Re: [edk2-devel] [PATCH 1/4] UefiCpuPkg/MpInitLib: honor the platform's boot CPU count in AP detection

2019-10-10 Thread Laszlo Ersek
On 10/10/19 09:38, Laszlo Ersek wrote: > On 10/10/19 04:52, Ni, Ray wrote: >> Laszlo, >> Can you add comments in the code you changed to describe the two different >> behaviors? > > It's described in the DEC file, near the PCD: > > + # nonzero

[edk2-devel] [PATCH v2 1/2] UefiCpuPkg/MpInitLib: expand comment on initial AP enumeration

2019-10-10 Thread Laszlo Ersek
Before adding another AP enumeration mode, clarify the documentation on the current logic. No functional changes. Cc: Eric Dong Cc: Ray Ni Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1515 Signed-off-by: Laszlo Ersek --- Notes: v2: - new patch UefiCpuPkg/Library/MpInitLib

[edk2-devel] [PATCH v2 2/2] UefiCpuPkg/MpInitLib: honor the platform's boot CPU count in AP detection

2019-10-10 Thread Laszlo Ersek
avior when the exact boot CPU count is known in advance. (A hung boot is better than an AP checking-in after timeout, and executing code from released storage.) Cc: Eric Dong Cc: Ray Ni Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1515 Signed-off-by: Laszlo Ersek --- Notes: v2: - u

[edk2-devel] [PATCH v2 0/2] UefiCpuPkg/MpInitLib: introduce PcdCpuBootLogicalProcessorNumber

2019-10-10 Thread Laszlo Ersek
ensively than the existent comment). Then the new mode is introduced (with additional documentation). Cc: Eric Dong Cc: Ray Ni Thanks, Laszlo Laszlo Ersek (2): UefiCpuPkg/MpInitLib: expand comment on initial AP enumeration UefiCpuPkg/MpInitLib: honor the platform's boot CPU count in AP

Re: [edk2-devel] [PATCH v1 1/1] NetworkPkg/SnpDxe: Remove ExitBootServices event

2019-10-10 Thread Laszlo Ersek
On 10/10/19 11:29, Fu, Siyuan wrote: >> -Original Message- >> From: Laszlo Ersek >> Sent: 2019年10月10日 16:06 >> To: Fu, Siyuan ; devel@edk2.groups.io; Rabeda, >> Maciej >> Cc: Wu, Jiaxin >> Subject: Re: [edk2-devel] [PATCH v1 1/1] NetworkPk

Re: [edk2-devel] [Patch 05/12] MdePkg BaseIoLibIntrinsic: Remove __inline__ attribute for IO functions

2019-10-10 Thread Laszlo Ersek
Hi Liming, Andrew, On 10/10/19 14:32, Liming Gao wrote: > Laszlo: > >> -Original Message----- >> From: Laszlo Ersek >> Sent: Wednesday, October 9, 2019 4:22 AM >> To: Gao, Liming ; devel@edk2.groups.io; af...@apple.com >> Subject: Re: [edk2-devel] [Pa

Re: [edk2-devel] [Patch 11/12] OvmfPkg: Enable CLANG9 tool chain -

2019-10-10 Thread Laszlo Ersek
Hi Liming, On 10/10/19 14:18, Liming Gao wrote: >> -Original Message- >> From: devel@edk2.groups.io On Behalf Of Laszlo Ersek >> Sent: Thursday, October 10, 2019 3:35 PM >> To: Andrew Fish ; Gao, Liming >> Cc: devel@edk2.groups.io >> Subject: Re

Re: [edk2-devel] [Patch 12/12] OvmfPkg SecMain: Add build option "-fno-omit-frame-pointer" for CLANG9 X64

2019-10-10 Thread Laszlo Ersek
Hi Liming, On 10/10/19 16:08, Liming Gao wrote: > Laszlo: > Option (a) works. Jordan patch can fix this issue. > Option (b) doesn't work. Even if disable optimization, CLANG doesn't > generate the code with push rbp & pop rbp. > > So, Jordan patch becomes only option. We can discuss thi

Re: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553)

2019-10-10 Thread Laszlo Ersek
On 10/10/19 17:45, David Woodhouse wrote: > On Thu, 2019-10-10 at 10:00 +0200, Laszlo Ersek wrote: >>> Subject: C=HU, ST=Pest, L=Budapest, O=Laszlo Ersek Home Office, >>> OU=IPv6 cert, CN=fd33:eb1b:9b36::2 > > Yeah, you're not actually testing the case

Re: [edk2-devel] question about qemu+kvm+ovmf+winxp

2019-10-10 Thread Laszlo Ersek
On 10/10/19 16:37, Junhao Gao wrote: > Hi edk2 members > >I have a question for your help. >I want to enable qemu+kvm+ovmf to boot up windows xp, >then ovmf support winxp starting-up? To my understanding, the first Windows "family" with any kind of U

Re: [edk2-devel] [RFC PATCH v2 38/44] UefiCpuPkg: Allow AP booting under SEV-ES

2019-10-11 Thread Laszlo Ersek
On 10/11/19 01:17, Lendacky, Thomas wrote: > On 10/3/19 10:12 AM, Tom Lendacky wrote: >> >> >> On 10/3/19 5:32 AM, Laszlo Ersek wrote: >>> On 10/03/19 12:12, Laszlo Ersek wrote: >>> >>>> UINT32 ApEntryPoint; >>>> EFI_GUID SevEsFo

Re: [edk2-devel] [Patch 11/12] OvmfPkg: Enable CLANG9 tool chain

2019-10-11 Thread Laszlo Ersek
Hi Liming, On 10/09/19 16:44, Gao, Liming wrote: > The difference between XCODE/CLANG and GCCXX is the linker. Current > patches are introduced for the different linker. Clang supports most > usage of GCC compiler. So, CLANG and XCODE uses GCC family. When I > enable XCODE or CLANG tool chain in

