeCache->PendingUpdateLength =
>     > +      (UINT32)(
>     > +               MAX (
>     > +                 (UINTN)(VariableRuntimeCache->PendingUpdateOffset +
>     > VariableRuntimeCache->PendingUpdateLength),
>     > +                 Offset + Length
>     > +                 ) - MIN ((UINTN)VariableRuntimeCache->PendingUpdateOffset,
>     > Offset)
>     > +               );
>     > +    VariableRuntimeCache->PendingUpdateOffset =
>     > +      (UINT32)MIN ((UINTN)VariableRuntimeCache->PendingUpdateOffset,
>     > Offset);
>     > +  } else {
>     > +    VariableRuntimeCache->PendingUpdateLength = (UINT32)Length;
>     > +    VariableRuntimeCache->PendingUpdateOffset = (UINT32)Offset;
>     > +  }
>     > +
>     > +  *(mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.PendingUpdate) = TRUE;
>     > +
>     > +  if (*(mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext.ReadLock) == FALSE) {
>     > +    return FlushPendingRuntimeVariableCacheUpdates ();
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.c
>     > new file mode 100644
>     > index 000000000000..f7bac0227577
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.c
>     > @@ -0,0 +1,1268 @@
>     > +/** @file
>     > +  The sample implementation for SMM variable protocol. And this driver
>     > +  implements an SMI handler to communicate with the DXE runtime driver
>     > +  to provide variable services.
>     > +
>     > +  Caution: This module requires additional review when modified.
>     > +  This driver will have external input - variable data and communicate buffer
> in
>     > SMM mode.
>     > +  This external input must be validated carefully to avoid security issue like
>     > +  buffer overflow, integer overflow.
>     > +
>     > +  SmmVariableHandler() will receive untrusted input and do basic validation.
>     > +
>     > +  Each sub function VariableServiceGetVariable(),
>     > VariableServiceGetNextVariableName(),
>     > +  VariableServiceSetVariable(), VariableServiceQueryVariableInfo(),
>     > ReclaimForOS(),
>     > +  SmmVariableGetStatistics() should also do validation based on its own
>     > knowledge.
>     > +
>     > +Copyright (c) 2010 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +Copyright (c) 2018, Linaro, Ltd. All rights reserved.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include <Protocol/SmmVariable.h>
>     > +#include <Protocol/SmmFirmwareVolumeBlock.h>
>     > +#include <Protocol/SmmFaultTolerantWrite.h>
>     > +#include <Protocol/MmEndOfDxe.h>
>     > +#include <Protocol/SmmVarCheck.h>
>     > +
>     > +#include <Library/MmServicesTableLib.h>
>     > +#include <Library/VariablePolicyLib.h>
>     > +
>     > +#include <Guid/SmmVariableCommon.h>
>     > +#include "Variable.h"
>     > +#include "VariableParsing.h"
>     > +#include "VariableRuntimeCache.h"
>     > +
>     > +extern VARIABLE_STORE_HEADER  *mNvVariableCache;
>     > +
>     > +BOOLEAN  mAtRuntime              = FALSE;
>     > +UINT8    *mVariableBufferPayload = NULL;
>     > +UINTN    mVariableBufferPayloadSize;
>     > +
>     > +/**
>     > +  SecureBoot Hook for SetVariable.
>     > +
>     > +  @param[in] VariableName                 Name of Variable to be found.
>     > +  @param[in] VendorGuid                   Variable vendor GUID.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +SecureBootHook (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid
>     > +  )
>     > +{
>     > +  return;
>     > +}
>     > +
>     > +/**
>     > +
>     > +  This code sets variable in storage blocks (Volatile or Non-Volatile).
>     > +
>     > +  @param VariableName                     Name of Variable to be found.
>     > +  @param VendorGuid                       Variable vendor GUID.
>     > +  @param Attributes                       Attribute value of the variable found
>     > +  @param DataSize                         Size of Data found. If size is less than the
>     > +                                          data, this value contains the required size.
>     > +  @param Data                             Data pointer.
>     > +
>     > +  @return EFI_INVALID_PARAMETER           Invalid parameter.
>     > +  @return EFI_SUCCESS                     Set successfully.
>     > +  @return EFI_OUT_OF_RESOURCES            Resource not enough to set
> variable.
>     > +  @return EFI_NOT_FOUND                   Not found.
>     > +  @return EFI_WRITE_PROTECTED             Variable is read-only.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +SmmVariableSetVariable (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid,
>     > +  IN UINT32    Attributes,
>     > +  IN UINTN     DataSize,
>     > +  IN VOID      *Data
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  //
>     > +  // Disable write protection when the calling SetVariable() through
>     > EFI_SMM_VARIABLE_PROTOCOL.
>     > +  //
>     > +  mRequestSource = VarCheckFromTrusted;
>     > +  Status         = VariableServiceSetVariable (
>     > +                     VariableName,
>     > +                     VendorGuid,
>     > +                     Attributes,
>     > +                     DataSize,
>     > +                     Data
>     > +                     );
>     > +  mRequestSource = VarCheckFromUntrusted;
>     > +  return Status;
>     > +}
>     > +
>     > +EFI_SMM_VARIABLE_PROTOCOL  gSmmVariable = {
>     > +  VariableServiceGetVariable,
>     > +  VariableServiceGetNextVariableName,
>     > +  SmmVariableSetVariable,
>     > +  VariableServiceQueryVariableInfo
>     > +};
>     > +
>     > +EDKII_SMM_VAR_CHECK_PROTOCOL  mSmmVarCheck = {
>     > +  VarCheckRegisterSetVariableCheckHandler,
>     > +  VarCheckVariablePropertySet,
>     > +  VarCheckVariablePropertyGet
>     > +};
>     > +
>     > +/**
>     > +  Return TRUE if ExitBootServices () has been called.
>     > +
>     > +  @retval TRUE If ExitBootServices () has been called.
>     > +**/
>     > +BOOLEAN
>     > +AtRuntime (
>     > +  VOID
>     > +  )
>     > +{
>     > +  return mAtRuntime;
>     > +}
>     > +
>     > +/**
>     > +  Initializes a basic mutual exclusion lock.
>     > +
>     > +  This function initializes a basic mutual exclusion lock to the released state
>     > +  and returns the lock.  Each lock provides mutual exclusion access at its
> task
>     > +  priority level.  Since there is no preemption or multiprocessor support in
> EFI,
>     > +  acquiring the lock only consists of raising to the locks TPL.
>     > +  If Lock is NULL, then ASSERT().
>     > +  If Priority is not a valid TPL value, then ASSERT().
>     > +
>     > +  @param  Lock       A pointer to the lock data structure to initialize.
>     > +  @param  Priority   EFI TPL is associated with the lock.
>     > +
>     > +  @return The lock.
>     > +
>     > +**/
>     > +EFI_LOCK *
>     > +InitializeLock (
>     > +  IN OUT EFI_LOCK  *Lock,
>     > +  IN EFI_TPL       Priority
>     > +  )
>     > +{
>     > +  return Lock;
>     > +}
>     > +
>     > +/**
>     > +  Acquires lock only at boot time. Simply returns at runtime.
>     > +
>     > +  This is a temperary function that will be removed when
>     > +  EfiAcquireLock() in UefiLib can handle the call in UEFI
>     > +  Runtimer driver in RT phase.
>     > +  It calls EfiAcquireLock() at boot time, and simply returns
>     > +  at runtime.
>     > +
>     > +  @param  Lock         A pointer to the lock to acquire.
>     > +
>     > +**/
>     > +VOID
>     > +AcquireLockOnlyAtBootTime (
>     > +  IN EFI_LOCK  *Lock
>     > +  )
>     > +{
>     > +}
>     > +
>     > +/**
>     > +  Releases lock only at boot time. Simply returns at runtime.
>     > +
>     > +  This is a temperary function which will be removed when
>     > +  EfiReleaseLock() in UefiLib can handle the call in UEFI
>     > +  Runtimer driver in RT phase.
>     > +  It calls EfiReleaseLock() at boot time and simply returns
>     > +  at runtime.
>     > +
>     > +  @param  Lock         A pointer to the lock to release.
>     > +
>     > +**/
>     > +VOID
>     > +ReleaseLockOnlyAtBootTime (
>     > +  IN EFI_LOCK  *Lock
>     > +  )
>     > +{
>     > +}
>     > +
>     > +/**
>     > +  Retrieve the SMM Fault Tolerent Write protocol interface.
>     > +
>     > +  @param[out] FtwProtocol       The interface of SMM Ftw protocol
>     > +
>     > +  @retval EFI_SUCCESS           The SMM FTW protocol instance was found
> and
>     > returned in FtwProtocol.
>     > +  @retval EFI_NOT_FOUND         The SMM FTW protocol instance was not
>     > found.
>     > +  @retval EFI_INVALID_PARAMETER SarProtocol is NULL.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetFtwProtocol (
>     > +  OUT VOID  **FtwProtocol
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  //
>     > +  // Locate Smm Fault Tolerent Write protocol
>     > +  //
>     > +  Status = gMmst->MmLocateProtocol (
>     > +                    &gEfiSmmFaultTolerantWriteProtocolGuid,
>     > +                    NULL,
>     > +                    FtwProtocol
>     > +                    );
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Retrieve the SMM FVB protocol interface by HANDLE.
>     > +
>     > +  @param[in]  FvBlockHandle     The handle of SMM FVB protocol that
> provides
>     > services for
>     > +                                reading, writing, and erasing the target block.
>     > +  @param[out] FvBlock           The interface of SMM FVB protocol
>     > +
>     > +  @retval EFI_SUCCESS           The interface information for the specified
>     > protocol was returned.
>     > +  @retval EFI_UNSUPPORTED       The device does not support the SMM FVB
>     > protocol.
>     > +  @retval EFI_INVALID_PARAMETER FvBlockHandle is not a valid
> EFI_HANDLE
>     > or FvBlock is NULL.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetFvbByHandle (
>     > +  IN  EFI_HANDLE                          FvBlockHandle,
>     > +  OUT EFI_FIRMWARE_VOLUME_BLOCK_PROTOCOL  **FvBlock
>     > +  )
>     > +{
>     > +  //
>     > +  // To get the SMM FVB protocol interface on the handle
>     > +  //
>     > +  return gMmst->MmHandleProtocol (
>     > +                  FvBlockHandle,
>     > +                  &gEfiSmmFirmwareVolumeBlockProtocolGuid,
>     > +                  (VOID **)FvBlock
>     > +                  );
>     > +}
>     > +
>     > +/**
>     > +  Function returns an array of handles that support the SMM FVB protocol
>     > +  in a buffer allocated from pool.
>     > +
>     > +  @param[out]  NumberHandles    The number of handles returned in Buffer.
>     > +  @param[out]  Buffer           A pointer to the buffer to return the requested
>     > +                                array of  handles that support SMM FVB protocol.
>     > +
>     > +  @retval EFI_SUCCESS           The array of handles was returned in Buffer,
> and
>     > the number of
>     > +                                handles in Buffer was returned in NumberHandles.
>     > +  @retval EFI_NOT_FOUND         No SMM FVB handle was found.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough pool memory to
> store
>     > the matching results.
>     > +  @retval EFI_INVALID_PARAMETER NumberHandles is NULL or Buffer is
> NULL.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetFvbCountAndBuffer (
>     > +  OUT UINTN       *NumberHandles,
>     > +  OUT EFI_HANDLE  **Buffer
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  UINTN       BufferSize;
>     > +
>     > +  if ((NumberHandles == NULL) || (Buffer == NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  BufferSize     = 0;
>     > +  *NumberHandles = 0;
>     > +  *Buffer        = NULL;
>     > +  Status         = gMmst->MmLocateHandle (
>     > +                            ByProtocol,
>     > +                            &gEfiSmmFirmwareVolumeBlockProtocolGuid,
>     > +                            NULL,
>     > +                            &BufferSize,
>     > +                            *Buffer
>     > +                            );
>     > +  if (EFI_ERROR (Status) && (Status != EFI_BUFFER_TOO_SMALL)) {
>     > +    return EFI_NOT_FOUND;
>     > +  }
>     > +
>     > +  *Buffer = AllocatePool (BufferSize);
>     > +  if (*Buffer == NULL) {
>     > +    return EFI_OUT_OF_RESOURCES;
>     > +  }
>     > +
>     > +  Status = gMmst->MmLocateHandle (
>     > +                    ByProtocol,
>     > +                    &gEfiSmmFirmwareVolumeBlockProtocolGuid,
>     > +                    NULL,
>     > +                    &BufferSize,
>     > +                    *Buffer
>     > +                    );
>     > +
>     > +  *NumberHandles = BufferSize / sizeof (EFI_HANDLE);
>     > +  if (EFI_ERROR (Status)) {
>     > +    *NumberHandles = 0;
>     > +    FreePool (*Buffer);
>     > +    *Buffer = NULL;
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Get the variable statistics information from the information buffer
> pointed by
>     > gVariableInfo.
>     > +
>     > +  Caution: This function may be invoked at SMM runtime.
>     > +  InfoEntry and InfoSize are external input. Care must be taken to make
> sure
>     > not security issue at runtime.
>     > +
>     > +  @param[in, out]  InfoEntry    A pointer to the buffer of variable
> information
>     > entry.
>     > +                                On input, point to the variable information returned last
> time.
>     > if
>     > +                                InfoEntry->VendorGuid is zero, return the first
> information.
>     > +                                On output, point to the next variable information.
>     > +  @param[in, out]  InfoSize     On input, the size of the variable information
>     > buffer.
>     > +                                On output, the returned variable information size.
>     > +
>     > +  @retval EFI_SUCCESS           The variable information is found and returned
>     > successfully.
>     > +  @retval EFI_UNSUPPORTED       No variable inoformation exists in
> variable
>     > driver. The
>     > +                                PcdVariableCollectStatistics should be set TRUE to
> support it.
>     > +  @retval EFI_BUFFER_TOO_SMALL  The buffer is too small to hold the next
>     > variable information.
>     > +  @retval EFI_INVALID_PARAMETER Input parameter is invalid.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +SmmVariableGetStatistics (
>     > +  IN OUT VARIABLE_INFO_ENTRY  *InfoEntry,
>     > +  IN OUT UINTN                *InfoSize
>     > +  )
>     > +{
>     > +  VARIABLE_INFO_ENTRY  *VariableInfo;
>     > +  UINTN                NameSize;
>     > +  UINTN                StatisticsInfoSize;
>     > +  CHAR16               *InfoName;
>     > +  UINTN                InfoNameMaxSize;
>     > +  EFI_GUID             VendorGuid;
>     > +
>     > +  if (InfoEntry == NULL) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  VariableInfo = gVariableInfo;
>     > +  if (VariableInfo == NULL) {
>     > +    return EFI_UNSUPPORTED;
>     > +  }
>     > +
>     > +  StatisticsInfoSize = sizeof (VARIABLE_INFO_ENTRY);
>     > +  if (*InfoSize < StatisticsInfoSize) {
>     > +    *InfoSize = StatisticsInfoSize;
>     > +    return EFI_BUFFER_TOO_SMALL;
>     > +  }
>     > +
>     > +  InfoName        = (CHAR16 *)(InfoEntry + 1);
>     > +  InfoNameMaxSize = (*InfoSize - sizeof (VARIABLE_INFO_ENTRY));
>     > +
>     > +  CopyGuid (&VendorGuid, &InfoEntry->VendorGuid);
>     > +
>     > +  if (IsZeroGuid (&VendorGuid)) {
>     > +    //
>     > +    // Return the first variable info
>     > +    //
>     > +    NameSize           = StrSize (VariableInfo->Name);
>     > +    StatisticsInfoSize = sizeof (VARIABLE_INFO_ENTRY) + NameSize;
>     > +    if (*InfoSize < StatisticsInfoSize) {
>     > +      *InfoSize = StatisticsInfoSize;
>     > +      return EFI_BUFFER_TOO_SMALL;
>     > +    }
>     > +
>     > +    CopyMem (InfoEntry, VariableInfo, sizeof (VARIABLE_INFO_ENTRY));
>     > +    CopyMem (InfoName, VariableInfo->Name, NameSize);
>     > +    *InfoSize = StatisticsInfoSize;
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  //
>     > +  // Get the next variable info
>     > +  //
>     > +  while (VariableInfo != NULL) {
>     > +    if (CompareGuid (&VariableInfo->VendorGuid, &VendorGuid)) {
>     > +      NameSize = StrSize (VariableInfo->Name);
>     > +      if (NameSize <= InfoNameMaxSize) {
>     > +        if (CompareMem (VariableInfo->Name, InfoName, NameSize) == 0) {
>     > +          //
>     > +          // Find the match one
>     > +          //
>     > +          VariableInfo = VariableInfo->Next;
>     > +          break;
>     > +        }
>     > +      }
>     > +    }
>     > +
>     > +    VariableInfo = VariableInfo->Next;
>     > +  }
>     > +
>     > +  if (VariableInfo == NULL) {
>     > +    *InfoSize = 0;
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  //
>     > +  // Output the new variable info
>     > +  //
>     > +  NameSize           = StrSize (VariableInfo->Name);
>     > +  StatisticsInfoSize = sizeof (VARIABLE_INFO_ENTRY) + NameSize;
>     > +  if (*InfoSize < StatisticsInfoSize) {
>     > +    *InfoSize = StatisticsInfoSize;
>     > +    return EFI_BUFFER_TOO_SMALL;
>     > +  }
>     > +
>     > +  CopyMem (InfoEntry, VariableInfo, sizeof (VARIABLE_INFO_ENTRY));
>     > +  CopyMem (InfoName, VariableInfo->Name, NameSize);
>     > +  *InfoSize = StatisticsInfoSize;
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Communication service SMI Handler entry.
>     > +
>     > +  This SMI handler provides services for the variable wrapper driver.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  This variable data and communicate buffer are external input, so this
> function
>     > will do basic validation.
>     > +  Each sub function VariableServiceGetVariable(),
>     > VariableServiceGetNextVariableName(),
>     > +  VariableServiceSetVariable(), VariableServiceQueryVariableInfo(),
>     > ReclaimForOS(),
>     > +  SmmVariableGetStatistics() should also do validation based on its own
>     > knowledge.
>     > +
>     > +  @param[in]     DispatchHandle  The unique handle assigned to this handler
> by
>     > SmiHandlerRegister().
>     > +  @param[in]     RegisterContext Points to an optional handler context
> which
>     > was specified when the
>     > +                                 handler was registered.
>     > +  @param[in, out] CommBuffer     A pointer to a collection of data in
> memory
>     > that will
>     > +                                 be conveyed from a non-SMM environment into an SMM
>     > environment.
>     > +  @param[in, out] CommBufferSize The size of the CommBuffer.
>     > +
>     > +  @retval EFI_SUCCESS                         The interrupt was handled and
> quiesced.
>     > No other handlers
>     > +                                              should still be called.
>     > +  @retval EFI_WARN_INTERRUPT_SOURCE_QUIESCED  The interrupt has
> been
>     > quiesced but other handlers should
>     > +                                              still be called.
>     > +  @retval EFI_WARN_INTERRUPT_SOURCE_PENDING   The interrupt is still
>     > pending and other handlers should still
>     > +                                              be called.
>     > +  @retval EFI_INTERRUPT_PENDING               The interrupt could not be
>     > quiesced.
