mbox series

[0/4] Update grub to 2.06

Message ID 20220719074042.2214649-1-thomas.petazzoni@bootlin.com
Headers show
Series Update grub to 2.06 | expand

Message

Thomas Petazzoni July 19, 2022, 7:40 a.m. UTC 
Hello,

Finally, here it is, the series that drops 150 patches from
boot/grub2/, by bumping its version to 2.06.

As explained in the commit log, I have verified that all patches we
had on grub2 are indeed part of the grub 2.06 release.

Also, I wanted to add some test cases to easily test Grub. As part of
this, I needed a pre-built version of EDK2 for Qemu, which is why this
series adds a new ovmf-bin package. I could have used the boot/edk2
package to build it from source, but it sounded quicker and easier for
tests to use a pre-built version.

The test cases have some overlap with the ISO9660 test cases (some of
which use Grub), but I found it useful to have non-ISO9660 tests for
Grub, that use Grub in a more traditional manner. 4 test cases are
added Grub i386 BIOS, Grub i386 UEFI, Grub x86-64 UEFI, Grub AArch64
UEFI.

The ISO9660 test cases have been verified to work correctly with this
series applied.

Best regards,

Thomas

Thomas Petazzoni (4):
  boot/ovmf-bin: new package
  boot/grub2: update to 2.06
  boot/grub2: update readme.txt details
  support/testing/tests/boot: new test cases for Grub