Re: [edk2-devel] [PATCH v1 1/1] NetworkPkg/SnpDxe: Remove ExitBootServices event

2019-10-11 Thread Laszlo Ersek
On 10/11/19 02:14, Fu, Siyuan wrote: >> -Original Message- >> From: Laszlo Ersek >> Sent: 2019年10月11日 0:06 >> To: Fu, Siyuan ; devel@edk2.groups.io; Rabeda, >> Maciej >> Cc: Wu, Jiaxin >> Subject: Re: [edk2-devel] [PATCH v1 1/1] NetworkPk

Re: [edk2-devel] [Patch 12/12] OvmfPkg SecMain: Add build option "-fno-omit-frame-pointer" for CLANG9 X64

2019-10-11 Thread Laszlo Ersek
On 10/11/19 03:30, Liming Gao wrote: > Laszlo: > >> -Original Message----- >> From: Laszlo Ersek [mailto:ler...@redhat.com] >> Sent: Friday, October 11, 2019 1:35 AM >> To: devel@edk2.groups.io; Gao, Liming ; Justen, >> Jordan L >> Subject: Re: [edk2

Re: [edk2-devel] [Patch 11/12] OvmfPkg: Enable CLANG9 tool chain -

2019-10-11 Thread Laszlo Ersek
On 10/11/19 03:47, Liming Gao wrote: > Laszlo: > >> -Original Message----- >> From: Laszlo Ersek [mailto:ler...@redhat.com] >> Sent: Friday, October 11, 2019 12:43 AM >> To: devel@edk2.groups.io; Gao, Liming ; Andrew Fish >> >> Cc: Justen, Jordan L

Re: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553)

2019-10-11 Thread Laszlo Ersek
dress), if > you do need such feature that verify the IP in X509_check_ip & > X509_check_ip_asc , please report new Bugzilla (need TLS Spec update the > expose the setting interface), don't mix up the HTTPS hostname verification > here. (To clarify my stance.) Given the ab

Re: [edk2-devel] OVMF is crashing for me in master

2019-10-11 Thread Laszlo Ersek
Hi, On 10/11/19 03:19, Liming Gao wrote: > Andrew: > I verify the change (2de1f611be06ded3a59726a4052a9039be7d459b > MdeModulePkg/BdsDxe: Also call PlatformBootManagerWaitCallback on 0) > in Emulator. > It works, because PCD value is set to 10 in Emulator. > > Before this change, if Time

Re: [edk2-devel] OVMF is crashing for me in master

2019-10-11 Thread Laszlo Ersek
On 10/11/19 06:59, Andrew Fish via Groups.Io wrote: > Liming, > > Thanks for looking into this! > > Can someone also answer my question about the expected behavior of taking an > exception in OVMF? Is the CpuDeadloop() expected? Yes, it is. The exception handler dumps the register file and t

Re: [edk2-devel] question about qemu+kvm+ovmf+winxp

2019-10-11 Thread Laszlo Ersek
and check out the <https://www.kraxel.org/repos/> > continuous > integration repository, which provides CSM-enabled OVMF builds. > > Could you help me to choose which branch supporting CSM, and more > details, thanks very much. > > Thanks, > Junhao &

Re: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553)

2019-10-11 Thread Laszlo Ersek
On 10/11/19 13:16, David Woodhouse wrote: > On Fri, 2019-10-11 at 12:55 +0200, Laszlo Ersek wrote: >> On 10/11/19 04:24, Wu, Jiaxin wrote: >>> Hi Laszlo & David, >>> >>> I think I have *repeated* several times that we are targeting to fix the >>&g

Re: [edk2-devel] OVMF is crashing for me in master

2019-10-11 Thread Laszlo Ersek
Hi Andrew, On 10/11/19 15:13, Andrew Fish wrote: > I'm with Pete on this as my expectation would be the progress bar > completes when you are done. I'd also point out that a common progress > bar UI implementation is to show the area that is going to be updated. > I don't think our UI does that,

Re: [edk2-devel] [PATCH v2 2/2] UefiCpuPkg/MpInitLib: honor the platform's boot CPU count in AP detection

2019-10-11 Thread Laszlo Ersek
On 10/11/19 10:22, Ni, Ray wrote: > Laszlo, the comments couldn't be better! Thanks!! > > Reviewed-by: Ray Ni Thanks, Ray :) Series pushed as commit range a7e2d20193e8..778832bcad33. Cheers! Laszlo > >> -Original Message- >> From: Laszlo Ersek >>

Re: [edk2-devel] question about qemu+kvm+ovmf+winxp

2019-10-14 Thread Laszlo Ersek
On 10/11/19 16:35, David Woodhouse wrote: > On Fri, 2019-10-11 at 16:27 +0200, Laszlo Ersek wrote: >> On 10/11/19 09:44, Gao, Junhao wrote: >>> Hi David >>> >>>I have found this compiled OVMF-with-csm.fd can support winxp >>> booting up.

Re: [edk2-devel] [RFC PATCH v2 38/44] UefiCpuPkg: Allow AP booting under SEV-ES

2019-10-14 Thread Laszlo Ersek
On 10/12/19 08:42, Andrew Fish wrote: > Laszlo, > > For 2) this is very unfortunate. I think the root cause is for those > of us who work on x86 hardware day to day we get programed that > SEC/PEI is IA32 and DXE is X64, and this can lead to some unfortunate > coding outcomes. First I was confuse

Re: [edk2-devel] [PATCH 1/1] OvmfPkg/PlatformBootManagerLib: Don't update progress if Pcd is 0

2019-10-14 Thread Laszlo Ersek
; +(TimeoutInitial - TimeoutRemain) * 100 / TimeoutInitial, > 0 > ); > } > (2) Can you please post the same patch for "ArmVirtPkg/Library/PlatformBootManagerLib/PlatformBm.c" as well? That would be mean two patches, in a v2 series. With both (1) and (2) cover

Re: [edk2-devel] [PATCH 1/1] MdeModulePkg/BdsDxe: Fix calling PlatformBootManagerWaitCallback on 0