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +SmmVariableHandler (
>     > +  IN     EFI_HANDLE  DispatchHandle,
>     > +  IN     CONST VOID  *RegisterContext,
>     > +  IN OUT VOID        *CommBuffer,
>     > +  IN OUT UINTN       *CommBufferSize
>     > +  )
>     > +{
>     > +  EFI_STATUS                                               Status;
>     > +  SMM_VARIABLE_COMMUNICATE_HEADER
>     > *SmmVariableFunctionHeader;
>     > +  SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE
>     > *SmmVariableHeader;
>     > +  SMM_VARIABLE_COMMUNICATE_GET_NEXT_VARIABLE_NAME
>     > *GetNextVariableName;
>     > +  SMM_VARIABLE_COMMUNICATE_QUERY_VARIABLE_INFO
>     > *QueryVariableInfo;
>     > +  SMM_VARIABLE_COMMUNICATE_GET_PAYLOAD_SIZE
>     > *GetPayloadSize;
>     > +
> SMM_VARIABLE_COMMUNICATE_RUNTIME_VARIABLE_CACHE_CONTEXT
>     > *RuntimeVariableCacheContext;
>     > +  SMM_VARIABLE_COMMUNICATE_GET_RUNTIME_CACHE_INFO
>     > *GetRuntimeCacheInfo;
>     > +  SMM_VARIABLE_COMMUNICATE_LOCK_VARIABLE
>     > *VariableToLock;
>     > +  SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY
>     > *CommVariableProperty;
>     > +  VARIABLE_INFO_ENTRY                                      *VariableInfo;
>     > +  VARIABLE_RUNTIME_CACHE_CONTEXT
> *VariableCacheContext;
>     > +  VARIABLE_STORE_HEADER                                    *VariableCache;
>     > +  UINTN                                                    InfoSize;
>     > +  UINTN                                                    NameBufferSize;
>     > +  UINTN                                                    CommBufferPayloadSize;
>     > +  UINTN                                                    TempCommBufferSize;
>     > +
>     > +  //
>     > +  // If input is invalid, stop processing this SMI
>     > +  //
>     > +  if ((CommBuffer == NULL) || (CommBufferSize == NULL)) {
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  TempCommBufferSize = *CommBufferSize;
>     > +
>     > +  if (TempCommBufferSize <
> SMM_VARIABLE_COMMUNICATE_HEADER_SIZE) {
>     > +    DEBUG ((DEBUG_ERROR, "SmmVariableHandler: SMM communication
> buffer
>     > size invalid!\n"));
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  CommBufferPayloadSize = TempCommBufferSize -
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE;
>     > +  if (CommBufferPayloadSize > mVariableBufferPayloadSize) {
>     > +    DEBUG ((DEBUG_ERROR, "SmmVariableHandler: SMM communication
> buffer
>     > payload size invalid!\n"));
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  if (!VariableSmmIsBufferOutsideSmmValid ((UINTN)CommBuffer,
>     > TempCommBufferSize)) {
>     > +    DEBUG ((DEBUG_ERROR, "SmmVariableHandler: SMM communication
> buffer
>     > in SMRAM or overflow!\n"));
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  SmmVariableFunctionHeader =
> (SMM_VARIABLE_COMMUNICATE_HEADER
>     > *)CommBuffer;
>     > +  switch (SmmVariableFunctionHeader->Function) {
>     > +    case SMM_VARIABLE_FUNCTION_GET_VARIABLE:
>     > +      if (CommBufferPayloadSize < OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name)) {
>     > +        DEBUG ((DEBUG_ERROR, "GetVariable: SMM communication buffer
> size
>     > invalid!\n"));
>     > +        return EFI_SUCCESS;
>     > +      }
>     > +
>     > +      //
>     > +      // Copy the input communicate buffer payload to pre-allocated SMM
>     > variable buffer payload.
>     > +      //
>     > +      CopyMem (mVariableBufferPayload, SmmVariableFunctionHeader-
> >Data,
>     > CommBufferPayloadSize);
>     > +      SmmVariableHeader =
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE
>     > *)mVariableBufferPayload;
>     > +      if (((UINTN)(~0) - SmmVariableHeader->DataSize < OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name)) ||
>     > +          ((UINTN)(~0) - SmmVariableHeader->NameSize < OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name) +
>     > SmmVariableHeader->DataSize))
>     > +      {
>     > +        //
>     > +        // Prevent InfoSize overflow happen
>     > +        //
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      InfoSize = OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name)
>     > +                 + SmmVariableHeader->DataSize + SmmVariableHeader-
> >NameSize;
>     > +
>     > +      //
>     > +      // SMRAM range check already covered before
>     > +      //
>     > +      if (InfoSize > CommBufferPayloadSize) {
>     > +        DEBUG ((DEBUG_ERROR, "GetVariable: Data size exceed
> communication
>     > buffer size limit!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      //
>     > +      // The VariableSpeculationBarrier() call here is to ensure the previous
>     > +      // range/content checks for the CommBuffer have been completed
> before
>     > the
>     > +      // subsequent consumption of the CommBuffer content.
>     > +      //
>     > +      VariableSpeculationBarrier ();
>     > +      if ((SmmVariableHeader->NameSize < sizeof (CHAR16)) ||
>     > (SmmVariableHeader->Name[SmmVariableHeader->NameSize/sizeof
> (CHAR16) -
>     > 1] != L'\0')) {
>     > +        //
>     > +        // Make sure VariableName is A Null-terminated string.
>     > +        //
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      Status = VariableServiceGetVariable (
>     > +                 SmmVariableHeader->Name,
>     > +                 &SmmVariableHeader->Guid,
>     > +                 &SmmVariableHeader->Attributes,
>     > +                 &SmmVariableHeader->DataSize,
>     > +                 (UINT8 *)SmmVariableHeader->Name + SmmVariableHeader-
>     > >NameSize
>     > +                 );
>     > +      CopyMem (SmmVariableFunctionHeader->Data,
> mVariableBufferPayload,
>     > CommBufferPayloadSize);
>     > +      break;
>     > +
>     > +    case SMM_VARIABLE_FUNCTION_GET_NEXT_VARIABLE_NAME:
>     > +      if (CommBufferPayloadSize < OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_GET_NEXT_VARIABLE_NAME, Name)) {
>     > +        DEBUG ((DEBUG_ERROR, "GetNextVariableName: SMM
> communication
>     > buffer size invalid!\n"));
>     > +        return EFI_SUCCESS;
>     > +      }
>     > +
>     > +      //
>     > +      // Copy the input communicate buffer payload to pre-allocated SMM
>     > variable buffer payload.
>     > +      //
>     > +      CopyMem (mVariableBufferPayload, SmmVariableFunctionHeader-
> >Data,
>     > CommBufferPayloadSize);
>     > +      GetNextVariableName =
>     > (SMM_VARIABLE_COMMUNICATE_GET_NEXT_VARIABLE_NAME
>     > *)mVariableBufferPayload;
>     > +      if ((UINTN)(~0) - GetNextVariableName->NameSize < OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_GET_NEXT_VARIABLE_NAME, Name)) {
>     > +        //
>     > +        // Prevent InfoSize overflow happen
>     > +        //
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      InfoSize = OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_GET_NEXT_VARIABLE_NAME, Name) +
>     > GetNextVariableName->NameSize;
>     > +
>     > +      //
>     > +      // SMRAM range check already covered before
>     > +      //
>     > +      if (InfoSize > CommBufferPayloadSize) {
>     > +        DEBUG ((DEBUG_ERROR, "GetNextVariableName: Data size exceed
>     > communication buffer size limit!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      NameBufferSize = CommBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_GET_NEXT_VARIABLE_NAME, Name);
>     > +      if ((NameBufferSize < sizeof (CHAR16)) || (GetNextVariableName-
>     > >Name[NameBufferSize/sizeof (CHAR16) - 1] != L'\0')) {
>     > +        //
>     > +        // Make sure input VariableName is A Null-terminated string.
>     > +        //
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      Status = VariableServiceGetNextVariableName (
>     > +                 &GetNextVariableName->NameSize,
>     > +                 GetNextVariableName->Name,
>     > +                 &GetNextVariableName->Guid
>     > +                 );
>     > +      CopyMem (SmmVariableFunctionHeader->Data,
> mVariableBufferPayload,
>     > CommBufferPayloadSize);
>     > +      break;
>     > +
>     > +    case SMM_VARIABLE_FUNCTION_SET_VARIABLE:
>     > +      if (CommBufferPayloadSize < OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name)) {
>     > +        DEBUG ((DEBUG_ERROR, "SetVariable: SMM communication buffer
> size
>     > invalid!\n"));
>     > +        return EFI_SUCCESS;
>     > +      }
>     > +
>     > +      //
>     > +      // Copy the input communicate buffer payload to pre-allocated SMM
>     > variable buffer payload.
>     > +      //
>     > +      CopyMem (mVariableBufferPayload, SmmVariableFunctionHeader-
> >Data,
>     > CommBufferPayloadSize);
>     > +      SmmVariableHeader =
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE
>     > *)mVariableBufferPayload;
>     > +      if (((UINTN)(~0) - SmmVariableHeader->DataSize < OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name)) ||
>     > +          ((UINTN)(~0) - SmmVariableHeader->NameSize < OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name) +
>     > SmmVariableHeader->DataSize))
>     > +      {
>     > +        //
>     > +        // Prevent InfoSize overflow happen
>     > +        //
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      InfoSize = OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name)
>     > +                 + SmmVariableHeader->DataSize + SmmVariableHeader-
> >NameSize;
>     > +
>     > +      //
>     > +      // SMRAM range check already covered before
>     > +      // Data buffer should not contain SMM range
>     > +      //
>     > +      if (InfoSize > CommBufferPayloadSize) {
>     > +        DEBUG ((DEBUG_ERROR, "SetVariable: Data size exceed
> communication
>     > buffer size limit!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      //
>     > +      // The VariableSpeculationBarrier() call here is to ensure the previous
>     > +      // range/content checks for the CommBuffer have been completed
> before
>     > the
>     > +      // subsequent consumption of the CommBuffer content.
>     > +      //
>     > +      VariableSpeculationBarrier ();
>     > +      if ((SmmVariableHeader->NameSize < sizeof (CHAR16)) ||
>     > (SmmVariableHeader->Name[SmmVariableHeader->NameSize/sizeof
> (CHAR16) -
>     > 1] != L'\0')) {
>     > +        //
>     > +        // Make sure VariableName is A Null-terminated string.
>     > +        //
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      Status = VariableServiceSetVariable (
>     > +                 SmmVariableHeader->Name,
>     > +                 &SmmVariableHeader->Guid,
>     > +                 SmmVariableHeader->Attributes,
>     > +                 SmmVariableHeader->DataSize,
>     > +                 (UINT8 *)SmmVariableHeader->Name + SmmVariableHeader-
>     > >NameSize
>     > +                 );
>     > +      break;
>     > +
>     > +    case SMM_VARIABLE_FUNCTION_QUERY_VARIABLE_INFO:
>     > +      if (CommBufferPayloadSize < sizeof
>     > (SMM_VARIABLE_COMMUNICATE_QUERY_VARIABLE_INFO)) {
>     > +        DEBUG ((DEBUG_ERROR, "QueryVariableInfo: SMM communication
> buffer
>     > size invalid!\n"));
>     > +        return EFI_SUCCESS;
>     > +      }
>     > +
>     > +      QueryVariableInfo =
>     > (SMM_VARIABLE_COMMUNICATE_QUERY_VARIABLE_INFO
>     > *)SmmVariableFunctionHeader->Data;
>     > +
>     > +      Status = VariableServiceQueryVariableInfo (
>     > +                 QueryVariableInfo->Attributes,
>     > +                 &QueryVariableInfo->MaximumVariableStorageSize,
>     > +                 &QueryVariableInfo->RemainingVariableStorageSize,
>     > +                 &QueryVariableInfo->MaximumVariableSize
>     > +                 );
>     > +      break;
>     > +
>     > +    case SMM_VARIABLE_FUNCTION_GET_PAYLOAD_SIZE:
>     > +      if (CommBufferPayloadSize < sizeof
>     > (SMM_VARIABLE_COMMUNICATE_GET_PAYLOAD_SIZE)) {
>     > +        DEBUG ((DEBUG_ERROR, "GetPayloadSize: SMM communication
> buffer
>     > size invalid!\n"));
>     > +        return EFI_SUCCESS;
>     > +      }
>     > +
>     > +      GetPayloadSize                      =
>     > (SMM_VARIABLE_COMMUNICATE_GET_PAYLOAD_SIZE
>     > *)SmmVariableFunctionHeader->Data;
>     > +      GetPayloadSize->VariablePayloadSize = mVariableBufferPayloadSize;
>     > +      Status                              = EFI_SUCCESS;
>     > +      break;
>     > +
>     > +    case SMM_VARIABLE_FUNCTION_READY_TO_BOOT:
>     > +      if (AtRuntime ()) {
>     > +        Status = EFI_UNSUPPORTED;
>     > +        break;
>     > +      }
>     > +
>     > +      if (!mEndOfDxe) {
>     > +        MorLockInitAtEndOfDxe ();
>     > +        Status = LockVariablePolicy ();
>     > +        ASSERT_EFI_ERROR (Status);
>     > +        mEndOfDxe = TRUE;
>     > +        VarCheckLibInitializeAtEndOfDxe (NULL);
>     > +        //
>     > +        // The initialization for variable quota.
>     > +        //
>     > +        InitializeVariableQuota ();
>     > +      }
>     > +
>     > +      ReclaimForOS ();
>     > +      Status = EFI_SUCCESS;
>     > +      break;
>     > +
>     > +    case SMM_VARIABLE_FUNCTION_EXIT_BOOT_SERVICE:
>     > +      mAtRuntime = TRUE;
>     > +      Status     = EFI_SUCCESS;
>     > +      break;
>     > +
>     > +    case SMM_VARIABLE_FUNCTION_GET_STATISTICS:
>     > +      VariableInfo = (VARIABLE_INFO_ENTRY *)SmmVariableFunctionHeader-
>     > >Data;
>     > +      InfoSize     = TempCommBufferSize -
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE;
>     > +
>     > +      //
>     > +      // Do not need to check SmmVariableFunctionHeader->Data in SMRAM
>     > here.
>     > +      // It is covered by previous CommBuffer check
>     > +      //
>     > +
>     > +      //
>     > +      // Do not need to check CommBufferSize buffer as it should point to
>     > SMRAM
>     > +      // that was used by SMM core to cache CommSize from
>     > SmmCommunication protocol.
>     > +      //
>     > +
>     > +      Status          = SmmVariableGetStatistics (VariableInfo, &InfoSize);
>     > +      *CommBufferSize = InfoSize +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE;
>     > +      break;
>     > +
>     > +    case SMM_VARIABLE_FUNCTION_LOCK_VARIABLE:
>     > +      if (mEndOfDxe) {
>     > +        Status = EFI_ACCESS_DENIED;
>     > +      } else {
>     > +        VariableToLock = (SMM_VARIABLE_COMMUNICATE_LOCK_VARIABLE
>     > *)SmmVariableFunctionHeader->Data;
>     > +        Status         = VariableLockRequestToLock (
>     > +                           NULL,
>     > +                           VariableToLock->Name,
>     > +                           &VariableToLock->Guid
>     > +                           );
>     > +      }
>     > +
>     > +      break;
>     > +    case
> SMM_VARIABLE_FUNCTION_VAR_CHECK_VARIABLE_PROPERTY_SET:
>     > +      if (mEndOfDxe) {
>     > +        Status = EFI_ACCESS_DENIED;
>     > +      } else {
>     > +        CommVariableProperty =
>     > (SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY
>     > *)SmmVariableFunctionHeader->Data;
>     > +        Status               = VarCheckVariablePropertySet (
>     > +                                 CommVariableProperty->Name,
>     > +                                 &CommVariableProperty->Guid,
>     > +                                 &CommVariableProperty->VariableProperty
>     > +                                 );
>     > +      }
>     > +
>     > +      break;
>     > +    case
> SMM_VARIABLE_FUNCTION_VAR_CHECK_VARIABLE_PROPERTY_GET:
>     > +      if (CommBufferPayloadSize < OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY,
> Name))
>     > {
>     > +        DEBUG ((DEBUG_ERROR, "VarCheckVariablePropertyGet: SMM
>     > communication buffer size invalid!\n"));
>     > +        return EFI_SUCCESS;
>     > +      }
>     > +
>     > +      //
>     > +      // Copy the input communicate buffer payload to pre-allocated SMM
>     > variable buffer payload.
>     > +      //
>     > +      CopyMem (mVariableBufferPayload, SmmVariableFunctionHeader-
> >Data,
>     > CommBufferPayloadSize);
>     > +      CommVariableProperty =
>     > (SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY
>     > *)mVariableBufferPayload;
>     > +      if ((UINTN)(~0) - CommVariableProperty->NameSize < OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY,
> Name))
>     > {
>     > +        //
>     > +        // Prevent InfoSize overflow happen
>     > +        //
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      InfoSize = OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY,
> Name) +
>     > CommVariableProperty->NameSize;
>     > +
>     > +      //
>     > +      // SMRAM range check already covered before
>     > +      //
>     > +      if (InfoSize > CommBufferPayloadSize) {
>     > +        DEBUG ((DEBUG_ERROR, "VarCheckVariablePropertyGet: Data size
> exceed
>     > communication buffer size limit!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      //
>     > +      // The VariableSpeculationBarrier() call here is to ensure the previous
>     > +      // range/content checks for the CommBuffer have been completed
> before
>     > the
>     > +      // subsequent consumption of the CommBuffer content.
>     > +      //
>     > +      VariableSpeculationBarrier ();
>     > +      if ((CommVariableProperty->NameSize < sizeof (CHAR16)) ||
>     > (CommVariableProperty->Name[CommVariableProperty->NameSize/sizeof
>     > (CHAR16) - 1] != L'\0')) {
>     > +        //
>     > +        // Make sure VariableName is A Null-terminated string.
>     > +        //
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      Status = VarCheckVariablePropertyGet (
>     > +                 CommVariableProperty->Name,
>     > +                 &CommVariableProperty->Guid,
>     > +                 &CommVariableProperty->VariableProperty
>     > +                 );
>     > +      CopyMem (SmmVariableFunctionHeader->Data,
> mVariableBufferPayload,
>     > CommBufferPayloadSize);
>     > +      break;
>     > +    case
>     > SMM_VARIABLE_FUNCTION_INIT_RUNTIME_VARIABLE_CACHE_CONTEXT:
>     > +      if (CommBufferPayloadSize < sizeof
>     > (SMM_VARIABLE_COMMUNICATE_RUNTIME_VARIABLE_CACHE_CONTEXT))
> {
>     > +        DEBUG ((DEBUG_ERROR, "InitRuntimeVariableCacheContext: SMM
>     > communication buffer size invalid!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      if (mEndOfDxe) {
>     > +        DEBUG ((DEBUG_ERROR, "InitRuntimeVariableCacheContext: Cannot
> init
>     > context after end of DXE!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      //
>     > +      // Copy the input communicate buffer payload to the pre-allocated
> SMM
>     > variable payload buffer.
>     > +      //
>     > +      CopyMem (mVariableBufferPayload, SmmVariableFunctionHeader-
> >Data,
>     > CommBufferPayloadSize);
>     > +      RuntimeVariableCacheContext =
>     > (SMM_VARIABLE_COMMUNICATE_RUNTIME_VARIABLE_CACHE_CONTEXT
>     > *)mVariableBufferPayload;
>     > +
>     > +      //
>     > +      // Verify required runtime cache buffers are provided.
>     > +      //
>     > +      if ((RuntimeVariableCacheContext->RuntimeVolatileCache == NULL) ||
>     > +          (RuntimeVariableCacheContext->RuntimeNvCache == NULL) ||
>     > +          (RuntimeVariableCacheContext->PendingUpdate == NULL) ||
>     > +          (RuntimeVariableCacheContext->ReadLock == NULL) ||
>     > +          (RuntimeVariableCacheContext->HobFlushComplete == NULL))
>     > +      {
>     > +        DEBUG ((DEBUG_ERROR, "InitRuntimeVariableCacheContext: Required
>     > runtime cache buffer is NULL!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      //
>     > +      // Verify minimum size requirements for the runtime variable store
> buffers.
>     > +      //
>     > +      if (((RuntimeVariableCacheContext->RuntimeHobCache != NULL) &&
>     > +           (RuntimeVariableCacheContext->RuntimeHobCache->Size < sizeof
>     > (VARIABLE_STORE_HEADER))) ||
>     > +          (RuntimeVariableCacheContext->RuntimeVolatileCache->Size < sizeof
>     > (VARIABLE_STORE_HEADER)) ||
>     > +          (RuntimeVariableCacheContext->RuntimeNvCache->Size < sizeof
>     > (VARIABLE_STORE_HEADER)))
>     > +      {
>     > +        DEBUG ((DEBUG_ERROR, "InitRuntimeVariableCacheContext: A
> runtime
>     > cache buffer size is invalid!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      //
>     > +      // Verify runtime buffers do not overlap with SMRAM ranges.
