system76-edk2

History

lzeng14 3588bb3529 If DataSize or VariableNameSize is near MAX_ADDRESS, this can cause the computed PayLoadSize to overflow to a small value and pass the check in InitCommunicateBuffer(). To protect against this vulnerability, check DataSize and VariableNameSize to make sure PayloadSize doesn't overflow.

Signed-off-by: Star Zeng <star.zeng@intel.com>
Reviewed-by: Ruiyu Ni <ruiyu.ni@intel.com>

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@14252 6f19259b-4bc3-4df7-8a09-765794883524

2013-04-08 06:56:08 +00:00

Reclaim.c

Add SMM Variable implementation.

2010-12-10 09:27:54 +00:00

Variable.c

If DataSize or VariableNameSize is near MAX_ADDRESS, this can cause the computed PayLoadSize to overflow to a small value and pass the check in InitCommunicateBuffer(). To protect against this vulnerability, check DataSize and VariableNameSize to make sure PayloadSize doesn't overflow.

2013-04-08 06:56:08 +00:00

Variable.h

1. Update the logic of UpdateVariable() for updating variable from:

2013-01-18 01:12:32 +00:00

VariableDxe.c

1. Don't assume that flush the HOB variable to flash must be successful.

2013-01-04 12:21:59 +00:00

VariableRuntimeDxe.inf

According to UEFI spec 2.3.1a. hardware error record variable should use the EFI_HARDWARE_ERROR_VARIABLE VendorGuid and have the L"HwErrRec####" name convention, #### is a printed hex value and no 0x or h is included in the hex value.

2012-05-30 02:53:10 +00:00

VariableSmm.c

Use SMM_VARIABLE_COMMUNICATE_HEADER_SIZE instead of OFFSET_OF (SMM_VARIABLE_COMMUNICATE_HEADER, Data).

2012-12-12 14:12:49 +00:00

VariableSmm.inf

MdeModulePkg: eliminate all implicit library dependencies for all modules in MdeModulePkg on PcdLib

2012-11-01 06:59:25 +00:00

VariableSmmRuntimeDxe.c

2013-04-08 06:56:08 +00:00

VariableSmmRuntimeDxe.inf

Puts SMM variable common definitions in SmmVariableCommon.h.

2011-02-28 07:31:45 +00:00