 DEVELOPERS                                    |     3 +
 boot/Config.in                                |     1 +
 ...x-GRUB-i386-pc-build-with-Ubuntu-gcc.patch |   313 -
 ...lexer-fatal-errors-actually-be-fatal.patch |    73 -
 ...e-arithmetic-primitives-that-check-f.patch |   128 -
 ...-we-always-have-an-overflow-checking.patch |   246 -
 ...005-calloc-Use-calloc-at-most-places.patch |  1840 ---
 ...low-checking-primitives-where-we-do-.patch |  1326 --
 ...on-t-leak-memory-on-realloc-failures.patch |    72 -
 ...-not-load-more-than-one-NAME-section.patch |    41 -
 ...fxmenu-Fix-double-free-in-load_image.patch |    39 -
 ...ree-in-grub_xnu_devprop_add_property.patch |    58 -
 ...sure-we-don-t-dereference-past-array.patch |    55 -
 ...012-term-Fix-overflow-on-user-inputs.patch |    69 -
 boot/grub2/0013-udf-Fix-memory-leak.patch     |    59 -
 ...emory-leak-if-grub_create_loader_cmd.patch |    38 -
 .../0015-tftp-Do-not-use-priority-queue.patch |   283 -
 ...t-grub_relocator_alloc_chunk_addr-in.patch |   153 -
 ...t-grub_relocator_alloc_chunk_align-m.patch |   341 -
 ...used-fields-from-grub_script_functio.patch |    37 -
 ...se-after-free-when-redefining-a-func.patch |   113 -
 ...ub_relocator_alloc_chunk_align-top-m.patch |    49 -
 .../0021-hfsplus-Fix-two-more-overflows.patch |    61 -
 ...-potential-data-dependent-alloc-over.patch |   116 -
 .../0023-emu-Make-grub_free-NULL-safe.patch   |    38 -
 ...formed-device-path-arithmetic-errors.patch |   239 -
 ...Propagate-errors-from-copy_file_path.patch |    78 -
 ...x-use-after-free-in-halt-reboot-path.patch |   183 -
 ...id-overflow-on-initrd-size-calculati.patch |    32 -
 ...er-overflows-in-initrd-size-handling.patch |   173 -
 ...m_lock-GUID-and-protocol-type-public.patch |    97 -
 ...efi_status_t-from-grub_efi_get_varia.patch |   149 -
 ...on-to-read-EFI-variables-with-attrib.patch |    78 -
 .../0032-efi-Add-secure-boot-detection.patch  |   541 -
 ...s-Move-verifiers-API-to-kernel-image.patch |  1650 --
 ...-shim_lock-verifier-to-the-GRUB-core.patch | 13225 ----------------
 .../0035-kern-Add-lockdown-support.patch      |   763 -
 ...t-a-variable-if-the-GRUB-is-locked-d.patch |    57 -
 ...-GRUB-when-the-UEFI-Secure-Boot-is-e.patch |    49 -
 ...lockdown-instead-of-hardcoding-a-dis.patch |   232 -
 ...ter-the-acpi-command-when-locked-dow.patch |    76 -
 ...ter-cutmem-and-badram-commands-when-.patch |    70 -
 ...t-commands-that-can-load-BIOS-or-DT-.patch |   105 -
 ...Restrict-setpci-command-when-locked-.patch |    37 -
 ...Restrict-hdparm-command-when-locked-.patch |    35 -
 ...Restrict-GDB-access-when-locked-down.patch |    62 -
 ...-allow-loading-extension-and-package.patch |    61 -
 ...046-docs-Document-the-cutmem-command.patch |    65 -
 ...loading-modules-that-are-not-depende.patch |    87 -
 ...le-out-of-bound-accesses-caused-by-m.patch |   116 -
 ...leak-when-iterating-over-mapped-memo.patch |    40 -
 ...ible-dereference-to-of-a-NULL-pointe.patch |    40 -
 ...net-tftp-Fix-dangling-memory-pointer.patch |    34 -
 ...n-parser-Fix-resource-leak-if-argc-0.patch |    51 -
 ...-kern-efi-Fix-memory-leak-on-failure.patch |    31 -
 ...ix-possible-NULL-pointer-dereference.patch |    66 -
 ...ulib-regexec-Resolve-unused-variable.patch |    90 -
 ...mp-Fix-uninitialized-token-structure.patch |    82 -
 ...-Fix-dereference-of-a-possibly-NULL-.patch |    82 -
 ...egexec-Fix-possible-null-dereference.patch |    83 -
 ...b-regcomp-Fix-uninitialized-re_token.patch |    88 -
 ...e-unnecessary-self-assignment-errors.patch |    42 -
 ...std-Initialize-seq_t-structure-fully.patch |    35 -
 ...heck-for-NULL-before-dereferencing-i.patch |    44 -
 ...re-comp-data-is-freed-before-exiting.patch |   129 -
 ...-If-failed-then-free-vg-variable-too.patch |    29 -
 ...ory-leak-on-uninserted-lv-references.patch |    51 -