>     > +      //
>     > +      if ((RuntimeVariableCacheContext->RuntimeHobCache != NULL) &&
>     > +          !VariableSmmIsBufferOutsideSmmValid (
>     > +             (UINTN)RuntimeVariableCacheContext->RuntimeHobCache,
>     > +             (UINTN)RuntimeVariableCacheContext->RuntimeHobCache->Size
>     > +             ))
>     > +      {
>     > +        DEBUG ((DEBUG_ERROR, "InitRuntimeVariableCacheContext: Runtime
>     > HOB cache buffer in SMRAM or overflow!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      if (!VariableSmmIsBufferOutsideSmmValid (
>     > +             (UINTN)RuntimeVariableCacheContext->RuntimeVolatileCache,
>     > +             (UINTN)RuntimeVariableCacheContext->RuntimeVolatileCache-
> >Size
>     > +             ))
>     > +      {
>     > +        DEBUG ((DEBUG_ERROR, "InitRuntimeVariableCacheContext: Runtime
>     > volatile cache buffer in SMRAM or overflow!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      if (!VariableSmmIsBufferOutsideSmmValid (
>     > +             (UINTN)RuntimeVariableCacheContext->RuntimeNvCache,
>     > +             (UINTN)RuntimeVariableCacheContext->RuntimeNvCache->Size
>     > +             ))
>     > +      {
>     > +        DEBUG ((DEBUG_ERROR, "InitRuntimeVariableCacheContext: Runtime
>     > non-volatile cache buffer in SMRAM or overflow!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      if (!VariableSmmIsBufferOutsideSmmValid (
>     > +             (UINTN)RuntimeVariableCacheContext->PendingUpdate,
>     > +             sizeof (*(RuntimeVariableCacheContext->PendingUpdate))
>     > +             ))
>     > +      {
>     > +        DEBUG ((DEBUG_ERROR, "InitRuntimeVariableCacheContext: Runtime
>     > cache pending update buffer in SMRAM or overflow!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      if (!VariableSmmIsBufferOutsideSmmValid (
>     > +             (UINTN)RuntimeVariableCacheContext->ReadLock,
>     > +             sizeof (*(RuntimeVariableCacheContext->ReadLock))
>     > +             ))
>     > +      {
>     > +        DEBUG ((DEBUG_ERROR, "InitRuntimeVariableCacheContext: Runtime
>     > cache read lock buffer in SMRAM or overflow!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      if (!VariableSmmIsBufferOutsideSmmValid (
>     > +             (UINTN)RuntimeVariableCacheContext->HobFlushComplete,
>     > +             sizeof (*(RuntimeVariableCacheContext->HobFlushComplete))
>     > +             ))
>     > +      {
>     > +        DEBUG ((DEBUG_ERROR, "InitRuntimeVariableCacheContext: Runtime
>     > cache HOB flush complete buffer in SMRAM or overflow!\n"));
>     > +        Status = EFI_ACCESS_DENIED;
>     > +        goto EXIT;
>     > +      }
>     > +
>     > +      VariableCacheContext                                     = &mVariableModuleGlobal-
>     > >VariableGlobal.VariableRuntimeCacheContext;
>     > +      VariableCacheContext->VariableRuntimeHobCache.Store      =
>     > RuntimeVariableCacheContext->RuntimeHobCache;
>     > +      VariableCacheContext->VariableRuntimeVolatileCache.Store =
>     > RuntimeVariableCacheContext->RuntimeVolatileCache;
>     > +      VariableCacheContext->VariableRuntimeNvCache.Store       =
>     > RuntimeVariableCacheContext->RuntimeNvCache;
>     > +      VariableCacheContext->PendingUpdate                      =
>     > RuntimeVariableCacheContext->PendingUpdate;
>     > +      VariableCacheContext->ReadLock                           =
>     > RuntimeVariableCacheContext->ReadLock;
>     > +      VariableCacheContext->HobFlushComplete                   =
>     > RuntimeVariableCacheContext->HobFlushComplete;
>     > +
>     > +      // Set up the intial pending request since the RT cache needs to be in
> sync
>     > with SMM cache
>     > +      VariableCacheContext-
> >VariableRuntimeHobCache.PendingUpdateOffset =
>     > 0;
>     > +      VariableCacheContext-
> >VariableRuntimeHobCache.PendingUpdateLength =
>     > 0;
>     > +      if ((mVariableModuleGlobal->VariableGlobal.HobVariableBase > 0) &&
>     > +          (VariableCacheContext->VariableRuntimeHobCache.Store != NULL))
>     > +      {
>     > +        VariableCache                                                     =
> (VARIABLE_STORE_HEADER
>     > *)(UINTN)mVariableModuleGlobal->VariableGlobal.HobVariableBase;
>     > +        VariableCacheContext-
> >VariableRuntimeHobCache.PendingUpdateLength
>     > = (UINT32)((UINTN)GetEndPointer (VariableCache) - (UINTN)VariableCache);
>     > +        CopyGuid (&(VariableCacheContext-
> >VariableRuntimeHobCache.Store-
>     > >Signature), &(VariableCache->Signature));
>     > +      }
>     > +
>     > +      VariableCache                                                          =
> (VARIABLE_STORE_HEADER
>     > *)(UINTN)mVariableModuleGlobal->VariableGlobal.VolatileVariableBase;
>     > +      VariableCacheContext-
>     > >VariableRuntimeVolatileCache.PendingUpdateOffset = 0;
>     > +      VariableCacheContext-
>     > >VariableRuntimeVolatileCache.PendingUpdateLength =
>     > (UINT32)((UINTN)GetEndPointer (VariableCache) - (UINTN)VariableCache);
>     > +      CopyGuid (&(VariableCacheContext-
> >VariableRuntimeVolatileCache.Store-
>     > >Signature), &(VariableCache->Signature));
>     > +
>     > +      VariableCache                                                    =
> (VARIABLE_STORE_HEADER
>     > *)(UINTN)mNvVariableCache;
>     > +      VariableCacheContext-
> >VariableRuntimeNvCache.PendingUpdateOffset = 0;
>     > +      VariableCacheContext-
> >VariableRuntimeNvCache.PendingUpdateLength =
>     > (UINT32)((UINTN)GetEndPointer (VariableCache) - (UINTN)VariableCache);
>     > +      CopyGuid (&(VariableCacheContext->VariableRuntimeNvCache.Store-
>     > >Signature), &(VariableCache->Signature));
>     > +
>     > +      *(VariableCacheContext->PendingUpdate)    = TRUE;
>     > +      *(VariableCacheContext->ReadLock)         = FALSE;
>     > +      *(VariableCacheContext->HobFlushComplete) = FALSE;
>     > +
>     > +      Status = EFI_SUCCESS;
>     > +      break;
>     > +    case SMM_VARIABLE_FUNCTION_SYNC_RUNTIME_CACHE:
>     > +      Status = FlushPendingRuntimeVariableCacheUpdates ();
>     > +      break;
>     > +    case SMM_VARIABLE_FUNCTION_GET_RUNTIME_CACHE_INFO:
>     > +      if (CommBufferPayloadSize < sizeof
>     > (SMM_VARIABLE_COMMUNICATE_GET_RUNTIME_CACHE_INFO)) {
>     > +        DEBUG ((DEBUG_ERROR, "GetRuntimeCacheInfo: SMM
> communication
>     > buffer size invalid!\n"));
>     > +        return EFI_SUCCESS;
>     > +      }
>     > +
>     > +      GetRuntimeCacheInfo =
>     > (SMM_VARIABLE_COMMUNICATE_GET_RUNTIME_CACHE_INFO
>     > *)SmmVariableFunctionHeader->Data;
>     > +
>     > +      if (mVariableModuleGlobal->VariableGlobal.HobVariableBase > 0) {
>     > +        VariableCache                            = (VARIABLE_STORE_HEADER
>     > *)(UINTN)mVariableModuleGlobal->VariableGlobal.HobVariableBase;
>     > +        GetRuntimeCacheInfo->TotalHobStorageSize = VariableCache->Size;
>     > +      } else {
>     > +        GetRuntimeCacheInfo->TotalHobStorageSize = 0;
>     > +      }
>     > +
>     > +      VariableCache                                   = (VARIABLE_STORE_HEADER
>     > *)(UINTN)mVariableModuleGlobal->VariableGlobal.VolatileVariableBase;
>     > +      GetRuntimeCacheInfo->TotalVolatileStorageSize   = VariableCache-
> >Size;
>     > +      VariableCache                                   = (VARIABLE_STORE_HEADER
>     > *)(UINTN)mNvVariableCache;
>     > +      GetRuntimeCacheInfo->TotalNvStorageSize         =
> (UINTN)VariableCache-
>     > >Size;
>     > +      GetRuntimeCacheInfo->AuthenticatedVariableUsage =
>     > mVariableModuleGlobal->VariableGlobal.AuthFormat;
>     > +
>     > +      Status = EFI_SUCCESS;
>     > +      break;
>     > +
>     > +    default:
>     > +      Status = EFI_UNSUPPORTED;
>     > +  }
>     > +
>     > +EXIT:
>     > +
>     > +  SmmVariableFunctionHeader->ReturnStatus = Status;
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  SMM END_OF_DXE protocol notification event handler.
>     > +
>     > +  @param  Protocol   Points to the protocol's unique identifier
>     > +  @param  Interface  Points to the interface instance
>     > +  @param  Handle     The handle on which the interface was installed
>     > +
>     > +  @retval EFI_SUCCESS   SmmEndOfDxeCallback runs successfully
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +SmmEndOfDxeCallback (
>     > +  IN CONST EFI_GUID  *Protocol,
>     > +  IN VOID            *Interface,
>     > +  IN EFI_HANDLE      Handle
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  DEBUG ((DEBUG_INFO, "[Variable]SMM_END_OF_DXE is signaled\n"));
>     > +  MorLockInitAtEndOfDxe ();
>     > +  Status = LockVariablePolicy ();
>     > +  ASSERT_EFI_ERROR (Status);
>     > +  mEndOfDxe = TRUE;
>     > +  VarCheckLibInitializeAtEndOfDxe (NULL);
>     > +  //
>     > +  // The initialization for variable quota.
>     > +  //
>     > +  InitializeVariableQuota ();
>     > +  if (PcdGetBool (PcdReclaimVariableSpaceAtEndOfDxe)) {
>     > +    ReclaimForOS ();
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Initializes variable write service for SMM.
>     > +
>     > +**/
>     > +VOID
>     > +VariableWriteServiceInitializeSmm (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  Status = ProtectedVariableLibWriteInit ();
>     > +  if (EFI_ERROR (Status) && (Status != EFI_UNSUPPORTED)) {
>     > +    DEBUG ((DEBUG_ERROR, "Variable protection service: write-init failed.
>     > Status = %r\n", Status));
>     > +    ASSERT_EFI_ERROR (Status);
>     > +    return;
>     > +  }
>     > +
>     > +  Status = VariableWriteServiceInitialize ();
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((DEBUG_ERROR, "Variable write service initialization failed.
> Status
>     > = %r\n", Status));
>     > +  }
>     > +
>     > +  //
>     > +  // Notify the variable wrapper driver the variable write service is ready
>     > +  //
>     > +  VariableNotifySmmWriteReady ();
>     > +}
>     > +
>     > +/**
>     > +  SMM Fault Tolerant Write protocol notification event handler.
>     > +
>     > +  Non-Volatile variable write may needs FTW protocol to reclaim when
>     > +  writting variable.
>     > +
>     > +  @param  Protocol   Points to the protocol's unique identifier
>     > +  @param  Interface  Points to the interface instance
>     > +  @param  Handle     The handle on which the interface was installed
>     > +
>     > +  @retval EFI_SUCCESS   SmmEventCallback runs successfully
>     > +  @retval EFI_NOT_FOUND The Fvb protocol for variable is not found.
>     > +
>     > + **/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +SmmFtwNotificationEvent (
>     > +  IN CONST EFI_GUID  *Protocol,
>     > +  IN VOID            *Interface,
>     > +  IN EFI_HANDLE      Handle
>     > +  )
>     > +{
>     > +  EFI_STATUS                              Status;
>     > +  EFI_PHYSICAL_ADDRESS                    VariableStoreBase;
>     > +  EFI_SMM_FIRMWARE_VOLUME_BLOCK_PROTOCOL  *FvbProtocol;
>     > +  EFI_SMM_FAULT_TOLERANT_WRITE_PROTOCOL   *FtwProtocol;
>     > +  EFI_PHYSICAL_ADDRESS                    NvStorageVariableBase;
>     > +  UINTN                                   FtwMaxBlockSize;
>     > +  UINT32                                  NvStorageVariableSize;
>     > +  UINT64                                  NvStorageVariableSize64;
>     > +
>     > +  if (mVariableModuleGlobal->FvbInstance != NULL) {
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  //
>     > +  // Ensure SMM FTW protocol is installed.
>     > +  //
>     > +  Status = GetFtwProtocol ((VOID **)&FtwProtocol);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return Status;
>     > +  }
>     > +
>     > +  Status = GetVariableFlashNvStorageInfo (&NvStorageVariableBase,
>     > &NvStorageVariableSize64);
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  Status = SafeUint64ToUint32 (NvStorageVariableSize64,
>     > &NvStorageVariableSize);
>     > +  // This driver currently assumes the size will be UINT32 so assert the value
> is
>     > safe for now.
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  ASSERT (NvStorageVariableBase != 0);
>     > +  VariableStoreBase = NvStorageVariableBase + mNvFvHeaderCache-
>     > >HeaderLength;
>     > +
>     > +  Status = FtwProtocol->GetMaxBlockSize (FtwProtocol,
> &FtwMaxBlockSize);
>     > +  if (!EFI_ERROR (Status)) {
>     > +    ASSERT (NvStorageVariableSize <= FtwMaxBlockSize);
>     > +  }
>     > +
>     > +  //
>     > +  // Let NonVolatileVariableBase point to flash variable store base directly
> after
>     > FTW ready.
>     > +  //
>     > +  mVariableModuleGlobal->VariableGlobal.NonVolatileVariableBase =
>     > VariableStoreBase;
>     > +
>     > +  //
>     > +  // Find the proper FVB protocol for variable.
>     > +  //
>     > +  Status = GetFvbInfoByAddress (NvStorageVariableBase, NULL,
> &FvbProtocol);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return EFI_NOT_FOUND;
>     > +  }
>     > +
>     > +  mVariableModuleGlobal->FvbInstance = FvbProtocol;
>     > +
>     > +  //
>     > +  // Initializes variable write service after FTW was ready.
>     > +  //
>     > +  VariableWriteServiceInitializeSmm ();
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Variable Driver main entry point. The Variable driver places the 4 EFI
>     > +  runtime services in the EFI System Table and installs arch protocols
>     > +  for variable read and write services being available. It also registers
>     > +  a notification function for an EVT_SIGNAL_VIRTUAL_ADDRESS_CHANGE
>     > event.
>     > +
>     > +  @retval EFI_SUCCESS       Variable service successfully initialized.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +MmVariableServiceInitialize (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS                     Status;
>     > +  EFI_HANDLE                     VariableHandle;
>     > +  VOID                           *SmmFtwRegistration;
>     > +  VOID                           *SmmEndOfDxeRegistration;
>     > +  PROTECTED_VARIABLE_CONTEXT_IN  ContextIn;
>     > +
>     > +  //
>     > +  // Initialize protected variable service, if enabled.
>     > +  //
>     > +  ContextIn.StructSize    = sizeof (ContextIn);
>     > +  ContextIn.StructVersion =
>     > PROTECTED_VARIABLE_CONTEXT_IN_STRUCT_VERSION;
>     > +
>     > +  ContextIn.FindVariableSmm     = NULL;
>     > +  ContextIn.GetVariableInfo     = GetVariableInfo;
>     > +  ContextIn.GetNextVariableInfo = GetNextVariableInfo;
>     > +  ContextIn.UpdateVariableStore = VariableExLibUpdateNvVariable;
>     > +  ContextIn.UpdateVariable      = VariableExLibUpdateVariable;
>     > +
>     > +  ContextIn.MaxVariableSize     = (UINT32)GetMaxVariableSize ();
>     > +  ContextIn.VariableServiceUser = FromSmmModule;
>     > +
>     > +  Status = ProtectedVariableLibInitialize (&ContextIn);
>     > +  if (EFI_ERROR (Status) && (Status != EFI_UNSUPPORTED)) {
>     > +    ASSERT_EFI_ERROR (Status);
>     > +    return Status;
>     > +  }
>     > +
>     > +  //
>     > +  // Variable initialize.
>     > +  //
>     > +  Status = VariableCommonInitialize ();
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  //
>     > +  // Install the Smm Variable Protocol on a new handle.
>     > +  //
>     > +  VariableHandle = NULL;
>     > +  Status         = gMmst->MmInstallProtocolInterface (
>     > +                            &VariableHandle,
>     > +                            &gEfiSmmVariableProtocolGuid,
>     > +                            EFI_NATIVE_INTERFACE,
>     > +                            &gSmmVariable
>     > +                            );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  Status = gMmst->MmInstallProtocolInterface (
>     > +                    &VariableHandle,
>     > +                    &gEdkiiSmmVarCheckProtocolGuid,
>     > +                    EFI_NATIVE_INTERFACE,
>     > +                    &mSmmVarCheck
>     > +                    );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  mVariableBufferPayloadSize =  GetMaxVariableSize () +
>     > +                               OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY,
> Name) -
>     > +                               GetVariableHeaderSize (mVariableModuleGlobal-
>     > >VariableGlobal.AuthFormat);
>     > +
>     > +  Status = gMmst->MmAllocatePool (
>     > +                    EfiRuntimeServicesData,
>     > +                    mVariableBufferPayloadSize,
>     > +                    (VOID **)&mVariableBufferPayload
>     > +                    );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  ///
>     > +  /// Register SMM variable SMI handler
>     > +  ///
>     > +  VariableHandle = NULL;
>     > +  Status         = gMmst->MmiHandlerRegister (SmmVariableHandler,
>     > &gEfiSmmVariableProtocolGuid, &VariableHandle);
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  //
>     > +  // Notify the variable wrapper driver the variable service is ready
>     > +  //
>     > +  VariableNotifySmmReady ();
>     > +
>     > +  //
>     > +  // Register EFI_SMM_END_OF_DXE_PROTOCOL_GUID notify function.
>     > +  //
>     > +  Status = gMmst->MmRegisterProtocolNotify (
>     > +                    &gEfiMmEndOfDxeProtocolGuid,
>     > +                    SmmEndOfDxeCallback,
>     > +                    &SmmEndOfDxeRegistration
>     > +                    );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  if (!PcdGetBool (PcdEmuVariableNvModeEnable)) {
>     > +    //
>     > +    // Register FtwNotificationEvent () notify function.
>     > +    //
>     > +    Status = gMmst->MmRegisterProtocolNotify (
>     > +                      &gEfiSmmFaultTolerantWriteProtocolGuid,
>     > +                      SmmFtwNotificationEvent,
>     > +                      &SmmFtwRegistration
>     > +                      );
>     > +    ASSERT_EFI_ERROR (Status);
>     > +
>     > +    SmmFtwNotificationEvent (NULL, NULL, NULL);
>     > +  } else {
>     > +    //
>     > +    // Emulated non-volatile variable mode does not depend on FVB and
> FTW.
>     > +    //
>     > +    VariableWriteServiceInitializeSmm ();
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxe.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxe.c
>     > new file mode 100644
>     > index 000000000000..b88f75370ad8
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxe.c
>     > @@ -0,0 +1,1895 @@
>     > +/** @file
>     > +  Implement all four UEFI Runtime Variable services for the nonvolatile
>     > +  and volatile storage space and install variable architecture protocol
>     > +  based on SMM variable module.
>     > +
>     > +  Caution: This module requires additional review when modified.
