SeaBIOS

seabios@seabios.org

4 participants
3806 discussions

[PATCH v2] vbe: Add VBE 2.0+ OemData field to struct vbe_info
by Daniel Verkamp 10 Mar '24

10 Mar '24

Per the VBE 2.0 specification, the VBE controller information is 512 bytes long when the "VBE2" signature is provided, instead of the original 256 bytes. src/bootsplash.c uses the original pre-VBE-2.0 256-byte structure while also filling in the "VBE2" signature, so a video BIOS that makes use of the VBE2 OemData area could write past the end of the allocated region. The original bootsplash code did not have this bug; it was introduced when the bootsplash VBE structures were merged with the VGA ROM struct definitions. Fixes: 69e941c159ed ("Merge bootsplash and VGA ROM vbe structure definitions") Signed-off-by: Daniel Verkamp <daniel(a)drv.nu> --- v2 fixes the inverse bug introduced by the original patch - the vgabios would memset too much data if the caller did not request VBE2 data. src/std/vbe.h | 2 ++ vgasrc/vbe.c | 4 +++- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/src/std/vbe.h b/src/std/vbe.h index 94b4ad86..fe96f5ec 100644 --- a/src/std/vbe.h +++ b/src/std/vbe.h @@ -18,6 +18,8 @@ struct vbe_info { struct segoff_s oem_product_string; struct segoff_s oem_revision_string; u8 reserved[222]; + /* VBE 2.0 */ + u8 oem_data[256]; } PACKED; struct vbe_mode_info { diff --git a/vgasrc/vbe.c b/vgasrc/vbe.c index 66afb011..91abc9ab 100644 --- a/vgasrc/vbe.c +++ b/vgasrc/vbe.c @@ -32,16 +32,18 @@ vbe_104f00(struct bregs *regs) { u16 seg = regs->es; struct vbe_info *info = (void*)(regs->di+0); + size_t info_size = offsetof(struct vbe_info, oem_data); if (GET_FARVAR(seg, info->signature) == VBE2_SIGNATURE) { dprintf(4, "Get VBE Controller: VBE2 Signature found\n"); + info_size = sizeof(*info); } else if (GET_FARVAR(seg, info->signature) == VESA_SIGNATURE) { dprintf(4, "Get VBE Controller: VESA Signature found\n"); } else { dprintf(4, "Get VBE Controller: Invalid Signature\n"); } - memset_far(seg, info, 0, sizeof(*info)); + memset_far(seg, info, 0, info_size); SET_FARVAR(seg, info->signature, VESA_SIGNATURE); -- 2.43.0

2 1

[PATCH] vbe: Add VBE 2.0+ OemData field to struct vbe_info
by Daniel Verkamp 06 Mar '24

06 Mar '24

1 0

[PATCH] fix smbios blob length overflow
by Igor Mammedov 03 Mar '24

03 Mar '24

When tables are more than 64K, size of copied tables will be truncated due to cast from u32 to u16, and as result only a small portion of the tables will be copied in the end. That leads to corrupted tables (a part from QEMU and remainder is whatever was in memory block allocated for the tables). Fix it by making qtables_len 32bit int. Signed-off-by: Igor Mammedov <imammedo(a)redhat.com> --- src/fw/biostables.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/fw/biostables.c b/src/fw/biostables.c index 1c09a785..90712d4b 100644 --- a/src/fw/biostables.c +++ b/src/fw/biostables.c @@ -499,7 +499,7 @@ smbios_build_tables(struct romfile_s *f_tables, u16 *number_of_structures) { struct smbios_type_0 *t0; - u16 qtables_len, need_t0 = 1; + u32 qtables_len, need_t0 = 1; u8 *qtables, *tables; if (f_tables->size != *length) -- 2.39.3