2019-10-14 Thread Laszlo Ersek
at.com; Gao, Liming >> Subject: [PATCH 1/1] MdeModulePkg/BdsDxe: Fix calling >> PlatformBootManagerWaitCallback on 0 >> >> From: Laszlo Ersek >> >> Commit 2de1f611be06ded3a59726a4052a9039be7d459b introduced a >> regression >> whereas

Re: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553)

2019-10-14 Thread Laszlo Ersek
On 10/11/19 18:01, David Woodhouse wrote: > On Fri, 2019-10-11 at 17:36 +0200, Laszlo Ersek wrote: >> On 10/11/19 13:16, David Woodhouse wrote: >>> I first started looking at this when it was >>> reported as such, on the list. >> >> I believe you. Can you s

Re: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553)

2019-10-14 Thread Laszlo Ersek
On 10/14/19 18:15, Laszlo Ersek wrote: > David: another way to prevent the regression is to commit the current > patches, but disable them with a BOOLEAN PCD, by default. (This need not > be a feature PCD; it could even be dynamic.) Then platforms accepting > the SAN/GEN_IP regression

Re: [edk2-devel] [PATCH v2 0/2] PlatformBootManagerLib: Don't update progress if Pcd is 0

2019-10-14 Thread Laszlo Ersek
On 10/14/19 17:03, Pete Batard wrote: > Changes from previous version: > - Additional empty comment lines above and below, to keep with existing > comment > style > - Similar logic is applied to ArmVirtPkg/PlatformBootManagerLib, since the > same > issue may manifest itself here. > > Pete Ba

Re: [edk2-devel] [PATCH V3 9/9] OvmfPkg: Disable variable runtime cache

2019-10-14 Thread Laszlo Ersek
SMM > timing and stability differences on the BSP (e.g. CPU#0) vs an > AP (e.g. CPU#1). > # taskset -c 0 efibootmgr > # taskset -c 1 efibootmgr > > Cc: Ard Biesheuvel > Cc: Laszlo Ersek > Cc: Liming Gao > Cc: Jordan Justen > Cc: Hao A Wu > Signed-off-by: Michael K

Re: [edk2-devel] [PATCH V4 09/10] OvmfPkg: Disable variable runtime cache

2019-10-15 Thread Laszlo Ersek
ming and stability differences on the BSP (e.g. CPU#0) vs an > AP (e.g. CPU#1). > # taskset -c 0 efibootmgr > # taskset -c 1 efibootmgr > > Cc: Ard Biesheuvel > Cc: Laszlo Ersek > Cc: Liming Gao > Cc: Jordan Justen > Cc: Hao A Wu > Signed-off-by: Michael K

Re: [edk2-devel] [PATCH V4 10/10] MdeModulePkg: Enable variable runtime cache by default

2019-10-15 Thread Laszlo Ersek
On 10/15/19 01:30, Michael Kubacki wrote: > This change enables the variable runtime cache by default by setting > gEfiMdeModulePkgTokenSpaceGuid.PcdEnableVariableRuntimeCache in > MdeModulePkg.dec to TRUE. > > Cc: Dandan Bi > Cc: Ard Biesheuvel > Cc: Eric Dong > Cc: La

Re: [edk2-devel] [Patch v2 00/11] New Cross OS tool chain CLANG9

2019-10-15 Thread Laszlo Ersek
On 10/15/19 02:26, Liming Gao wrote: > In v2, drop patch 12, and update commit message for 5 & 11. Thank you, Liming. In patch 11, there is a small typo in the commit message, "crush" vs. "crash". If you get the chance, please correct that just before pushing. Thanks! Laszlo -=-=-=-=-=-=-=-=-=-

Re: [edk2-devel] [PATCH 1/1] DynamicTablesPkg: include ARM intrinsics library to fix 32-bit build

2019-10-15 Thread Laszlo Ersek
for both ARM and AARCH64 (which may > start relying on intrinsics due to future changes) > > Link: https://bugzilla.tianocore.org/show_bug.cgi?id=2269 > Reported-by: Laszlo Ersek > Signed-off-by: Ard Biesheuvel > --- > DynamicTablesPkg/DynamicTablesPkg.dsc | 1 + > 1 fi

Re: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553)

2019-10-15 Thread Laszlo Ersek
On 10/15/19 13:03, David Woodhouse wrote: > On Mon, 2019-10-14 at 18:15 +0200, Laszlo Ersek wrote: >> My understanding is that a fix purely in edk2 -- that is, without >> advancing our openssl submodule reference at once -- is possible, based >> on your

Re: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553)

2019-10-15 Thread Laszlo Ersek
On 10/15/19 15:54, Laszlo Ersek wrote: > On 10/15/19 13:03, David Woodhouse wrote: >> The "app callback" in my OpenConnect example is set on the SSL_CTX not >> the SSL object, and is called from the top-level >> ssl_verify_cert_chain() function *instead* of

Re: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553)

2019-10-15 Thread Laszlo Ersek
On 10/15/19 17:57, David Woodhouse wrote: > On Thu, 2019-10-10 at 20:03 +0200, Laszlo Ersek wrote: >> (I can't test it easily myself, as I don't even know how to create a >> server certificate with a SAN -- any kind of SAN, let alone GEN_IP.) > > I had to

Re: [edk2-devel] [PATCH v1 0/4] Support HTTPS HostName validation feature(CVE-2019-14553)

2019-10-15 Thread Laszlo Ersek
On 10/15/19 18:56, Laszlo Ersek wrote: > On 10/15/19 15:54, Laszlo Ersek wrote: >> On 10/15/19 13:03, David Woodhouse wrote: > >>> The "app callback" in my OpenConnect example is set on the SSL_CTX not >>> the SSL object, and is called from the top-le

Re: [edk2-devel] [PATCH 1/1] ShellPkg: Do not connect handles without device paths

2020-01-14 Thread Laszlo Ersek
On 01/14/20 11:34, Vitaly Cheptsov via Groups.Io wrote: > - ConnectControllers > ShellPkg/Library/UefiShellDriver1CommandsLib/Connect.c > > This one is more complex, as it supports explicitly connecting specified > controllers, however, for connecting all controllers it locates handles with > g

