]> git.proxmox.com Git - mirror_edk2.git/blobdiff - MdeModulePkg/Core/Dxe/SectionExtraction/CoreSectionExtraction.c
UefiCpuPkg: Move AsmRelocateApLoopStart from Mpfuncs.nasm to AmdSev.nasm
[mirror_edk2.git] / MdeModulePkg / Core / Dxe / SectionExtraction / CoreSectionExtraction.c
index 6d660ed942710b1d40f2321dff31a7cd8354b863..b8d4184b5064b0b54e7f283838a709da02e05013 100644 (file)
   3) A support protocol is not found, and the data is not available to be read\r
      without it.  This results in EFI_PROTOCOL_ERROR.\r
 \r
-Copyright (c) 2006 - 2010, Intel Corporation. All rights reserved.<BR>\r
-This program and the accompanying materials\r
-are licensed and made available under the terms and conditions of the BSD License\r
-which accompanies this distribution.  The full text of the license may be found at\r
-http://opensource.org/licenses/bsd-license.php\r
-\r
-THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,\r
-WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r
+Copyright (c) 2006 - 2018, Intel Corporation. All rights reserved.<BR>\r
+SPDX-License-Identifier: BSD-2-Clause-Patent\r
 \r
 **/\r
 \r
@@ -48,15 +42,15 @@ WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
   CR (Node, CORE_SECTION_CHILD_NODE, Link, CORE_SECTION_CHILD_SIGNATURE)\r
 \r
 typedef struct {\r
-  UINT32                      Signature;\r
-  LIST_ENTRY                  Link;\r
-  UINT32                      Type;\r
-  UINT32                      Size;\r
+  UINT32        Signature;\r
+  LIST_ENTRY    Link;\r
+  UINT32        Type;\r
+  UINT32        Size;\r
   //\r
   // StreamBase + OffsetInStream == pointer to section header in stream.  The\r
   // stream base is always known when walking the sections within.\r
   //\r
-  UINT32                      OffsetInStream;\r
+  UINT32        OffsetInStream;\r
   //\r
   // Then EncapsulatedStreamHandle below is always 0 if the section is NOT an\r
   // encapsulating section.  Otherwise, it contains the stream handle\r
@@ -64,37 +58,40 @@ typedef struct {
   // encapsulating child is encountered, irrespective of whether the\r
   // encapsulated stream is processed further.\r
   //\r
-  UINTN                       EncapsulatedStreamHandle;\r
-  EFI_GUID                    *EncapsulationGuid;\r
+  UINTN         EncapsulatedStreamHandle;\r
+  EFI_GUID      *EncapsulationGuid;\r
+  //\r
+  // If the section REQUIRES an extraction protocol, register for RPN\r
+  // when the required GUIDed extraction protocol becomes available.\r
+  //\r
+  EFI_EVENT     Event;\r
 } CORE_SECTION_CHILD_NODE;\r
 \r
-#define CORE_SECTION_STREAM_SIGNATURE SIGNATURE_32('S','X','S','S')\r
+#define CORE_SECTION_STREAM_SIGNATURE  SIGNATURE_32('S','X','S','S')\r
 #define STREAM_NODE_FROM_LINK(Node) \\r
   CR (Node, CORE_SECTION_STREAM_NODE, Link, CORE_SECTION_STREAM_SIGNATURE)\r
 \r
 typedef struct {\r
-  UINT32                      Signature;\r
-  LIST_ENTRY                  Link;\r
-  UINTN                       StreamHandle;\r
-  UINT8                       *StreamBuffer;\r
-  UINTN                       StreamLength;\r
-  LIST_ENTRY                  Children;\r
+  UINT32        Signature;\r
+  LIST_ENTRY    Link;\r
+  UINTN         StreamHandle;\r
+  UINT8         *StreamBuffer;\r
+  UINTN         StreamLength;\r
+  LIST_ENTRY    Children;\r
   //\r
   // Authentication status is from GUIDed encapsulations.\r
   //\r
-  UINT32                      AuthenticationStatus;\r
+  UINT32        AuthenticationStatus;\r
 } CORE_SECTION_STREAM_NODE;\r
 \r
-#define NULL_STREAM_HANDLE    0\r
+#define NULL_STREAM_HANDLE  0\r
 \r
 typedef struct {\r
   CORE_SECTION_CHILD_NODE     *ChildNode;\r
   CORE_SECTION_STREAM_NODE    *ParentStream;\r
   VOID                        *Registration;\r
-  EFI_EVENT                   Event;\r
 } RPN_EVENT_CONTEXT;\r
 \r
-\r
 /**\r
   The ExtractSection() function processes the input section and\r
   allocates a buffer from the pool in which it returns the section\r
@@ -181,25 +178,24 @@ typedef struct {
 EFI_STATUS\r
 EFIAPI\r
 CustomGuidedSectionExtract (\r
-  IN CONST  EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL *This,\r
-  IN CONST  VOID                                   *InputSection,\r
-  OUT       VOID                                   **OutputBuffer,\r
-  OUT       UINTN                                  *OutputSize,\r
-  OUT       UINT32                                 *AuthenticationStatus\r
+  IN CONST  EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL  *This,\r
+  IN CONST  VOID                                    *InputSection,\r
+  OUT       VOID                                    **OutputBuffer,\r
+  OUT       UINTN                                   *OutputSize,\r
+  OUT       UINT32                                  *AuthenticationStatus\r
   );\r
 \r
 //\r
 // Module globals\r
 //\r
-LIST_ENTRY mStreamRoot = INITIALIZE_LIST_HEAD_VARIABLE (mStreamRoot);\r
+LIST_ENTRY  mStreamRoot = INITIALIZE_LIST_HEAD_VARIABLE (mStreamRoot);\r
 \r
-EFI_HANDLE mSectionExtractionHandle = NULL;\r
+EFI_HANDLE  mSectionExtractionHandle = NULL;\r
 \r
-EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL mCustomGuidedSectionExtractionProtocol = {\r
+EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL  mCustomGuidedSectionExtractionProtocol = {\r
   CustomGuidedSectionExtract\r
 };\r
 \r
-\r
 /**\r
   Entry point of the section extraction code. Initializes an instance of the\r
   section extraction interface and installs it on a new handle.\r
@@ -214,13 +210,13 @@ EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL mCustomGuidedSectionExtractionProtocol =
 EFI_STATUS\r
 EFIAPI\r
 InitializeSectionExtraction (\r
-  IN EFI_HANDLE                   ImageHandle,\r
-  IN EFI_SYSTEM_TABLE             *SystemTable\r
+  IN EFI_HANDLE        ImageHandle,\r
+  IN EFI_SYSTEM_TABLE  *SystemTable\r
   )\r
 {\r
-  EFI_STATUS                         Status;\r
-  EFI_GUID                           *ExtractHandlerGuidTable;\r
-  UINTN                              ExtractHandlerNumber;\r
+  EFI_STATUS  Status;\r
+  EFI_GUID    *ExtractHandlerGuidTable;\r
+  UINTN       ExtractHandlerNumber;\r
 \r
   //\r
   // Get custom extract guided section method guid list\r
@@ -233,18 +229,17 @@ InitializeSectionExtraction (
   //\r
   while (ExtractHandlerNumber-- > 0) {\r
     Status = CoreInstallProtocolInterface (\r
-              &mSectionExtractionHandle,\r
-              &ExtractHandlerGuidTable [ExtractHandlerNumber],\r
-              EFI_NATIVE_INTERFACE,\r
-              &mCustomGuidedSectionExtractionProtocol\r