>     > +  This driver will have external input - variable data.
>     > +  This external input must be validated carefully to avoid security issue like
>     > +  buffer overflow, integer overflow.
>     > +
>     > +  RuntimeServiceGetVariable() and RuntimeServiceSetVariable() are external
> API
>     > +  to receive data buffer. The size should be checked carefully.
>     > +
>     > +  InitCommunicateBuffer() is really function to check the variable data size.
>     > +
>     > +Copyright (c) 2010 - 2022, Intel Corporation. All rights reserved.<BR>
>     > +Copyright (c) Microsoft Corporation.<BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +#include <PiDxe.h>
>     > +#include <Protocol/VariableWrite.h>
>     > +#include <Protocol/Variable.h>
>     > +#include <Protocol/MmCommunication2.h>
>     > +#include <Protocol/SmmVariable.h>
>     > +#include <Protocol/VariableLock.h>
>     > +#include <Protocol/VarCheck.h>
>     > +
>     > +#include <Library/UefiBootServicesTableLib.h>
>     > +#include <Library/UefiRuntimeServicesTableLib.h>
>     > +#include <Library/MemoryAllocationLib.h>
>     > +#include <Library/UefiDriverEntryPoint.h>
>     > +#include <Library/UefiRuntimeLib.h>
>     > +#include <Library/BaseMemoryLib.h>
>     > +#include <Library/DebugLib.h>
>     > +#include <Library/UefiLib.h>
>     > +#include <Library/BaseLib.h>
>     > +#include <Library/MmUnblockMemoryLib.h>
>     > +
>     > +#include <Guid/EventGroup.h>
>     > +#include <Guid/SmmVariableCommon.h>
>     > +
>     > +#include "PrivilegePolymorphic.h"
>     > +#include "Variable.h"
>     > +#include "VariableParsing.h"
>     > +
>     > +EFI_HANDLE                      mHandle                              = NULL;
>     > +EFI_SMM_VARIABLE_PROTOCOL       *mSmmVariable                        = NULL;
>     > +EFI_EVENT                       mVirtualAddressChangeEvent           = NULL;
>     > +EFI_MM_COMMUNICATION2_PROTOCOL  *mMmCommunication2
> =
>     > NULL;
>     > +UINT8                           *mVariableBuffer                     = NULL;
>     > +UINT8                           *mVariableBufferPhysical             = NULL;
>     > +VARIABLE_INFO_ENTRY             *mVariableInfo                       = NULL;
>     > +VARIABLE_STORE_HEADER           *mVariableRuntimeHobCacheBuffer      =
>     > NULL;
>     > +VARIABLE_STORE_HEADER           *mVariableRuntimeNvCacheBuffer       =
> NULL;
>     > +VARIABLE_STORE_HEADER           *mVariableRuntimeVolatileCacheBuffer =
>     > NULL;
>     > +VARIABLE_STORE_HEADER           *mNvVariableCache                    = NULL;
>     > +VARIABLE_MODULE_GLOBAL          *mVariableModuleGlobal               =
> NULL;
>     > +UINTN                           mVariableBufferSize;
>     > +UINTN                           mVariableRuntimeHobCacheBufferSize;
>     > +UINTN                           mVariableRuntimeNvCacheBufferSize;
>     > +UINTN                           mVariableRuntimeVolatileCacheBufferSize;
>     > +UINTN                           mVariableBufferPayloadSize;
>     > +BOOLEAN                         mVariableRuntimeCachePendingUpdate;
>     > +BOOLEAN                         mVariableRuntimeCacheReadLock;
>     > +BOOLEAN                         mVariableAuthFormat;
>     > +BOOLEAN                         mHobFlushComplete;
>     > +EFI_LOCK                        mVariableServicesLock;
>     > +EDKII_VARIABLE_LOCK_PROTOCOL    mVariableLock;
>     > +EDKII_VAR_CHECK_PROTOCOL        mVarCheck;
>     > +
>     > +/**
>     > +  The logic to initialize the VariablePolicy engine is in its own file.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariablePolicySmmDxeMain (
>     > +  IN    EFI_HANDLE        ImageHandle,
>     > +  IN    EFI_SYSTEM_TABLE  *SystemTable
>     > +  );
>     > +
>     > +/**
>     > +  Some Secure Boot Policy Variable may update following other variable
>     > changes(SecureBoot follows PK change, etc).
>     > +  Record their initial State when variable write service is ready.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +RecordSecureBootPolicyVarData (
>     > +  VOID
>     > +  );
>     > +
>     > +/**
>     > +  Acquires lock only at boot time. Simply returns at runtime.
>     > +
>     > +  This is a temperary function that will be removed when
>     > +  EfiAcquireLock() in UefiLib can handle the call in UEFI
>     > +  Runtimer driver in RT phase.
>     > +  It calls EfiAcquireLock() at boot time, and simply returns
>     > +  at runtime.
>     > +
>     > +  @param  Lock         A pointer to the lock to acquire.
>     > +
>     > +**/
>     > +VOID
>     > +AcquireLockOnlyAtBootTime (
>     > +  IN EFI_LOCK  *Lock
>     > +  )
>     > +{
>     > +  if (!EfiAtRuntime ()) {
>     > +    EfiAcquireLock (Lock);
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Releases lock only at boot time. Simply returns at runtime.
>     > +
>     > +  This is a temperary function which will be removed when
>     > +  EfiReleaseLock() in UefiLib can handle the call in UEFI
>     > +  Runtimer driver in RT phase.
>     > +  It calls EfiReleaseLock() at boot time and simply returns
>     > +  at runtime.
>     > +
>     > +  @param  Lock         A pointer to the lock to release.
>     > +
>     > +**/
>     > +VOID
>     > +ReleaseLockOnlyAtBootTime (
>     > +  IN EFI_LOCK  *Lock
>     > +  )
>     > +{
>     > +  if (!EfiAtRuntime ()) {
>     > +    EfiReleaseLock (Lock);
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Return TRUE if ExitBootServices () has been called.
>     > +
>     > +  @retval TRUE If ExitBootServices () has been called. FALSE if
> ExitBootServices
>     > () has not been called.
>     > +**/
>     > +BOOLEAN
>     > +AtRuntime (
>     > +  VOID
>     > +  )
>     > +{
>     > +  return EfiAtRuntime ();
>     > +}
>     > +
>     > +/**
>     > +  Initialize the variable cache buffer as an empty variable store.
>     > +
>     > +  @param[out]     VariableCacheBuffer     A pointer to pointer of a cache
>     > variable store.
>     > +  @param[in,out]  TotalVariableCacheSize  On input, the minimum size
> needed
>     > for the UEFI variable store cache
>     > +                                          buffer that is allocated. On output, the actual size of
> the
>     > buffer allocated.
>     > +                                          If TotalVariableCacheSize is zero, a buffer will not
> be
>     > allocated and the
>     > +                                          function will return with EFI_SUCCESS.
>     > +
>     > +  @retval EFI_SUCCESS             The variable cache was allocated and
> initialized
>     > successfully.
>     > +  @retval EFI_INVALID_PARAMETER   A given pointer is NULL or an invalid
>     > variable store size was specified.
>     > +  @retval EFI_OUT_OF_RESOURCES    Insufficient resources are available to
>     > allocate the variable store cache buffer.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +InitVariableCache (
>     > +  OUT    VARIABLE_STORE_HEADER  **VariableCacheBuffer,
>     > +  IN OUT UINTN                  *TotalVariableCacheSize
>     > +  )
>     > +{
>     > +  VARIABLE_STORE_HEADER  *VariableCacheStorePtr;
>     > +  EFI_STATUS             Status;
>     > +
>     > +  if (TotalVariableCacheSize == NULL) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if (*TotalVariableCacheSize == 0) {
>     > +    return EFI_SUCCESS;
>     > +  }
>     > +
>     > +  if ((VariableCacheBuffer == NULL) || (*TotalVariableCacheSize < sizeof
>     > (VARIABLE_STORE_HEADER))) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  *TotalVariableCacheSize = ALIGN_VALUE (*TotalVariableCacheSize, sizeof
>     > (UINT32));
>     > +
>     > +  //
>     > +  // Allocate NV Storage Cache and initialize it to all 1's (like an erased FV)
>     > +  //
>     > +  *VariableCacheBuffer =  (VARIABLE_STORE_HEADER
> *)AllocateRuntimePages
>     > (
>     > +                                                     EFI_SIZE_TO_PAGES (*TotalVariableCacheSize)
>     > +                                                     );
>     > +  if (*VariableCacheBuffer == NULL) {
>     > +    return EFI_OUT_OF_RESOURCES;
>     > +  }
>     > +
>     > +  //
>     > +  // Request to unblock the newly allocated cache region to be accessible
> from
>     > inside MM
>     > +  //
>     > +  Status = MmUnblockMemoryRequest (
>     > +             (EFI_PHYSICAL_ADDRESS)(UINTN)*VariableCacheBuffer,
>     > +             EFI_SIZE_TO_PAGES (*TotalVariableCacheSize)
>     > +             );
>     > +  if ((Status != EFI_UNSUPPORTED) && EFI_ERROR (Status)) {
>     > +    return Status;
>     > +  }
>     > +
>     > +  VariableCacheStorePtr = *VariableCacheBuffer;
>     > +  SetMem32 ((VOID *)VariableCacheStorePtr, *TotalVariableCacheSize,
>     > (UINT32)0xFFFFFFFF);
>     > +
>     > +  ZeroMem ((VOID *)VariableCacheStorePtr, sizeof
>     > (VARIABLE_STORE_HEADER));
>     > +  VariableCacheStorePtr->Size   = (UINT32)*TotalVariableCacheSize;
>     > +  VariableCacheStorePtr->Format = VARIABLE_STORE_FORMATTED;
>     > +  VariableCacheStorePtr->State  = VARIABLE_STORE_HEALTHY;
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Initialize the communicate buffer using DataSize and Function.
>     > +
>     > +  The communicate size is: SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE +
>     > +  DataSize.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  The data size external input, so this function will validate it carefully to
> avoid
>     > buffer overflow.
>     > +
>     > +  @param[out]      DataPtr          Points to the data in the communicate
> buffer.
>     > +  @param[in]       DataSize         The data size to send to SMM.
>     > +  @param[in]       Function         The function number to initialize the
>     > communicate header.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER     The data size is too big.
>     > +  @retval EFI_SUCCESS               Find the specified variable.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +InitCommunicateBuffer (
>     > +  OUT     VOID   **DataPtr OPTIONAL,
>     > +  IN      UINTN  DataSize,
>     > +  IN      UINTN  Function
>     > +  )
>     > +{
>     > +  EFI_MM_COMMUNICATE_HEADER        *SmmCommunicateHeader;
>     > +  SMM_VARIABLE_COMMUNICATE_HEADER
> *SmmVariableFunctionHeader;
>     > +
>     > +  if (DataSize + SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE > mVariableBufferSize) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  SmmCommunicateHeader = (EFI_MM_COMMUNICATE_HEADER
>     > *)mVariableBuffer;
>     > +  CopyGuid (&SmmCommunicateHeader->HeaderGuid,
>     > &gEfiSmmVariableProtocolGuid);
>     > +  SmmCommunicateHeader->MessageLength = DataSize +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE;
>     > +
>     > +  SmmVariableFunctionHeader           =
>     > (SMM_VARIABLE_COMMUNICATE_HEADER *)SmmCommunicateHeader-
> >Data;
>     > +  SmmVariableFunctionHeader->Function = Function;
>     > +  if (DataPtr != NULL) {
>     > +    *DataPtr = SmmVariableFunctionHeader->Data;
>     > +  }
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > +
>     > +/**
>     > +  Send the data in communicate buffer to SMM.
>     > +
>     > +  @param[in]   DataSize               This size of the function header and the
> data.
>     > +
>     > +  @retval      EFI_SUCCESS            Success is returned from the functin in
> SMM.
>     > +  @retval      Others                 Failure is returned from the function in SMM.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +SendCommunicateBuffer (
>     > +  IN      UINTN  DataSize
>     > +  )
>     > +{
>     > +  EFI_STATUS                       Status;
>     > +  UINTN                            CommSize;
>     > +  EFI_MM_COMMUNICATE_HEADER        *SmmCommunicateHeader;
>     > +  SMM_VARIABLE_COMMUNICATE_HEADER
> *SmmVariableFunctionHeader;
>     > +
>     > +  CommSize = DataSize + SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE;
>     > +  Status   = mMmCommunication2->Communicate (
>     > +                                  mMmCommunication2,
>     > +                                  mVariableBufferPhysical,
>     > +                                  mVariableBuffer,
>     > +                                  &CommSize
>     > +                                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  SmmCommunicateHeader      = (EFI_MM_COMMUNICATE_HEADER
>     > *)mVariableBuffer;
>     > +  SmmVariableFunctionHeader =
> (SMM_VARIABLE_COMMUNICATE_HEADER
>     > *)SmmCommunicateHeader->Data;
>     > +  return SmmVariableFunctionHeader->ReturnStatus;
>     > +}
>     > +
>     > +/**
>     > +  Mark a variable that will become read-only after leaving the DXE phase of
>     > execution.
>     > +
>     > +  @param[in] This          The VARIABLE_LOCK_PROTOCOL instance.
>     > +  @param[in] VariableName  A pointer to the variable name that will be
> made
>     > read-only subsequently.
>     > +  @param[in] VendorGuid    A pointer to the vendor GUID that will be made
>     > read-only subsequently.
>     > +
>     > +  @retval EFI_SUCCESS           The variable specified by the VariableName
> and
>     > the VendorGuid was marked
>     > +                                as pending to be read-only.
>     > +  @retval EFI_INVALID_PARAMETER VariableName or VendorGuid is NULL.
>     > +                                Or VariableName is an empty string.
>     > +  @retval EFI_ACCESS_DENIED     EFI_END_OF_DXE_EVENT_GROUP_GUID
> or
>     > EFI_EVENT_GROUP_READY_TO_BOOT has
>     > +                                already been signaled.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough resource to hold
> the
>     > lock request.
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableLockRequestToLock (
>     > +  IN CONST EDKII_VARIABLE_LOCK_PROTOCOL  *This,
>     > +  IN       CHAR16                        *VariableName,
>     > +  IN       EFI_GUID                      *VendorGuid
>     > +  )
>     > +{
>     > +  EFI_STATUS                              Status;
>     > +  UINTN                                   VariableNameSize;
>     > +  UINTN                                   PayloadSize;
>     > +  SMM_VARIABLE_COMMUNICATE_LOCK_VARIABLE  *VariableToLock;
>     > +
>     > +  if ((VariableName == NULL) || (VariableName[0] == 0) || (VendorGuid ==
>     > NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  VariableNameSize = StrSize (VariableName);
>     > +  VariableToLock   = NULL;
>     > +
>     > +  //
>     > +  // If VariableName exceeds SMM payload limit. Return failure
>     > +  //
>     > +  if (VariableNameSize > mVariableBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_LOCK_VARIABLE, Name)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableServicesLock);
>     > +
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + PayloadSize.
>     > +  //
>     > +  PayloadSize = OFFSET_OF
> (SMM_VARIABLE_COMMUNICATE_LOCK_VARIABLE,
>     > Name) + VariableNameSize;
>     > +  Status      = InitCommunicateBuffer ((VOID **)&VariableToLock,
> PayloadSize,
>     > SMM_VARIABLE_FUNCTION_LOCK_VARIABLE);
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  ASSERT (VariableToLock != NULL);
>     > +
>     > +  CopyGuid (&VariableToLock->Guid, VendorGuid);
>     > +  VariableToLock->NameSize = VariableNameSize;
>     > +  CopyMem (VariableToLock->Name, VariableName, VariableToLock-
>     > >NameSize);
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  Status = SendCommunicateBuffer (PayloadSize);
>     > +
>     > +Done:
>     > +  ReleaseLockOnlyAtBootTime (&mVariableServicesLock);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Register SetVariable check handler.
>     > +
>     > +  @param[in] Handler            Pointer to check handler.
>     > +
>     > +  @retval EFI_SUCCESS           The SetVariable check handler was registered
>     > successfully.
>     > +  @retval EFI_INVALID_PARAMETER Handler is NULL.
>     > +  @retval EFI_ACCESS_DENIED     EFI_END_OF_DXE_EVENT_GROUP_GUID
> or
>     > EFI_EVENT_GROUP_READY_TO_BOOT has
>     > +                                already been signaled.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough resource for the
>     > SetVariable check handler register request.
>     > +  @retval EFI_UNSUPPORTED       This interface is not implemented.
>     > +                                For example, it is unsupported in VarCheck protocol if
> both
>     > VarCheck and SmmVarCheck protocols are present.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VarCheckRegisterSetVariableCheckHandler (
>     > +  IN VAR_CHECK_SET_VARIABLE_CHECK_HANDLER  Handler
>     > +  )
>     > +{
>     > +  return EFI_UNSUPPORTED;
>     > +}
>     > +
>     > +/**
>     > +  Variable property set.
>     > +
>     > +  @param[in] Name               Pointer to the variable name.
>     > +  @param[in] Guid               Pointer to the vendor GUID.
>     > +  @param[in] VariableProperty   Pointer to the input variable property.
>     > +
>     > +  @retval EFI_SUCCESS           The property of variable specified by the
> Name
>     > and Guid was set successfully.
>     > +  @retval EFI_INVALID_PARAMETER Name, Guid or VariableProperty is
> NULL,
>     > or Name is an empty string,
>     > +                                or the fields of VariableProperty are not valid.
>     > +  @retval EFI_ACCESS_DENIED     EFI_END_OF_DXE_EVENT_GROUP_GUID
> or
>     > EFI_EVENT_GROUP_READY_TO_BOOT has
>     > +                                already been signaled.
>     > +  @retval EFI_OUT_OF_RESOURCES  There is not enough resource for the
>     > variable property set request.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VarCheckVariablePropertySet (
>     > +  IN CHAR16                       *Name,
>     > +  IN EFI_GUID                     *Guid,
>     > +  IN VAR_CHECK_VARIABLE_PROPERTY  *VariableProperty
>     > +  )
>     > +{
>     > +  EFI_STATUS                                            Status;
>     > +  UINTN                                                 VariableNameSize;
>     > +  UINTN                                                 PayloadSize;
>     > +  SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY
>     > *CommVariableProperty;
>     > +
>     > +  if ((Name == NULL) || (Name[0] == 0) || (Guid == NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if (VariableProperty == NULL) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if (VariableProperty->Revision !=
>     > VAR_CHECK_VARIABLE_PROPERTY_REVISION) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  VariableNameSize     = StrSize (Name);
>     > +  CommVariableProperty = NULL;
>     > +
>     > +  //
>     > +  // If VariableName exceeds SMM payload limit. Return failure
>     > +  //
>     > +  if (VariableNameSize > mVariableBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY,
> Name))
>     > {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableServicesLock);
>     > +
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + PayloadSize.
>     > +  //
>     > +  PayloadSize = OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY,
> Name) +
>     > VariableNameSize;
>     > +  Status      = InitCommunicateBuffer ((VOID **)&CommVariableProperty,
>     > PayloadSize,
>     > SMM_VARIABLE_FUNCTION_VAR_CHECK_VARIABLE_PROPERTY_SET);
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  ASSERT (CommVariableProperty != NULL);
>     > +
>     > +  CopyGuid (&CommVariableProperty->Guid, Guid);
>     > +  CopyMem (&CommVariableProperty->VariableProperty, VariableProperty,
>     > sizeof (*VariableProperty));
>     > +  CommVariableProperty->NameSize = VariableNameSize;
>     > +  CopyMem (CommVariableProperty->Name, Name,
> CommVariableProperty-
>     > >NameSize);
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  Status = SendCommunicateBuffer (PayloadSize);
>     > +
>     > +Done:
>     > +  ReleaseLockOnlyAtBootTime (&mVariableServicesLock);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Variable property get.
>     > +
>     > +  @param[in]  Name              Pointer to the variable name.
>     > +  @param[in]  Guid              Pointer to the vendor GUID.
