patterns: Add UEFI Firmare Volume Variable Store pattern (#421)

Browse Source

* Add UEFI Firmare Volume Variable Store pattern

Add a pattern for UEFI Firmare Volume Variable store.
This file type is commonly used with virtual machine UEFI variable files,
like OVMF.fd used with QEMU. You could also extract a UEFI firmware binary
from a flash device, search for the FV Variable Store, and set this pattern
to the FV address.

Signed-off-by: Marc Jones <marcj303@gmail.com>

* Fixed description pragma

---------

Signed-off-by: Marc Jones <marcj303@gmail.com>
Co-authored-by: Nik <werwolv98@gmail.com>

...

This commit is contained in:

Marc Jones

2025-08-31 03:38:32 -06:00

committed by GitHub

parent 6630180276

commit 284ca8d325

3 changed files with 213 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

tests/patterns/test_data/uefi_fv_varstore.hexpat.fd Normal file

Binary file not shown.