Re: [edk2-devel] [patch] MdeModulePkg/Setup: Update opcode number variable type to UINTN

2020-01-14 Thread Laszlo Ersek
Hi Dandan, Brian, On 01/14/20 09:56, Dandan Bi wrote: > From: Brian R Haug > > Update data type of variables which save the opcode numbers > to UINTN, in case some configuration module has lots of > configuration items. > > Cc: Liming Gao > Cc: Eric Dong > Signed-off-by: Brian R Haug > Reviewe

Re: [edk2-devel] [patch] MdeModulePkg/Setup: Update opcode number variable type to UINTN

2020-01-14 Thread Laszlo Ersek
On 01/14/20 14:08, Laszlo Ersek wrote: > Hi Dandan, Brian, > > On 01/14/20 09:56, Dandan Bi wrote: >> From: Brian R Haug >> >> Update data type of variables which save the opcode numbers >> to UINTN, in case some configuration module has lots of >> co

Re: [edk2-devel] [PATCH 1/2] Maintainers.txt: update email address for Leif Lindholm

2020-01-14 Thread Laszlo Ersek
CC Phil On 01/14/20 17:32, Leif Lindholm wrote: > Leif now works at NUVIA Inc, update email address accordingly. > > Cc: Andrew Fish > Cc: Ard Biesheuvel > Cc: Laszlo Ersek > Cc: Michael D Kinney > Cc: Ray Ni > Cc: Zhichao Gao > Cc: Leif Lindholm >

Re: [edk2-devel] [PATCH] UefiCpuPkg/Library/MpInitLib: Remove BSP index == 0 Assumption.

2020-01-15 Thread Laszlo Ersek
> Cc: Ray Ni > Cc: Laszlo Ersek > Signed-off-by: Eric Dong > --- > UefiCpuPkg/Library/MpInitLib/MpLib.c | 10 ++ > 1 file changed, 6 insertions(+), 4 deletions(-) > > diff --git a/UefiCpuPkg/Library/MpInitLib/MpLib.c > b/UefiCpuPkg/Library/MpInitLib/MpLib.c

Re: [edk2-devel] [PATCH] UefiCpuPkg/PiSmmCpuDxeSmm: fix 2M->4K page splitting regression for PDEs

2020-01-15 Thread Laszlo Ersek
Hi Ray, Eric, any comments about the patch below? It hasn't been a week yet (I usually don't ping before a full week), but the patch is not large, so I figure maybe you've missed it. (Traffic on has been quite high recently.) Thanks! Laszlo On 01/10/20 00:25, Laszlo Ersek wro

Re: [edk2-devel] [PATCH] UefiCpuPkg/PiSmmCpuDxeSmm: fix 2M->4K page splitting regression for PDEs

2020-01-15 Thread Laszlo Ersek
On 01/15/20 12:08, Philippe Mathieu-Daudé wrote: > On 1/10/20 12:25 AM, Laszlo Ersek wrote: >> In commit 4eee0cc7cc0d ("UefiCpuPkg/PiSmmCpu: Enable 5 level paging when >> CPU supports", 2019-07-12), the Page Directory Entry setting was >> regressed >> (corrup

Re: [edk2-devel] [RFC PATCH] ArmPkg/PlatformBmLib: defer GOP console discovery after Driver#### dispatch

2020-01-15 Thread Laszlo Ersek
Hi Ard, On 01/15/20 11:22, Ard Biesheuvel wrote: > Currently, ArmPkg's implementation of PlatformBootManagerBeforeConsole() > iterates over all PCI I/O handles in the database and connects the ones > that may produce an instance of the Graphics Output Protocol (GOP) once > connected. After that, i

Re: [edk2-devel] [RFC PATCH] ArmPkg/PlatformBmLib: defer GOP console discovery after Driver#### dispatch

2020-01-15 Thread Laszlo Ersek
On 01/15/20 14:02, Ard Biesheuvel wrote: > On Wed, 15 Jan 2020 at 13:50, Laszlo Ersek wrote: >> (3) So how about the following approach: >> >> (3a) factor the following sequence: >> >> FilterAndProcess (&gEfiPciIoProtocolGuid, IsPciDis

Re: [edk2-devel] [PATCH] UefiCpuPkg/Library/MpInitLib: Remove BSP index == 0 Assumption.

2020-01-16 Thread Laszlo Ersek
On 01/16/20 04:15, Dong, Eric wrote: > Hi Laszlo, > >> -Original Message----- >> From: Laszlo Ersek [mailto:ler...@redhat.com] >> Sent: Wednesday, January 15, 2020 6:05 PM >> To: Dong, Eric ; devel@edk2.groups.io >> Cc: Ni, Ray >> Subject: Re: [PATCH

Re: [edk2-devel] [PATCH v3 1/2] CryptoPkg/BaseCryptLib: replace HmacXxxInit API with HmacXxxSetKey

2020-01-16 Thread Laszlo Ersek
tialization works. The > user can still get HMAC context via HmacXxxNew interface, which hides the > details about the context. > > Cc: Xiaoyu Lu > Cc: Laszlo Ersek > Signed-off-by: Jian J Wang > --- > CryptoPkg/Include/Library/BaseCryptLib.h | 94 ++

Re: [edk2-devel] [PATCH v3 2/2] CryptoPkg/BaseCryptLib: remove HmacXxxGetContextSize interface

2020-01-16 Thread Laszlo Ersek
ion and release, > use HmacXxxNew() and HmacXxxFree() instead. > > Cc: Xiaoyu Lu > Cc: Laszlo Ersek > Signed-off-by: Jian J Wang > --- > CryptoPkg/Include/Library/BaseCryptLib.h | 17 -- > .../Library/BaseCryptLib/Hmac/CryptHmacMd5.c | 31

[edk2-devel] [PATCH] BaseTools/Conf/gitattributes: fix "--function-context" for *.h and *.c