>     > +  @param[out] VariableProperty  Pointer to the output variable property.
>     > +
>     > +  @retval EFI_SUCCESS           The property of variable specified by the
> Name
>     > and Guid was got successfully.
>     > +  @retval EFI_INVALID_PARAMETER Name, Guid or VariableProperty is
> NULL,
>     > or Name is an empty string.
>     > +  @retval EFI_NOT_FOUND         The property of variable specified by the
> Name
>     > and Guid was not found.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VarCheckVariablePropertyGet (
>     > +  IN CHAR16                        *Name,
>     > +  IN EFI_GUID                      *Guid,
>     > +  OUT VAR_CHECK_VARIABLE_PROPERTY  *VariableProperty
>     > +  )
>     > +{
>     > +  EFI_STATUS                                            Status;
>     > +  UINTN                                                 VariableNameSize;
>     > +  UINTN                                                 PayloadSize;
>     > +  SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY
>     > *CommVariableProperty;
>     > +
>     > +  if ((Name == NULL) || (Name[0] == 0) || (Guid == NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if (VariableProperty == NULL) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  VariableNameSize     = StrSize (Name);
>     > +  CommVariableProperty = NULL;
>     > +
>     > +  //
>     > +  // If VariableName exceeds SMM payload limit. Return failure
>     > +  //
>     > +  if (VariableNameSize > mVariableBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY,
> Name))
>     > {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableServicesLock);
>     > +
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + PayloadSize.
>     > +  //
>     > +  PayloadSize = OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_VAR_CHECK_VARIABLE_PROPERTY,
> Name) +
>     > VariableNameSize;
>     > +  Status      = InitCommunicateBuffer ((VOID **)&CommVariableProperty,
>     > PayloadSize,
>     > SMM_VARIABLE_FUNCTION_VAR_CHECK_VARIABLE_PROPERTY_GET);
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  ASSERT (CommVariableProperty != NULL);
>     > +
>     > +  CopyGuid (&CommVariableProperty->Guid, Guid);
>     > +  CommVariableProperty->NameSize = VariableNameSize;
>     > +  CopyMem (CommVariableProperty->Name, Name,
> CommVariableProperty-
>     > >NameSize);
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  Status = SendCommunicateBuffer (PayloadSize);
>     > +  if (Status == EFI_SUCCESS) {
>     > +    CopyMem (VariableProperty, &CommVariableProperty-
> >VariableProperty,
>     > sizeof (*VariableProperty));
>     > +  }
>     > +
>     > +Done:
>     > +  ReleaseLockOnlyAtBootTime (&mVariableServicesLock);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Signals SMM to synchronize any pending variable updates with the
> runtime
>     > cache(s).
>     > +
>     > +**/
>     > +VOID
>     > +SyncRuntimeCache (
>     > +  VOID
>     > +  )
>     > +{
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE.
>     > +  //
>     > +  InitCommunicateBuffer (NULL, 0,
>     > SMM_VARIABLE_FUNCTION_SYNC_RUNTIME_CACHE);
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  SendCommunicateBuffer (0);
>     > +}
>     > +
>     > +/**
>     > +  Check whether a SMI must be triggered to retrieve pending cache updates.
>     > +
>     > +  If the variable HOB was finished being flushed since the last check for a
>     > runtime cache update, this function
>     > +  will prevent the HOB cache from being used for future runtime cache hits.
>     > +
>     > +**/
>     > +VOID
>     > +CheckForRuntimeCacheSync (
>     > +  VOID
>     > +  )
>     > +{
>     > +  if (mVariableRuntimeCachePendingUpdate) {
>     > +    SyncRuntimeCache ();
>     > +  }
>     > +
>     > +  ASSERT (!mVariableRuntimeCachePendingUpdate);
>     > +
>     > +  //
>     > +  // The HOB variable data may have finished being flushed in the runtime
> cache
>     > sync update
>     > +  //
>     > +  if (mHobFlushComplete && (mVariableRuntimeHobCacheBuffer != NULL))
> {
>     > +    if (!EfiAtRuntime ()) {
>     > +      FreePages (mVariableRuntimeHobCacheBuffer, EFI_SIZE_TO_PAGES
>     > (mVariableRuntimeHobCacheBufferSize));
>     > +    }
>     > +
>     > +    mVariableRuntimeHobCacheBuffer = NULL;
>     > +  }
>     > +}
>     > +
>     > +/**
>     > +  Finds the given variable in a runtime cache variable store.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  The data size is external input, so this function will validate it carefully to
>     > avoid buffer overflow.
>     > +
>     > +  @param[in]      VariableName       Name of Variable to be found.
>     > +  @param[in]      VendorGuid         Variable vendor GUID.
>     > +  @param[out]     Attributes         Attribute value of the variable found.
>     > +  @param[in, out] DataSize           Size of Data found. If size is less than the
>     > +                                     data, this value contains the required size.
>     > +  @param[out]     Data               Data pointer.
>     > +
>     > +  @retval EFI_SUCCESS                Found the specified variable.
>     > +  @retval EFI_INVALID_PARAMETER      Invalid parameter.
>     > +  @retval EFI_NOT_FOUND              The specified variable could not be
> found.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +FindVariableInRuntimeCache (
>     > +  IN      CHAR16    *VariableName,
>     > +  IN      EFI_GUID  *VendorGuid,
>     > +  OUT     UINT32    *Attributes OPTIONAL,
>     > +  IN OUT  UINTN     *DataSize,
>     > +  OUT     VOID      *Data OPTIONAL
>     > +  )
>     > +{
>     > +  EFI_STATUS              Status;
>     > +  VARIABLE_POINTER_TRACK  RtPtrTrack;
>     > +  VARIABLE_STORE_TYPE     StoreType;
>     > +  VARIABLE_STORE_HEADER   *VariableStoreList[VariableStoreTypeMax];
>     > +
>     > +  Status = EFI_NOT_FOUND;
>     > +
>     > +  if ((VariableName == NULL) || (VendorGuid == NULL) || (DataSize ==
> NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  ZeroMem (&RtPtrTrack, sizeof (RtPtrTrack));
>     > +
>     > +  //
>     > +  // The UEFI specification restricts Runtime Services callers from invoking
> the
>     > same or certain other Runtime Service
>     > +  // functions prior to completion and return from a previous Runtime
> Service
>     > call. These restrictions prevent
>     > +  // a GetVariable () or GetNextVariable () call from being issued until a prior
> call
>     > has returned. The runtime
>     > +  // cache read lock should always be free when entering this function.
>     > +  //
>     > +  ASSERT (!mVariableRuntimeCacheReadLock);
>     > +
>     > +  mVariableRuntimeCacheReadLock = TRUE;
>     > +  CheckForRuntimeCacheSync ();
>     > +
>     > +  if (!mVariableRuntimeCachePendingUpdate) {
>     > +    //
>     > +    // 0: Volatile, 1: HOB, 2: Non-Volatile.
>     > +    // The index and attributes mapping must be kept in this order as
>     > FindVariable
>     > +    // makes use of this mapping to implement search algorithm.
>     > +    //
>     > +    VariableStoreList[VariableStoreTypeVolatile] =
>     > mVariableRuntimeVolatileCacheBuffer;
>     > +    VariableStoreList[VariableStoreTypeHob]      =
>     > mVariableRuntimeHobCacheBuffer;
>     > +    VariableStoreList[VariableStoreTypeNv]       =
>     > mVariableRuntimeNvCacheBuffer;
>     > +
>     > +    for (StoreType = (VARIABLE_STORE_TYPE)0; StoreType <
>     > VariableStoreTypeMax; StoreType++) {
>     > +      if (VariableStoreList[StoreType] == NULL) {
>     > +        continue;
>     > +      }
>     > +
>     > +      RtPtrTrack.StartPtr = GetStartPointer (VariableStoreList[StoreType]);
>     > +      RtPtrTrack.EndPtr   = GetEndPointer (VariableStoreList[StoreType]);
>     > +      RtPtrTrack.Volatile = (BOOLEAN)(StoreType ==
> VariableStoreTypeVolatile);
>     > +
>     > +      Status = FindVariableEx (VariableName, VendorGuid, FALSE,
> &RtPtrTrack,
>     > mVariableAuthFormat);
>     > +      if (!EFI_ERROR (Status)) {
>     > +        break;
>     > +      }
>     > +    }
>     > +
>     > +    if (!EFI_ERROR (Status)) {
>     > +      //
>     > +      // Get data size
>     > +      //
>     > +      if (!RtPtrTrack.Volatile) {
>     > +        //
>     > +        // Currently only non-volatile variable needs protection.
>     > +        //
>     > +        Status = ProtectedVariableLibGetByBuffer (RtPtrTrack.CurrPtr, Data,
>     > (UINT32 *)DataSize, mVariableAuthFormat);
>     > +      }
>     > +
>     > +      if (RtPtrTrack.Volatile || (Status == EFI_UNSUPPORTED)) {
>     > +        Status = GetVariableData (RtPtrTrack.CurrPtr, Data, (UINT32
> *)DataSize,
>     > mVariableAuthFormat);
>     > +      }
>     > +
>     > +      if (!EFI_ERROR (Status)) {
>     > +        UpdateVariableInfo (VariableName, VendorGuid, RtPtrTrack.Volatile,
>     > TRUE, FALSE, FALSE, FALSE, &mVariableInfo);
>     > +      }
>     > +    }
>     > +  }
>     > +
>     > +  if ((Status == EFI_SUCCESS) || (Status == EFI_BUFFER_TOO_SMALL)) {
>     > +    if ((Attributes != NULL) && (RtPtrTrack.CurrPtr != NULL)) {
>     > +      *Attributes = RtPtrTrack.CurrPtr->Attributes;
>     > +    }
>     > +  }
>     > +
>     > +  mVariableRuntimeCacheReadLock = FALSE;
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Finds the given variable in a variable store in SMM.
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  The data size is external input, so this function will validate it carefully to
>     > avoid buffer overflow.
>     > +
>     > +  @param[in]      VariableName       Name of Variable to be found.
>     > +  @param[in]      VendorGuid         Variable vendor GUID.
>     > +  @param[out]     Attributes         Attribute value of the variable found.
>     > +  @param[in, out] DataSize           Size of Data found. If size is less than the
>     > +                                     data, this value contains the required size.
>     > +  @param[out]     Data               Data pointer.
>     > +
>     > +  @retval EFI_SUCCESS                Found the specified variable.
>     > +  @retval EFI_INVALID_PARAMETER      Invalid parameter.
>     > +  @retval EFI_NOT_FOUND              The specified variable could not be
> found.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +FindVariableInSmm (
>     > +  IN      CHAR16    *VariableName,
>     > +  IN      EFI_GUID  *VendorGuid,
>     > +  OUT     UINT32    *Attributes OPTIONAL,
>     > +  IN OUT  UINTN     *DataSize,
>     > +  OUT     VOID      *Data OPTIONAL
>     > +  )
>     > +{
>     > +  EFI_STATUS                                Status;
>     > +  UINTN                                     PayloadSize;
>     > +  SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE
> *SmmVariableHeader;
>     > +  UINTN                                     TempDataSize;
>     > +  UINTN                                     VariableNameSize;
>     > +
>     > +  if ((VariableName == NULL) || (VendorGuid == NULL) || (DataSize ==
> NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  TempDataSize      = *DataSize;
>     > +  VariableNameSize  = StrSize (VariableName);
>     > +  SmmVariableHeader = NULL;
>     > +
>     > +  //
>     > +  // If VariableName exceeds SMM payload limit. Return failure
>     > +  //
>     > +  if (VariableNameSize > mVariableBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + PayloadSize.
>     > +  //
>     > +  if (TempDataSize > mVariableBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name) -
>     > VariableNameSize) {
>     > +    //
>     > +    // If output data buffer exceed SMM payload limit. Trim output buffer to
>     > SMM payload size
>     > +    //
>     > +    TempDataSize = mVariableBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name) -
>     > VariableNameSize;
>     > +  }
>     > +
>     > +  PayloadSize = OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name) +
>     > VariableNameSize + TempDataSize;
>     > +
>     > +  Status = InitCommunicateBuffer ((VOID **)&SmmVariableHeader,
> PayloadSize,
>     > SMM_VARIABLE_FUNCTION_GET_VARIABLE);
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  ASSERT (SmmVariableHeader != NULL);
>     > +
>     > +  CopyGuid (&SmmVariableHeader->Guid, VendorGuid);
>     > +  SmmVariableHeader->DataSize = TempDataSize;
>     > +  SmmVariableHeader->NameSize = VariableNameSize;
>     > +  if (Attributes == NULL) {
>     > +    SmmVariableHeader->Attributes = 0;
>     > +  } else {
>     > +    SmmVariableHeader->Attributes = *Attributes;
>     > +  }
>     > +
>     > +  CopyMem (SmmVariableHeader->Name, VariableName,
> SmmVariableHeader-
>     > >NameSize);
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  Status = SendCommunicateBuffer (PayloadSize);
>     > +
>     > +  //
>     > +  // Get data from SMM.
>     > +  //
>     > +  if ((Status == EFI_SUCCESS) || (Status == EFI_BUFFER_TOO_SMALL)) {
>     > +    //
>     > +    // SMM CommBuffer DataSize can be a trimed value
>     > +    // Only update DataSize when needed
>     > +    //
>     > +    *DataSize = SmmVariableHeader->DataSize;
>     > +  }
>     > +
>     > +  if (Attributes != NULL) {
>     > +    *Attributes = SmmVariableHeader->Attributes;
>     > +  }
>     > +
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  if (Data != NULL) {
>     > +    CopyMem (Data, (UINT8 *)SmmVariableHeader->Name +
>     > SmmVariableHeader->NameSize, SmmVariableHeader->DataSize);
>     > +  } else {
>     > +    Status = EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +Done:
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  This code finds variable in storage blocks (Volatile or Non-Volatile).
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  The data size is external input, so this function will validate it carefully to
>     > avoid buffer overflow.
>     > +
>     > +  @param[in]      VariableName       Name of Variable to be found.
>     > +  @param[in]      VendorGuid         Variable vendor GUID.
>     > +  @param[out]     Attributes         Attribute value of the variable found.
>     > +  @param[in, out] DataSize           Size of Data found. If size is less than the
>     > +                                     data, this value contains the required size.
>     > +  @param[out]     Data               Data pointer.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER      Invalid parameter.
>     > +  @retval EFI_SUCCESS                Find the specified variable.
>     > +  @retval EFI_NOT_FOUND              Not found.
>     > +  @retval EFI_BUFFER_TO_SMALL        DataSize is too small for the result.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +RuntimeServiceGetVariable (
>     > +  IN      CHAR16    *VariableName,
>     > +  IN      EFI_GUID  *VendorGuid,
>     > +  OUT     UINT32    *Attributes OPTIONAL,
>     > +  IN OUT  UINTN     *DataSize,
>     > +  OUT     VOID      *Data
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +
>     > +  if ((VariableName == NULL) || (VendorGuid == NULL) || (DataSize ==
> NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if (VariableName[0] == 0) {
>     > +    return EFI_NOT_FOUND;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableServicesLock);
>     > +  if (FeaturePcdGet (PcdEnableVariableRuntimeCache)) {
>     > +    Status = FindVariableInRuntimeCache (VariableName, VendorGuid,
> Attributes,
>     > DataSize, Data);
>     > +  } else {
>     > +    Status = FindVariableInSmm (VariableName, VendorGuid, Attributes,
> DataSize,
>     > Data);
>     > +  }
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mVariableServicesLock);
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Finds the next available variable in a runtime cache variable store.
>     > +
>     > +  @param[in, out] VariableNameSize   Size of the variable name.
>     > +  @param[in, out] VariableName       Pointer to variable name.
>     > +  @param[in, out] VendorGuid         Variable Vendor Guid.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER      Invalid parameter.
>     > +  @retval EFI_SUCCESS                Find the specified variable.
>     > +  @retval EFI_NOT_FOUND              Not found.
>     > +  @retval EFI_BUFFER_TO_SMALL        DataSize is too small for the result.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetNextVariableNameInRuntimeCache (
>     > +  IN OUT  UINTN     *VariableNameSize,
>     > +  IN OUT  CHAR16    *VariableName,
>     > +  IN OUT  EFI_GUID  *VendorGuid
>     > +  )
>     > +{
>     > +  EFI_STATUS             Status;
>     > +  UINTN                  VarNameSize;
>     > +  VARIABLE_HEADER        *VariablePtr;
>     > +  VARIABLE_STORE_HEADER
> *VariableStoreHeader[VariableStoreTypeMax];
>     > +
>     > +  Status = EFI_NOT_FOUND;
>     > +
>     > +  //
>     > +  // The UEFI specification restricts Runtime Services callers from invoking
> the
>     > same or certain other Runtime Service
>     > +  // functions prior to completion and return from a previous Runtime
> Service
>     > call. These restrictions prevent
>     > +  // a GetVariable () or GetNextVariable () call from being issued until a prior
> call
>     > has returned. The runtime
>     > +  // cache read lock should always be free when entering this function.
>     > +  //
>     > +  ASSERT (!mVariableRuntimeCacheReadLock);
>     > +
>     > +  CheckForRuntimeCacheSync ();
>     > +
>     > +  mVariableRuntimeCacheReadLock = TRUE;
>     > +  if (!mVariableRuntimeCachePendingUpdate) {
>     > +    //
>     > +    // 0: Volatile, 1: HOB, 2: Non-Volatile.
>     > +    // The index and attributes mapping must be kept in this order as
>     > FindVariable
>     > +    // makes use of this mapping to implement search algorithm.
>     > +    //
>     > +    VariableStoreHeader[VariableStoreTypeVolatile] =
>     > mVariableRuntimeVolatileCacheBuffer;
>     > +    VariableStoreHeader[VariableStoreTypeHob]      =
>     > mVariableRuntimeHobCacheBuffer;
>     > +    VariableStoreHeader[VariableStoreTypeNv]       =
>     > mVariableRuntimeNvCacheBuffer;
>     > +
>     > +    Status =  VariableServiceGetNextVariableInternal (
>     > +                VariableName,
>     > +                VendorGuid,
>     > +                VariableStoreHeader,
>     > +                &VariablePtr,
>     > +                mVariableAuthFormat
>     > +                );
>     > +    if (!EFI_ERROR (Status)) {
>     > +      VarNameSize = NameSizeOfVariable (VariablePtr,
> mVariableAuthFormat);
>     > +      ASSERT (VarNameSize != 0);
>     > +      if (VarNameSize <= *VariableNameSize) {
>     > +        CopyMem (VariableName, GetVariableNamePtr (VariablePtr,
>     > mVariableAuthFormat), VarNameSize);
>     > +        CopyMem (VendorGuid, GetVendorGuidPtr (VariablePtr,
>     > mVariableAuthFormat), sizeof (EFI_GUID));
>     > +        Status = EFI_SUCCESS;
>     > +      } else {
>     > +        Status = EFI_BUFFER_TOO_SMALL;
>     > +      }
>     > +
>     > +      *VariableNameSize = VarNameSize;
>     > +    }
>     > +  }
>     > +
>     > +  mVariableRuntimeCacheReadLock = FALSE;
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Finds the next available variable in a SMM variable store.
>     > +
>     > +  @param[in, out] VariableNameSize   Size of the variable name.
>     > +  @param[in, out] VariableName       Pointer to variable name.
>     > +  @param[in, out] VendorGuid         Variable Vendor Guid.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER      Invalid parameter.
>     > +  @retval EFI_SUCCESS                Find the specified variable.
>     > +  @retval EFI_NOT_FOUND              Not found.