 ...odisk-Fix-potential-integer-overflow.patch |    51 -
 ...that-the-volume-name-length-is-valid.patch |    44 -
 ...ix-possible-negative-shift-operation.patch |    43 -
 ...source-leaks-while-constructing-path.patch |   122 -
 ...0-zfs-Fix-possible-integer-overflows.patch |    57 -
 ...-a-check-for-error-allocating-memory.patch |    36 -
 boot/grub2/0072-affs-Fix-memory-leaks.patch   |    83 -
 ...x-possible-unintended-sign-extension.patch |    50 -
 ...pt-mpi-Fix-possible-NULL-dereference.patch |    49 -
 ...slinux-Fix-memory-leak-while-parsing.patch |    44 -
 ...n-Fix-leaking-of-memory-when-process.patch |    53 -
 ...7-commands-hashsum-Fix-a-memory-leak.patch |    57 -
 ...move-unnecessary-return-value-of-gru.patch |    95 -
 ...bfill-Fix-potential-integer-overflow.patch |    79 -
 ...eo_fb-Fix-multiple-integer-overflows.patch |   105 -
 ...deo_fb-Fix-possible-integer-overflow.patch |    40 -
 ...eg-Test-for-an-invalid-next-marker-r.patch |    39 -
 ...-Remove-code-that-coverity-is-flaggi.patch |    35 -
 ...ader-bsd-Check-for-NULL-arg-up-front.patch |    48 -
 .../0086-loader-xnu-Fix-memory-leak.patch     |    39 -
 ...driverkey-data-when-an-error-is-dete.patch |    78 -
 ...k-if-pointer-is-NULL-before-using-it.patch |    43 -
 ...nstall-Fix-NULL-pointer-dereferences.patch |    42 -
 ...v-Fix-incorrect-casting-of-a-signed-.patch |    47 -
 ...x-incorrect-use-of-a-possibly-negati.patch |    51 -
 ...ix-NULL-dereference-in-grub_script_e.patch |    29 -
 ...ire-device_name-is-not-NULL-before-p.patch |    34 -
 ...void-crash-when-using-outside-a-func.patch |    38 -
 ...peated-short-options-that-require-an.patch |    56 -
 ...on-t-crash-on-a-for-loop-with-no-ite.patch |    40 -
 ...ntry-Fix-quoting-in-setparams_prefix.patch |    48 -
 ...misc-Always-set-end-in-grub_strtoull.patch |    47 -
 ...eg-Catch-files-with-unsupported-quan.patch |    53 -
 ...eg-Catch-OOB-reads-writes-in-grub_jp.patch |    48 -
 ...eg-Don-t-decode-data-before-start-of.patch |    40 -
 ...-t-set-up-a-font-with-glyphs-that-ar.patch |    52 -
 ...impermissibly-large-block-sizes-in-r.patch |    47 -
 ...-fetch-a-key-beyond-the-end-of-the-n.patch |    33 -
 ...-use-uninitialized-data-on-corrupt-f.patch |   108 -
 .../0106-fs-hfs-Disable-under-lockdown.patch  |    47 -
 ...fs-Fix-over-read-of-root-object-name.patch |    50 -
 ...ve-to-leaf-level-if-name-length-is-n.patch |    34 -
 ...the-extents-that-getblk-can-consider.patch |    62 -
 ...0110-fs-jfs-Catch-infinite-recursion.patch |    46 -
 ...0111-fs-nilfs2-Reject-too-large-keys.patch |    46 -
 ...search-children-if-provided-number-i.patch |   100 -
 ...ly-bail-on-errors-in-grub_nilfs2_btr.patch |    68 -
 ...4-io-gzio-Bail-if-gzio-tl-td-is-NULL.patch |    67 -
 ..._dynamic_block-clean-up-if-unpacking.patch |    67 -
 ...issing-values-in-huft_build-and-bail.patch |    57 -
 ...o-tl-td-in-init_dynamic_block-if-huf.patch |    42 -
 ...o-beyond-the-end-of-the-data-we-read.patch |    49 -
 ...last-past-the-end-of-the-circular-me.patch |    43 -
 ...120-disk-lvm-Bail-on-missing-PV-list.patch |    35 -
 ...crash-if-an-expected-string-is-not-f.patch |    83 -
 ...22-disk-lvm-Do-not-overread-metadata.patch |   111 -
 ...ze-rlocn-offset-to-prevent-wild-read.patch |    41 -
 ...allow-a-LV-to-be-it-s-own-segment-s-.patch |    39 -
 ...e-the-number-of-stripes-parities-in-.patch |    33 -
 ...trfs-Squash-some-uninitialized-reads.patch |    43 -
 .../0127-kern-parser-Fix-a-memory-leak.patch  |    77 -
 ...parser-Introduce-process_char-helper.patch |   120 -
 ...arser-Introduce-terminate_arg-helper.patch |    66 -
 ...ctor-grub_parser_split_cmdline-clean.patch |    92 -
 ...uffer-Add-variable-sized-heap-buffer.patch |  1237 --
 ...n-parser-Fix-a-stack-buffer-overflow.patch |   248 -
 ...itial-stack-protector-implementation.patch |   466 -
 ...emove-unused-code-to-add-BSS-section.patch |    61 -