2020-01-16 Thread Laszlo Ersek
* cpp suitable for source code in the C and C++ >languages. The key statement is the one in parentheses. Thus, mark our *.h and *.c files as belonging to the "cpp" git-diff driver. This change has a dramatic effect on the following command, for example: $ git

[edk2-devel] [PATCH 07/11] SecurityPkg/DxeImageVerificationHandler: unnest AddImageExeInfo() call

2020-01-16 Thread Laszlo Ersek
wen Yao Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=2129 Signed-off-by: Laszlo Ersek --- SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c | 34 +--- 1 file changed, 16 insertions(+), 18 deletions(-) diff --git a/SecurityPkg/Library/DxeImag

[edk2-devel] [PATCH 05/11] SecurityPkg/DxeImageVerificationHandler: fix retval on memalloc failure

2020-01-16 Thread Laszlo Ersek
patible error codes to EFI_ACCESS_DENIED, under some circumstances. Cc: Chao Zhang Cc: Jian J Wang Cc: Jiewen Yao Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=2129 Fixes: 570b3d1a7278df29878da87990e8366bd42d0ec5 Signed-off-by: Laszlo Ersek --- SecurityPkg/Library/DxeImageVerificationLib/

[edk2-devel] [PATCH 02/11] SecurityPkg/DxeImageVerificationHandler: remove "else" after return/break

2020-01-16 Thread Laszlo Ersek
git show -b -W for reviewing it more easily. Cc: Chao Zhang Cc: Jian J Wang Cc: Jiewen Yao Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=2129 Signed-off-by: Laszlo Ersek --- SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c | 41 ++-- 1 file changed,

[edk2-devel] [PATCH 03/11] SecurityPkg/DxeImageVerificationHandler: keep PE/COFF info status internal

2020-01-16 Thread Laszlo Ersek
e "Status" outcome from API-incompatible error codes to EFI_ACCESS_DENIED, under some circumstances. Cc: Chao Zhang Cc: Jian J Wang Cc: Jiewen Yao Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=2129 Signed-off-by: Laszlo Ersek --- SecurityPkg/Library/DxeImageVerificationLib/DxeI

[edk2-devel] [PATCH 11/11] SecurityPkg/DxeImageVerificationHandler: fix "defer" vs. "deny" policies

2020-01-16 Thread Laszlo Ersek
://bugzilla.tianocore.org/show_bug.cgi?id=2129 Fixes: 5db28a6753d307cdfb1cfdeb2f63739a9f959837 Signed-off-by: Laszlo Ersek --- SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c | 11 --- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/SecurityPkg/Library/DxeImageVeri

[edk2-devel] [PATCH 01/11] SecurityPkg/DxeImageVerificationHandler: simplify "VerifyStatus"

2020-01-16 Thread Laszlo Ersek
J Wang Cc: Jiewen Yao Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=2129 Signed-off-by: Laszlo Ersek --- SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c | 20 ++-- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/SecurityPkg/Library/DxeImageVerificat

[edk2-devel] [PATCH 06/11] SecurityPkg/DxeImageVerificationHandler: remove superfluous Status setting

2020-01-16 Thread Laszlo Ersek
c: Jian J Wang Cc: Jiewen Yao Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=2129 Signed-off-by: Laszlo Ersek --- SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c | 1 - 1 file changed, 1 deletion(-) diff --git a/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVe

[edk2-devel] [PATCH 10/11] SecurityPkg/DxeImageVerificationHandler: fix imgexec info on memalloc fail

2020-01-16 Thread Laszlo Ersek
AUTH_SIG_FAILED or EFI_IMAGE_EXECUTION_AUTH_SIG_FOUND. For now, the EFI_IMAGE_EXECUTION_INFO addition logic is not changed; we only make sure that the record we add is not malformed.) Cc: Chao Zhang Cc: Jian J Wang Cc: Jiewen Yao Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=2129

[edk2-devel] [PATCH 09/11] SecurityPkg/DxeImageVerificationHandler: fix retval for (FileBuffer==NULL)

2020-01-16 Thread Laszlo Ersek
NIED, under some circumstances. Cc: Chao Zhang Cc: Jian J Wang Cc: Jiewen Yao Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=2129 Fixes: 570b3d1a7278df29878da87990e8366bd42d0ec5 Signed-off-by: Laszlo Ersek --- SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c | 2 +-

[edk2-devel] [PATCH 08/11] SecurityPkg/DxeImageVerificationHandler: eliminate "Status" variable

2020-01-16 Thread Laszlo Ersek
quot; in DxeImageVerificationHandler(). Remove the variable, and simply return EFI_SECURITY_VIOLATION in the end. This patch is a no-op, regarding behavior. Cc: Chao Zhang Cc: Jian J Wang Cc: Jiewen Yao Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=2129 Signed-off-by: Laszlo Ersek

[edk2-devel] [PATCH 00/11] SecurityPkg/DxeImageVerificationHandler: fix retval for "deny" policy

2020-01-16 Thread Laszlo Ersek
function-context", for easier review. Cc: Chao Zhang Cc: Jian J Wang Cc: Jiewen Yao Thanks, Laszlo Laszlo Ersek (11): SecurityPkg/DxeImageVerificationHandler: simplify "VerifyStatus" SecurityPkg/DxeImageVerificationHandler: remove "else" aft

[edk2-devel] [PATCH 04/11] SecurityPkg/DxeImageVerificationHandler: narrow down PE/COFF hash status

2020-01-16 Thread Laszlo Ersek
l for the immediate HashPeImageByType() retval check, introduce a specific helper variable, called "HashStatus". This patch is a no-op, functionally. Cc: Chao Zhang Cc: Jian J Wang Cc: Jiewen Yao Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=2129 Signed-off-by: Laszlo Ersek ---

Re: [edk2-devel] [PATCH] UefiCpuPkg/PiSmmCpuDxeSmm: fix 2M->4K page splitting regression for PDEs

2020-01-16 Thread Laszlo Ersek
onflict. Ah, that makes total sense. I didn't expect this reason! > Reviewed-by: Ray Ni Thanks! Laszlo > >> -----Original Message- >> From: Laszlo Ersek >> Sent: Friday, January 10, 2020 7:25 AM >> To: edk2-devel-groups-io >> Cc: Dong, Eric ; Ni, Ra