2 2

[PATCH v2 2/2] Add basic MXM 3.0 interrupt support
by Riku Viitanen 27 Feb '24

27 Feb '24

VGAROMs on MXM graphics cards need certain int15h functions present, to function properly. On HP EliteBook 8560w with coreboot and Quadro 2000M, this warning is displayed for 30 seconds, making every boot extremely slow: ERROR: Valid MXM Structure not found POST halted for 30 seconds, P-state limited to P10... This patch implements the minimum functionality to get rid of it: the functions 0 and 1, version 3.0 of the specification [1]. Older version 2.1 is not implemented. Functions are enabled only if romfile "mxm-30-sis" exists. These functios are specific to the MXM revision, but not the board or GPU. Some boards might require more of the optional functions to be implemented, however. - Function 0 returns information about supported functions and revision. - Function 1 returns a pointer to a MXM configuration structure in low memory. This is copied from romfile "mxm-30-sis". TEST: HP EliteBook 8560w boots without error and delay, graphics work. [1]: MXM Graphics Module Software Specification Version 3.0, Revision 1.1 [2]: https://codeberg.org/Riku_V/mxmdump/ Signed-off-by: Riku Viitanen <riku.viitanen(a)protonmail.com> --- src/optionroms.c | 8 ++++++ src/vgahooks.c | 70 ++++++++++++++++++++++++++++++++++++++++++++++++ src/vgahooks.h | 8 ++++++ 3 files changed, 86 insertions(+) create mode 100644 src/vgahooks.h diff --git a/src/optionroms.c b/src/optionroms.c index e906ab97..4e6a1ad1 100644 --- a/src/optionroms.c +++ b/src/optionroms.c @@ -22,6 +22,7 @@ #include "string.h" // memset #include "util.h" // get_pnp_offset #include "tcgbios.h" // tpm_* +#include "vgahooks.h" // MXM30SIS static int EnforceChecksum, S3ResumeVga, RunPCIroms; @@ -463,6 +464,13 @@ vgarom_setup(void) RunPCIroms = romfile_loadint("etc/pci-optionrom-exec", 2); ScreenAndDebug = romfile_loadint("etc/screen-and-debug", 1); + // Load MXM 3.0 System Information Structure, if it exists + void *mxm_sis = romfile_loadfile_low("mxm-30-sis", NULL); + if (mxm_sis) + MXM30SIS = (u32)mxm_sis; + else + MXM30SIS = 0; + // Clear option rom memory memset((void*)BUILD_ROM_START, 0, rom_get_max() - BUILD_ROM_START); diff --git a/src/vgahooks.c b/src/vgahooks.c index 1f149532..25e91f20 100644 --- a/src/vgahooks.c +++ b/src/vgahooks.c @@ -18,8 +18,10 @@ #define VH_VIA 1 #define VH_INTEL 2 #define VH_SMI 3 +#define VH_MXM 4 int VGAHookHandlerType VARFSEG; +u32 MXM30SIS VARFSEG; static void handle_155fXX(struct bregs *regs) @@ -296,6 +298,71 @@ winent_mb6047_setup(struct pci_device *pci) SmiBootDisplay = 0x02; } +/**************************************************************** + * MXM VGA hooks + ****************************************************************/ + +// Function 0: Return Specification Support Level +static void +mxm_V30_F00(struct bregs *regs) +{ + regs->ax = 0x005f; // Success + regs->bl = 0x30; // MXM 3.0 + regs->cx = 0x0003; // Supported Functions + set_success(regs); +} + +// Function 1: Return a Pointer to the MXM Structure +static void +mxm_V30_F01(struct bregs *regs) +{ + switch (regs->cx) { + case 0x0030: + regs->ax = 0x005f; // Success + regs->es = GET_GLOBAL(MXM30SIS)/16; + regs->di = GET_GLOBAL(MXM30SIS)%16; + set_success(regs); + break; + default: + handle_155fXX(regs); + break; + } +} + +static void +mxm_V30(struct bregs *regs) +{ + switch (regs->bx) { + case 0xff00: mxm_V30_F00(regs); break; + case 0xff01: mxm_V30_F01(regs); break; + default: handle_155fXX(regs); break; + } +} + +static void +mxm_155f80(struct bregs *regs) +{ + // TODO: implement other versions, like 2.1 + mxm_V30(regs); +} + +static void +mxm_155f(struct bregs *regs) +{ + switch (regs->al) { + case 0x80: mxm_155f80(regs); break; + default: handle_155fXX(regs); break; + } +} + +void +mxm_setup(void) +{ + VGAHookHandlerType = VH_MXM; +} + + + /**************************************************************** * Entry and setup ****************************************************************/ @@ -313,6 +380,7 @@ handle_155f(struct bregs *regs) switch (htype) { case VH_VIA: via_155f(regs); break; case VH_INTEL: intel_155f(regs); break; + case VH_MXM: mxm_155f(regs); break; default: handle_155fXX(regs); break; } } @@ -352,4 +420,6 @@ vgahook_setup(struct pci_device *pci) via_setup(pci); else if (pci->vendor == PCI_VENDOR_ID_INTEL) intel_setup(pci); + else if (GET_GLOBAL(MXM30SIS)) + mxm_setup(); } diff --git a/src/vgahooks.h b/src/vgahooks.h new file mode 100644 index 00000000..c9113714 --- /dev/null +++ b/src/vgahooks.h @@ -0,0 +1,8 @@ +#ifndef __VGAHOOKS_H +#define __VGAHOOKS_H + +#include "types.h" // u32 + +extern u32 MXM30SIS; + +#endif // vgahooks.h -- 2.43.2