>     > +  @retval EFI_BUFFER_TO_SMALL        DataSize is too small for the result.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetNextVariableNameInSmm (
>     > +  IN OUT  UINTN     *VariableNameSize,
>     > +  IN OUT  CHAR16    *VariableName,
>     > +  IN OUT  EFI_GUID  *VendorGuid
>     > +  )
>     > +{
>     > +  EFI_STATUS                                       Status;
>     > +  UINTN                                            PayloadSize;
>     > +  SMM_VARIABLE_COMMUNICATE_GET_NEXT_VARIABLE_NAME
>     > *SmmGetNextVariableName;
>     > +  UINTN                                            OutVariableNameSize;
>     > +  UINTN                                            InVariableNameSize;
>     > +
>     > +  OutVariableNameSize    = *VariableNameSize;
>     > +  InVariableNameSize     = StrSize (VariableName);
>     > +  SmmGetNextVariableName = NULL;
>     > +
>     > +  //
>     > +  // If input string exceeds SMM payload limit. Return failure
>     > +  //
>     > +  if (InVariableNameSize > mVariableBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_GET_NEXT_VARIABLE_NAME, Name)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + PayloadSize.
>     > +  //
>     > +  if (OutVariableNameSize > mVariableBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_GET_NEXT_VARIABLE_NAME, Name)) {
>     > +    //
>     > +    // If output buffer exceed SMM payload limit. Trim output buffer to SMM
>     > payload size
>     > +    //
>     > +    OutVariableNameSize = mVariableBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_GET_NEXT_VARIABLE_NAME, Name);
>     > +  }
>     > +
>     > +  //
>     > +  // Payload should be Guid + NameSize + MAX of Input & Output buffer
>     > +  //
>     > +  PayloadSize = OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_GET_NEXT_VARIABLE_NAME, Name) +
> MAX
>     > (OutVariableNameSize, InVariableNameSize);
>     > +
>     > +  Status = InitCommunicateBuffer ((VOID **)&SmmGetNextVariableName,
>     > PayloadSize, SMM_VARIABLE_FUNCTION_GET_NEXT_VARIABLE_NAME);
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  ASSERT (SmmGetNextVariableName != NULL);
>     > +
>     > +  //
>     > +  // SMM comm buffer->NameSize is buffer size for return string
>     > +  //
>     > +  SmmGetNextVariableName->NameSize = OutVariableNameSize;
>     > +
>     > +  CopyGuid (&SmmGetNextVariableName->Guid, VendorGuid);
>     > +  //
>     > +  // Copy whole string
>     > +  //
>     > +  CopyMem (SmmGetNextVariableName->Name, VariableName,
>     > InVariableNameSize);
>     > +  if (OutVariableNameSize > InVariableNameSize) {
>     > +    ZeroMem ((UINT8 *)SmmGetNextVariableName->Name +
>     > InVariableNameSize, OutVariableNameSize - InVariableNameSize);
>     > +  }
>     > +
>     > +  //
>     > +  // Send data to SMM
>     > +  //
>     > +  Status = SendCommunicateBuffer (PayloadSize);
>     > +
>     > +  //
>     > +  // Get data from SMM.
>     > +  //
>     > +  if ((Status == EFI_SUCCESS) || (Status == EFI_BUFFER_TOO_SMALL)) {
>     > +    //
>     > +    // SMM CommBuffer NameSize can be a trimed value
>     > +    // Only update VariableNameSize when needed
>     > +    //
>     > +    *VariableNameSize = SmmGetNextVariableName->NameSize;
>     > +  }
>     > +
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  CopyGuid (VendorGuid, &SmmGetNextVariableName->Guid);
>     > +  CopyMem (VariableName, SmmGetNextVariableName->Name,
>     > SmmGetNextVariableName->NameSize);
>     > +
>     > +Done:
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  This code Finds the Next available variable.
>     > +
>     > +  @param[in, out] VariableNameSize   Size of the variable name.
>     > +  @param[in, out] VariableName       Pointer to variable name.
>     > +  @param[in, out] VendorGuid         Variable Vendor Guid.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER      Invalid parameter.
>     > +  @retval EFI_SUCCESS                Find the specified variable.
>     > +  @retval EFI_NOT_FOUND              Not found.
>     > +  @retval EFI_BUFFER_TO_SMALL        DataSize is too small for the result.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +RuntimeServiceGetNextVariableName (
>     > +  IN OUT  UINTN     *VariableNameSize,
>     > +  IN OUT  CHAR16    *VariableName,
>     > +  IN OUT  EFI_GUID  *VendorGuid
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  UINTN       MaxLen;
>     > +
>     > +  Status = EFI_NOT_FOUND;
>     > +
>     > +  if ((VariableNameSize == NULL) || (VariableName == NULL) ||
> (VendorGuid ==
>     > NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  //
>     > +  // Calculate the possible maximum length of name string, including the
> Null
>     > terminator.
>     > +  //
>     > +  MaxLen = *VariableNameSize / sizeof (CHAR16);
>     > +  if ((MaxLen == 0) || (StrnLenS (VariableName, MaxLen) == MaxLen)) {
>     > +    //
>     > +    // Null-terminator is not found in the first VariableNameSize bytes of the
>     > input VariableName buffer,
>     > +    // follow spec to return EFI_INVALID_PARAMETER.
>     > +    //
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableServicesLock);
>     > +  if (FeaturePcdGet (PcdEnableVariableRuntimeCache)) {
>     > +    Status = GetNextVariableNameInRuntimeCache (VariableNameSize,
>     > VariableName, VendorGuid);
>     > +  } else {
>     > +    Status = GetNextVariableNameInSmm (VariableNameSize, VariableName,
>     > VendorGuid);
>     > +  }
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mVariableServicesLock);
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  This code sets variable in storage blocks (Volatile or Non-Volatile).
>     > +
>     > +  Caution: This function may receive untrusted input.
>     > +  The data size and data are external input, so this function will validate it
>     > carefully to avoid buffer overflow.
>     > +
>     > +  @param[in] VariableName                 Name of Variable to be found.
>     > +  @param[in] VendorGuid                   Variable vendor GUID.
>     > +  @param[in] Attributes                   Attribute value of the variable found
>     > +  @param[in] DataSize                     Size of Data found. If size is less than the
>     > +                                          data, this value contains the required size.
>     > +  @param[in] Data                         Data pointer.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER           Invalid parameter.
>     > +  @retval EFI_SUCCESS                     Set successfully.
>     > +  @retval EFI_OUT_OF_RESOURCES            Resource not enough to set
> variable.
>     > +  @retval EFI_NOT_FOUND                   Not found.
>     > +  @retval EFI_WRITE_PROTECTED             Variable is read-only.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +RuntimeServiceSetVariable (
>     > +  IN CHAR16    *VariableName,
>     > +  IN EFI_GUID  *VendorGuid,
>     > +  IN UINT32    Attributes,
>     > +  IN UINTN     DataSize,
>     > +  IN VOID      *Data
>     > +  )
>     > +{
>     > +  EFI_STATUS                                Status;
>     > +  UINTN                                     PayloadSize;
>     > +  SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE
> *SmmVariableHeader;
>     > +  UINTN                                     VariableNameSize;
>     > +
>     > +  //
>     > +  // Check input parameters.
>     > +  //
>     > +  if ((VariableName == NULL) || (VariableName[0] == 0) || (VendorGuid ==
>     > NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if ((DataSize != 0) && (Data == NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  VariableNameSize  = StrSize (VariableName);
>     > +  SmmVariableHeader = NULL;
>     > +
>     > +  //
>     > +  // If VariableName or DataSize exceeds SMM payload limit. Return failure
>     > +  //
>     > +  if ((VariableNameSize > mVariableBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name)) ||
>     > +      (DataSize > mVariableBufferPayloadSize - OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name) -
>     > VariableNameSize))
>     > +  {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableServicesLock);
>     > +
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + PayloadSize.
>     > +  //
>     > +  PayloadSize = OFFSET_OF
>     > (SMM_VARIABLE_COMMUNICATE_ACCESS_VARIABLE, Name) +
>     > VariableNameSize + DataSize;
>     > +  Status      = InitCommunicateBuffer ((VOID **)&SmmVariableHeader,
>     > PayloadSize, SMM_VARIABLE_FUNCTION_SET_VARIABLE);
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  ASSERT (SmmVariableHeader != NULL);
>     > +
>     > +  CopyGuid ((EFI_GUID *)&SmmVariableHeader->Guid, VendorGuid);
>     > +  SmmVariableHeader->DataSize   = DataSize;
>     > +  SmmVariableHeader->NameSize   = VariableNameSize;
>     > +  SmmVariableHeader->Attributes = Attributes;
>     > +  CopyMem (SmmVariableHeader->Name, VariableName,
> SmmVariableHeader-
>     > >NameSize);
>     > +  CopyMem ((UINT8 *)SmmVariableHeader->Name + SmmVariableHeader-
>     > >NameSize, Data, DataSize);
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  Status = SendCommunicateBuffer (PayloadSize);
>     > +
>     > +Done:
>     > +  ReleaseLockOnlyAtBootTime (&mVariableServicesLock);
>     > +
>     > +  if (!EfiAtRuntime ()) {
>     > +    if (!EFI_ERROR (Status)) {
>     > +      SecureBootHook (
>     > +        VariableName,
>     > +        VendorGuid
>     > +        );
>     > +    }
>     > +  }
>     > +
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  This code returns information about the EFI variables.
>     > +
>     > +  @param[in]  Attributes                   Attributes bitmask to specify the type of
>     > variables
>     > +                                           on which to return information.
>     > +  @param[out] MaximumVariableStorageSize   Pointer to the maximum size
> of
>     > the storage space available
>     > +                                           for the EFI variables associated with the attributes
>     > specified.
>     > +  @param[out] RemainingVariableStorageSize Pointer to the remaining size
> of
>     > the storage space available
>     > +                                           for EFI variables associated with the attributes
> specified.
>     > +  @param[out] MaximumVariableSize          Pointer to the maximum size of
> an
>     > individual EFI variables
>     > +                                           associated with the attributes specified.
>     > +
>     > +  @retval EFI_INVALID_PARAMETER            An invalid combination of
> attribute
>     > bits was supplied.
>     > +  @retval EFI_SUCCESS                      Query successfully.
>     > +  @retval EFI_UNSUPPORTED                  The attribute is not supported on
> this
>     > platform.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +RuntimeServiceQueryVariableInfo (
>     > +  IN  UINT32  Attributes,
>     > +  OUT UINT64  *MaximumVariableStorageSize,
>     > +  OUT UINT64  *RemainingVariableStorageSize,
>     > +  OUT UINT64  *MaximumVariableSize
>     > +  )
>     > +{
>     > +  EFI_STATUS                                    Status;
>     > +  UINTN                                         PayloadSize;
>     > +  SMM_VARIABLE_COMMUNICATE_QUERY_VARIABLE_INFO
>     > *SmmQueryVariableInfo;
>     > +
>     > +  SmmQueryVariableInfo = NULL;
>     > +
>     > +  if ((MaximumVariableStorageSize == NULL) ||
> (RemainingVariableStorageSize
>     > == NULL) || (MaximumVariableSize == NULL) || (Attributes == 0)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableServicesLock);
>     > +
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + PayloadSize;
>     > +  //
>     > +  PayloadSize = sizeof
>     > (SMM_VARIABLE_COMMUNICATE_QUERY_VARIABLE_INFO);
>     > +  Status      = InitCommunicateBuffer ((VOID **)&SmmQueryVariableInfo,
>     > PayloadSize, SMM_VARIABLE_FUNCTION_QUERY_VARIABLE_INFO);
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  ASSERT (SmmQueryVariableInfo != NULL);
>     > +
>     > +  SmmQueryVariableInfo->Attributes = Attributes;
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  Status = SendCommunicateBuffer (PayloadSize);
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  //
>     > +  // Get data from SMM.
>     > +  //
>     > +  *MaximumVariableSize          = SmmQueryVariableInfo-
> >MaximumVariableSize;
>     > +  *MaximumVariableStorageSize   = SmmQueryVariableInfo-
>     > >MaximumVariableStorageSize;
>     > +  *RemainingVariableStorageSize = SmmQueryVariableInfo-
>     > >RemainingVariableStorageSize;
>     > +
>     > +Done:
>     > +  ReleaseLockOnlyAtBootTime (&mVariableServicesLock);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Exit Boot Services Event notification handler.
>     > +
>     > +  Notify SMM variable driver about the event.
>     > +
>     > +  @param[in]  Event     Event whose notification function is being invoked.
>     > +  @param[in]  Context   Pointer to the notification function's context.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +OnExitBootServices (
>     > +  IN      EFI_EVENT  Event,
>     > +  IN      VOID       *Context
>     > +  )
>     > +{
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE.
>     > +  //
>     > +  InitCommunicateBuffer (NULL, 0,
>     > SMM_VARIABLE_FUNCTION_EXIT_BOOT_SERVICE);
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  SendCommunicateBuffer (0);
>     > +}
>     > +
>     > +/**
>     > +  On Ready To Boot Services Event notification handler.
>     > +
>     > +  Notify SMM variable driver about the event.
>     > +
>     > +  @param[in]  Event     Event whose notification function is being invoked
>     > +  @param[in]  Context   Pointer to the notification function's context
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +OnReadyToBoot (
>     > +  IN      EFI_EVENT  Event,
>     > +  IN      VOID       *Context
>     > +  )
>     > +{
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE.
>     > +  //
>     > +  InitCommunicateBuffer (NULL, 0,
>     > SMM_VARIABLE_FUNCTION_READY_TO_BOOT);
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  SendCommunicateBuffer (0);
>     > +
>     > +  //
>     > +  // Install the system configuration table for variable info data captured
>     > +  //
>     > +  if (FeaturePcdGet (PcdEnableVariableRuntimeCache) && FeaturePcdGet
>     > (PcdVariableCollectStatistics)) {
>     > +    if (mVariableAuthFormat) {
>     > +      gBS->InstallConfigurationTable (&gEfiAuthenticatedVariableGuid,
>     > mVariableInfo);
>     > +    } else {
>     > +      gBS->InstallConfigurationTable (&gEfiVariableGuid, mVariableInfo);
>     > +    }
>     > +  }
>     > +
>     > +  gBS->CloseEvent (Event);
>     > +}
>     > +
>     > +/**
>     > +  Notification function of EVT_SIGNAL_VIRTUAL_ADDRESS_CHANGE.
>     > +
>     > +  This is a notification function registered on
>     > EVT_SIGNAL_VIRTUAL_ADDRESS_CHANGE event.
>     > +  It convers pointer to new virtual address.
>     > +
>     > +  @param[in]  Event        Event whose notification function is being invoked.
>     > +  @param[in]  Context      Pointer to the notification function's context.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +VariableAddressChangeEvent (
>     > +  IN EFI_EVENT  Event,
>     > +  IN VOID       *Context
>     > +  )
>     > +{
>     > +  EfiConvertPointer (0x0, (VOID **)&mVariableBuffer);
>     > +  EfiConvertPointer (0x0, (VOID **)&mMmCommunication2);
>     > +  EfiConvertPointer (EFI_OPTIONAL_PTR, (VOID
>     > **)&mVariableRuntimeHobCacheBuffer);
>     > +  EfiConvertPointer (EFI_OPTIONAL_PTR, (VOID
>     > **)&mVariableRuntimeNvCacheBuffer);
>     > +  EfiConvertPointer (EFI_OPTIONAL_PTR, (VOID
>     > **)&mVariableRuntimeVolatileCacheBuffer);
>     > +}
>     > +
>     > +/**
>     > +  This code gets variable payload size.
>     > +
>     > +  @param[out] VariablePayloadSize   Output pointer to variable payload
> size.
>     > +
>     > +  @retval EFI_SUCCESS               Get successfully.
>     > +  @retval Others                    Get unsuccessfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +GetVariablePayloadSize (
>     > +  OUT UINTN  *VariablePayloadSize
>     > +  )
>     > +{
>     > +  EFI_STATUS                                 Status;
>     > +  SMM_VARIABLE_COMMUNICATE_GET_PAYLOAD_SIZE
> *SmmGetPayloadSize;
>     > +  EFI_MM_COMMUNICATE_HEADER                  *SmmCommunicateHeader;
>     > +  SMM_VARIABLE_COMMUNICATE_HEADER
>     > *SmmVariableFunctionHeader;
>     > +  UINTN                                      CommSize;
>     > +  UINT8                                      *CommBuffer;
>     > +
>     > +  SmmGetPayloadSize = NULL;
>     > +  CommBuffer        = NULL;
>     > +
>     > +  if (VariablePayloadSize == NULL) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableServicesLock);
>     > +
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + sizeof
>     > (SMM_VARIABLE_COMMUNICATE_GET_PAYLOAD_SIZE);
>     > +  //
>     > +  CommSize   = SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + sizeof
>     > (SMM_VARIABLE_COMMUNICATE_GET_PAYLOAD_SIZE);
>     > +  CommBuffer = AllocateZeroPool (CommSize);
>     > +  if (CommBuffer == NULL) {
>     > +    Status = EFI_OUT_OF_RESOURCES;
>     > +    goto Done;
>     > +  }
>     > +
>     > +  SmmCommunicateHeader = (EFI_MM_COMMUNICATE_HEADER
>     > *)CommBuffer;
>     > +  CopyGuid (&SmmCommunicateHeader->HeaderGuid,
>     > &gEfiSmmVariableProtocolGuid);
>     > +  SmmCommunicateHeader->MessageLength =
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + sizeof
>     > (SMM_VARIABLE_COMMUNICATE_GET_PAYLOAD_SIZE);
>     > +
>     > +  SmmVariableFunctionHeader           =
>     > (SMM_VARIABLE_COMMUNICATE_HEADER *)SmmCommunicateHeader-
> >Data;
>     > +  SmmVariableFunctionHeader->Function =
>     > SMM_VARIABLE_FUNCTION_GET_PAYLOAD_SIZE;
>     > +  SmmGetPayloadSize                   =
>     > (SMM_VARIABLE_COMMUNICATE_GET_PAYLOAD_SIZE
>     > *)SmmVariableFunctionHeader->Data;
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  Status = mMmCommunication2->Communicate (mMmCommunication2,
>     > CommBuffer, CommBuffer, &CommSize);
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  Status = SmmVariableFunctionHeader->ReturnStatus;
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  //
>     > +  // Get data from SMM.
>     > +  //
>     > +  *VariablePayloadSize = SmmGetPayloadSize->VariablePayloadSize;
>     > +
>     > +Done:
>     > +  if (CommBuffer != NULL) {
>     > +    FreePool (CommBuffer);
>     > +  }
>     > +
>     > +  ReleaseLockOnlyAtBootTime (&mVariableServicesLock);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  This code gets information needed from SMM for runtime cache
> initialization.
>     > +
>     > +  @param[out] TotalHobStorageSize         Output pointer for the total HOB
>     > storage size in bytes.
>     > +  @param[out] TotalNvStorageSize          Output pointer for the total non-
>     > volatile storage size in bytes.
>     > +  @param[out] TotalVolatileStorageSize    Output pointer for the total
> volatile
>     > storage size in bytes.
>     > +  @param[out] AuthenticatedVariableUsage  Output pointer that indicates
> if
>     > authenticated variables are to be used.
>     > +
>     > +  @retval EFI_SUCCESS                     Retrieved the size successfully.
>     > +  @retval EFI_INVALID_PARAMETER           TotalNvStorageSize parameter is
>     > NULL.
>     > +  @retval EFI_OUT_OF_RESOURCES            The memory resources needed
> for a
>     > CommBuffer are not available.