Re: [edk2-devel] [PATCH 1/2] Maintainers.txt: update email address for Leif Lindholm

2020-01-17 Thread Laszlo Ersek
On 01/16/20 22:34, Leif Lindholm wrote: > On Thu, Jan 16, 2020 at 19:54:43 +0100, Philippe Mathieu-Daudé wrote: >>> Phil, would it make sense for us to ask Leif to post an update to >>> ".mailmap"? >>> >>> For example, what happens if we run "git shortlog" over a period that >>> contains patches au

Re: [edk2-devel] [PATCH] BaseTools/Conf/gitattributes: fix "--function-context" for *.h and *.c

2020-01-17 Thread Laszlo Ersek
On 01/17/20 01:22, Gao, Liming wrote: > Leif: > Vfr is not C style source file. It can't be regarded as C source > file. > > Laszlo: >Is there such support for the assembly file, such as .nasm? According to the gitattributes(5) manual, there doesn't seem to be a git-diff driver for assembl

Re: [edk2-devel] [PATCH] BaseTools/Conf/gitattributes: fix "--function-context" for *.h and *.c

2020-01-17 Thread Laszlo Ersek
On 01/17/20 01:56, Gao, Liming wrote: > Leif: > .act is same to .aslc. There are no cases in open source. How about this then: *.[Aa][Cc][Tt] diff=cpp *.[Aa][Ss][Ll][Cc] diff=cpp *.[CcHh] diff=cpp *.[Cc][Cc] diff=cpp *.[Cc][Pp][Pp] diff=cpp Thanks, Laszlo -=-=-=-=-

Re: [edk2-devel] [PATCH v1] UefiCpuPkg/MpInitLib: Fix possible uninitialized 'InitFlag' field

2020-01-17 Thread Laszlo Ersek
(CpuMpData); > SaveLocalApicTimerSetting (CpuMpData); > } > > This commit will address the above-mentioned issue. > > Test done: > * OS boot on a real platform with multi processors > > Cc: Eric Dong > Cc: Ray Ni > Cc: Laszlo Ersek > Cc: Michael D

Re: [edk2-devel] [PATCH] UefiCpuPkg/PiSmmCpuDxeSmm: fix 2M->4K page splitting regression for PDEs

2020-01-17 Thread Laszlo Ersek
On 01/10/20 00:25, Laszlo Ersek wrote: > In commit 4eee0cc7cc0d ("UefiCpuPkg/PiSmmCpu: Enable 5 level paging when > CPU supports", 2019-07-12), the Page Directory Entry setting was regressed > (corrupted) when splitting a 2MB page to 512 4KB pages, in the > InitPaging() funct

Re: [edk2-devel] [PATCH v2] UefiCpuPkg/MpInitLib: Fix possible uninitialized 'InitFlag' field

2020-01-17 Thread Laszlo Ersek
ired = TRUE; > AllocateResetVector (CpuMpData); > FillExchangeInfoData (CpuMpData); > SaveLocalApicTimerSetting (CpuMpData); > } > > This commit will address the above-mentioned issue. > > Test done: > * OS boot on a real platform with multi processors >

Re: [edk2-devel] [PATCH] BaseTools/Conf/gitattributes: fix "--function-context" for *.h and *.c

2020-01-17 Thread Laszlo Ersek
On 01/17/20 14:05, Leif Lindholm wrote: > On Fri, Jan 17, 2020 at 09:30:49 +0100, Laszlo Ersek wrote: >> On 01/17/20 01:56, Gao, Liming wrote: >>> Leif: >>> .act is same to .aslc. There are no cases in open source. >> >> How about this then: >> &g

Re: [edk2-devel] [PATCH 06/13] OvmfPkg/Tcg2PhysicalPresenceLib: Use pcd for user response wait time

2020-01-20 Thread Laszlo Ersek
On 01/19/20 08:03, Gao, Zhichao wrote: > Hi Laszlo, > > Sorry for misunderstanding the logic in read key function. That makes the > incorrect analysis. > The read key function is waiting for "specific" key press not a key press. We > should drop all the other pressing-key. > That means we should

[edk2-devel] [PATCH v2] BaseTools/Conf/gitattributes: fix "--function-context" for C source code

2020-01-20 Thread Laszlo Ersek
those as belonging to the "cpp" git-diff driver. This change has a dramatic effect on the following command, for example: $ git show -W 2ef0c27cb84c Cc: Bob Feng Cc: Leif Lindholm Cc: Liming Gao Signed-off-by: Laszlo Ersek --- Notes: v2: - take suffixes from "B

Re: [edk2-devel] [PATCH v2] BaseTools/PatchCheck.py: Ignore CR and LF characters in subject length

2020-01-20 Thread Laszlo Ersek
On 01/20/20 10:11, Philippe Mathieu-Daudé wrote: > Hi Liming, > > On 1/9/20 6:35 AM, Feng, Bob C wrote: >> Reviewed-by: Bob Feng > > Is the Review-by tag from Bob enough to get this patch merged? Yes, see the "M" role: BaseTools F: BaseTools/ W: https://github.com/tianocore/tianocore.github.io

Re: [edk2-devel] [PATCH v2] BaseTools/Conf/gitattributes: fix "--function-context" for C source code

2020-01-20 Thread Laszlo Ersek
On 01/20/20 11:12, Leif Lindholm wrote: > On Mon, Jan 20, 2020 at 10:42:45 +0100, Laszlo Ersek wrote: >> The "--function-context" ("-W") option of git-diff displays the entire >> body of a modified function, not just small modified hunks within the >> func

Re: [edk2-devel] [edk2-rfc] [RFC] code-first process for UEFI-forum specifications

2020-01-20 Thread Laszlo Ersek
On 01/20/20 17:58, Leif Lindholm wrote: > This is a proposal for a process by which new features can be added to UEFI > forum specifications after first having been designed and prototyped in the > open. > > This process lets changes and the development of new features happen in the > open, withou

Re: [edk2-devel] PCD EX interface.