3 6

[PATCH v2 1/2] Add romfile_loadfile_low
by Riku Viitanen 23 Feb '24

23 Feb '24

Useful for MXM structures for example: it needs to be in low memory, since the VGA BIOS needs to access it in real mode. Signed-off-by: Riku Viitanen <riku.viitanen(a)protonmail.com> --- src/romfile.c | 30 ++++++++++++++++++++++++++++++ src/romfile.h | 1 + 2 files changed, 31 insertions(+) diff --git a/src/romfile.c b/src/romfile.c index b598274e..5d80d809 100644 --- a/src/romfile.c +++ b/src/romfile.c @@ -78,6 +78,36 @@ romfile_loadfile(const char *name, int *psize) return data; } +// Helper function to find, malloc_low, and copy a romfile. +void * +romfile_loadfile_low(const char *name, int *psize) +{ + struct romfile_s *file = romfile_find(name); + if (!file) + return NULL; + + int filesize = file->size; + if (!filesize) + return NULL; + + char *data = malloc_low(filesize); + if (!data) { + warn_noalloc(); + return NULL; + } + + dprintf(5, "Copying romfile '%s' (len %d) to low memory\n", + name, filesize); + int ret = file->copy(file, data, filesize); + if (ret < 0) { + free(data); + return NULL; + } + if (psize) + *psize = filesize; + return data; +} + // Attempt to load an integer from the given file - return 'defval' // if unsuccessful. u64 diff --git a/src/romfile.h b/src/romfile.h index 3e0f8200..70111ac2 100644 --- a/src/romfile.h +++ b/src/romfile.h @@ -14,6 +14,7 @@ void romfile_add(struct romfile_s *file); struct romfile_s *romfile_findprefix(const char *prefix, struct romfile_s *prev); struct romfile_s *romfile_find(const char *name); void *romfile_loadfile(const char *name, int *psize); +void *romfile_loadfile_low(const char *name, int *psize); u64 romfile_loadint(const char *name, u64 defval); void const_romfile_add_int(char *name, u32 value); -- 2.43.2

1 0

an issue with win10 boot and different compiler versions
by Michael Tokarev 21 Feb '24

21 Feb '24

Hi! I come across an old qemu issue today, https://gitlab.com/qemu-project/qemu/-/issues/1115 . It seemed interesting, and since I do have several test win10 guests handy, I tested it with qemu built from tag v7.1.0. And observed the described behavior. After digging deeper, it turns out the same bios, compiled using different gcc, produces either good or broken binaries. It is not the seabios itself, the diff is the gcc version. In particular, on debian bookworm, gcc-12 produces seabios which breaks win10 boot. While on debian sid, gcc-13 produces working seabios from the same source. Everything else can be anything - any qemu version, any seabios version, - any combination. Giving any combination, compile bios with gcc from bookworm - win10 does not boot; compile this same bios using gcc from sid - it works. The binary in question is vgabios-stdvga.bin. I tried compiling vgabios-stdvga.bin with gcc-11, - this one produces broken binary too. This goes up to qemu version 8.1.0, and from where, version of compiler used to build seabios does not matter anymore. This is a past already, yet it's a quite interesting (to me anyway) observation. Something was (or maybe still is?) quite fragile here. Maybe it's a good idea to do some bisections, at least to find out when qemu started working again with "broken" bios, to understand the issue better. FWIW. Thanks, /mjt

6 12

Re: [PATCH 1/2] romfile: implement a generic loader
by Riku Viitanen 14 Feb '24

14 Feb '24

> I'd suggest to add a romfile_loadfile_low() I can definitely do that. > or add a 'struct zone_s' > parameter instead of passing in a function pointer. Sounds sensible. I see there's a malloc that takes zone as argument. > Also: What the trailing bytes are used for? Only for re-implementing the existing loadfile function, to reduce copy-pasted code.

