Hao Wu 9fdf31789a MdePkg/BaseLib: Avoid reading content beyond string boundary ...

REF: https://bugzilla.tianocore.org/show_bug.cgi?id=705

As mentioned in the above Bugzilla link by Steven, within the function
PathCleanUpDirectories(), when executing command:
"cd ."

under Shell, the input parameter 'Path' string will have string length
less than 2. Hence, it is possible for the below statement:
"if (StrCmp (Path + StrLen (Path) - 2, L"\\.") == 0) {"

to read contents before the string boundary.

This commit adds additional checks to avoid this.

Cc: Steven Shi <steven.shi@intel.com>
Cc: Michael Kinney <michael.d.kinney@intel.com>
Cc: Liming Gao <liming.gao@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Hao Wu <hao.a.wu@intel.com>
Reviewed-by: Ruiyu Ni <ruiyu.ni@intel.com>

2017-09-21 14:06:28 +08:00

..

AArch64

MdePkg/BaseLib AARCH64: terminate stack frame list on stack switch

2016-09-09 13:46:52 +01:00

Arm

MdePkg: fix ARM version of InternalMathSwapBytes64 ()

2015-03-27 17:27:14 +00:00

Ebc

Minor grammatical work--mostly adding periods. Sending separately a list of files missing Doxygen @param and @return information.

2010-06-11 00:02:51 +00:00

Ia32

MdePkg/BaseLib: Add one wrapper on RdRand access for parameter check.

2016-11-16 16:49:10 +08:00

Ipf

Current IPF version SwitchStack implementation uses loadrs instruction to restore dirty partition of register stack from the backing store, but there is no guarantee to make the backing store valid before. So add flushrs before loadrs to make sure backing store valid.

2012-04-11 01:56:48 +00:00

X64

MdePkg/BaseLib: Add one wrapper on RdRand access for parameter check.

2016-11-16 16:49:10 +08:00

ARShiftU64.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

BaseLib.inf

MdePkg/BaseLib: Add one wrapper on RdRand access for parameter check.

2016-11-16 16:49:10 +08:00

BaseLib.uni

MdePkg: Convert all .uni files to utf-8

2015-12-15 04:53:50 +00:00

BaseLibInternals.h

MdePkg/BaseLib: Add IsNodeInList() function.

2017-08-16 16:55:30 +08:00

BitField.c

Correctly character in comments of BaseLib BitField.

2013-07-22 06:41:52 +00:00

CheckSum.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

ChkStkGcc.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

Cpu.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

CpuDeadLoop.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

DivS64x64Remainder.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

DivU64x32.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

DivU64x32Remainder.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

DivU64x64Remainder.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

FilePaths.c

MdePkg/BaseLib: Avoid reading content beyond string boundary

2017-09-21 14:06:28 +08:00

GetPowerOfTwo32.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

GetPowerOfTwo64.c

Fixed K9 scan issues.

2010-08-09 06:28:01 +00:00

HighBitSet32.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

HighBitSet64.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

LinkedList.c

MdePkg/BaseLib: Update internal LinkedList verifications.

2017-08-16 16:55:32 +08:00

LongJump.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

LowBitSet32.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

LowBitSet64.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

LRotU32.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

LRotU64.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

LShiftU64.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

Math64.c

MdePkg/BaseLib: do not rely on undefined behavior in arithmetic shift

2015-12-31 10:47:22 +00:00

ModU64x32.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

MultS64x64.c

Fixed K9 scan issues.

2010-08-09 06:28:01 +00:00

MultU64x32.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

MultU64x64.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

RRotU32.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

RRotU64.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

RShiftU64.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

SafeString.c

MdePkg: Convert files to CRLF line ending

2017-04-06 15:43:27 +08:00

SetJump.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

String.c

MdePkg: Refine casting expression result to bigger size

2017-03-06 14:18:45 +08:00

SwapBytes16.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

SwapBytes32.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

SwapBytes64.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

SwitchStack.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

Unaligned.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

X86DisablePaging32.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

X86DisablePaging64.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

X86EnablePaging32.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

X86EnablePaging64.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

X86FxRestore.c

Fix memory out of band access in AsmFxSave() and AsmFxRestore().

2012-10-30 08:35:08 +00:00

X86FxSave.c

Fix memory out of band access in AsmFxSave() and AsmFxRestore().

2012-10-30 08:35:08 +00:00

X86GetInterruptState.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

X86MemoryFence.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-24 00:20:35 +00:00

X86Msr.c

Add ASSERT() for BitField operations to make sure the input value is valid.

2012-12-25 02:25:50 +00:00

X86RdRand.c

MdePkg/BaseLib: Add one wrapper on RdRand access for parameter check.

2016-11-16 16:49:10 +08:00

X86ReadGdtr.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-25 21:56:02 +00:00

X86ReadIdtr.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-25 21:56:02 +00:00

X86Thunk.c

Update the modifier of ThunkContext parameter for AsmPrepareThunk16() in BaseLib from OUT to IN OUT.

2012-02-27 07:46:04 +00:00

X86WriteGdtr.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-25 21:56:02 +00:00

X86WriteIdtr.c

Minor grammatical work--mostly adding periods. Items with ONLY period added did not have the heading date changed, but Items with content changes had heading copyright dates updated. Sending separately a list of files missing Doxygen @param and @return information. (PENDING)

2010-06-25 21:56:02 +00:00