-              );\r
+               &mSectionExtractionHandle,\r
+               &ExtractHandlerGuidTable[ExtractHandlerNumber],\r
+               EFI_NATIVE_INTERFACE,\r
+               &mCustomGuidedSectionExtractionProtocol\r
+               );\r
     ASSERT_EFI_ERROR (Status);\r
   }\r
 \r
   return Status;\r
 }\r
 \r
-\r
 /**\r
   Check if a stream is valid.\r
 \r
@@ -256,20 +251,25 @@ InitializeSectionExtraction (
 **/\r
 BOOLEAN\r
 IsValidSectionStream (\r
-  IN  VOID              *SectionStream,\r
-  IN  UINTN             SectionStreamLength\r
+  IN  VOID   *SectionStream,\r
+  IN  UINTN  SectionStreamLength\r
   )\r
 {\r
-  UINTN                       TotalLength;\r
-  UINTN                       SectionLength;\r
-  EFI_COMMON_SECTION_HEADER   *SectionHeader;\r
-  EFI_COMMON_SECTION_HEADER   *NextSectionHeader;\r
+  UINTN                      TotalLength;\r
+  UINTN                      SectionLength;\r
+  EFI_COMMON_SECTION_HEADER  *SectionHeader;\r
+  EFI_COMMON_SECTION_HEADER  *NextSectionHeader;\r
 \r
-  TotalLength = 0;\r
+  TotalLength   = 0;\r
   SectionHeader = (EFI_COMMON_SECTION_HEADER *)SectionStream;\r
 \r
   while (TotalLength < SectionStreamLength) {\r
-    SectionLength = SECTION_SIZE (SectionHeader);\r
+    if (IS_SECTION2 (SectionHeader)) {\r
+      SectionLength = SECTION2_SIZE (SectionHeader);\r
+    } else {\r
+      SectionLength = SECTION_SIZE (SectionHeader);\r
+    }\r
+\r
     TotalLength += SectionLength;\r
 \r
     if (TotalLength == SectionStreamLength) {\r
@@ -279,21 +279,20 @@ IsValidSectionStream (
     //\r
     // Move to the next byte following the section...\r
     //\r
-    SectionHeader = (EFI_COMMON_SECTION_HEADER *) ((UINT8 *) SectionHeader + SectionLength);\r
+    SectionHeader = (EFI_COMMON_SECTION_HEADER *)((UINT8 *)SectionHeader + SectionLength);\r
 \r
     //\r
     // Figure out where the next section begins\r
     //\r
-    NextSectionHeader = ALIGN_POINTER(SectionHeader, 4);\r
-    TotalLength += (UINTN) NextSectionHeader - (UINTN) SectionHeader;\r
-    SectionHeader = NextSectionHeader;\r
+    NextSectionHeader = ALIGN_POINTER (SectionHeader, 4);\r
+    TotalLength      += (UINTN)NextSectionHeader - (UINTN)SectionHeader;\r
+    SectionHeader     = NextSectionHeader;\r
   }\r
 \r
   ASSERT (FALSE);\r
   return FALSE;\r
 }\r
 \r
-\r
 /**\r
   Worker function.  Constructor for section streams.\r
 \r
@@ -329,15 +328,15 @@ IsValidSectionStream (
 **/\r
 EFI_STATUS\r
 OpenSectionStreamEx (\r
-  IN     UINTN                                     SectionStreamLength,\r
-  IN     VOID                                      *SectionStream,\r
-  IN     BOOLEAN                                   AllocateBuffer,\r
-  IN     UINT32                                    AuthenticationStatus,\r
-     OUT UINTN                                     *SectionStreamHandle\r
+  IN     UINTN    SectionStreamLength,\r
+  IN     VOID     *SectionStream,\r
+  IN     BOOLEAN  AllocateBuffer,\r
+  IN     UINT32   AuthenticationStatus,\r
+  OUT UINTN       *SectionStreamHandle\r
   )\r
 {\r
-  CORE_SECTION_STREAM_NODE    *NewStream;\r
-  EFI_TPL                     OldTpl;\r
+  CORE_SECTION_STREAM_NODE  *NewStream;\r
+  EFI_TPL                   OldTpl;\r
 \r
   //\r
   // Allocate a new stream\r
@@ -358,6 +357,7 @@ OpenSectionStreamEx (
         CoreFreePool (NewStream);\r
         return EFI_OUT_OF_RESOURCES;\r
       }\r
+\r
       //\r
       // Copy in stream data\r
       //\r
@@ -380,8 +380,8 @@ OpenSectionStreamEx (
   //\r
   // Initialize the rest of the section stream\r
   //\r
-  NewStream->Signature = CORE_SECTION_STREAM_SIGNATURE;\r
-  NewStream->StreamHandle = (UINTN) NewStream;\r
+  NewStream->Signature    = CORE_SECTION_STREAM_SIGNATURE;\r
+  NewStream->StreamHandle = (UINTN)NewStream;\r
   NewStream->StreamLength = SectionStreamLength;\r
   InitializeListHead (&NewStream->Children);\r
   NewStream->AuthenticationStatus = AuthenticationStatus;\r
@@ -398,7 +398,6 @@ OpenSectionStreamEx (
   return EFI_SUCCESS;\r
 }\r
 \r
-\r
 /**\r
   SEP member function.  This function creates and returns a new section stream\r
   handle to represent the new section stream.\r
@@ -417,9 +416,9 @@ OpenSectionStreamEx (
 EFI_STATUS\r
 EFIAPI\r
 OpenSectionStream (\r
-  IN     UINTN                                     SectionStreamLength,\r
-  IN     VOID                                      *SectionStream,\r
-     OUT UINTN                                     *SectionStreamHandle\r
+  IN     UINTN  SectionStreamLength,\r
+  IN     VOID   *SectionStream,\r
+  OUT UINTN     *SectionStreamHandle\r
   )\r
 {\r
   //\r
@@ -432,14 +431,12 @@ OpenSectionStream (
   return OpenSectionStreamEx (\r
            SectionStreamLength,\r
            SectionStream,\r
-           TRUE,\r
+           FALSE,\r
            0,\r
            SectionStreamHandle\r
            );\r
 }\r
 \r
-\r
-\r
 /**\r
   Worker function.  Determine if the input stream:child matches the input type.\r
 \r
@@ -457,27 +454,191 @@ OpenSectionStream (
 **/\r
 BOOLEAN\r
 ChildIsType (\r
-  IN CORE_SECTION_STREAM_NODE *Stream,\r
-  IN CORE_SECTION_CHILD_NODE  *Child,\r
-  IN EFI_SECTION_TYPE         SearchType,\r
-  IN EFI_GUID                 *SectionDefinitionGuid\r
+  IN CORE_SECTION_STREAM_NODE  *Stream,\r
+  IN CORE_SECTION_CHILD_NODE   *Child,\r
+  IN EFI_SECTION_TYPE          SearchType,\r
+  IN EFI_GUID                  *SectionDefinitionGuid\r
   )\r
 {\r
-  EFI_GUID_DEFINED_SECTION    *GuidedSection;\r
+  EFI_GUID_DEFINED_SECTION  *GuidedSection;\r
 \r
   if (SearchType == EFI_SECTION_ALL) {\r
     return TRUE;\r
   }\r
+\r
   if (Child->Type != SearchType) {\r
     return FALSE;\r
   }\r
+\r
   if ((SearchType != EFI_SECTION_GUID_DEFINED) || (SectionDefinitionGuid == NULL)) {\r
     return TRUE;\r
   }\r
-  GuidedSection = (EFI_GUID_DEFINED_SECTION * )(Stream->StreamBuffer + Child->OffsetInStream);\r
-  return CompareGuid (&GuidedSection->SectionDefinitionGuid, SectionDefinitionGuid);\r
+\r
+  GuidedSection = (EFI_GUID_DEFINED_SECTION *)(Stream->StreamBuffer + Child->OffsetInStream);\r
+  if (IS_SECTION2 (GuidedSection)) {\r
+    return CompareGuid (&(((EFI_GUID_DEFINED_SECTION2 *)GuidedSection)->SectionDefinitionGuid), SectionDefinitionGuid);\r
+  } else {\r
+    return CompareGuid (&GuidedSection->SectionDefinitionGuid, SectionDefinitionGuid);\r
+  }\r
 }\r
 \r
+/**\r
+  Verify the Guided Section GUID by checking if there is the Guided Section GUID configuration table recorded the GUID itself.\r
+\r