 ...-grub_host_to_target32-instead-of-gr.patch |   113 -
 ...ays-use-grub_host_to_target32-to-ini.patch |    39 -
 ...fy-more-of-the-PE32-and-PE32-header-.patch |   169 -
 ...rder-PE-optional-header-fields-set-u.patch |    73 -
 ...-Improve-data_size-value-calculation.patch |    50 -
 ...factor-section-setup-to-use-a-helper.patch |   221 -
 ...-an-option-to-import-SBAT-metadata-i.patch |   264 -
 ...-grub-install-common-Add-sbat-option.patch |    85 -
 ...kip-loading-shim_lock-verifier-with-.patch |   270 -
 ...parse_printf_args-into-format-parsin.patch |    50 -
 ...RING-type-for-internal-printf-format.patch |    68 -
 ...nction-to-check-printf-format-agains.patch |   219 -
 ...k-printf-format-in-the-gui_progress_.patch |    62 -
 ...tes-Disable-the-os-prober-by-default.patch |    87 -
 ...-grub_debug_calloc-compilation-error.patch |    33 -
 ...e-libgrub.pp-depend-on-config-util.h.patch |    66 -
 boot/grub2/grub2.hash                         |     6 +-
 boot/grub2/grub2.mk                           |    28 +-
 boot/grub2/readme.txt                         |    21 +-
 boot/ovmf-bin/Config.in                       |    15 +
 boot/ovmf-bin/ovmf-bin.hash                   |     3 +
 boot/ovmf-bin/ovmf-bin.mk                     |    45 +
 support/testing/tests/boot/test_grub.py       |   153 +
 .../boot/test_grub/genimage-aarch64-efi.cfg   |    32 +
 .../tests/boot/test_grub/grub-aarch64-efi.cfg |     6 +
 .../boot/test_grub/linux-aarch64-efi.config   |     1 +
 .../tests/boot/test_grub/post-build.sh        |     7 +
 .../boot/test_grub/post-image-aarch64-efi.sh  |     8 +
 163 files changed, 287 insertions(+), 32369 deletions(-)
 delete mode 100644 boot/grub2/0001-build-Fix-GRUB-i386-pc-build-with-Ubuntu-gcc.patch
 delete mode 100644 boot/grub2/0002-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
 delete mode 100644 boot/grub2/0003-safemath-Add-some-arithmetic-primitives-that-check-f.patch
 delete mode 100644 boot/grub2/0004-calloc-Make-sure-we-always-have-an-overflow-checking.patch
 delete mode 100644 boot/grub2/0005-calloc-Use-calloc-at-most-places.patch
 delete mode 100644 boot/grub2/0006-malloc-Use-overflow-checking-primitives-where-we-do-.patch
 delete mode 100644 boot/grub2/0007-iso9660-Don-t-leak-memory-on-realloc-failures.patch
 delete mode 100644 boot/grub2/0008-font-Do-not-load-more-than-one-NAME-section.patch
 delete mode 100644 boot/grub2/0009-gfxmenu-Fix-double-free-in-load_image.patch
 delete mode 100644 boot/grub2/0010-xnu-Fix-double-free-in-grub_xnu_devprop_add_property.patch
 delete mode 100644 boot/grub2/0011-lzma-Make-sure-we-don-t-dereference-past-array.patch
 delete mode 100644 boot/grub2/0012-term-Fix-overflow-on-user-inputs.patch
 delete mode 100644 boot/grub2/0013-udf-Fix-memory-leak.patch
 delete mode 100644 boot/grub2/0014-multiboot2-Fix-memory-leak-if-grub_create_loader_cmd.patch
 delete mode 100644 boot/grub2/0015-tftp-Do-not-use-priority-queue.patch
 delete mode 100644 boot/grub2/0016-relocator-Protect-grub_relocator_alloc_chunk_addr-in.patch
 delete mode 100644 boot/grub2/0017-relocator-Protect-grub_relocator_alloc_chunk_align-m.patch
 delete mode 100644 boot/grub2/0018-script-Remove-unused-fields-from-grub_script_functio.patch
 delete mode 100644 boot/grub2/0019-script-Avoid-a-use-after-free-when-redefining-a-func.patch
 delete mode 100644 boot/grub2/0020-relocator-Fix-grub_relocator_alloc_chunk_align-top-m.patch
 delete mode 100644 boot/grub2/0021-hfsplus-Fix-two-more-overflows.patch
 delete mode 100644 boot/grub2/0022-lvm-Fix-two-more-potential-data-dependent-alloc-over.patch
 delete mode 100644 boot/grub2/0023-emu-Make-grub_free-NULL-safe.patch
 delete mode 100644 boot/grub2/0024-efi-Fix-some-malformed-device-path-arithmetic-errors.patch
 delete mode 100644 boot/grub2/0025-efi-chainloader-Propagate-errors-from-copy_file_path.patch
