Changeset 100126 in vbox for trunk/src/VBox/Devices

Timestamp:

Jun 8, 2023 3:38:21 PM (18 months ago)

Author:

vboxsync

Message:

Devices/EFI/Firmware: Don't apply NX protection to EfiLoaderData regions as older aarch64 grub images assume being able to execute code from there, fixes the OpenSuse and fedora bootloaders, bugref:10400

File:

• trunk/src/VBox/Devices/EFI/Firmware/ArmVirtPkg/ArmVirt.dsc.inc (modified) (1 diff)

trunk/src/VBox/Devices/EFI/Firmware/ArmVirtPkg/ArmVirt.dsc.inc

@@ -362 +362 @@
   # (i.e., GRUB) may assume that its contents are executable.
   #
+!ifdef $(VBOX)
+  #
+  # The default protection includes EfiLoaderData which older grub bootloaders
+  # fail to boot with because they assume being able to execute code from such memory
+  # regions. So don't apply the NX protection there.
+  #
+  gEfiMdeModulePkgTokenSpaceGuid.PcdDxeNxMemoryProtectionPolicy|0xC000000000007FD1
+!else
   gEfiMdeModulePkgTokenSpaceGuid.PcdDxeNxMemoryProtectionPolicy|0xC000000000007FD5
+!endif
 
 [Components.common]