lzeng14 164a9b6752 Fix the TOCTOU issue of CommBufferSize itself for SMM communicate handler input. ...

Signed-off-by: Star Zeng <star.zeng@intel.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@14379 6f19259b-4bc3-4df7-8a09-765794883524

2013-05-21 02:22:02 +00:00

..

FaultTolerantWrite.c

Fix the issue that FTW driver fail to reclaim WorkSpace.

2012-09-14 06:54:35 +00:00

FaultTolerantWrite.h

Initialize a local work space header to be used by IsValidWorkSpace() and InitWorkSpaceHeader() to avoid executing code(gBS->CalculateCrc32 ()) outside SMRAM while inside SMM.

2012-12-21 00:52:57 +00:00

FaultTolerantWriteDxe.c

update comments and correct reclaim algorithm if there is no record existing in FTW working block.

2011-02-16 05:31:53 +00:00

FaultTolerantWriteDxe.inf

MdeModulePkg: eliminate all implicit library dependencies for all modules in MdeModulePkg on PcdLib

2012-11-01 06:59:25 +00:00

FaultTolerantWriteSmm.c

Fix the TOCTOU issue of CommBufferSize itself for SMM communicate handler input.

2013-05-21 02:22:02 +00:00

FaultTolerantWriteSmm.inf

Mallicious code may use SmmFaultTolerantWriteHandler() to update some flash area directly, like Variable region, so return EFI_ACCESS_DENIED after End Of Dxe in SmmFaultTolerantWriteHandler().

2013-04-24 09:33:48 +00:00

FaultTolerantWriteSmmCommon.h

Add SMM FTW wrapper driver since non-SMM FTW protocol can be used by some consumers (Such as capsule update) when SMM FTW driver is applied.

2011-01-12 09:05:27 +00:00

FaultTolerantWriteSmmDxe.c

1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue.

2013-05-07 05:38:32 +00:00

FaultTolerantWriteSmmDxe.h

Add SMM FTW wrapper driver since non-SMM FTW protocol can be used by some consumers (Such as capsule update) when SMM FTW driver is applied.

2011-01-12 09:05:27 +00:00

FaultTolerantWriteSmmDxe.inf

Mallicious code may use SmmFaultTolerantWriteHandler() to update some flash area directly, like Variable region, so return EFI_ACCESS_DENIED after End Of Dxe in SmmFaultTolerantWriteHandler().

2013-04-24 09:33:48 +00:00

FtwMisc.c

Initialize a local work space header to be used by IsValidWorkSpace() and InitWorkSpaceHeader() to avoid executing code(gBS->CalculateCrc32 ()) outside SMRAM while inside SMM.

2012-12-21 00:52:57 +00:00

UpdateWorkingBlock.c

Initialize a local work space header to be used by IsValidWorkSpace() and InitWorkSpaceHeader() to avoid executing code(gBS->CalculateCrc32 ()) outside SMRAM while inside SMM.

2012-12-21 00:52:57 +00:00