Hi,

Comments below, with that updated, you can have my R-b.

From now, low response as out of office today.

On 2016/3/25 1:31, Laszlo Ersek wrote:
On 03/24/16 17:30, James Bottomley wrote:
During real world testing I was getting an error with too many entries
in db: On my Secure boot laptop, I currently have seven certificates:
two Microsoft ones, Three Kernel ones from various distributions, my
own Secure Key and a temporary test key.  That gives a total EFI
Signature List size of 8317 which is over the 0x2000 maximum.

Fix this by setting the PcdMaxAuthVariableSize to 0x2800 (10K) which
isn't much of an increase but allows for 9-10 certificates.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: James Bottomley <james.bottom...@hansenpartnership.com>
---
  OvmfPkg/OvmfPkgIa32.dsc    | 1 +
  OvmfPkg/OvmfPkgIa32X64.dsc | 1 +
  OvmfPkg/OvmfPkgX64.dsc     | 1 +
  3 files changed, 3 insertions(+)

diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc
index 2635992..c6ad2e9 100644
--- a/OvmfPkg/OvmfPkgIa32.dsc
+++ b/OvmfPkg/OvmfPkgIa32.dsc
@@ -381,6 +381,7 @@
    gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxFvSupported|6
    gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxPeimPerFv|32
    gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize|0x2000
+  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxAuthVariableSize|0x8000

Not aligned with OvmfPkgIa32X64.dsc.

    gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize|0x8000
    gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize|0xe000

diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc
index e9ffcb4..439f3bf 100644
--- a/OvmfPkg/OvmfPkgIa32X64.dsc
+++ b/OvmfPkg/OvmfPkgIa32X64.dsc
@@ -386,6 +386,7 @@
    gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxFvSupported|6
    gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxPeimPerFv|32
    gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize|0x2000
+  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxAuthVariableSize|0x2800
    gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize|0x8000
    gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize|0xe000

diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc
index c983a54..74d4814 100644
--- a/OvmfPkg/OvmfPkgX64.dsc
+++ b/OvmfPkg/OvmfPkgX64.dsc
@@ -386,6 +386,7 @@
    gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxFvSupported|6
    gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxPeimPerFv|32
    gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize|0x2000
+  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxAuthVariableSize|0x8000

Not aligned with OvmfPkgIa32X64.dsc.

Thanks,
Star

    gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize|0x8000
    gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize|0xe000

Patch looks good, except you forgot to update the values in the
OvmfPkgIa32.dsc and OvmfPkgX64.dsc files; they still say 0x8000. Please
send a v3.

Thanks!
Laszlo


_______________________________________________
edk2-devel mailing list
edk2-devel@lists.01.org
https://lists.01.org/mailman/listinfo/edk2-devel

Reply via email to