+  @param GuidedSectionGuid          The Guided Section GUID.\r
+  @param GuidedSectionExtraction    A pointer to the pointer to the supported Guided Section Extraction Protocol\r
+                                    for the Guided Section.\r
+\r
+  @return TRUE      The GuidedSectionGuid could be identified, and the pointer to\r
+                    the Guided Section Extraction Protocol will be returned to *GuidedSectionExtraction.\r
+  @return FALSE     The GuidedSectionGuid could not be identified, or\r
+                    the Guided Section Extraction Protocol has not been installed yet.\r
+\r
+**/\r
+BOOLEAN\r
+VerifyGuidedSectionGuid (\r
+  IN  EFI_GUID                                *GuidedSectionGuid,\r
+  OUT EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL  **GuidedSectionExtraction\r
+  )\r
+{\r
+  EFI_GUID    *GuidRecorded;\r
+  VOID        *Interface;\r
+  EFI_STATUS  Status;\r
+\r
+  Interface = NULL;\r
+\r
+  //\r
+  // Check if there is the Guided Section GUID configuration table recorded the GUID itself.\r
+  //\r
+  Status = EfiGetSystemConfigurationTable (GuidedSectionGuid, (VOID **)&GuidRecorded);\r
+  if (Status == EFI_SUCCESS) {\r
+    if (CompareGuid (GuidRecorded, GuidedSectionGuid)) {\r
+      //\r
+      // Found the recorded GuidedSectionGuid.\r
+      //\r
+      Status = CoreLocateProtocol (GuidedSectionGuid, NULL, (VOID **)&Interface);\r
+      if (!EFI_ERROR (Status) && (Interface != NULL)) {\r
+        //\r
+        // Found the supported Guided Section Extraction Porotocol for the Guided Section.\r
+        //\r
+        *GuidedSectionExtraction = (EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL *)Interface;\r
+        return TRUE;\r
+      }\r
+\r
+      return FALSE;\r
+    }\r
+  }\r
+\r
+  return FALSE;\r
+}\r
+\r
+/**\r
+  RPN callback function. Initializes the section stream\r
+  when GUIDED_SECTION_EXTRACTION_PROTOCOL is installed.\r
+\r
+  @param Event               The event that fired\r
+  @param RpnContext          A pointer to the context that allows us to identify\r
+                             the relevent encapsulation.\r
+**/\r
+VOID\r
+EFIAPI\r
+NotifyGuidedExtraction (\r
+  IN   EFI_EVENT  Event,\r
+  IN   VOID       *RpnContext\r
+  )\r
+{\r
+  EFI_STATUS                              Status;\r
+  EFI_GUID_DEFINED_SECTION                *GuidedHeader;\r
+  EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL  *GuidedExtraction;\r
+  VOID                                    *NewStreamBuffer;\r
+  UINTN                                   NewStreamBufferSize;\r
+  UINT32                                  AuthenticationStatus;\r
+  RPN_EVENT_CONTEXT                       *Context;\r
+\r
+  Context = RpnContext;\r
+\r
+  GuidedHeader = (EFI_GUID_DEFINED_SECTION *)(Context->ParentStream->StreamBuffer + Context->ChildNode->OffsetInStream);\r
+  ASSERT (GuidedHeader->CommonHeader.Type == EFI_SECTION_GUID_DEFINED);\r
+\r
+  if (!VerifyGuidedSectionGuid (Context->ChildNode->EncapsulationGuid, &GuidedExtraction)) {\r
+    return;\r
+  }\r
+\r
+  Status = GuidedExtraction->ExtractSection (\r
+                               GuidedExtraction,\r
+                               GuidedHeader,\r
+                               &NewStreamBuffer,\r
+                               &NewStreamBufferSize,\r
+                               &AuthenticationStatus\r
+                               );\r
+  ASSERT_EFI_ERROR (Status);\r
+\r
+  //\r
+  // Make sure we initialize the new stream with the correct\r
+  // authentication status for both aggregate and local status fields.\r
+  //\r
+  if ((GuidedHeader->Attributes & EFI_GUIDED_SECTION_AUTH_STATUS_VALID) != 0) {\r
+    //\r
+    // OR in the parent stream's aggregate status.\r
+    //\r
+    AuthenticationStatus |= Context->ParentStream->AuthenticationStatus & EFI_AUTH_STATUS_ALL;\r
+  } else {\r
+    //\r
+    // since there's no authentication data contributed by the section,\r
+    // just inherit the full value from our immediate parent.\r
+    //\r
+    AuthenticationStatus = Context->ParentStream->AuthenticationStatus;\r
+  }\r
+\r
+  Status = OpenSectionStreamEx (\r
+             NewStreamBufferSize,\r
+             NewStreamBuffer,\r
+             FALSE,\r
+             AuthenticationStatus,\r
+             &Context->ChildNode->EncapsulatedStreamHandle\r
+             );\r
+  ASSERT_EFI_ERROR (Status);\r
+\r
+  //\r
+  //  Close the event when done.\r
+  //\r
+  gBS->CloseEvent (Event);\r
+  Context->ChildNode->Event = NULL;\r
+  FreePool (Context);\r
+}\r
+\r
+/**\r
+  Constructor for RPN event when a missing GUIDED_SECTION_EXTRACTION_PROTOCOL appears...\r
+\r
+  @param ParentStream        Indicates the parent of the ecnapsulation section (child)\r
+  @param ChildNode           Indicates the child node that is the encapsulation section.\r
+\r
+**/\r
+VOID\r
+CreateGuidedExtractionRpnEvent (\r
+  IN CORE_SECTION_STREAM_NODE  *ParentStream,\r
+  IN CORE_SECTION_CHILD_NODE   *ChildNode\r
+  )\r
+{\r
+  RPN_EVENT_CONTEXT  *Context;\r
+\r
+  //\r
+  // Allocate new event structure and context\r
+  //\r
+  Context = AllocatePool (sizeof (RPN_EVENT_CONTEXT));\r
+  ASSERT (Context != NULL);\r
+\r
+  Context->ChildNode    = ChildNode;\r
+  Context->ParentStream = ParentStream;\r
+\r
+  Context->ChildNode->Event = EfiCreateProtocolNotifyEvent (\r
+                                Context->ChildNode->EncapsulationGuid,\r
+                                TPL_NOTIFY,\r
+                                NotifyGuidedExtraction,\r
+                                Context,\r
+                                &Context->Registration\r
+                                );\r
+}\r
 \r
 /**\r
   Worker function.  Constructor for new child nodes.\r
@@ -502,33 +663,37 @@ ChildIsType (
 **/\r
 EFI_STATUS\r
 CreateChildNode (\r
-  IN     CORE_SECTION_STREAM_NODE              *Stream,\r
-  IN     UINT32                                ChildOffset,\r
-     OUT CORE_SECTION_CHILD_NODE               **ChildNode\r
+  IN     CORE_SECTION_STREAM_NODE  *Stream,\r
+  IN     UINT32                    ChildOffset,\r
+  OUT    CORE_SECTION_CHILD_NODE   **ChildNode\r
   )\r
 {\r
-  EFI_STATUS                                   Status;\r
-  EFI_COMMON_SECTION_HEADER                    *SectionHeader;\r
-  EFI_COMPRESSION_SECTION                      *CompressionHeader;\r
-  EFI_GUID_DEFINED_SECTION                     *GuidedHeader;\r
-  EFI_DECOMPRESS_PROTOCOL                      *Decompress;\r
-  EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL       *GuidedExtraction;\r