1 0

[PATCH 1/2] romfile: implement a generic loader
by Riku Viitanen 14 Feb '24

14 Feb '24

romfile_loadfile_g: Based on romfile_loadfile but more flexible. User has to supply pointer to a malloc function and the number of trailing padding bytes. Thus, any memory region may be used. romfile_loadfile: It is now a wrapper around romfile_loadfile_g. Functionality is the same. Signed-off-by: Riku Viitanen <riku.viitanen(a)protonmail.com> --- src/romfile.c | 25 ++++++++++++++++++++----- src/romfile.h | 2 ++ 2 files changed, 22 insertions(+), 5 deletions(-) diff --git a/src/romfile.c b/src/romfile.c index b598274e..8bf95713 100644 --- a/src/romfile.c +++ b/src/romfile.c @@ -47,10 +47,12 @@ romfile_find(const char *name) return __romfile_findprefix(name, strlen(name) + 1, NULL); } -// Helper function to find, malloc_tmphigh, and copy a romfile. This -// function adds a trailing zero to the malloc'd copy. +// Generic function to find romfile, malloc (using provided function +// pointer), and copy a romfile. add_len specifies how many additional +// trailing bytes to reserve. The extra bytes will not be initialised. void * -romfile_loadfile(const char *name, int *psize) +romfile_loadfile_g(const char *name, int *psize, + void *(*malloc_fn)(), int add_len) { struct romfile_s *file = romfile_find(name); if (!file) @@ -60,7 +62,7 @@ romfile_loadfile(const char *name, int *psize) if (!filesize) return NULL; - char *data = malloc_tmphigh(filesize+1); + char *data = malloc_fn(filesize+add_len); if (!data) { warn_noalloc(); return NULL; @@ -74,7 +76,20 @@ romfile_loadfile(const char *name, int *psize) } if (psize) *psize = filesize; - data[filesize] = '\0'; + + return data; +} + +// Helper function to find, malloc_tmphigh, and copy a romfile. This +// function adds a trailing zero to the malloc'd copy. +void * +romfile_loadfile(const char *name, int *psize) +{ + char *data = romfile_loadfile_g(name, psize, &malloc_tmphigh, 1); + if (!data) + return NULL; + + data[*psize] = '\0'; return data; } diff --git a/src/romfile.h b/src/romfile.h index 3e0f8200..a320a5bc 100644 --- a/src/romfile.h +++ b/src/romfile.h @@ -13,6 +13,8 @@ struct romfile_s { void romfile_add(struct romfile_s *file); struct romfile_s *romfile_findprefix(const char *prefix, struct romfile_s *prev); struct romfile_s *romfile_find(const char *name); +void *romfile_loadfile_g(const char *name, int *psize, + void *(*malloc_fn)(), int add_len); void *romfile_loadfile(const char *name, int *psize); u64 romfile_loadint(const char *name, u64 defval); -- 2.43.0

2 1

[PATCH 2/2] vgahooks, optionroms: implement mxm 3.0 interrupts
by Riku Viitanen 10 Feb '24