>     > +  @retval Others                          Could not retrieve the size successfully.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +GetRuntimeCacheInfo (
>     > +  OUT UINTN    *TotalHobStorageSize,
>     > +  OUT UINTN    *TotalNvStorageSize,
>     > +  OUT UINTN    *TotalVolatileStorageSize,
>     > +  OUT BOOLEAN  *AuthenticatedVariableUsage
>     > +  )
>     > +{
>     > +  EFI_STATUS                                       Status;
>     > +  SMM_VARIABLE_COMMUNICATE_GET_RUNTIME_CACHE_INFO
>     > *SmmGetRuntimeCacheInfo;
>     > +  EFI_MM_COMMUNICATE_HEADER
> *SmmCommunicateHeader;
>     > +  SMM_VARIABLE_COMMUNICATE_HEADER
>     > *SmmVariableFunctionHeader;
>     > +  UINTN                                            CommSize;
>     > +  UINT8                                            *CommBuffer;
>     > +
>     > +  SmmGetRuntimeCacheInfo = NULL;
>     > +  CommBuffer             = mVariableBuffer;
>     > +
>     > +  if ((TotalHobStorageSize == NULL) || (TotalNvStorageSize == NULL) ||
>     > (TotalVolatileStorageSize == NULL) || (AuthenticatedVariableUsage ==
> NULL)) {
>     > +    return EFI_INVALID_PARAMETER;
>     > +  }
>     > +
>     > +  if (CommBuffer == NULL) {
>     > +    return EFI_OUT_OF_RESOURCES;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableServicesLock);
>     > +
>     > +  CommSize = SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + sizeof
>     > (SMM_VARIABLE_COMMUNICATE_GET_RUNTIME_CACHE_INFO);
>     > +  ZeroMem (CommBuffer, CommSize);
>     > +
>     > +  SmmCommunicateHeader = (EFI_MM_COMMUNICATE_HEADER
>     > *)CommBuffer;
>     > +  CopyGuid (&SmmCommunicateHeader->HeaderGuid,
>     > &gEfiSmmVariableProtocolGuid);
>     > +  SmmCommunicateHeader->MessageLength =
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + sizeof
>     > (SMM_VARIABLE_COMMUNICATE_GET_RUNTIME_CACHE_INFO);
>     > +
>     > +  SmmVariableFunctionHeader           =
>     > (SMM_VARIABLE_COMMUNICATE_HEADER *)SmmCommunicateHeader-
> >Data;
>     > +  SmmVariableFunctionHeader->Function =
>     > SMM_VARIABLE_FUNCTION_GET_RUNTIME_CACHE_INFO;
>     > +  SmmGetRuntimeCacheInfo              =
>     > (SMM_VARIABLE_COMMUNICATE_GET_RUNTIME_CACHE_INFO
>     > *)SmmVariableFunctionHeader->Data;
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  Status = mMmCommunication2->Communicate (mMmCommunication2,
>     > CommBuffer, CommBuffer, &CommSize);
>     > +  ASSERT_EFI_ERROR (Status);
>     > +  if (CommSize <= SMM_VARIABLE_COMMUNICATE_HEADER_SIZE) {
>     > +    Status = EFI_BAD_BUFFER_SIZE;
>     > +    goto Done;
>     > +  }
>     > +
>     > +  Status = SmmVariableFunctionHeader->ReturnStatus;
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  //
>     > +  // Get data from SMM.
>     > +  //
>     > +  *TotalHobStorageSize        = SmmGetRuntimeCacheInfo-
>     > >TotalHobStorageSize;
>     > +  *TotalNvStorageSize         = SmmGetRuntimeCacheInfo-
> >TotalNvStorageSize;
>     > +  *TotalVolatileStorageSize   = SmmGetRuntimeCacheInfo-
>     > >TotalVolatileStorageSize;
>     > +  *AuthenticatedVariableUsage = SmmGetRuntimeCacheInfo-
>     > >AuthenticatedVariableUsage;
>     > +
>     > +Done:
>     > +  ReleaseLockOnlyAtBootTime (&mVariableServicesLock);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Sends the runtime variable cache context information to SMM.
>     > +
>     > +  @retval EFI_SUCCESS               Retrieved the size successfully.
>     > +  @retval EFI_INVALID_PARAMETER     TotalNvStorageSize parameter is
> NULL.
>     > +  @retval EFI_OUT_OF_RESOURCES      The memory resources needed for a
>     > CommBuffer are not available.
>     > +  @retval Others                    Could not retrieve the size successfully.;
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +SendRuntimeVariableCacheContextToSmm (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS                                               Status;
>     > +
> SMM_VARIABLE_COMMUNICATE_RUNTIME_VARIABLE_CACHE_CONTEXT
>     > *SmmRuntimeVarCacheContext;
>     > +  EFI_MM_COMMUNICATE_HEADER
>     > *SmmCommunicateHeader;
>     > +  SMM_VARIABLE_COMMUNICATE_HEADER
>     > *SmmVariableFunctionHeader;
>     > +  UINTN                                                    CommSize;
>     > +  UINT8                                                    *CommBuffer;
>     > +
>     > +  SmmRuntimeVarCacheContext = NULL;
>     > +  CommBuffer                = mVariableBuffer;
>     > +
>     > +  if (CommBuffer == NULL) {
>     > +    return EFI_OUT_OF_RESOURCES;
>     > +  }
>     > +
>     > +  AcquireLockOnlyAtBootTime (&mVariableServicesLock);
>     > +
>     > +  //
>     > +  // Init the communicate buffer. The buffer data size is:
>     > +  // SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + sizeof
>     > (SMM_VARIABLE_COMMUNICATE_RUNTIME_VARIABLE_CACHE_CONTEXT);
>     > +  //
>     > +  CommSize = SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + sizeof
>     > (SMM_VARIABLE_COMMUNICATE_RUNTIME_VARIABLE_CACHE_CONTEXT);
>     > +  ZeroMem (CommBuffer, CommSize);
>     > +
>     > +  SmmCommunicateHeader = (EFI_MM_COMMUNICATE_HEADER
>     > *)CommBuffer;
>     > +  CopyGuid (&SmmCommunicateHeader->HeaderGuid,
>     > &gEfiSmmVariableProtocolGuid);
>     > +  SmmCommunicateHeader->MessageLength =
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE + sizeof
>     > (SMM_VARIABLE_COMMUNICATE_RUNTIME_VARIABLE_CACHE_CONTEXT);
>     > +
>     > +  SmmVariableFunctionHeader           =
>     > (SMM_VARIABLE_COMMUNICATE_HEADER *)SmmCommunicateHeader-
> >Data;
>     > +  SmmVariableFunctionHeader->Function =
>     > SMM_VARIABLE_FUNCTION_INIT_RUNTIME_VARIABLE_CACHE_CONTEXT;
>     > +  SmmRuntimeVarCacheContext           =
>     > (SMM_VARIABLE_COMMUNICATE_RUNTIME_VARIABLE_CACHE_CONTEXT
>     > *)SmmVariableFunctionHeader->Data;
>     > +
>     > +  SmmRuntimeVarCacheContext->RuntimeHobCache      =
>     > mVariableRuntimeHobCacheBuffer;
>     > +  SmmRuntimeVarCacheContext->RuntimeVolatileCache =
>     > mVariableRuntimeVolatileCacheBuffer;
>     > +  SmmRuntimeVarCacheContext->RuntimeNvCache       =
>     > mVariableRuntimeNvCacheBuffer;
>     > +  SmmRuntimeVarCacheContext->PendingUpdate        =
>     > &mVariableRuntimeCachePendingUpdate;
>     > +  SmmRuntimeVarCacheContext->ReadLock             =
>     > &mVariableRuntimeCacheReadLock;
>     > +  SmmRuntimeVarCacheContext->HobFlushComplete     =
>     > &mHobFlushComplete;
>     > +
>     > +  //
>     > +  // Request to unblock this region to be accessible from inside MM
>     > environment
>     > +  // These fields "should" be all on the same page, but just to be on the safe
>     > side...
>     > +  //
>     > +  Status = MmUnblockMemoryRequest (
>     > +             (EFI_PHYSICAL_ADDRESS)ALIGN_VALUE
>     > ((UINTN)SmmRuntimeVarCacheContext->PendingUpdate - EFI_PAGE_SIZE +
> 1,
>     > EFI_PAGE_SIZE),
>     > +             EFI_SIZE_TO_PAGES (sizeof
> (mVariableRuntimeCachePendingUpdate))
>     > +             );
>     > +  if ((Status != EFI_UNSUPPORTED) && EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  Status = MmUnblockMemoryRequest (
>     > +             (EFI_PHYSICAL_ADDRESS)ALIGN_VALUE
>     > ((UINTN)SmmRuntimeVarCacheContext->ReadLock - EFI_PAGE_SIZE + 1,
>     > EFI_PAGE_SIZE),
>     > +             EFI_SIZE_TO_PAGES (sizeof (mVariableRuntimeCacheReadLock))
>     > +             );
>     > +  if ((Status != EFI_UNSUPPORTED) && EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  Status = MmUnblockMemoryRequest (
>     > +             (EFI_PHYSICAL_ADDRESS)ALIGN_VALUE
>     > ((UINTN)SmmRuntimeVarCacheContext->HobFlushComplete -
> EFI_PAGE_SIZE +
>     > 1, EFI_PAGE_SIZE),
>     > +             EFI_SIZE_TO_PAGES (sizeof (mHobFlushComplete))
>     > +             );
>     > +  if ((Status != EFI_UNSUPPORTED) && EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +  //
>     > +  // Send data to SMM.
>     > +  //
>     > +  Status = mMmCommunication2->Communicate (mMmCommunication2,
>     > CommBuffer, CommBuffer, &CommSize);
>     > +  ASSERT_EFI_ERROR (Status);
>     > +  if (CommSize <= SMM_VARIABLE_COMMUNICATE_HEADER_SIZE) {
>     > +    Status = EFI_BAD_BUFFER_SIZE;
>     > +    goto Done;
>     > +  }
>     > +
>     > +  Status = SmmVariableFunctionHeader->ReturnStatus;
>     > +  if (EFI_ERROR (Status)) {
>     > +    goto Done;
>     > +  }
>     > +
>     > +Done:
>     > +  ReleaseLockOnlyAtBootTime (&mVariableServicesLock);
>     > +  return Status;
>     > +}
>     > +
>     > +/**
>     > +  Initialize variable service and install Variable Architectural protocol.
>     > +
>     > +  @param[in] Event    Event whose notification function is being invoked.
>     > +  @param[in] Context  Pointer to the notification function's context.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +SmmVariableReady (
>     > +  IN  EFI_EVENT  Event,
>     > +  IN  VOID       *Context
>     > +  )
>     > +{
>     > +  EFI_STATUS                     Status;
>     > +  PROTECTED_VARIABLE_CONTEXT_IN  ContextIn;
>     > +
>     > +  Status = gBS->LocateProtocol (&gEfiSmmVariableProtocolGuid, NULL,
> (VOID
>     > **)&mSmmVariable);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return;
>     > +  }
>     > +
>     > +  Status = gBS->LocateProtocol (&gEfiMmCommunication2ProtocolGuid,
> NULL,
>     > (VOID **)&mMmCommunication2);
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  //
>     > +  // Allocate memory for variable communicate buffer.
>     > +  //
>     > +  Status = GetVariablePayloadSize (&mVariableBufferPayloadSize);
>     > +  ASSERT_EFI_ERROR (Status);
>     > +  mVariableBufferSize = SMM_COMMUNICATE_HEADER_SIZE +
>     > SMM_VARIABLE_COMMUNICATE_HEADER_SIZE +
> mVariableBufferPayloadSize;
>     > +  mVariableBuffer     = AllocateRuntimePool (mVariableBufferSize);
>     > +  ASSERT (mVariableBuffer != NULL);
>     > +
>     > +  //
>     > +  // Save the buffer physical address used for SMM conmunication.
>     > +  //
>     > +  mVariableBufferPhysical = mVariableBuffer;
>     > +
>     > +  if (FeaturePcdGet (PcdEnableVariableRuntimeCache)) {
>     > +    DEBUG ((DEBUG_INFO, "Variable driver runtime cache is enabled.\n"));
>     > +    //
>     > +    // Allocate runtime variable cache memory buffers.
>     > +    //
>     > +    Status =  GetRuntimeCacheInfo (
>     > +                &mVariableRuntimeHobCacheBufferSize,
>     > +                &mVariableRuntimeNvCacheBufferSize,
>     > +                &mVariableRuntimeVolatileCacheBufferSize,
>     > +                &mVariableAuthFormat
>     > +                );
>     > +    if (!EFI_ERROR (Status)) {
>     > +      Status = InitVariableCache (&mVariableRuntimeHobCacheBuffer,
>     > &mVariableRuntimeHobCacheBufferSize);
>     > +      if (!EFI_ERROR (Status)) {
>     > +        Status = InitVariableCache (&mVariableRuntimeNvCacheBuffer,
>     > &mVariableRuntimeNvCacheBufferSize);
>     > +        if (!EFI_ERROR (Status)) {
>     > +          Status = InitVariableCache (&mVariableRuntimeVolatileCacheBuffer,
>     > &mVariableRuntimeVolatileCacheBufferSize);
>     > +          if (!EFI_ERROR (Status)) {
>     > +            Status = SendRuntimeVariableCacheContextToSmm ();
>     > +            if (!EFI_ERROR (Status)) {
>     > +              SyncRuntimeCache ();
>     > +            }
>     > +          }
>     > +        }
>     > +      }
>     > +
>     > +      if (EFI_ERROR (Status)) {
>     > +        mVariableRuntimeHobCacheBuffer      = NULL;
>     > +        mVariableRuntimeNvCacheBuffer       = NULL;
>     > +        mVariableRuntimeVolatileCacheBuffer = NULL;
>     > +      }
>     > +    }
>     > +
>     > +    ASSERT_EFI_ERROR (Status);
>     > +  } else {
>     > +    DEBUG ((DEBUG_INFO, "Variable driver runtime cache is disabled.\n"));
>     > +  }
>     > +
>     > +  gRT->GetVariable         = RuntimeServiceGetVariable;
>     > +  gRT->GetNextVariableName = RuntimeServiceGetNextVariableName;
>     > +  gRT->SetVariable         = RuntimeServiceSetVariable;
>     > +  gRT->QueryVariableInfo   = RuntimeServiceQueryVariableInfo;
>     > +
>     > +  //
>     > +  // Install the Variable Architectural Protocol on a new handle.
>     > +  //
>     > +  Status = gBS->InstallProtocolInterface (
>     > +                  &mHandle,
>     > +                  &gEfiVariableArchProtocolGuid,
>     > +                  EFI_NATIVE_INTERFACE,
>     > +                  NULL
>     > +                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  mVariableLock.RequestToLock = VariableLockRequestToLock;
>     > +  Status                      = gBS->InstallMultipleProtocolInterfaces (
>     > +                                       &mHandle,
>     > +                                       &gEdkiiVariableLockProtocolGuid,
>     > +                                       &mVariableLock,
>     > +                                       NULL
>     > +                                       );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  mVarCheck.RegisterSetVariableCheckHandler =
>     > VarCheckRegisterSetVariableCheckHandler;
>     > +  mVarCheck.VariablePropertySet             = VarCheckVariablePropertySet;
>     > +  mVarCheck.VariablePropertyGet             = VarCheckVariablePropertyGet;
>     > +  Status                                    = gBS->InstallMultipleProtocolInterfaces (
>     > +                                                     &mHandle,
>     > +                                                     &gEdkiiVarCheckProtocolGuid,
>     > +                                                     &mVarCheck,
>     > +                                                     NULL
>     > +                                                     );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  ContextIn.StructSize    = sizeof (ContextIn);
>     > +  ContextIn.StructVersion =
>     > PROTECTED_VARIABLE_CONTEXT_IN_STRUCT_VERSION;
>     > +
>     > +  ContextIn.FindVariableSmm     = FindVariableInSmm;
>     > +  ContextIn.GetVariableInfo     = GetVariableInfo;
>     > +  ContextIn.GetNextVariableInfo = GetNextVariableInfo;
>     > +  ContextIn.VariableServiceUser = FromRuntimeModule;
>     > +  ContextIn.MaxVariableSize     = 0;
>     > +  ContextIn.UpdateVariableStore = NULL;
>     > +  ContextIn.UpdateVariable      = NULL;
>     > +
>     > +  Status = ProtectedVariableLibInitialize (&ContextIn);
>     > +  if (EFI_ERROR (Status)) {
>     > +    DEBUG ((
>     > +      DEBUG_INFO,
>     > +      "%a: %d ProtectedVariableLibInitialize() return status: %r\n",
>     > +      __FUNCTION__,
>     > +      __LINE__,
>     > +      Status
>     > +      ));
>     > +  }
>     > +
>     > +  gBS->CloseEvent (Event);
>     > +}
>     > +
>     > +/**
>     > +  SMM Non-Volatile variable write service is ready notify event handler.
>     > +
>     > +  @param[in] Event    Event whose notification function is being invoked.
>     > +  @param[in] Context  Pointer to the notification function's context.
>     > +
>     > +**/
>     > +VOID
>     > +EFIAPI
>     > +SmmVariableWriteReady (
>     > +  IN  EFI_EVENT  Event,
>     > +  IN  VOID       *Context
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  VOID        *ProtocolOps;
>     > +
>     > +  //
>     > +  // Check whether the protocol is installed or not.
>     > +  //
>     > +  Status = gBS->LocateProtocol (&gSmmVariableWriteGuid, NULL, (VOID
>     > **)&ProtocolOps);
>     > +  if (EFI_ERROR (Status)) {
>     > +    return;
>     > +  }
>     > +
>     > +  //
>     > +  // Some Secure Boot Policy Var (SecureBoot, etc) updates following other
>     > +  // Secure Boot Policy Variable change.  Record their initial value.
>     > +  //
>     > +  RecordSecureBootPolicyVarData ();
>     > +
>     > +  Status = gBS->InstallProtocolInterface (
>     > +                  &mHandle,
>     > +                  &gEfiVariableWriteArchProtocolGuid,
>     > +                  EFI_NATIVE_INTERFACE,
>     > +                  NULL
>     > +                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +
>     > +  gBS->CloseEvent (Event);
>     > +}
>     > +
>     > +/**
>     > +  Variable Driver main entry point. The Variable driver places the 4 EFI
>     > +  runtime services in the EFI System Table and installs arch protocols
>     > +  for variable read and write services being available. It also registers
>     > +  a notification function for an EVT_SIGNAL_VIRTUAL_ADDRESS_CHANGE
>     > event.
>     > +
>     > +  @param[in] ImageHandle    The firmware allocated handle for the EFI
> image.
>     > +  @param[in] SystemTable    A pointer to the EFI System Table.
>     > +
>     > +  @retval EFI_SUCCESS       Variable service successfully initialized.
>     > +
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableSmmRuntimeInitialize (
>     > +  IN EFI_HANDLE        ImageHandle,
>     > +  IN EFI_SYSTEM_TABLE  *SystemTable
>     > +  )
>     > +{
>     > +  VOID       *SmmVariableRegistration;
>     > +  VOID       *SmmVariableWriteRegistration;
>     > +  EFI_EVENT  OnReadyToBootEvent;
>     > +  EFI_EVENT  ExitBootServiceEvent;
>     > +  EFI_EVENT  LegacyBootEvent;
>     > +
>     > +  EfiInitializeLock (&mVariableServicesLock, TPL_NOTIFY);
>     > +
>     > +  //
>     > +  // Smm variable service is ready
>     > +  //
>     > +  EfiCreateProtocolNotifyEvent (
>     > +    &gEfiSmmVariableProtocolGuid,
>     > +    TPL_CALLBACK,
>     > +    SmmVariableReady,
>     > +    NULL,
>     > +    &SmmVariableRegistration
>     > +    );
>     > +
>     > +  //
>     > +  // Smm Non-Volatile variable write service is ready
>     > +  //
>     > +  EfiCreateProtocolNotifyEvent (
>     > +    &gSmmVariableWriteGuid,
>     > +    TPL_CALLBACK,
>     > +    SmmVariableWriteReady,
>     > +    NULL,
>     > +    &SmmVariableWriteRegistration
>     > +    );
>     > +
>     > +  //
>     > +  // Register the event to reclaim variable for OS usage.
>     > +  //
>     > +  EfiCreateEventReadyToBootEx (
>     > +    TPL_NOTIFY,
>     > +    OnReadyToBoot,
>     > +    NULL,
>     > +    &OnReadyToBootEvent
>     > +    );
>     > +
>     > +  //
>     > +  // Register the event to inform SMM variable that it is at runtime.
>     > +  //
>     > +  gBS->CreateEventEx (
>     > +         EVT_NOTIFY_SIGNAL,
>     > +         TPL_NOTIFY,
>     > +         OnExitBootServices,
>     > +         NULL,
>     > +         &gEfiEventExitBootServicesGuid,
>     > +         &ExitBootServiceEvent
>     > +         );
>     > +
>     > +  //
>     > +  // Register the event to inform SMM variable that it is at runtime for
> legacy
>     > boot.
