Security / SMM / Memory / Firmware Image Terms Seed

What is EfiRuntimeServicesData?

Quick note explaining EfiRuntimeServicesData for BIOS/UEFI and embedded firmware readers.

January 20, 2026 2 min read

Security / SMM / Memory / Firmware Image Terms cover

EfiRuntimeServicesData is a UEFI memory-management concept used around memory maps, runtime mapping, and the OS handoff.

Why it matters

Explains memory ownership around the firmware-to-OS transition.
Helps debug ExitBootServices(), runtime mapping, and memory-type issues.
Useful when reading UEFI memory maps.

Practical example

Example: ExitBootServices() can fail if the memory map changes after GetMemoryMap(). In that case, retrieve the map again and use the new key.

Quick checklist

Is the memory type correct for its lifetime?
Does the map change before ExitBootServices()?
Are runtime pointers converted after SetVirtualAddressMap()?

Quick takeaway

EfiRuntimeServicesData is about memory ownership during the handoff from firmware to the OS.

Put it into the system flow

I try not to treat EfiRuntimeServicesData as a dictionary entry. I read it as part of a firmware path: who produces it, who consumes it, and what symptom appears when it is wrong. That habit makes the note useful during debugging, not only during study.

A practical picture

Firmware memory bugs can appear far away from the code that caused them. With EfiRuntimeServicesData, I would check ownership, lifetime, memory type, and whether the OS receives a consistent memory map before ExitBootServices().

In a real debugging session

Do not memorize EfiRuntimeServicesData as a standalone definition. Tie it to a concrete flow: who creates the data, who reads it, whether it lives in RAM, NVRAM, flash, or a protocol, and what symptom the user sees when it goes wrong.

This way of learning is slower at first, but it gives you real anchors when debugging BIOS or firmware.

Public references

Biến note thành bài viết hoàn chỉnh

Notes là nơi ghi nhanh khái niệm.

Đọc blog Xem notes khác