system76-edk2

Files

lzeng14 3588bb3529 If DataSize or VariableNameSize is near MAX_ADDRESS, this can cause the computed PayLoadSize to overflow to a small value and pass the check in InitCommunicateBuffer(). To protect against this vulnerability, check DataSize and VariableNameSize to make sure PayloadSize doesn't overflow.

Signed-off-by: Star Zeng <star.zeng@intel.com>
Reviewed-by: Ruiyu Ni <ruiyu.ni@intel.com>

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@14252 6f19259b-4bc3-4df7-8a09-765794883524

2013-04-08 06:56:08 +00:00

AuthService.c

Add error handling code to prevent variable store corruption in release build.

2013-02-21 01:35:22 +00:00

AuthService.h

Move the declaration of gEfiCertDbGuid to the package's Include folder.

2012-11-28 06:59:13 +00:00

Reclaim.c

Add security package to repository.

2011-09-02 07:49:32 +00:00

Variable.c

If DataSize or VariableNameSize is near MAX_ADDRESS, this can cause the computed PayLoadSize to overflow to a small value and pass the check in InitCommunicateBuffer(). To protect against this vulnerability, check DataSize and VariableNameSize to make sure PayloadSize doesn't overflow.

2013-04-08 06:56:08 +00:00

Variable.h

Add error handling code to prevent variable store corruption in release build.

2013-02-21 01:35:22 +00:00

VariableDxe.c

SecurityPkg: Update VariableAuthenticated driver with following changes:

2011-10-28 09:55:09 +00:00

VariableRuntimeDxe.inf

Add comment for modules which have external input.

2012-06-12 08:28:43 +00:00

VariableSmm.c

Use SMM_VARIABLE_COMMUNICATE_HEADER_SIZE instead of OFFSET_OF (SMM_VARIABLE_COMMUNICATE_HEADER, Data).

2012-12-12 14:12:49 +00:00

VariableSmm.inf

Add SMRAM range check to variable SMM SMI handler.

2012-07-09 08:26:35 +00:00

VariableSmmRuntimeDxe.c

2013-04-08 06:56:08 +00:00

VariableSmmRuntimeDxe.inf

Add comment for modules which have external input.

2012-06-12 08:28:43 +00:00