audk/MdeModulePkg/Core
Ard Biesheuvel 54d81d06fc MdeModulePkg/DxeCore: Use correct type for alignment mask
The page allocator code in CoreFindFreePagesI() uses a mask derived from
its UINTN Alignment argument to align the descriptor end address of a
MEMORY_MAP entry to the requested alignment, in order to check whether
the descriptor covers enough sufficiently aligned area to satisfy the
request.

However, on 32-bit architectures, 'Alignment' is a 32-bit type, whereas
DescEnd is a 64-bit type, and so the resulting operation performed on
the end address comes down to masking with 0xfffff000 instead of the
intended 0xffffffff_fffff000. Given the -1 at the end of the expression,
the resulting address is 0xffffffff_fffffffff for any descriptor that
ends on a 4G aligned boundary, and this is certainly not what was
intended.

So cast Alignment to UINT64 to ensure that the mask has the right size.

Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Reported-by: Nathan Chancellor <nathan@kernel.org>
Reviewed-by: Michael D Kinney <michael.d.kinney@intel.com>
2022-12-08 18:09:48 +00:00
..
Dxe MdeModulePkg/DxeCore: Use correct type for alignment mask 2022-12-08 18:09:48 +00:00
DxeIplPeim MdeModulePkg/DxeIplPeim : LoongArch DxeIPL implementation. 2022-10-14 02:16:33 +00:00
Pei MdeModulePkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
PiSmmCore MdeModulePkg/PiSmmCore: SmmEntryPoint underflow (CVE-2021-38578) 2022-11-04 01:58:20 +00:00
RuntimeDxe MdeModulePkg/RuntimeDxe: clear mVirtualMapMaxIndex 2022-02-07 05:31:17 +00:00