-  VOID                                         *NewStreamBuffer;\r
-  VOID                                         *ScratchBuffer;\r
-  UINT32                                       ScratchSize;\r
-  UINTN                                        NewStreamBufferSize;\r
-  UINT32                                       AuthenticationStatus;\r
-  UINT32                                       SectionLength;\r
-\r
-  CORE_SECTION_CHILD_NODE                      *Node;\r
-\r
-  SectionHeader = (EFI_COMMON_SECTION_HEADER *) (Stream->StreamBuffer + ChildOffset);\r
+  EFI_STATUS                              Status;\r
+  EFI_COMMON_SECTION_HEADER               *SectionHeader;\r
+  EFI_COMPRESSION_SECTION                 *CompressionHeader;\r
+  EFI_GUID_DEFINED_SECTION                *GuidedHeader;\r
+  EFI_DECOMPRESS_PROTOCOL                 *Decompress;\r
+  EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL  *GuidedExtraction;\r
+  VOID                                    *NewStreamBuffer;\r
+  VOID                                    *ScratchBuffer;\r
+  UINT32                                  ScratchSize;\r
+  UINTN                                   NewStreamBufferSize;\r
+  UINT32                                  AuthenticationStatus;\r
+  VOID                                    *CompressionSource;\r
+  UINT32                                  CompressionSourceSize;\r
+  UINT32                                  UncompressedLength;\r
+  UINT8                                   CompressionType;\r
+  UINT16                                  GuidedSectionAttributes;\r
+\r
+  CORE_SECTION_CHILD_NODE  *Node;\r
+\r
+  SectionHeader = (EFI_COMMON_SECTION_HEADER *)(Stream->StreamBuffer + ChildOffset);\r
 \r
   //\r
   // Allocate a new node\r
   //\r
-  *ChildNode = AllocatePool (sizeof (CORE_SECTION_CHILD_NODE));\r
-  Node = *ChildNode;\r
+  *ChildNode = AllocateZeroPool (sizeof (CORE_SECTION_CHILD_NODE));\r
+  Node       = *ChildNode;\r
   if (Node == NULL) {\r
     return EFI_OUT_OF_RESOURCES;\r
   }\r
@@ -537,11 +702,16 @@ CreateChildNode (
   // Now initialize it\r
   //\r
   Node->Signature = CORE_SECTION_CHILD_SIGNATURE;\r
-  Node->Type = SectionHeader->Type;\r
-  Node->Size = SECTION_SIZE (SectionHeader);\r
-  Node->OffsetInStream = ChildOffset;\r
+  Node->Type      = SectionHeader->Type;\r
+  if (IS_SECTION2 (SectionHeader)) {\r
+    Node->Size = SECTION2_SIZE (SectionHeader);\r
+  } else {\r
+    Node->Size = SECTION_SIZE (SectionHeader);\r
+  }\r
+\r
+  Node->OffsetInStream           = ChildOffset;\r
   Node->EncapsulatedStreamHandle = NULL_STREAM_HANDLE;\r
-  Node->EncapsulationGuid = NULL;\r
+  Node->EncapsulationGuid        = NULL;\r
 \r
   //\r
   // If it's an encapsulating section, then create the new section stream also\r
@@ -551,27 +721,42 @@ CreateChildNode (
       //\r
       // Get the CompressionSectionHeader\r
       //\r
-      ASSERT (Node->Size >= sizeof (EFI_COMPRESSION_SECTION));\r
+      if (Node->Size < sizeof (EFI_COMPRESSION_SECTION)) {\r
+        CoreFreePool (Node);\r
+        return EFI_NOT_FOUND;\r
+      }\r
 \r
-      CompressionHeader = (EFI_COMPRESSION_SECTION *) SectionHeader;\r
+      CompressionHeader = (EFI_COMPRESSION_SECTION *)SectionHeader;\r
+\r
+      if (IS_SECTION2 (CompressionHeader)) {\r
+        CompressionSource     = (VOID *)((UINT8 *)CompressionHeader + sizeof (EFI_COMPRESSION_SECTION2));\r
+        CompressionSourceSize = (UINT32)(SECTION2_SIZE (CompressionHeader) - sizeof (EFI_COMPRESSION_SECTION2));\r
+        UncompressedLength    = ((EFI_COMPRESSION_SECTION2 *)CompressionHeader)->UncompressedLength;\r
+        CompressionType       = ((EFI_COMPRESSION_SECTION2 *)CompressionHeader)->CompressionType;\r
+      } else {\r
+        CompressionSource     = (VOID *)((UINT8 *)CompressionHeader + sizeof (EFI_COMPRESSION_SECTION));\r
+        CompressionSourceSize = (UINT32)(SECTION_SIZE (CompressionHeader) - sizeof (EFI_COMPRESSION_SECTION));\r
+        UncompressedLength    = CompressionHeader->UncompressedLength;\r
+        CompressionType       = CompressionHeader->CompressionType;\r
+      }\r
 \r
       //\r
       // Allocate space for the new stream\r
       //\r
-      if (CompressionHeader->UncompressedLength > 0) {\r
-        NewStreamBufferSize = CompressionHeader->UncompressedLength;\r
-        NewStreamBuffer = AllocatePool (NewStreamBufferSize);\r
+      if (UncompressedLength > 0) {\r
+        NewStreamBufferSize = UncompressedLength;\r
+        NewStreamBuffer     = AllocatePool (NewStreamBufferSize);\r
         if (NewStreamBuffer == NULL) {\r
           CoreFreePool (Node);\r
           return EFI_OUT_OF_RESOURCES;\r
         }\r
 \r
-        if (CompressionHeader->CompressionType == EFI_NOT_COMPRESSED) {\r
+        if (CompressionType == EFI_NOT_COMPRESSED) {\r
           //\r
           // stream is not actually compressed, just encapsulated.  So just copy it.\r
           //\r
-          CopyMem (NewStreamBuffer, CompressionHeader + 1, NewStreamBufferSize);\r
-        } else if (CompressionHeader->CompressionType == EFI_STANDARD_COMPRESSION) {\r
+          CopyMem (NewStreamBuffer, CompressionSource, NewStreamBufferSize);\r
+        } else if (CompressionType == EFI_STANDARD_COMPRESSION) {\r
           //\r
           // Only support the EFI_SATNDARD_COMPRESSION algorithm.\r
           //\r
@@ -585,13 +770,20 @@ CreateChildNode (
 \r
           Status = Decompress->GetInfo (\r
                                  Decompress,\r
-                                 CompressionHeader + 1,\r
-                                 Node->Size - sizeof (EFI_COMPRESSION_SECTION),\r
+                                 CompressionSource,\r
+                                 CompressionSourceSize,\r
                                  (UINT32 *)&NewStreamBufferSize,\r
                                  &ScratchSize\r
                                  );\r
-          ASSERT_EFI_ERROR (Status);\r
-          ASSERT (NewStreamBufferSize == CompressionHeader->UncompressedLength);\r
+          if (EFI_ERROR (Status) || (NewStreamBufferSize != UncompressedLength)) {\r
+            CoreFreePool (Node);\r
+            CoreFreePool (NewStreamBuffer);\r
+            if (!EFI_ERROR (Status)) {\r
+              Status = EFI_BAD_BUFFER_SIZE;\r
+            }\r
+\r
+            return Status;\r
+          }\r
 \r
           ScratchBuffer = AllocatePool (ScratchSize);\r
           if (ScratchBuffer == NULL) {\r
@@ -602,18 +794,22 @@ CreateChildNode (
 \r
           Status = Decompress->Decompress (\r