2020-01-23 Thread Laszlo Ersek
Hi Ken, On 01/23/20 02:37, Ken Taylor wrote: > If I try to get the size of a DynamicEx PCD in the context of a BIOS > build for which that PCD is undefined, the call locks up. I expected > to just get a size of 0, since the PCD is not defined in the build > context of the PCD DXE service. Is th

Re: [edk2-devel] [PATCH v2] BaseTools/Conf/gitattributes: fix "--function-context" for C source code

2020-01-23 Thread Laszlo Ersek
Mike, can you please ACK this patch while Liming and Bob are away? It's very simple. Thanks! Laszlo On 01/20/20 10:42, Laszlo Ersek wrote: > The "--function-context" ("-W") option of git-diff displays the entire > body of a modified function, not just small modif

Re: [edk2-devel] PCD EX interface.

2020-01-24 Thread Laszlo Ersek
On 01/23/20 22:08, Andrew Fish wrote: > >> On Jan 23, 2020, at 3:21 AM, Laszlo Ersek wrote: >> >> Hi Ken, >> >> On 01/23/20 02:37, Ken Taylor wrote: >> >>> If I try to get the size of a DynamicEx PCD in the context of a BIOS >>> bui

Re: [edk2-devel] [Patch 11/11] Maintainers.txt: Add UnitTestFrameworkPkg

2020-01-24 Thread Laszlo Ersek
On 01/24/20 03:10, Michael D Kinney wrote: > Add maintainers and reviewers for UnitTestFrameworkPkg > > Cc: Sean Brogan > Cc: Bret Barkelew > Cc: Andrew Fish > Cc: Laszlo Ersek > Cc: Leif Lindholm > Signed-off-by: Michael D Kinney > --- > Maintainers.txt |

Re: [edk2-devel] [Patch] BaseTools/Scripts/PatchCheck.py: Remove submodule false positives

2020-01-24 Thread Laszlo Ersek
bmodule directory is > added as a new file with attributes 16 that can be detected > by looking for the pattern "new file mode 16". > > Cc: Bob Feng > Cc: Liming Gao > Cc: Laszlo Ersek > Signed-off-by: Michael D Kinney > --- > BaseTools/Scripts/Patch

Re: [edk2-devel] [PATCH v2 2/3] OvmfPkg/IndustryStandard: define macros for QEMU's CPU hotplug registers

2020-01-24 Thread Laszlo Ersek
Hi Phil, On 10/24/19 17:12, Philippe Mathieu-Daudé wrote: > On 10/24/19 12:29 PM, Laszlo Ersek wrote: >> On 10/23/19 14:05, Philippe Mathieu-Daudé wrote: >>> Hi Laszlo, >>> >>> On 10/23/19 12:15 AM, Laszlo Ersek wrote: >>>> In v1.5.0, QEMU&#x

Re: [edk2-devel] [PATCH 1/5] OvmfPkg/XenResetVector: Silent a warning from nasm

2020-01-29 Thread Laszlo Ersek
On 01/29/20 13:12, Anthony PERARD wrote: > To avoid nasm generating a warning, replace the macro by the value > expected to be stored in eax. > Ia32/XenPVHMain.asm:76: warning: dword data exceeds bounds > > Reported-by: Laszlo Ersek > Signed-off-by: Anthony PERARD

Re: [edk2-devel] [PATCH 2/5] MdePkg: Allow PcdFSBClock to by Dynamic

2020-01-29 Thread Laszlo Ersek
to configure X86 Processor FSB clock. > + # @Prompt FSB Clock. > + gEfiMdePkgTokenSpaceGuid.PcdFSBClock|2|UINT32|0x000c > + > [UserExtensions.TianoCore."ExtraFiles"] >MdePkgExtra.uni > Looks good to me: Reviewed-by: Laszlo Ersek Mike or Liming will ha

Re: [edk2-devel] [PATCH 3/5] OvmfPkg/IndustryStandard/Xen: Apply EDK2 coding style to XEN_VCPU_TIME_INFO

2020-01-29 Thread Laszlo Ersek
}; > #ifndef __XEN__ > typedef struct shared_info shared_info_t; > +typedef struct shared_info XEN_SHARED_INFO; > #endif > > /* Turn a plain number into a C UINTN constant. */ > Assuming the OVMF platforms continue to build at this stage into the series, and provided that

Re: [edk2-devel] [PATCH 4/5] OvmfPkg/XenPlatformPei: Calibrate APIC timer frequency

2020-01-29 Thread Laszlo Ersek
On 01/29/20 13:12, Anthony PERARD wrote: > Calculate the frequency of the APIC timer that Xen provides. > > Even though the frequency is currently hard-coded, it isn't part of > the public ABI that Xen provides and thus may change at any time. OVMF > needs to determine the frequency by an other me

Re: [edk2-devel] [PATCH 5/5] OvmfPkg/OvmfXen: Set PcdFSBClock

2020-01-29 Thread Laszlo Ersek
.PcdCName|Value - I'm not sure if the "build" utility accepts this intentionally, or by mistake. Can you simply keep the "|1" part too? Otherwise, I'm OK with the argument laid out in the commit message. (Thank you for the detailed commit message!) W

Re: [edk2-devel] [PATCH v2 2/3] OvmfPkg/IndustryStandard: define macros for QEMU's CPU hotplug registers

2020-01-29 Thread Laszlo Ersek
On 01/29/20 15:43, Philippe Mathieu-Daudé wrote: > Hi Laszlo, > > On 1/24/20 12:40 PM, Laszlo Ersek wrote: >> On 10/24/19 17:12, Philippe Mathieu-Daudé wrote: >>> This patch is fine then. >>> >>> Since the QEMU spec is RFC and not merged, I'm worr

[edk2-devel] [PATCH v2 10/11] OvmfPkg: introduce PcdCsmEnable feature flag

2020-01-29 Thread Laszlo Ersek
S Protocol however. For their sake, introduce a new feature PCD that simply reflects the CSM_ENABLE build flag. Cc: Anthony Perard Cc: Ard Biesheuvel Cc: Jiewen Yao Cc: Jordan Justen Cc: Julien Grall Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1512 Signed-off-by: Laszlo Ersek --- Not

