sravan/system76-edk2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
cb30c8f25162e6d8142c6b098f14c1e4e7f125ce
system76-edk2/SecurityPkg/Library
History
Laszlo Ersek cb30c8f251 SecurityPkg/DxeImageVerificationLib: plug Data leak in IsForbiddenByDbx() (CVE-2019-14575) 
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=1608

If the second GetVariable() call for "dbx" fails, in IsForbiddenByDbx(),
we have to free Data. Jump to "Done" for that.

Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Chao Zhang <chao.b.zhang@intel.com>
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
2020-02-19 14:08:23 +00:00
..
AuthVariableLib
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
DxeImageAuthenticationStatusLib
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
DxeImageVerificationLib
SecurityPkg/DxeImageVerificationLib: plug Data leak in IsForbiddenByDbx() (CVE-2019-14575)
2020-02-19 14:08:23 +00:00
DxeRsa2048Sha256GuidedSectionExtractLib
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
DxeTcg2PhysicalPresenceLib
SecurityPkg: Replace BSD License with BSD+Patent License
2019-04-09 10:58:23 -07:00
DxeTcgPhysicalPresenceLib
SecurityPkg: Fix few typos
2020-02-10 22:30:07 +00:00
DxeTpm2MeasureBootLib
SecurityPkg: Fix few typos
2020-02-10 22:30:07 +00:00
DxeTpmMeasureBootLib
SecurityPkg: Fix few typos
2020-02-10 22:30:07 +00:00
DxeTpmMeasurementLib
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
FmpAuthenticationLibPkcs7
SecurityPkg: Replace BSD License with BSD+Patent License
2019-04-09 10:58:23 -07:00
FmpAuthenticationLibRsa2048Sha256
SecurityPkg: Replace BSD License with BSD+Patent License
2019-04-09 10:58:23 -07:00
HashInstanceLibSha1
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
HashInstanceLibSha256
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
HashInstanceLibSha384
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
HashInstanceLibSha512
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
HashInstanceLibSm3
SecurityPkg: introduce the SM3 digest algorithm
2019-07-19 14:31:52 +02:00
HashLibBaseCryptoRouter
SecurityPkg: Fix few typos
2020-02-10 22:30:07 +00:00
HashLibTpm2
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
PeiRsa2048Sha256GuidedSectionExtractLib
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
PeiTcg2PhysicalPresenceLib
SecurityPkg: Replace BSD License with BSD+Patent License
2019-04-09 10:58:23 -07:00
PlatformSecureLibNull
SecurityPkg: Fix few typos
2020-02-10 22:30:07 +00:00
SmmTcg2PhysicalPresenceLib
SecurityPkg: Replace BSD License with BSD+Patent License
2019-04-09 10:58:23 -07:00
Tcg2PpVendorLibNull
SecurityPkg: Replace BSD License with BSD+Patent License
2019-04-09 10:58:23 -07:00
TcgPpVendorLibNull
SecurityPkg: Replace BSD License with BSD+Patent License
2019-04-09 10:58:23 -07:00
TcgStorageCoreLib
SecurityPkg/Tcg: Fix various typos
2020-02-10 22:30:07 +00:00
TcgStorageOpalLib
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
Tpm2CommandLib
SecurityPkg/Library/Tpm: Fix various typos
2020-02-10 22:30:07 +00:00
Tpm2DeviceLibDTpm
SecurityPkg/Library/Tpm: Fix various typos
2020-02-10 22:30:07 +00:00
Tpm2DeviceLibRouter
SecurityPkg: Replace BSD License with BSD+Patent License
2019-04-09 10:58:23 -07:00
Tpm2DeviceLibTcg2
SecurityPkg: Replace BSD License with BSD+Patent License
2019-04-09 10:58:23 -07:00
Tpm12CommandLib
SecurityPkg: Fix spelling errors
2019-10-23 10:23:23 -07:00
Tpm12DeviceLibDTpm
SecurityPkg/Library/Tpm: Fix various typos
2020-02-10 22:30:07 +00:00
Tpm12DeviceLibTcg
SecurityPkg: Replace BSD License with BSD+Patent License
2019-04-09 10:58:23 -07:00
TpmCommLib
SecurityPkg/Library/Tpm: Fix various typos
2020-02-10 22:30:07 +00:00