                                  Decompress,\r
-                                 CompressionHeader + 1,\r
-                                 Node->Size - sizeof (EFI_COMPRESSION_SECTION),\r
+                                 CompressionSource,\r
+                                 CompressionSourceSize,\r
                                  NewStreamBuffer,\r
                                  (UINT32)NewStreamBufferSize,\r
                                  ScratchBuffer,\r
                                  ScratchSize\r
                                  );\r
-          ASSERT_EFI_ERROR (Status);\r
           CoreFreePool (ScratchBuffer);\r
+          if (EFI_ERROR (Status)) {\r
+            CoreFreePool (Node);\r
+            CoreFreePool (NewStreamBuffer);\r
+            return Status;\r
+          }\r
         }\r
       } else {\r
-        NewStreamBuffer = NULL;\r
+        NewStreamBuffer     = NULL;\r
         NewStreamBufferSize = 0;\r
       }\r
 \r
@@ -629,13 +825,20 @@ CreateChildNode (
         CoreFreePool (NewStreamBuffer);\r
         return Status;\r
       }\r
+\r
       break;\r
 \r
     case EFI_SECTION_GUID_DEFINED:\r
-      GuidedHeader = (EFI_GUID_DEFINED_SECTION *) SectionHeader;\r
-      Node->EncapsulationGuid = &GuidedHeader->SectionDefinitionGuid;\r
-      Status = CoreLocateProtocol (Node->EncapsulationGuid, NULL, (VOID **)&GuidedExtraction);\r
-      if (!EFI_ERROR (Status) && GuidedExtraction != NULL) {\r
+      GuidedHeader = (EFI_GUID_DEFINED_SECTION *)SectionHeader;\r
+      if (IS_SECTION2 (GuidedHeader)) {\r
+        Node->EncapsulationGuid = &(((EFI_GUID_DEFINED_SECTION2 *)GuidedHeader)->SectionDefinitionGuid);\r
+        GuidedSectionAttributes = ((EFI_GUID_DEFINED_SECTION2 *)GuidedHeader)->Attributes;\r
+      } else {\r
+        Node->EncapsulationGuid = &GuidedHeader->SectionDefinitionGuid;\r
+        GuidedSectionAttributes = GuidedHeader->Attributes;\r
+      }\r
+\r
+      if (VerifyGuidedSectionGuid (Node->EncapsulationGuid, &GuidedExtraction)) {\r
         //\r
         // NewStreamBuffer is always allocated by ExtractSection... No caller\r
         // allocation here.\r
@@ -656,7 +859,7 @@ CreateChildNode (
         // Make sure we initialize the new stream with the correct\r
         // authentication status for both aggregate and local status fields.\r
         //\r
-        if ((GuidedHeader->Attributes & EFI_GUIDED_SECTION_AUTH_STATUS_VALID) != 0) {\r
+        if ((GuidedSectionAttributes & EFI_GUIDED_SECTION_AUTH_STATUS_VALID) != 0) {\r
           //\r
           // OR in the parent stream's aggregate status.\r
           //\r
@@ -685,30 +888,44 @@ CreateChildNode (
         //\r
         // There's no GUIDed section extraction protocol available.\r
         //\r
-        if ((GuidedHeader->Attributes & EFI_GUIDED_SECTION_PROCESSING_REQUIRED) != 0) {\r
+        if ((GuidedSectionAttributes & EFI_GUIDED_SECTION_PROCESSING_REQUIRED) != 0) {\r
           //\r
-          // If the section REQUIRES an extraction protocol, then we're toast\r
+          // If the section REQUIRES an extraction protocol, register for RPN\r
+          // when the required GUIDed extraction protocol becomes available.\r
           //\r
-          CoreFreePool (*ChildNode);\r
-          return EFI_PROTOCOL_ERROR;\r
-        }\r
+          CreateGuidedExtractionRpnEvent (Stream, Node);\r
+        } else {\r
+          //\r
+          // Figure out the proper authentication status\r
+          //\r
+          AuthenticationStatus = Stream->AuthenticationStatus;\r
 \r
-        //\r
-        // Figure out the proper authentication status\r
-        //\r
-        AuthenticationStatus = Stream->AuthenticationStatus;\r
+          if ((GuidedSectionAttributes & EFI_GUIDED_SECTION_AUTH_STATUS_VALID) == EFI_GUIDED_SECTION_AUTH_STATUS_VALID) {\r
+            AuthenticationStatus |= EFI_AUTH_STATUS_IMAGE_SIGNED | EFI_AUTH_STATUS_NOT_TESTED;\r
+          }\r
 \r
-        SectionLength = SECTION_SIZE (GuidedHeader);\r
-        Status = OpenSectionStreamEx (\r
-                   SectionLength - GuidedHeader->DataOffset,\r
-                   (UINT8 *) GuidedHeader + GuidedHeader->DataOffset,\r
-                   TRUE,\r
-                   AuthenticationStatus,\r
-                   &Node->EncapsulatedStreamHandle\r
-                   );\r
-        if (EFI_ERROR (Status)) {\r
-          CoreFreePool (Node);\r
-          return Status;\r
+          if (IS_SECTION2 (GuidedHeader)) {\r
+            Status = OpenSectionStreamEx (\r
+                       SECTION2_SIZE (GuidedHeader) - ((EFI_GUID_DEFINED_SECTION2 *)GuidedHeader)->DataOffset,\r
+                       (UINT8 *)GuidedHeader + ((EFI_GUID_DEFINED_SECTION2 *)GuidedHeader)->DataOffset,\r
+                       TRUE,\r
+                       AuthenticationStatus,\r
+                       &Node->EncapsulatedStreamHandle\r
+                       );\r
+          } else {\r
+            Status = OpenSectionStreamEx (\r
+                       SECTION_SIZE (GuidedHeader) - ((EFI_GUID_DEFINED_SECTION *)GuidedHeader)->DataOffset,\r
+                       (UINT8 *)GuidedHeader + ((EFI_GUID_DEFINED_SECTION *)GuidedHeader)->DataOffset,\r
+                       TRUE,\r
+                       AuthenticationStatus,\r
+                       &Node->EncapsulatedStreamHandle\r
+                       );\r
+          }\r
+\r
+          if (EFI_ERROR (Status)) {\r
+            CoreFreePool (Node);\r
+            return Status;\r
+          }\r
         }\r
       }\r
 \r
@@ -730,7 +947,6 @@ CreateChildNode (
   return EFI_SUCCESS;\r
 }\r
 \r
-\r
 /**\r
   Worker function  Recursively searches / builds section stream database\r
   looking for requested section.\r
@@ -739,9 +955,12 @@ CreateChildNode (
                                  search.\r
   @param  SearchType             Indicates the type of section to search for.\r
   @param  SectionInstance        Indicates which instance of section to find.\r
-                                 This is an in/out parameter to deal with\r
-                                 recursions.\r
+                                 This is an in/out parameter and it is 1-based,\r
+                                 to deal with recursions.\r
   @param  SectionDefinitionGuid  Guid of section definition\r
+  @param  Depth                  Nesting depth of encapsulation sections.\r
+                                 Callers different from FindChildNode() are\r
+                                 responsible for passing in a zero Depth.\r
