Skip to content

Conversation

@apop5
Copy link
Collaborator

@apop5 apop5 commented Oct 3, 2025

Description

XDR certificates are 4 byte aligned, but getting the PCD value does not guarantee an aligned pointer. Existing logic would align pointer, which was an issue for if the pointer was unaigned to begin with.

Use align to goto the next public key, to account for unaligned pointer being returned from pcd.

Brining this fix from tianocore/edk2#11529 into MFCI.

  • Impacts functionality?
  • Impacts security?
  • Breaking change?
  • Includes tests?
  • Includes documentation?

How This Was Tested

Untested. This change is being brought from the FmpDxe, which encountered
this problem with an unaligned PCD pointer.

Integration Instructions

N/A

XDR certificates are 4 byte aligned, but getting the PCD value does not guarantee
an aligned pointer. Existing logic would align pointer, which was an issue
for if the pointer was unaigned to begin with.

Use align to goto the next public key, to account for unaligned pointer being returned
from pcd.

Brining this fix from tianocore/edk2#11529 into MFCI.
@apop5 apop5 requested a review from spbrogan October 3, 2025 21:37
@makubacki
Copy link
Member

I know this is using the PR title from the original edk2 commit, but since it is not a straight cherry-pick, I think there's a good opportunity to make it more precise to the actual change.

@apop5 apop5 changed the title MfciPkg: Improve handling of XDR certs MfciPkg: Address PCD pointers that are not aligned. Oct 3, 2025
@mu-automation
Copy link
Contributor

mu-automation bot commented Dec 2, 2025

This PR has been automatically marked as stale because it has not had activity in 60 days. It will be closed if no further activity occurs within 7 days. Thank you for your contributions.

@mu-automation mu-automation bot added the state:stale Has not been updated in a long time label Dec 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

state:stale Has not been updated in a long time

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants