microsoft/mu_basecore v2025110001.0.3

v2025110001.0.3

Repository: microsoft/mu_basecore

Tag: v2025110001.0.3

Published: 2026-04-17T20:10:49Z

Prerelease: no

Release notes:

What's Changed

SecurityPkg: Add missing TpmTestApp markdown information @Raymond-MS (#1768)

Change Details

Description

Added missing information to the TpmTestApp markdown document.

• [ ] Impacts functionality?
• [ ] Impacts security?
• [ ] Breaking change?
• [ ] Includes tests?
• [ ] Includes documentation?

How This Was Tested

N/A

Integration Instructions

N/A

Added several mock libraries for google test @PaddyDengAmi (#1750)

Change Details

Description

Added several mock libraries for google test

For details on how to complete these options and their meaning refer to CONTRIBUTING.md.

• [ ] Impacts functionality?
• [ ] Impacts security?
• [ ] Breaking change?
• [ ] Includes tests?
• [ ] Includes documentation?

How This Was Tested

Tested with pipelines.

Integration Instructions

N/A

[CHERRY-PICK] [SQUASH ON REBASE] Update FlattenPdbs Plugin to pick up additional symbols. @os-d (#1769)

Change Details

Description

This commit was missed bringing from 2502 to 2511. Cherry-pick it. On the next integration, it can be squashed with 77849807d2232514fd260aaa3585991f69438829.

(cherry picked from commit f90aa00c85970c9e27bc4dc54f419b60de93ab56)

• [ ] Impacts functionality?
• [ ] Impacts security?
• [ ] Breaking change?
• [ ] Includes tests?
• [ ] Includes documentation?

How This Was Tested

N/A.

Integration Instructions

N/A.

SecurityPkg: Introduce TpmTestApp @Raymond-MS (#1760)

Change Details

Description

Implemented a TPM UEFI shell application that can be used to test the platform's physical presence interface through the TCG2 protocol that is installed during DXE.

• [ ] Impacts functionality?
• [ ] Impacts security?
• [ ] Breaking change?
• [ ] Includes tests?
• [x] Includes documentation?

How This Was Tested

Built both SBSA and Q35 with TPM enabled and verified TpmTestApp functionality.

Integration Instructions

Add the TpmTestApp.inf to your platform .dsc and .fdf. Please see the .md file for more information.

SecurityPkg: Remove Globals from HashLibTpm2PeilessSec @Raymond-MS (#1752)

Change Details

Description

Updated the HashLibTpm2PeilessSec library to no longer use globals in SEC. When enabled on SBSA, this was causing a hang as functions attempted to set RO memory. Changed the code to query the relevant information each time it was needed either through the TPM or Transfer List. Added new helper functions to Tpm2Help which removes the need to have a duplicate hash struct.

• [x] Impacts functionality?
• [ ] Impacts security?
• [ ] Breaking change?
• [ ] Includes tests?
• [ ] Includes documentation?

How This Was Tested

Built with the PeilessSecMeasureLib not set to the NULL instance on QEMU SBSA with the TPM enabled. Verified the library measure the FV and CRTM version.

Integration Instructions

It is better for us to continue using the NULL instance of the PeilessSecMeasureLib as the time it took to measure the FV was ~15 mins on QEMU SBSA with TPM support.

NetworkPkg/DxeNetLib: Reduce SNP media detect timeout and retry attempts [Rebase \& FF] @makubacki (#1715)

Change Details

Description

Originally, NetLibDetectMediaWaitTimeout() only used a timeout when detecting media through AIP. When AIP is not available or fails, media detection falls back to SNP. Commit ef7bb4d made the SNP media detection process more robust with a timeout and retry mechanism. This improved detection reliability and overall stability on the network devices targeted by the change. However, it also applied conservative timeout and retry values that may cause longer wait times in some cases where AIP is not used and the SNP media state is already known to be "not present".

This change reduces SNP retry attempts to 0 and the waiting time to 2 seconds. This leaves the retry logic in place but avoids using it for now. The maximum connection time observed in this fallback case has been 1.5 seconds, so 2 seconds is chosen to provide a reasonable buffer while avoiding unnecessarily long waits.

---

A commit is also included to make timeout code in DxeNetLib consistent:

NetworkPkg/DxeNetLib: Clamp timeouts to MAX_INT64

The original implementation of tracking remaining time in the NetLibDetectMediaWaitTimeout() used a UINT64 to track the remaining time, which could wrap around depending on whether the subtracted time interval (MEDIA_STATE_DETECT_TIME_INTERVAL) was a factor of the timeout given.

This change makes the TimeRemaining variable a INT64 to prevent the wrap around and clamps the incoming timeout to MAX_INT64 to prevent overflow.

---

• [x] Impacts functionality?
• [ ] Impacts security?
• [ ] Breaking change?
• [ ] Includes tests?
• [ ] Includes documentation?

How This Was Tested

• Tested with platforms that do not install AIP for the network device and fall back to SNP media detection.
• Client testing is complete. PXE boot remains successful in cases where network media is present. When network media is not present total wait time is reduced from 160s to 8s.
• Server platform testing complete. PXE boot remains successful with the change.

Integration Instructions

• N/A

[CHERRY-PICK][REBASE \& FF] Revert Mu Commit in Favor of edk2 Commit @os-d (#1758)

Change Details

Description

Revert a Mu commit in favor of the edk2 commit.

• [ ] Impacts functionality?
• [ ] Impacts security?
• [ ] Breaking change?
• [ ] Includes tests?
• [ ] Includes documentation?

How This Was Tested

N/A.

Integration Instructions

N/A.

mu-pr-validation-pending.yml: Temporarily disable commit status upates @makubacki (#1755)

Change Details

Description

The Mu Automation GitHub app requires a permission update to be accepted by a microsoft org admin. Until that happens, disable the calling the GitHub API to update the commit status.

This will still run validation and post PR comments. The pass/fail result just won't be reported in the status check area of the PR until the permission is allowed.

• [ ] Impacts functionality?
• [ ] Impacts security?
• [ ] Breaking change?
• [ ] Includes tests?
• [ ] Includes documentation?

How This Was Tested

• N/A

Integration Instructions

• N/A

.github: Add Mu PR Validation workflow @makubacki (#1737)

Change Details

Description...