   @param  FoundChild             Output indicating the child node that is found.\r
   @param  FoundStream            Output indicating which section stream the child\r
                                  was found in.  If this stream was generated as a\r
@@ -755,35 +974,46 @@ CreateChildNode (
   @retval EFI_NOT_FOUND          Requested child node does not exist.\r
   @retval EFI_PROTOCOL_ERROR     a required GUIDED section extraction protocol\r
                                  does not exist\r
+  @retval EFI_ABORTED            Recursion aborted because Depth has been\r
+                                 greater than or equal to\r
+                                 PcdFwVolDxeMaxEncapsulationDepth.\r
 \r
 **/\r
 EFI_STATUS\r
 FindChildNode (\r
-  IN     CORE_SECTION_STREAM_NODE                   *SourceStream,\r
-  IN     EFI_SECTION_TYPE                           SearchType,\r
-  IN OUT UINTN                                      *SectionInstance,\r
-  IN     EFI_GUID                                   *SectionDefinitionGuid,\r
-  OUT    CORE_SECTION_CHILD_NODE                    **FoundChild,\r
-  OUT    CORE_SECTION_STREAM_NODE                   **FoundStream,\r
-  OUT    UINT32                                     *AuthenticationStatus\r
+  IN     CORE_SECTION_STREAM_NODE  *SourceStream,\r
+  IN     EFI_SECTION_TYPE          SearchType,\r
+  IN OUT UINTN                     *SectionInstance,\r
+  IN     EFI_GUID                  *SectionDefinitionGuid,\r
+  IN     UINT32                    Depth,\r
+  OUT    CORE_SECTION_CHILD_NODE   **FoundChild,\r
+  OUT    CORE_SECTION_STREAM_NODE  **FoundStream,\r
+  OUT    UINT32                    *AuthenticationStatus\r
   )\r
 {\r
-  CORE_SECTION_CHILD_NODE                       *CurrentChildNode;\r
-  CORE_SECTION_CHILD_NODE                       *RecursedChildNode;\r
-  CORE_SECTION_STREAM_NODE                      *RecursedFoundStream;\r
-  UINT32                                        NextChildOffset;\r
-  EFI_STATUS                                    ErrorStatus;\r
-  EFI_STATUS                                    Status;\r
+  CORE_SECTION_CHILD_NODE   *CurrentChildNode;\r
+  CORE_SECTION_CHILD_NODE   *RecursedChildNode;\r
+  CORE_SECTION_STREAM_NODE  *RecursedFoundStream;\r
+  UINT32                    NextChildOffset;\r
+  EFI_STATUS                ErrorStatus;\r
+  EFI_STATUS                Status;\r
+\r
+  ASSERT (*SectionInstance > 0);\r
+\r
+  if (Depth >= PcdGet32 (PcdFwVolDxeMaxEncapsulationDepth)) {\r
+    return EFI_ABORTED;\r
+  }\r
 \r
   CurrentChildNode = NULL;\r
-  ErrorStatus = EFI_NOT_FOUND;\r
+  ErrorStatus      = EFI_NOT_FOUND;\r
 \r
   if (SourceStream->StreamLength == 0) {\r
     return EFI_NOT_FOUND;\r
   }\r
 \r
   if (IsListEmpty (&SourceStream->Children) &&\r
-      SourceStream->StreamLength >= sizeof (EFI_COMMON_SECTION_HEADER)) {\r
+      (SourceStream->StreamLength >= sizeof (EFI_COMMON_SECTION_HEADER)))\r
+  {\r
     //\r
     // This occurs when a section stream exists, but no child sections\r
     // have been parsed out yet.  Therefore, extract the first child and add it\r
@@ -804,9 +1034,9 @@ FindChildNode (
   // adding children until either the requested section is found, or we run\r
   // out of data\r
   //\r
-  CurrentChildNode = CHILD_SECTION_NODE_FROM_LINK (GetFirstNode(&SourceStream->Children));\r
+  CurrentChildNode = CHILD_SECTION_NODE_FROM_LINK (GetFirstNode (&SourceStream->Children));\r
 \r
-  for (;;) {\r
+  for ( ; ;) {\r
     ASSERT (CurrentChildNode != NULL);\r
     if (ChildIsType (SourceStream, CurrentChildNode, SearchType, SectionDefinitionGuid)) {\r
       //\r
@@ -817,38 +1047,64 @@ FindChildNode (
         //\r
         // Got it!\r
         //\r
-        *FoundChild = CurrentChildNode;\r
-        *FoundStream = SourceStream;\r
+        *FoundChild           = CurrentChildNode;\r
+        *FoundStream          = SourceStream;\r
         *AuthenticationStatus = SourceStream->AuthenticationStatus;\r
         return EFI_SUCCESS;\r
       }\r
     }\r
 \r
+    //\r
+    // Type mismatch, or we haven't found the desired instance yet.\r
+    //\r
+    ASSERT (*SectionInstance > 0);\r
+\r
     if (CurrentChildNode->EncapsulatedStreamHandle != NULL_STREAM_HANDLE) {\r
       //\r
       // If the current node is an encapsulating node, recurse into it...\r
       //\r
       Status = FindChildNode (\r
-                (CORE_SECTION_STREAM_NODE *)CurrentChildNode->EncapsulatedStreamHandle,\r
-                SearchType,\r
-                SectionInstance,\r
-                SectionDefinitionGuid,\r
-                &RecursedChildNode,\r
-                &RecursedFoundStream,\r
-                AuthenticationStatus\r
-                );\r
-      //\r
-      // If the status is not EFI_SUCCESS, just save the error code and continue\r
-      // to find the request child node in the rest stream.\r
-      //\r
+                 (CORE_SECTION_STREAM_NODE *)CurrentChildNode->EncapsulatedStreamHandle,\r
+                 SearchType,\r
+                 SectionInstance,\r
+                 SectionDefinitionGuid,\r
+                 Depth + 1,\r
+                 &RecursedChildNode,\r
+                 &RecursedFoundStream,\r
+                 AuthenticationStatus\r
+                 );\r
       if (*SectionInstance == 0) {\r
+        //\r
+        // The recursive FindChildNode() call decreased (*SectionInstance) to\r
+        // zero.\r
+        //\r
         ASSERT_EFI_ERROR (Status);\r
-        *FoundChild = RecursedChildNode;\r
+        *FoundChild  = RecursedChildNode;\r
         *FoundStream = RecursedFoundStream;\r
         return EFI_SUCCESS;\r
       } else {\r
+        if (Status == EFI_ABORTED) {\r
+          //\r
+          // If the recursive call was aborted due to nesting depth, stop\r
+          // looking for the requested child node. The skipped subtree could\r
+          // throw off the instance counting.\r
+          //\r
+          return Status;\r
+        }\r
+\r
+        //\r
+        // Save the error code and continue to find the requested child node in\r
+        // the rest of the stream.\r
+        //\r
         ErrorStatus = Status;\r
       }\r
+    } else if ((CurrentChildNode->Type == EFI_SECTION_GUID_DEFINED) && (SearchType != EFI_SECTION_GUID_DEFINED)) {\r
+      //\r
+      // When Node Type is GUIDED section, but Node has no encapsulated data, Node data should not be parsed\r
+      // because a required GUIDED section extraction protocol does not exist.\r
+      // If SearchType is not GUIDED section, EFI_PROTOCOL_ERROR should return.\r