>     > +  // Reuse OnExitBootServices() here.
>     > +  //
>     > +  EfiCreateEventLegacyBootEx (
>     > +    TPL_NOTIFY,
>     > +    OnExitBootServices,
>     > +    NULL,
>     > +    &LegacyBootEvent
>     > +    );
>     > +
>     > +  //
>     > +  // Register the event to convert the pointer for runtime.
>     > +  //
>     > +  gBS->CreateEventEx (
>     > +         EVT_NOTIFY_SIGNAL,
>     > +         TPL_NOTIFY,
>     > +         VariableAddressChangeEvent,
>     > +         NULL,
>     > +         &gEfiEventVirtualAddressChangeGuid,
>     > +         &mVirtualAddressChangeEvent
>     > +         );
>     > +
>     > +  // Initialize the VariablePolicy protocol and engine.
>     > +  VariablePolicySmmDxeMain (ImageHandle, SystemTable);
>     > +
>     > +  return EFI_SUCCESS;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableStandalon
>     > eMm.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableStandalon
>     > eMm.c
>     > new file mode 100644
>     > index 000000000000..943993eb6738
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableStandalon
>     > eMm.c
>     > @@ -0,0 +1,89 @@
>     > +/** @file
>     > +
>     > +  Parts of the SMM/MM implementation that are specific to standalone
> MM
>     > +
>     > +Copyright (c) 2011 - 2018, Intel Corporation. All rights reserved. <BR>
>     > +Copyright (c) 2018, Linaro, Ltd. All rights reserved. <BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include "Variable.h"
>     > +
>     > +/**
>     > +  This function checks if the buffer is valid per processor architecture and
>     > +  does not overlap with SMRAM.
>     > +
>     > +  @param Buffer The buffer start address to be checked.
>     > +  @param Length The buffer length to be checked.
>     > +
>     > +  @retval TRUE  This buffer is valid per processor architecture and does not
>     > +                overlap with SMRAM.
>     > +  @retval FALSE This buffer is not valid per processor architecture or
> overlaps
>     > +                with SMRAM.
>     > +**/
>     > +BOOLEAN
>     > +VariableSmmIsBufferOutsideSmmValid (
>     > +  IN EFI_PHYSICAL_ADDRESS  Buffer,
>     > +  IN UINT64                Length
>     > +  )
>     > +{
>     > +  return TRUE;
>     > +}
>     > +
>     > +/**
>     > +  Notify the system that the SMM variable driver is ready.
>     > +**/
>     > +VOID
>     > +VariableNotifySmmReady (
>     > +  VOID
>     > +  )
>     > +{
>     > +}
>     > +
>     > +/**
>     > +  Notify the system that the SMM variable write driver is ready.
>     > +**/
>     > +VOID
>     > +VariableNotifySmmWriteReady (
>     > +  VOID
>     > +  )
>     > +{
>     > +}
>     > +
>     > +/**
>     > +  Variable service MM driver entry point.
>     > +
>     > +  @param[in] ImageHandle    A handle for the image that is initializing this
>     > +                            driver
>     > +  @param[in] MmSystemTable  A pointer to the MM system table
>     > +
>     > +  @retval EFI_SUCCESS       Variable service successfully initialized.
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceInitialize (
>     > +  IN EFI_HANDLE           ImageHandle,
>     > +  IN EFI_MM_SYSTEM_TABLE  *MmSystemTable
>     > +  )
>     > +{
>     > +  return MmVariableServiceInitialize ();
>     > +}
>     > +
>     > +/**
>     > +  Whether the TCG or TCG2 protocols are installed in the UEFI protocol
>     > database.
>     > +  This information is used by the MorLock code to infer whether an existing
>     > +  MOR variable is legitimate or not.
>     > +
>     > +  @retval TRUE  Either the TCG or TCG2 protocol is installed in the UEFI
>     > +                protocol database
>     > +  @retval FALSE Neither the TCG nor the TCG2 protocol is installed in the
> UEFI
>     > +                protocol database
>     > +**/
>     > +BOOLEAN
>     > +VariableHaveTcgProtocols (
>     > +  VOID
>     > +  )
>     > +{
>     > +  return FALSE;
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableTradition
>     > alMm.c
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableTradition
>     > alMm.c
>     > new file mode 100644
>     > index 000000000000..0369c3cd01b1
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableTradition
>     > alMm.c
>     > @@ -0,0 +1,130 @@
>     > +/** @file
>     > +
>     > +  Parts of the SMM/MM implementation that are specific to traditional MM
>     > +
>     > +Copyright (c) 2011 - 2018, Intel Corporation. All rights reserved. <BR>
>     > +Copyright (c) 2018, Linaro, Ltd. All rights reserved. <BR>
>     > +SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +
>     > +**/
>     > +
>     > +#include <Library/UefiBootServicesTableLib.h>
>     > +#include <Library/SmmMemLib.h>
>     > +#include "Variable.h"
>     > +
>     > +/**
>     > +  This function checks if the buffer is valid per processor architecture and
>     > +  does not overlap with SMRAM.
>     > +
>     > +  @param Buffer The buffer start address to be checked.
>     > +  @param Length The buffer length to be checked.
>     > +
>     > +  @retval TRUE  This buffer is valid per processor architecture and does not
>     > +                overlap with SMRAM.
>     > +  @retval FALSE This buffer is not valid per processor architecture or
> overlaps
>     > +                with SMRAM.
>     > +**/
>     > +BOOLEAN
>     > +VariableSmmIsBufferOutsideSmmValid (
>     > +  IN EFI_PHYSICAL_ADDRESS  Buffer,
>     > +  IN UINT64                Length
>     > +  )
>     > +{
>     > +  return SmmIsBufferOutsideSmmValid (Buffer, Length);
>     > +}
>     > +
>     > +/**
>     > +  Notify the system that the SMM variable driver is ready.
>     > +**/
>     > +VOID
>     > +VariableNotifySmmReady (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  EFI_HANDLE  Handle;
>     > +
>     > +  Handle = NULL;
>     > +  Status = gBS->InstallProtocolInterface (
>     > +                  &Handle,
>     > +                  &gEfiSmmVariableProtocolGuid,
>     > +                  EFI_NATIVE_INTERFACE,
>     > +                  NULL
>     > +                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +}
>     > +
>     > +/**
>     > +  Notify the system that the SMM variable write driver is ready.
>     > +**/
>     > +VOID
>     > +VariableNotifySmmWriteReady (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  EFI_HANDLE  Handle;
>     > +
>     > +  Handle = NULL;
>     > +  Status = gBS->InstallProtocolInterface (
>     > +                  &Handle,
>     > +                  &gSmmVariableWriteGuid,
>     > +                  EFI_NATIVE_INTERFACE,
>     > +                  NULL
>     > +                  );
>     > +  ASSERT_EFI_ERROR (Status);
>     > +}
>     > +
>     > +/**
>     > +  Variable service MM driver entry point
>     > +
>     > +  @param[in] ImageHandle    A handle for the image that is initializing this
>     > +                            driver
>     > +  @param[in] SystemTable    A pointer to the EFI system table
>     > +
>     > +  @retval EFI_SUCCESS       Variable service successfully initialized.
>     > +**/
>     > +EFI_STATUS
>     > +EFIAPI
>     > +VariableServiceInitialize (
>     > +  IN EFI_HANDLE        ImageHandle,
>     > +  IN EFI_SYSTEM_TABLE  *SystemTable
>     > +  )
>     > +{
>     > +  return MmVariableServiceInitialize ();
>     > +}
>     > +
>     > +/**
>     > +  Whether the TCG or TCG2 protocols are installed in the UEFI protocol
>     > database.
>     > +  This information is used by the MorLock code to infer whether an existing
>     > +  MOR variable is legitimate or not.
>     > +
>     > +  @retval TRUE  Either the TCG or TCG2 protocol is installed in the UEFI
>     > +                protocol database
>     > +  @retval FALSE Neither the TCG nor the TCG2 protocol is installed in the
> UEFI
>     > +                protocol database
>     > +**/
>     > +BOOLEAN
>     > +VariableHaveTcgProtocols (
>     > +  VOID
>     > +  )
>     > +{
>     > +  EFI_STATUS  Status;
>     > +  VOID        *Interface;
>     > +
>     > +  Status = gBS->LocateProtocol (
>     > +                  &gEfiTcg2ProtocolGuid,
>     > +                  NULL,                     // Registration
>     > +                  &Interface
>     > +                  );
>     > +  if (!EFI_ERROR (Status)) {
>     > +    return TRUE;
>     > +  }
>     > +
>     > +  Status = gBS->LocateProtocol (
>     > +                  &gEfiTcgProtocolGuid,
>     > +                  NULL,                     // Registration
>     > +                  &Interface
>     > +                  );
>     > +  return !EFI_ERROR (Status);
>     > +}
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeD
>     > xe.uni
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeD
>     > xe.uni
>     > new file mode 100644
>     > index 000000000000..227b8c6fad24
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeD
>     > xe.uni
>     > @@ -0,0 +1,22 @@
>     > +// /** @file
>     > +// Provides variable service.
>     > +//
>     > +// This module installs variable arch protocol and variable write arch
> protocol
>     > to provide
>     > +// variable services: SetVariable, GetVariable, GetNextVariableName and
>     > QueryVariableInfo.
>     > +//
>     > +// Caution: This module requires additional review when modified.
>     > +// This driver will have external input - variable data.
>     > +// This external input must be validated carefully to avoid security issues
> such
>     > as
>     > +// buffer overflow or integer overflow.
>     > +//
>     > +// Copyright (c) 2006 - 2015, Intel Corporation. All rights reserved.<BR>
>     > +//
>     > +// SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +//
>     > +// **/
>     > +
>     > +
>     > +#string STR_MODULE_ABSTRACT             #language en-US "Provides
> variable
>     > service"
>     > +
>     > +#string STR_MODULE_DESCRIPTION          #language en-US "This module
>     > installs variable arch protocol and variable write arch protocol to provide
>     > variable services: SetVariable, GetVariable, GetNextVariableName and
>     > QueryVariableInfo. Caution: This module requires additional review when
>     > modified. This driver will have external input - variable data. This external
> input
>     > must be validated carefully to avoid security issues such as buffer overflow
> or
>     > integer overflow."
>     > +
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeD
>     > xeExtra.uni
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeD
>     > xeExtra.uni
>     > new file mode 100644
>     > index 000000000000..f0976418ff81
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableRuntimeD
>     > xeExtra.uni
>     > @@ -0,0 +1,14 @@
>     > +// /** @file
>     > +// VariableRuntimeDxe Localized Strings and Content
>     > +//
>     > +// Copyright (c) 2013 - 2018, Intel Corporation. All rights reserved.<BR>
>     > +//
>     > +// SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +//
>     > +// **/
>     > +
>     > +#string STR_PROPERTIES_MODULE_NAME
>     > +#language en-US
>     > +"VariableRuntimeDxe module"
>     > +
>     > +
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.uni
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.uni
>     > new file mode 100644
>     > index 000000000000..414c7cdc7c05
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmm.uni
>     > @@ -0,0 +1,27 @@
>     > +// /** @file
>     > +// Provides SMM variable service.
>     > +//
>     > +// This module installs SMM variable protocol into SMM protocol database,
>     > +// which can be used by SMM driver, and installs SMM variable protocol
>     > +// into BS protocol database, which can be used to notify the SMM
> Runtime
>     > +// Dxe driver that the SMM variable service is ready.
>     > +// This module should be used with SMM Runtime DXE module together.
> The
>     > +// SMM Runtime DXE module would install variable arch protocol and
> variable
>     > +// write arch protocol based on SMM variable module.
>     > +//
>     > +// Caution: This module requires additional review when modified.
>     > +// This driver will have external input - variable data and communicate
> buffer in
>     > SMM mode.
>     > +// This external input must be validated carefully to avoid security issues
> such
>     > as
>     > +// buffer overflow or integer overflow.
>     > +//
>     > +// Copyright (c) 2010 - 2015, Intel Corporation. All rights reserved.<BR>
>     > +//
>     > +// SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +//
>     > +// **/
>     > +
>     > +
>     > +#string STR_MODULE_ABSTRACT             #language en-US "Provides SMM
>     > variable service"
>     > +
>     > +#string STR_MODULE_DESCRIPTION          #language en-US "This module
>     > installs SMM variable protocol into SMM protocol database, which can be
> used
>     > by SMM driver, and installs SMM variable protocol into BS protocol database,
>     > which can be used to notify the SMM Runtime DXE driver that the SMM
> variable
>     > service is ready. This module should be used with SMM Runtime DXE module
>     > together. The SMM Runtime DXE module would install variable arch
> protocol
>     > and variable write arch protocol based on SMM variable module. Caution:
> This
>     > module requires additional review when modified. This driver will have
> external
>     > input - variable data and communicate buffer in SMM mode. This external
> input
>     > must be validated carefully to avoid security issues such as buffer overflow
> or
>     > integer overflow."
>     > +
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmExtr
>     > a.uni
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmExtr
>     > a.uni
>     > new file mode 100644
>     > index 000000000000..f724209f3dc2
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmExtr
>     > a.uni
>     > @@ -0,0 +1,14 @@
>     > +// /** @file
>     > +// VariableSmm Localized Strings and Content
>     > +//
>     > +// Copyright (c) 2013 - 2018, Intel Corporation. All rights reserved.<BR>
>     > +//
>     > +// SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +//
>     > +// **/
>     > +
>     > +#string STR_PROPERTIES_MODULE_NAME
>     > +#language en-US
>     > +"VariableSmm module"
>     > +
>     > +
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxe.uni
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxe.uni
>     > new file mode 100644
>     > index 000000000000..9639f00077a0
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxe.uni
>     > @@ -0,0 +1,23 @@
>     > +// /** @file
>     > +// This module is the Runtime DXE part correspond to SMM variable
> module.
>     > +//
>     > +// It installs variable arch protocol and variable write arch protocol to
> provide
>     > +// four EFI_RUNTIME_SERVICES: SetVariable, GetVariable,
>     > GetNextVariableName and QueryVariableInfo
>     > +// and works with SMM variable module together.
>     > +//
>     > +// Caution: This module requires additional review when modified.
>     > +// This driver will have external input - variable data.
>     > +// This external input must be validated carefully to avoid security issues
> such
>     > as
>     > +// buffer overflow or integer overflow.
>     > +//
>     > +// Copyright (c) 2010 - 2014, Intel Corporation. All rights reserved.<BR>
>     > +//
>     > +// SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +//
>     > +// **/
>     > +
>     > +
>     > +#string STR_MODULE_ABSTRACT             #language en-US "The Runtime
> DXE
>     > part corresponding to the SMM variable module"
>     > +
>     > +#string STR_MODULE_DESCRIPTION          #language en-US "It installs
> variable
>     > arch protocol and variable write arch protocol to provide four
>     > EFI_RUNTIME_SERVICES: SetVariable, GetVariable, GetNextVariableName
> and
>     > QueryVariableInfo and works with SMM variable module together."
>     > +
>     > diff --git
>     >
> a/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxeExtra.uni
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxeExtra.uni
>     > new file mode 100644
>     > index 000000000000..bbabdf82736b
>     > --- /dev/null
>     > +++
>     >
> b/MdeModulePkg/Universal/Variable/Protected/RuntimeDxe/VariableSmmRunt
>     > imeDxeExtra.uni
>     > @@ -0,0 +1,14 @@
>     > +// /** @file
>     > +// VariableSmmRuntimeDxe Localized Strings and Content
>     > +//
>     > +// Copyright (c) 2013 - 2018, Intel Corporation. All rights reserved.<BR>
>     > +//
>     > +// SPDX-License-Identifier: BSD-2-Clause-Patent
>     > +//
>     > +// **/
>     > +
>     > +#string STR_PROPERTIES_MODULE_NAME
>     > +#language en-US
>     > +"VariableSmmRuntimeDxe module"
>     > +
>     > +
>     > --
>     > 2.35.1.windows.2
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 


  reply	other threads:[~2022-11-22  6:27 UTC|newest]

Thread overview: 37+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-11-06  7:34 [PATCH v5 00/19] UEFI variable protection Judah Vang
2022-11-06  7:34 ` [PATCH v5 01/19] MdePkg: Add reference to new Ppi Guid Judah Vang
2022-11-06  7:34 ` [PATCH v5 02/19] MdeModulePkg: Update AUTH_VARIABLE_INFO struct Judah Vang
2022-11-06  7:34 ` [PATCH v5 03/19] MdeModulePkg: Add new ProtectedVariable GUIDs Judah Vang
2022-11-06  7:34 ` [PATCH v5 04/19] MdeModulePkg: Add new include files Judah Vang
2022-11-22  6:31   ` Wang, Jian J
2022-11-06  7:34 ` [PATCH v5 05/19] MdeModulePkg: Add new GUID for Variable Store Info Judah Vang
2022-11-06  7:34 ` [PATCH v5 06/19] MdeModulePkg: Add Null ProtectedVariable Library Judah Vang
2022-11-22  6:39   ` Wang, Jian J
2022-11-06  7:34 ` [PATCH v5 07/19] MdeModulePkg: Add new Variable functionality Judah Vang
2022-11-14  3:43   ` Wang, Jian J
     [not found]   ` <1727569A8ECB6F9D.19699@groups.io>
2022-11-14  4:27     ` [edk2-devel] " Wang, Jian J
2022-11-06  7:34 ` [PATCH v5 08/19] MdeModulePkg: Add support for Protected Variables Judah Vang
2022-11-14  7:14   ` Wang, Jian J
2022-11-14 17:19     ` Judah Vang
2022-11-15  8:49       ` [edk2-devel] " Sami Mujawar
2022-11-22  6:26         ` Wang, Jian J [this message]
     [not found]         ` <1729D430BF77E016.5511@groups.io>
2022-11-22  6:42           ` Wang, Jian J
2022-11-06  7:34 ` [PATCH v5 09/19] MdeModulePkg: Reference Null ProtectedVariableLib Judah Vang
2022-11-22  6:44   ` Wang, Jian J
2022-11-06  7:35 ` [PATCH v5 10/19] SecurityPkg: Add new GUIDs for Judah Vang
2022-11-06  7:35 ` [PATCH v5 11/19] SecurityPkg: Add new KeyService types and defines Judah Vang
2022-11-22  6:46   ` Wang, Jian J
2022-11-06  7:35 ` [PATCH v5 12/19] SecurityPkg: Add new variable types and functions Judah Vang
2022-11-06  7:35 ` [PATCH v5 13/19] SecurityPkg: Update RPMC APIs with index Judah Vang
2022-11-06  7:35 ` [PATCH v5 14/19] SecurityPkg: Fix GetVariableKey API Judah Vang
2022-11-06  7:35 ` [PATCH v5 15/19] SecurityPkg: Add null encryption variable libs Judah Vang
2022-11-22  6:55   ` Wang, Jian J
2022-11-06  7:35 ` [PATCH v5 16/19] SecurityPkg: Add VariableKey library function Judah Vang
2022-11-06  7:35 ` [PATCH v5 17/19] SecurityPkg: Add EncryptionVariable lib with AES Judah Vang
2022-11-22  7:15   ` Wang, Jian J
2022-11-06  7:35 ` [PATCH v5 18/19] SecurityPkg: Add Protected Variable Services Judah Vang
2022-11-22  7:59   ` Wang, Jian J
2022-11-06  7:35 ` [PATCH v5 19/19] SecurityPkg: Add references to new *.inf files Judah Vang
2022-11-22  8:05   ` Wang, Jian J
2022-12-09  8:03 ` [edk2-devel] [PATCH v5 00/19] UEFI variable protection Yao, Jiewen
     [not found] ` <172F11512E3044E7.1612@groups.io>
2022-12-09  9:41   ` Yao, Jiewen

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-list from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=MW4PR11MB676342F37DA14ABD5ADDEACEB60D9@MW4PR11MB6763.namprd11.prod.outlook.com \
    --to=devel@edk2.groups.io \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox