Branch: refs/heads/master
  Home:   https://github.com/tianocore/edk2
  Commit: 8b87eb9dfba054331ed16204f36c4885aefc3c94
      
https://github.com/tianocore/edk2/commit/8b87eb9dfba054331ed16204f36c4885aefc3c94
  Author: Tom Lendacky <thomas.lenda...@amd.com>
  Date:   2025-01-13 (Mon, 13 Jan 2025)

  Changed paths:
    M OvmfPkg/AmdSev/AmdSevX64.dsc
    M OvmfPkg/CloudHv/CloudHvX64.dsc
    M OvmfPkg/Microvm/MicrovmX64.dsc

  Log Message:
  -----------
  OvmfPkg: Use the OvmfPkg version of CcProbeLib

Currently, multiple dsc files within the OvmfPkg directory use the NULL
version of the CcProbeLib library. However, these packages have support
for confidential guests (usage of CcExitLib, MemEncrypt{Sev,Tdx}Lib, etc.)
and should be using the OvmfPkg version of the CcProbeLib.

The use of the NULL library causes the PCI option ROM to be enabled, which
can't be trusted as it originates from the hypervisor. The use of the NULL
library also causes a KVM hypervisor error when attempting to map/back the
option ROM region when running an SEV-SNP guest.

Update the various dsc files to reference the OvmfPkg version of the
CcProbeLib library and prevent usage of PCI option ROMs.

Signed-off-by: Tom Lendacky <thomas.lenda...@amd.com>



To unsubscribe from these emails, change your notification settings at 
https://github.com/tianocore/edk2/settings/notifications


_______________________________________________
edk2-commits mailing list
edk2-commits@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/edk2-commits

Reply via email to