[edk2-devel] [PATCH v2 00/11] support QEMU's "SMRAM at default SMBASE" feature

2020-01-29 Thread Laszlo Ersek
is R-b. Cc: Anthony Perard Cc: Ard Biesheuvel Cc: Jiewen Yao Cc: Jordan Justen Cc: Julien Grall Thanks, Laszlo Laszlo Ersek (11): OvmfPkg: introduce PcdQ35SmramAtDefaultSmbase OvmfPkg/IndustryStandard: increase vertical whitespace in Q35 macro defs OvmfPkg/IndustryStandard: a

[edk2-devel] [PATCH v2 07/11] OvmfPkg/PlatformPei: reserve the SMRAM at the default SMBASE, if it exists

2020-01-29 Thread Laszlo Ersek
https://bugzilla.tianocore.org/show_bug.cgi?id=1512 Signed-off-by: Laszlo Ersek Reviewed-by: Jiewen Yao --- Notes: v2: - trim Cc list - pick up Jiewen's R-b <https://edk2.groups.io/g/devel/message/48166> OvmfPkg/PlatformPei/MemDetect.c | 37 ++-- 1 file change

[edk2-devel] [PATCH v2 01/11] OvmfPkg: introduce PcdQ35SmramAtDefaultSmbase

2020-01-29 Thread Laszlo Ersek
. Cc: Ard Biesheuvel Cc: Jordan Justen Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1512 Signed-off-by: Laszlo Ersek Reviewed-by: Jiewen Yao --- Notes: v2: - trim Cc list - pick up Jiewen's R-b <https://edk2.groups.io/g/devel/message/48166> OvmfPkg/OvmfPkg.dec

[edk2-devel] [PATCH v2 04/11] OvmfPkg/PlatformPei: factor out Q35BoardVerification()

2020-01-29 Thread Laszlo Ersek
-by: Laszlo Ersek Reviewed-by: Jiewen Yao --- Notes: v2: - trim Cc list - pick up Jiewen's R-b <https://edk2.groups.io/g/devel/message/48166> OvmfPkg/PlatformPei/MemDetect.c | 13 +-- OvmfPkg/PlatformPei/Platform.c | 23 2 files changed, 24

[edk2-devel] [PATCH v2 02/11] OvmfPkg/IndustryStandard: increase vertical whitespace in Q35 macro defs

2020-01-29 Thread Laszlo Ersek
. Cc: Ard Biesheuvel Cc: Jordan Justen Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1512 Signed-off-by: Laszlo Ersek Reviewed-by: Jiewen Yao --- Notes: v2: - trim Cc list - pick up Jiewen's R-b <https://edk2.groups.io/g/devel/message/48166> OvmfPkg/Include

[edk2-devel] [PATCH v2 05/11] OvmfPkg/PlatformPei: detect SMRAM at default SMBASE (skeleton)

2020-01-29 Thread Laszlo Ersek
ater patch. Cc: Ard Biesheuvel Cc: Jordan Justen Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1512 Signed-off-by: Laszlo Ersek Reviewed-by: Jiewen Yao --- Notes: v2: - trim Cc list - pick up Jiewen's R-b <https://edk2.groups.io/g/devel/message/48166> OvmfPkg/Platfo

[edk2-devel] [PATCH v2 03/11] OvmfPkg/IndustryStandard: add MCH_DEFAULT_SMBASE* register macros

2020-01-29 Thread Laszlo Ersek
to "Q35MchIch9.h". (There are some other unused offsets in Table 5-1; for example we had scavenged 0x50 for implementing the extended TSEG feature. 0x9C is the first byte-wide register standing in isolation after 0x50.) Cc: Ard Biesheuvel Cc: Jordan Justen Ref: https://bugzilla.tianocore.o

[edk2-devel] [PATCH v2 09/11] OvmfPkg/SmmAccess: close and lock SMRAM at default SMBASE

2020-01-29 Thread Laszlo Ersek
SmmAccess2Dxe (for locking at normal boot), and an EDKII_S3_SMM_INIT_DONE_GUID PPI notify in SmmAccessPei (for locking at S3 resume). Cc: Ard Biesheuvel Cc: Jordan Justen Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1512 Signed-off-by: Laszlo Ersek Reviewed-by: Jiewen Yao --- Notes:

[edk2-devel] [PATCH v2 11/11] OvmfPkg/PlatformPei: detect SMRAM at default SMBASE (for real)

2020-01-29 Thread Laszlo Ersek
https://edk2.groups.io/g/devel/message/48348 Cc: Ard Biesheuvel Cc: Jiewen Yao Cc: Jordan Justen Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1512 Signed-off-by: Laszlo Ersek --- Notes: v2: - In CSM_ENABLE builds, pretend that SMRAM never exists at the default SMBA

[edk2-devel] [PATCH v2 06/11] OvmfPkg/PlatformPei: assert there's no permanent PEI RAM at default SMBASE

2020-01-29 Thread Laszlo Ersek
Justen Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1512 Signed-off-by: Laszlo Ersek Reviewed-by: Jiewen Yao --- Notes: v2: - trim Cc list - pick up Jiewen's R-b <https://edk2.groups.io/g/devel/message/48166> OvmfPkg/PlatformPei/MemDetect.c | 10 ++ 1 file

[edk2-devel] [PATCH v2 08/11] OvmfPkg/SEV: don't manage the lifecycle of the SMRAM at the default SMBASE

2020-01-29 Thread Laszlo Ersek
(the UEFI memory map is untouched during S3 resume). Cc: Ard Biesheuvel Cc: Jordan Justen Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1512 Signed-off-by: Laszlo Ersek Reviewed-by: Jiewen Yao --- Notes: v2: - trim Cc list - pick up Jiewen's R-b <https://edk2.groups.io

<    5   6   7   8   9   10   11   12   13   14   >