dev-v2025020002.0.0

What's Changed

• [CHERRY-PICK] Fix SPDM build by cherry-picking EDK2 commits kuqin12 (#424)
  
  Change Details

    ## Description

  This change cherry-picked 2 commits to minimally fix the build breaking issue during CodeQL scanning.

  For details on how to complete these options and their meaning refer to CONTRIBUTING.md.

  • Impacts functionality?
  • Impacts security?
  • Breaking change?
  • Includes tests?
  • Includes documentation?
  • Backport to release branch?

  How This Was Tested

  This change was tested by building the SPDM module and running the CodeQL scan

  Integration Instructions

  N/A

    </blockquote>
    <hr>
  </details>
  

⚠️ Breaking Changes

• [CHERRY-PICK] [REBASE \& FF] Revert Tpm2DebugLib and Cherry Pick DEBUG\_SECURITY Changes Oliver Smith-Denny (@os-d) (#426)
  
  Change Details

    ## Description

  Tpm2DebugLib was rejected in edk2 but upstreamed in a different form as the DEBUG_SECURITY error level bit. This PR reverts the Mu PRs and cherry-picks the edk2 PRs.

  • Impacts functionality?
  • Impacts security?
  • Breaking change?
  • Includes tests?
  • Includes documentation?
  • Backport to release branch?

  How This Was Tested

  Cherry-picked.

  Integration Instructions

  Remove Tpm2DebugLib from the platform DSC.

    </blockquote>
    <hr>
  </details>
  

• [CHERRY-PICK] Move to TPM over FFA support from EDK2 [Rebase \& FF] kuqin12 (#423)
  
  Change Details

    ## Description

  This change reverts the original implementation of TPM over FF-A in EDK2 and moves it to the EDK2 implementation.

  • Impacts functionality?
  • Impacts security?
  • Breaking change?
  • Includes tests?
  • Includes documentation?
  • Backport to release branch?

  How This Was Tested

  This was tested on QEMU SBSA and booted to UEFI shell.

  Integration Instructions

  The Tpm2DeviceLibFfa now resides in SecurityPkg
  

  
  

  ---

  
  

🐛 Bug Fixes

• [Bug]: NULL check in Tpm2DebugLibVerbose.c @[copilot-swe-agent[bot]](https://github.com/apps/copilot-swe-agent) (#419)
  
  Change Details

    Fixes a NULL check issue in Tpm2DebugLibVerbose.c.

  • Analyzed the issue - The problem is that the for loop condition on line 1148 dereferences PcrValues->digests[Index].size before checking if PcrValues->digests is NULL on line 1149
  • Identified the minimal fix needed - Move the NULL checks outside the inner loop to prevent dereferencing NULL pointers
  • Implement the fix by restructuring the code to check for NULL pointers before accessing digest data
  • Test the build to ensure no compilation errors - Verified syntax with gcc compilation test
  • Verify the fix matches the suggested solution in the issue - Exactly matches the suggested code

  The fix moves the NULL pointer checks outside the for loop to prevent dereferencing PcrValues->digests[Index].size when PcrValues->digests might be NULL. This is a minimal, surgical change that addresses the static code analysis finding.

  Fixes #418.
  

  
  

  ---

  
  

🔐 Security Impacting

• EmbeddedPkg: Add IoMmu support to CoherentDmaLib \& NonCoherentDmaLib Eeshan Londhe (@eeshanl) (#410)
  
  Change Details

    ## Description

  Add IoMmu support to CoherentDmaLib
  Add IoMmu support to NonCoherentDmaLib
  Uses IoMmuLib to do IoMmu protocol mappings.

  For details on how to complete these options and their meaning refer to CONTRIBUTING.md.

  • Impacts functionality?
  • Impacts security?
  • Breaking change?
  • Includes tests?
  • Includes documentation?
  • Backport to release branch?

  How This Was Tested

  Tested on physical arm device

  Integration Instructions

  Relies on microsoft/mu_basecore#1364 to be merged first.
  

  
  

  ---

  
  

Full Changelog: dev-v2025020001.0.0...dev-v2025020002.0.0