 delete mode 100644 boot/grub2/0026-efi-Fix-use-after-free-in-halt-reboot-path.patch
 delete mode 100644 boot/grub2/0027-loader-linux-Avoid-overflow-on-initrd-size-calculati.patch
 delete mode 100644 boot/grub2/0028-linux-Fix-integer-overflows-in-initrd-size-handling.patch
 delete mode 100644 boot/grub2/0029-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
 delete mode 100644 boot/grub2/0030-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
 delete mode 100644 boot/grub2/0031-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
 delete mode 100644 boot/grub2/0032-efi-Add-secure-boot-detection.patch
 delete mode 100644 boot/grub2/0033-verifiers-Move-verifiers-API-to-kernel-image.patch
 delete mode 100644 boot/grub2/0034-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
 delete mode 100644 boot/grub2/0035-kern-Add-lockdown-support.patch
 delete mode 100644 boot/grub2/0036-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
 delete mode 100644 boot/grub2/0037-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
 delete mode 100644 boot/grub2/0038-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
 delete mode 100644 boot/grub2/0039-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
 delete mode 100644 boot/grub2/0040-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
 delete mode 100644 boot/grub2/0041-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
 delete mode 100644 boot/grub2/0042-commands-setpci-Restrict-setpci-command-when-locked-.patch
 delete mode 100644 boot/grub2/0043-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
 delete mode 100644 boot/grub2/0044-gdb-Restrict-GDB-access-when-locked-down.patch
 delete mode 100644 boot/grub2/0045-loader-xnu-Don-t-allow-loading-extension-and-package.patch
 delete mode 100644 boot/grub2/0046-docs-Document-the-cutmem-command.patch
 delete mode 100644 boot/grub2/0047-dl-Only-allow-unloading-modules-that-are-not-depende.patch
 delete mode 100644 boot/grub2/0048-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
 delete mode 100644 boot/grub2/0049-mmap-Fix-memory-leak-when-iterating-over-mapped-memo.patch
 delete mode 100644 boot/grub2/0050-net-net-Fix-possible-dereference-to-of-a-NULL-pointe.patch
 delete mode 100644 boot/grub2/0051-net-tftp-Fix-dangling-memory-pointer.patch
 delete mode 100644 boot/grub2/0052-kern-parser-Fix-resource-leak-if-argc-0.patch
 delete mode 100644 boot/grub2/0053-kern-efi-Fix-memory-leak-on-failure.patch
 delete mode 100644 boot/grub2/0054-kern-efi-mm-Fix-possible-NULL-pointer-dereference.patch
 delete mode 100644 boot/grub2/0055-gnulib-regexec-Resolve-unused-variable.patch
 delete mode 100644 boot/grub2/0056-gnulib-regcomp-Fix-uninitialized-token-structure.patch
 delete mode 100644 boot/grub2/0057-gnulib-argp-help-Fix-dereference-of-a-possibly-NULL-.patch
 delete mode 100644 boot/grub2/0058-gnulib-regexec-Fix-possible-null-dereference.patch
 delete mode 100644 boot/grub2/0059-gnulib-regcomp-Fix-uninitialized-re_token.patch
 delete mode 100644 boot/grub2/0060-io-lzopio-Resolve-unnecessary-self-assignment-errors.patch
 delete mode 100644 boot/grub2/0061-zstd-Initialize-seq_t-structure-fully.patch
 delete mode 100644 boot/grub2/0062-kern-partition-Check-for-NULL-before-dereferencing-i.patch
 delete mode 100644 boot/grub2/0063-disk-ldm-Make-sure-comp-data-is-freed-before-exiting.patch
 delete mode 100644 boot/grub2/0064-disk-ldm-If-failed-then-free-vg-variable-too.patch
 delete mode 100644 boot/grub2/0065-disk-ldm-Fix-memory-leak-on-uninserted-lv-references.patch
 delete mode 100644 boot/grub2/0066-disk-cryptodisk-Fix-potential-integer-overflow.patch
 delete mode 100644 boot/grub2/0067-hfsplus-Check-that-the-volume-name-length-is-valid.patch
 delete mode 100644 boot/grub2/0068-zfs-Fix-possible-negative-shift-operation.patch
 delete mode 100644 boot/grub2/0069-zfs-Fix-resource-leaks-while-constructing-path.patch