10 Feb '24

VGAROMs on MXM graphics cards need certain int15h functions present. Tested on a HP EliteBook 8560w with coreboot and Quadro 2000M. A warning is displayed for 30 seconds and performance is nerfed: ERROR: Valid MXM Structure not found. POST halted for 30 seconds, P-state limited to P10... This patch implements the minimum required on this system (and implemented by the OEM BIOS): functions 0 and 1. These functions are specific to the MXM 3.0 Software Specification, earlier versions are not implemented due to lack of hardware. Documentation for versions 2.1 and 3.0 can be found freely online. Functions aren't specific to mainboards or GPUs (though some mainboards could need more functions implemented). The structure is mainboard-specific and is read from romfile "mxm-30-sis". It can be extracted from vendor BIOS by running those same interrupts. I wrote a tool to do it on Linux: https://codeberg.org/Riku_V/mxmdump/ Signed-off-by: Riku Viitanen <riku.viitanen(a)protonmail.com> --- src/optionroms.c | 9 +++++++ src/vgahooks.c | 69 ++++++++++++++++++++++++++++++++++++++++++++++++ src/vgahooks.h | 9 +++++++ 3 files changed, 87 insertions(+) create mode 100644 src/vgahooks.h diff --git a/src/optionroms.c b/src/optionroms.c index e906ab97..fcce7900 100644 --- a/src/optionroms.c +++ b/src/optionroms.c @@ -22,6 +22,7 @@ #include "string.h" // memset #include "util.h" // get_pnp_offset #include "tcgbios.h" // tpm_* +#include "vgahooks.h" // MXM30SIS static int EnforceChecksum, S3ResumeVga, RunPCIroms; @@ -463,6 +464,14 @@ vgarom_setup(void) RunPCIroms = romfile_loadint("etc/pci-optionrom-exec", 2); ScreenAndDebug = romfile_loadint("etc/screen-and-debug", 1); + // Load MXM 3.0 System Information Structure + void *mxm_sis = romfile_loadfile_g("mxm-30-sis", NULL, &malloc_low, 0); + if (mxm_sis) { + MXM30SIS = (u32)mxm_sis; + } else { + MXM30SIS = 0; + } + // Clear option rom memory memset((void*)BUILD_ROM_START, 0, rom_get_max() - BUILD_ROM_START); diff --git a/src/vgahooks.c b/src/vgahooks.c index 1f149532..a94840b2 100644 --- a/src/vgahooks.c +++ b/src/vgahooks.c @@ -18,8 +18,10 @@ #define VH_VIA 1 #define VH_INTEL 2 #define VH_SMI 3 +#define VH_MXM 4 int VGAHookHandlerType VARFSEG; +u32 MXM30SIS VARFSEG; static void handle_155fXX(struct bregs *regs) @@ -59,6 +61,7 @@ via_155f02(struct bregs *regs) dprintf(1, "Warning: VGA TV/CRT output type is hardcoded\n"); } + static void via_155f18(struct bregs *regs) { @@ -296,6 +299,69 @@ winent_mb6047_setup(struct pci_device *pci) SmiBootDisplay = 0x02; } +/**************************************************************** + * MXM VGA hooks + ****************************************************************/ + +// Function 0: Return Specification Support Level +static void +mxm_V30_F00(struct bregs *regs) +{ + regs->ax = 0x005f; // Success + regs->bl = 0x30; // MXM 3.0 + regs->cx = 0x0003; // Supported Functions + set_success(regs); +} + +// Function 1: Return a Pointer to the MXM Structure +static void +mxm_V30_F01(struct bregs *regs) +{ + switch (regs->cx) { + case 0x0030: + regs->ax = 0x005f; // Success + regs->es = GET_GLOBAL(MXM30SIS)/16; + regs->di = GET_GLOBAL(MXM30SIS)%16; + set_success(regs); + break; + default: + handle_155fXX(regs); + break; + } +} + +static void +mxm_V30(struct bregs *regs) +{ + switch (regs->bx) { + case 0xff00: mxm_V30_F00(regs); break; + case 0xff01: mxm_V30_F01(regs); break; + default: handle_155fXX(regs); break; + } +} + +static void +mxm_155f80(struct bregs *regs) +{ + // TODO: implement other versions, like 2.1 + mxm_V30(regs); +} + +static void +mxm_155f(struct bregs *regs) +{ + switch (regs->al) { + case 0x80: mxm_155f80(regs); break; + default: handle_155fXX(regs); break; + } +} + +void +mxm_setup(void) +{ + VGAHookHandlerType = VH_MXM; +} + /**************************************************************** * Entry and setup ****************************************************************/ @@ -313,6 +379,7 @@ handle_155f(struct bregs *regs) switch (htype) { case VH_VIA: via_155f(regs); break; case VH_INTEL: intel_155f(regs); break; + case VH_MXM: mxm_155f(regs); break; default: handle_155fXX(regs); break; } } @@ -352,4 +419,6 @@ vgahook_setup(struct pci_device *pci) via_setup(pci); else if (pci->vendor == PCI_VENDOR_ID_INTEL) intel_setup(pci); + else if (GET_GLOBAL(MXM30SIS)) + mxm_setup(); } diff --git a/src/vgahooks.h b/src/vgahooks.h new file mode 100644 index 00000000..f0c203af --- /dev/null +++ b/src/vgahooks.h @@ -0,0 +1,9 @@ +#ifndef __VGAHOOKS_H +#define __VGAHOOKS_H + +#include "types.h" // u32 + +extern u32 MXM30SIS; + + +#endif // vgahooks.h -- 2.43.0

1 0

[RFC v3 0/1] Add LBA 64bit support.
by Max Tottenham 26 Jan '24

26 Jan '24

Changes since V2: * Print READ CAPACITY(16) debug call at higher log level * Cleanup return statement for CMD_WRITE in src/hw/blockcmd.c:scsi_fill_cmd() * Change format specifier for printing drive->sectors to %llx * Minor commit log spelling/punctuation fixes Changes since V1: * De-duplicate blksize check and capacity logging * Fix off by 1 error for returned sector count (LBA addresses start from 0). Max Tottenham (1): Add LBA 64bit support for reads beyond 2TB. src/hw/blockcmd.c | 58 +++++++++++++++++++++++++++++++++++------------ src/hw/blockcmd.h | 27 ++++++++++++++++++++++ 2 files changed, 71 insertions(+), 14 deletions(-) -- 2.34.1

2 2

← Newer
1
2
3
4
5
6
7
8
9
...
381
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

SeaBIOS