system76-edk2

History

czhang46 d17c4eac56 Fix a potential SMM memory dump issue. If pass communication buffer with DataBuffer to SMM SetVariable which is big enough to cover SMM range. Then GetVariable can dump SMM memory contents. Add more range check for SetVariable

Signed-off-by: Chao Zhang <chao.b.zhang@intel.com>
Reviewed-by  : Dong Guo   <guo.dong@intel.com>
Reviewed-by  : Jiewen Yao <jiewen.yao@intel.com>

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@14292 6f19259b-4bc3-4df7-8a09-765794883524

2013-04-19 01:35:02 +00:00

Reclaim.c

Add SMM Variable implementation.

2010-12-10 09:27:54 +00:00

Variable.c

If DataSize or VariableNameSize is near MAX_ADDRESS, this can cause the computed PayLoadSize to overflow to a small value and pass the check in InitCommunicateBuffer(). To protect against this vulnerability, check DataSize and VariableNameSize to make sure PayloadSize doesn't overflow.

2013-04-08 06:56:08 +00:00

Variable.h

1. Update the logic of UpdateVariable() for updating variable from:

2013-01-18 01:12:32 +00:00

VariableDxe.c

1. Don't assume that flush the HOB variable to flash must be successful.