 delete mode 100644 boot/grub2/0070-zfs-Fix-possible-integer-overflows.patch
 delete mode 100644 boot/grub2/0071-zfsinfo-Correct-a-check-for-error-allocating-memory.patch
 delete mode 100644 boot/grub2/0072-affs-Fix-memory-leaks.patch
 delete mode 100644 boot/grub2/0073-libgcrypt-mpi-Fix-possible-unintended-sign-extension.patch
 delete mode 100644 boot/grub2/0074-libgcrypt-mpi-Fix-possible-NULL-dereference.patch
 delete mode 100644 boot/grub2/0075-syslinux-Fix-memory-leak-while-parsing.patch
 delete mode 100644 boot/grub2/0076-normal-completion-Fix-leaking-of-memory-when-process.patch
 delete mode 100644 boot/grub2/0077-commands-hashsum-Fix-a-memory-leak.patch
 delete mode 100644 boot/grub2/0079-video-efi_gop-Remove-unnecessary-return-value-of-gru.patch
 delete mode 100644 boot/grub2/0080-video-fb-fbfill-Fix-potential-integer-overflow.patch
 delete mode 100644 boot/grub2/0081-video-fb-video_fb-Fix-multiple-integer-overflows.patch
 delete mode 100644 boot/grub2/0082-video-fb-video_fb-Fix-possible-integer-overflow.patch
 delete mode 100644 boot/grub2/0083-video-readers-jpeg-Test-for-an-invalid-next-marker-r.patch
 delete mode 100644 boot/grub2/0084-gfxmenu-gui_list-Remove-code-that-coverity-is-flaggi.patch
 delete mode 100644 boot/grub2/0085-loader-bsd-Check-for-NULL-arg-up-front.patch
 delete mode 100644 boot/grub2/0086-loader-xnu-Fix-memory-leak.patch
 delete mode 100644 boot/grub2/0087-loader-xnu-Free-driverkey-data-when-an-error-is-dete.patch
 delete mode 100644 boot/grub2/0088-loader-xnu-Check-if-pointer-is-NULL-before-using-it.patch
 delete mode 100644 boot/grub2/0089-util-grub-install-Fix-NULL-pointer-dereferences.patch
 delete mode 100644 boot/grub2/0090-util-grub-editenv-Fix-incorrect-casting-of-a-signed-.patch
 delete mode 100644 boot/grub2/0091-util-glue-efi-Fix-incorrect-use-of-a-possibly-negati.patch
 delete mode 100644 boot/grub2/0092-script-execute-Fix-NULL-dereference-in-grub_script_e.patch
 delete mode 100644 boot/grub2/0093-commands-ls-Require-device_name-is-not-NULL-before-p.patch
 delete mode 100644 boot/grub2/0094-script-execute-Avoid-crash-when-using-outside-a-func.patch
 delete mode 100644 boot/grub2/0095-lib-arg-Block-repeated-short-options-that-require-an.patch
 delete mode 100644 boot/grub2/0096-script-execute-Don-t-crash-on-a-for-loop-with-no-ite.patch
 delete mode 100644 boot/grub2/0097-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
 delete mode 100644 boot/grub2/0098-kern-misc-Always-set-end-in-grub_strtoull.patch
 delete mode 100644 boot/grub2/0099-video-readers-jpeg-Catch-files-with-unsupported-quan.patch
 delete mode 100644 boot/grub2/0100-video-readers-jpeg-Catch-OOB-reads-writes-in-grub_jp.patch
 delete mode 100644 boot/grub2/0101-video-readers-jpeg-Don-t-decode-data-before-start-of.patch
 delete mode 100644 boot/grub2/0102-term-gfxterm-Don-t-set-up-a-font-with-glyphs-that-ar.patch
 delete mode 100644 boot/grub2/0103-fs-fshelp-Catch-impermissibly-large-block-sizes-in-r.patch
 delete mode 100644 boot/grub2/0104-fs-hfsplus-Don-t-fetch-a-key-beyond-the-end-of-the-n.patch
 delete mode 100644 boot/grub2/0105-fs-hfsplus-Don-t-use-uninitialized-data-on-corrupt-f.patch
 delete mode 100644 boot/grub2/0106-fs-hfs-Disable-under-lockdown.patch
 delete mode 100644 boot/grub2/0107-fs-sfs-Fix-over-read-of-root-object-name.patch
 delete mode 100644 boot/grub2/0108-fs-jfs-Do-not-move-to-leaf-level-if-name-length-is-n.patch
 delete mode 100644 boot/grub2/0109-fs-jfs-Limit-the-extents-that-getblk-can-consider.patch
 delete mode 100644 boot/grub2/0110-fs-jfs-Catch-infinite-recursion.patch
 delete mode 100644 boot/grub2/0111-fs-nilfs2-Reject-too-large-keys.patch
 delete mode 100644 boot/grub2/0112-fs-nilfs2-Don-t-search-children-if-provided-number-i.patch
 delete mode 100644 boot/grub2/0113-fs-nilfs2-Properly-bail-on-errors-in-grub_nilfs2_btr.patch