+      //\r
+      ErrorStatus = EFI_PROTOCOL_ERROR;\r
     }\r
 \r
     if (!IsNodeAtEnd (&SourceStream->Children, &CurrentChildNode->Link)) {\r
@@ -869,7 +1125,7 @@ FindChildNode (
       // Round up to 4 byte boundary\r
       //\r
       NextChildOffset += 3;\r
-      NextChildOffset &= ~(UINTN) 3;\r
+      NextChildOffset &= ~(UINTN)3;\r
       if (NextChildOffset <= SourceStream->StreamLength - sizeof (EFI_COMMON_SECTION_HEADER)) {\r
         //\r
         // There's an unparsed child remaining in the stream, so create a new child node\r
@@ -886,7 +1142,6 @@ FindChildNode (
   }\r
 }\r
 \r
-\r
 /**\r
   Worker function.  Search stream database for requested stream handle.\r
 \r
@@ -901,15 +1156,15 @@ FindChildNode (
 **/\r
 EFI_STATUS\r
 FindStreamNode (\r
-  IN  UINTN                                     SearchHandle,\r
-  OUT CORE_SECTION_STREAM_NODE                  **FoundStream\r
+  IN  UINTN                     SearchHandle,\r
+  OUT CORE_SECTION_STREAM_NODE  **FoundStream\r
   )\r
 {\r
-  CORE_SECTION_STREAM_NODE                      *StreamNode;\r
+  CORE_SECTION_STREAM_NODE  *StreamNode;\r
 \r
   if (!IsListEmpty (&mStreamRoot)) {\r
     StreamNode = STREAM_NODE_FROM_LINK (GetFirstNode (&mStreamRoot));\r
-    for (;;) {\r
+    for ( ; ;) {\r
       if (StreamNode->StreamHandle == SearchHandle) {\r
         *FoundStream = StreamNode;\r
         return EFI_SUCCESS;\r
@@ -924,7 +1179,6 @@ FindStreamNode (
   return EFI_NOT_FOUND;\r
 }\r
 \r
-\r
 /**\r
   SEP member function.  Retrieves requested section from section stream.\r
 \r
@@ -940,7 +1194,7 @@ FindStreamNode (
                                 non-null on input, then the buffer is caller\r
                                 allocated.  If Buffer is NULL, then the buffer\r
                                 is callee allocated.  In either case, the\r
-                                requried buffer size is returned in *BufferSize.\r
+                                required buffer size is returned in *BufferSize.\r
   @param  BufferSize            On input, indicates the size of *Buffer if\r
                                 *Buffer is non-null on input.  On output,\r
                                 indicates the required size (allocated size if\r
@@ -961,6 +1215,7 @@ FindStreamNode (
                                 function returns anything other than\r
                                 EFI_SUCCESS, the value of *AuthenticationStatus\r
                                 is undefined.\r
+  @param  IsFfs3Fv              Indicates the FV format.\r
 \r
   @retval EFI_SUCCESS           Section was retrieved successfully\r
   @retval EFI_PROTOCOL_ERROR    A GUID defined section was encountered in the\r
@@ -985,29 +1240,31 @@ FindStreamNode (
 EFI_STATUS\r
 EFIAPI\r
 GetSection (\r
-  IN UINTN                                              SectionStreamHandle,\r
-  IN EFI_SECTION_TYPE                                   *SectionType,\r
-  IN EFI_GUID                                           *SectionDefinitionGuid,\r
-  IN UINTN                                              SectionInstance,\r
-  IN VOID                                               **Buffer,\r
-  IN OUT UINTN                                          *BufferSize,\r
-  OUT UINT32                                            *AuthenticationStatus\r
+  IN UINTN             SectionStreamHandle,\r
+  IN EFI_SECTION_TYPE  *SectionType,\r
+  IN EFI_GUID          *SectionDefinitionGuid,\r
+  IN UINTN             SectionInstance,\r
+  IN VOID              **Buffer,\r
+  IN OUT UINTN         *BufferSize,\r
+  OUT UINT32           *AuthenticationStatus,\r
+  IN BOOLEAN           IsFfs3Fv\r
   )\r
 {\r
-  CORE_SECTION_STREAM_NODE                              *StreamNode;\r
-  EFI_TPL                                               OldTpl;\r
-  EFI_STATUS                                            Status;\r
-  CORE_SECTION_CHILD_NODE                               *ChildNode;\r
-  CORE_SECTION_STREAM_NODE                              *ChildStreamNode;\r
-  UINTN                                                 CopySize;\r
-  UINT32                                                ExtractedAuthenticationStatus;\r
-  UINTN                                                 Instance;\r
-  UINT8                                                 *CopyBuffer;\r
-  UINTN                                                 SectionSize;\r
-\r
-\r
-  OldTpl = CoreRaiseTpl (TPL_NOTIFY);\r
-  Instance = SectionInstance + 1;\r
+  CORE_SECTION_STREAM_NODE   *StreamNode;\r
+  EFI_TPL                    OldTpl;\r
+  EFI_STATUS                 Status;\r
+  CORE_SECTION_CHILD_NODE    *ChildNode;\r
+  CORE_SECTION_STREAM_NODE   *ChildStreamNode;\r
+  UINTN                      CopySize;\r
+  UINT32                     ExtractedAuthenticationStatus;\r
+  UINTN                      Instance;\r
+  UINT8                      *CopyBuffer;\r
+  UINTN                      SectionSize;\r
+  EFI_COMMON_SECTION_HEADER  *Section;\r
+\r
+  ChildStreamNode = NULL;\r
+  OldTpl          = CoreRaiseTpl (TPL_NOTIFY);\r
+  Instance        = SectionInstance + 1;\r
 \r
   //\r
   // Locate target stream\r
@@ -1025,8 +1282,8 @@ GetSection (
     //\r
     // SectionType == NULL means return the WHOLE section stream...\r
     //\r
-    CopySize = StreamNode->StreamLength;\r
-    CopyBuffer = StreamNode->StreamBuffer;\r
+    CopySize              = StreamNode->StreamLength;\r
+    CopyBuffer            = StreamNode->StreamBuffer;\r
     *AuthenticationStatus = StreamNode->AuthenticationStatus;\r
   } else {\r
     //\r
@@ -1037,15 +1294,44 @@ GetSection (
                *SectionType,\r
                &Instance,\r
                SectionDefinitionGuid,\r
+               0,                             // encapsulation depth\r
                &ChildNode,\r
                &ChildStreamNode,\r
                &ExtractedAuthenticationStatus\r
                );\r
     if (EFI_ERROR (Status)) {\r
+      if (Status == EFI_ABORTED) {\r
+        DEBUG ((\r
+          DEBUG_ERROR,\r
+          "%a: recursion aborted due to nesting depth\n",\r
+          __FUNCTION__\r
+          ));\r
+        //\r
+        // Map "aborted" to "not found".\r
+        //\r
+        Status = EFI_NOT_FOUND;\r
+      }\r
+\r
       goto GetSection_Done;\r
     }\r
-    CopySize = ChildNode->Size - sizeof (EFI_COMMON_SECTION_HEADER);\r
-    CopyBuffer = ChildStreamNode->StreamBuffer + ChildNode->OffsetInStream + sizeof (EFI_COMMON_SECTION_HEADER);\r
+\r