 delete mode 100644 boot/grub2/0114-io-gzio-Bail-if-gzio-tl-td-is-NULL.patch
 delete mode 100644 boot/grub2/0115-io-gzio-Add-init_dynamic_block-clean-up-if-unpacking.patch
 delete mode 100644 boot/grub2/0116-io-gzio-Catch-missing-values-in-huft_build-and-bail.patch
 delete mode 100644 boot/grub2/0117-io-gzio-Zero-gzio-tl-td-in-init_dynamic_block-if-huf.patch
 delete mode 100644 boot/grub2/0118-disk-lvm-Don-t-go-beyond-the-end-of-the-data-we-read.patch
 delete mode 100644 boot/grub2/0119-disk-lvm-Don-t-blast-past-the-end-of-the-circular-me.patch
 delete mode 100644 boot/grub2/0120-disk-lvm-Bail-on-missing-PV-list.patch
 delete mode 100644 boot/grub2/0121-disk-lvm-Do-not-crash-if-an-expected-string-is-not-f.patch
 delete mode 100644 boot/grub2/0122-disk-lvm-Do-not-overread-metadata.patch
 delete mode 100644 boot/grub2/0123-disk-lvm-Sanitize-rlocn-offset-to-prevent-wild-read.patch
 delete mode 100644 boot/grub2/0124-disk-lvm-Do-not-allow-a-LV-to-be-it-s-own-segment-s-.patch
 delete mode 100644 boot/grub2/0125-fs-btrfs-Validate-the-number-of-stripes-parities-in-.patch
 delete mode 100644 boot/grub2/0126-fs-btrfs-Squash-some-uninitialized-reads.patch
 delete mode 100644 boot/grub2/0127-kern-parser-Fix-a-memory-leak.patch
 delete mode 100644 boot/grub2/0128-kern-parser-Introduce-process_char-helper.patch
 delete mode 100644 boot/grub2/0129-kern-parser-Introduce-terminate_arg-helper.patch
 delete mode 100644 boot/grub2/0130-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
 delete mode 100644 boot/grub2/0131-kern-buffer-Add-variable-sized-heap-buffer.patch
 delete mode 100644 boot/grub2/0132-kern-parser-Fix-a-stack-buffer-overflow.patch
 delete mode 100644 boot/grub2/0133-kern-efi-Add-initial-stack-protector-implementation.patch
 delete mode 100644 boot/grub2/0134-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
 delete mode 100644 boot/grub2/0135-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
 delete mode 100644 boot/grub2/0136-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
 delete mode 100644 boot/grub2/0137-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
 delete mode 100644 boot/grub2/0138-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
 delete mode 100644 boot/grub2/0139-util-mkimage-Improve-data_size-value-calculation.patch
 delete mode 100644 boot/grub2/0140-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
 delete mode 100644 boot/grub2/0141-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
 delete mode 100644 boot/grub2/0142-grub-install-common-Add-sbat-option.patch
 delete mode 100644 boot/grub2/0143-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
 delete mode 100644 boot/grub2/0144-kern-misc-Split-parse_printf_args-into-format-parsin.patch
 delete mode 100644 boot/grub2/0145-kern-misc-Add-STRING-type-for-internal-printf-format.patch
 delete mode 100644 boot/grub2/0146-kern-misc-Add-function-to-check-printf-format-agains.patch
 delete mode 100644 boot/grub2/0147-gfxmenu-gui-Check-printf-format-in-the-gui_progress_.patch
 delete mode 100644 boot/grub2/0148-templates-Disable-the-os-prober-by-default.patch
 delete mode 100644 boot/grub2/0149-kern-mm-Fix-grub_debug_calloc-compilation-error.patch
 delete mode 100644 boot/grub2/0150-Makefile-Make-libgrub.pp-depend-on-config-util.h.patch
 create mode 100644 boot/ovmf-bin/Config.in
 create mode 100644 boot/ovmf-bin/ovmf-bin.hash
 create mode 100644 boot/ovmf-bin/ovmf-bin.mk
 create mode 100644 support/testing/tests/boot/test_grub.py
 create mode 100644 support/testing/tests/boot/test_grub/genimage-aarch64-efi.cfg
 create mode 100644 support/testing/tests/boot/test_grub/grub-aarch64-efi.cfg
 create mode 100644 support/testing/tests/boot/test_grub/linux-aarch64-efi.config
 create mode 100755 support/testing/tests/boot/test_grub/post-build.sh
 create mode 100755 support/testing/tests/boot/test_grub/post-image-aarch64-efi.sh