+    Section = (EFI_COMMON_SECTION_HEADER *)(ChildStreamNode->StreamBuffer + ChildNode->OffsetInStream);\r
+\r
+    if (IS_SECTION2 (Section)) {\r
+      ASSERT (SECTION2_SIZE (Section) > 0x00FFFFFF);\r
+      if (!IsFfs3Fv) {\r
+        DEBUG ((DEBUG_ERROR, "It is a FFS3 formatted section in a non-FFS3 formatted FV.\n"));\r
+        Status = EFI_NOT_FOUND;\r
+        goto GetSection_Done;\r
+      }\r
+\r
+      CopySize   = SECTION2_SIZE (Section) - sizeof (EFI_COMMON_SECTION_HEADER2);\r
+      CopyBuffer = (UINT8 *)Section + sizeof (EFI_COMMON_SECTION_HEADER2);\r
+    } else {\r
+      CopySize   = SECTION_SIZE (Section) - sizeof (EFI_COMMON_SECTION_HEADER);\r
+      CopyBuffer = (UINT8 *)Section + sizeof (EFI_COMMON_SECTION_HEADER);\r
+    }\r
+\r
     *AuthenticationStatus = ExtractedAuthenticationStatus;\r
   }\r
 \r
@@ -1055,7 +1341,7 @@ GetSection (
     // Caller allocated buffer.  Fill to size and return required size...\r
     //\r
     if (*BufferSize < CopySize) {\r
-      Status = EFI_WARN_BUFFER_TOO_SMALL;\r
+      Status   = EFI_WARN_BUFFER_TOO_SMALL;\r
       CopySize = *BufferSize;\r
     }\r
   } else {\r
@@ -1068,6 +1354,7 @@ GetSection (
       goto GetSection_Done;\r
     }\r
   }\r
+\r
   CopyMem (*Buffer, CopyBuffer, CopySize);\r
   *BufferSize = SectionSize;\r
 \r
@@ -1077,7 +1364,6 @@ GetSection_Done:
   return Status;\r
 }\r
 \r
-\r
 /**\r
   Worker function.  Destructor for child nodes.\r
 \r
@@ -1086,7 +1372,7 @@ GetSection_Done:
 **/\r
 VOID\r
 FreeChildNode (\r
-  IN  CORE_SECTION_CHILD_NODE                   *ChildNode\r
+  IN  CORE_SECTION_CHILD_NODE  *ChildNode\r
   )\r
 {\r
   ASSERT (ChildNode->Signature == CORE_SECTION_CHILD_SIGNATURE);\r
@@ -1100,19 +1386,25 @@ FreeChildNode (
     // If it's an encapsulating section, we close the resulting section stream.\r
     // CloseSectionStream will free all memory associated with the stream.\r
     //\r
-    CloseSectionStream (ChildNode->EncapsulatedStreamHandle);\r
+    CloseSectionStream (ChildNode->EncapsulatedStreamHandle, TRUE);\r
+  }\r
+\r
+  if (ChildNode->Event != NULL) {\r
+    gBS->CloseEvent (ChildNode->Event);\r
   }\r
+\r
   //\r
   // Last, free the child node itself\r
   //\r
   CoreFreePool (ChildNode);\r
 }\r
 \r
-\r
 /**\r
   SEP member function.  Deletes an existing section stream\r
 \r
   @param  StreamHandleToClose    Indicates the stream to close\r
+  @param  FreeStreamBuffer       TRUE - Need to free stream buffer;\r
+                                 FALSE - No need to free stream buffer.\r
 \r
   @retval EFI_SUCCESS            The section stream is closed sucessfully.\r
   @retval EFI_OUT_OF_RESOURCES   Memory allocation failed.\r
@@ -1123,14 +1415,15 @@ FreeChildNode (
 EFI_STATUS\r
 EFIAPI\r
 CloseSectionStream (\r
-  IN  UINTN                                     StreamHandleToClose\r
+  IN  UINTN    StreamHandleToClose,\r
+  IN  BOOLEAN  FreeStreamBuffer\r
   )\r
 {\r
-  CORE_SECTION_STREAM_NODE                      *StreamNode;\r
-  EFI_TPL                                       OldTpl;\r
-  EFI_STATUS                                    Status;\r
-  LIST_ENTRY                                    *Link;\r
-  CORE_SECTION_CHILD_NODE                       *ChildNode;\r
+  CORE_SECTION_STREAM_NODE  *StreamNode;\r
+  EFI_TPL                   OldTpl;\r
+  EFI_STATUS                Status;\r
+  LIST_ENTRY                *Link;\r
+  CORE_SECTION_CHILD_NODE   *ChildNode;\r
 \r
   OldTpl = CoreRaiseTpl (TPL_NOTIFY);\r
 \r
@@ -1144,11 +1437,15 @@ CloseSectionStream (
     //\r
     RemoveEntryList (&StreamNode->Link);\r
     while (!IsListEmpty (&StreamNode->Children)) {\r
-      Link = GetFirstNode (&StreamNode->Children);\r
+      Link      = GetFirstNode (&StreamNode->Children);\r
       ChildNode = CHILD_SECTION_NODE_FROM_LINK (Link);\r
       FreeChildNode (ChildNode);\r
     }\r
-    CoreFreePool (StreamNode->StreamBuffer);\r
+\r
+    if (FreeStreamBuffer) {\r
+      CoreFreePool (StreamNode->StreamBuffer);\r
+    }\r
+\r
     CoreFreePool (StreamNode);\r
     Status = EFI_SUCCESS;\r
   } else {\r
@@ -1159,7 +1456,6 @@ CloseSectionStream (
   return Status;\r
 }\r
 \r
-\r
 /**\r
   The ExtractSection() function processes the input section and\r
   allocates a buffer from the pool in which it returns the section\r
@@ -1246,19 +1542,19 @@ CloseSectionStream (
 EFI_STATUS\r
 EFIAPI\r
 CustomGuidedSectionExtract (\r
-  IN CONST  EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL *This,\r
-  IN CONST  VOID                                   *InputSection,\r
-  OUT       VOID                                   **OutputBuffer,\r
-  OUT       UINTN                                  *OutputSize,\r
-  OUT       UINT32                                 *AuthenticationStatus\r
+  IN CONST  EFI_GUIDED_SECTION_EXTRACTION_PROTOCOL  *This,\r
+  IN CONST  VOID                                    *InputSection,\r
+  OUT       VOID                                    **OutputBuffer,\r
+  OUT       UINTN                                   *OutputSize,\r
+  OUT       UINT32                                  *AuthenticationStatus\r
   )\r
 {\r
-  EFI_STATUS      Status;\r
-  VOID            *ScratchBuffer;\r
-  VOID            *AllocatedOutputBuffer;\r
-  UINT32          OutputBufferSize;\r
-  UINT32          ScratchBufferSize;\r
-  UINT16          SectionAttribute;\r
+  EFI_STATUS  Status;\r
+  VOID        *ScratchBuffer;\r
+  VOID        *AllocatedOutputBuffer;\r
+  UINT32      OutputBufferSize;\r
+  UINT32      ScratchBufferSize;\r
+  UINT16      SectionAttribute;\r
 \r
   //\r
   // Init local variable\r
@@ -1297,9 +1593,13 @@ CustomGuidedSectionExtract (
     //\r
     AllocatedOutputBuffer = AllocatePool (OutputBufferSize);\r
     if (AllocatedOutputBuffer == NULL) {\r
-      FreePool (ScratchBuffer);\r
+      if (ScratchBuffer != NULL) {\r
+        FreePool (ScratchBuffer);\r
+      }\r
+\r
       return EFI_OUT_OF_RESOURCES;\r
     }\r
+\r
     *OutputBuffer = AllocatedOutputBuffer;\r
   }\r
 \r
@@ -1319,9 +1619,11 @@ CustomGuidedSectionExtract (
     if (AllocatedOutputBuffer != NULL) {\r
       CoreFreePool (AllocatedOutputBuffer);\r
     }\r
+\r
     if (ScratchBuffer != NULL) {\r
       CoreFreePool (ScratchBuffer);\r
     }\r
+\r
     DEBUG ((DEBUG_ERROR, "Extract guided section Failed - %r\n", Status));\r
     return Status;\r
   }\r
@@ -1338,7 +1640,7 @@ CustomGuidedSectionExtract (
   //\r
   // Set real size of output buffer.\r
   //\r
-  *OutputSize = (UINTN) OutputBufferSize;\r
+  *OutputSize = (UINTN)OutputBufferSize;\r
 \r
   //\r
   // Free unused scratch buffer.\r