audk/NetworkPkg
Vladimir Olovyannikov via groups.io 70c2f10fde NetworkPkg: Fix possible infinite loop in HTTP msg body parser
When an HTTP server sends a non-chunked body data with no
Content-Length header, the HttpParserMessageBody in DxeHttpLib
gets confused and never sets the Char pointer beyond the body start.
This causes "for" loop to never break because the condition of
"Char >= Body + BodyLength" is never satisfied.
Use BodyLength as the ContentLength for the parser when
ContentLength is absent in HTTP response headers.
BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=2941

Signed-off-by: Vladimir Olovyannikov <vladimir.olovyannikov@broadcom.com>
Cc: Maciej Rabeda <maciej.rabeda@linux.intel.com>
Cc: Jiaxin Wu <jiaxin.wu@intel.com>
Cc: Siyuan Fu <siyuan.fu@intel.com>
Reviewed-by: Maciej Rabeda <maciej.rabeda@linux.intel.com>
2020-10-09 10:40:33 +00:00
..
Application/VConfig NetworkPkg: Move Network library header file from MdeModulePkg to NetworkPkg 2019-05-27 09:25:18 +08:00
ArpDxe NetworkPkg/ArpDxe: Recycle invalid ARP packets (CVE-2019-14559) 2020-02-21 03:01:57 +00:00
Dhcp4Dxe NetworkPkg/Dhcp4Dxe: Fix various typos 2020-02-10 22:30:07 +00:00
Dhcp6Dxe NetworkPkg/Dhcp6Dxe: Fix various typos 2020-02-10 22:30:07 +00:00
DnsDxe NetworkPkg/DnsDxe: Fix various typos 2020-02-10 22:30:07 +00:00
DpcDxe NetworkPkg/DpcDxe: Fix few typos 2020-02-10 22:30:07 +00:00
HttpBootDxe NetworkPkg/HttpBootDxe: Add RISC-V architecture for EDK2 CI. 2020-04-03 17:09:12 +00:00
HttpDxe NetworkPkg/HttpDxe: TlsChildHandle is not cleared when reset 2020-10-09 09:38:13 +00:00
HttpUtilitiesDxe NetworkPkg: Remove unnecessary MdeModulePkg/MdeModulePkg.dec dependency in INF 2019-10-08 09:20:34 +08:00
IScsiDxe NetworkPkg/IScsiDxe: Enhance the check for array boundary 2020-04-26 06:20:32 +00:00
Include NetworkPkg/Library: Fix various typos 2020-02-10 22:30:07 +00:00
Ip4Dxe NetworkPkg/Ip4Dxe: Check the received package length (CVE-2019-14559). 2020-02-19 10:13:42 +00:00
Ip6Dxe NetworkPkg/Ip6Dxe: Validate source data record length 2020-04-17 17:34:33 +00:00
Library NetworkPkg: Fix possible infinite loop in HTTP msg body parser 2020-10-09 10:40:33 +00:00
MnpDxe NetworkPkg/MnpDxe: Fix various typos 2020-02-10 22:30:07 +00:00
Mtftp4Dxe NetworkPkg/Mtftp4Dxe: Fix various typos 2020-02-10 22:30:07 +00:00
Mtftp6Dxe NetworkPkg/Mtftp6Dxe: Fix various typos 2020-02-10 22:30:07 +00:00
SnpDxe NetworkPkg/SnpDxe: Prevent invalid PCI BAR access 2020-04-17 17:34:33 +00:00
TcpDxe NetworkPkg/TcpDxe/Tcp: Fix various typos 2020-02-10 22:30:07 +00:00
TlsAuthConfigDxe NetworkPkg/TlsAuthConfigDxe: Use HiiPopUp() instead of CreatePopUp() 2020-04-17 17:34:33 +00:00
TlsDxe NetworkPkg/Tls: Fix few typos 2020-02-10 22:30:07 +00:00
Udp4Dxe NetworkPkg/Udp4Dxe: Fix various typos 2020-02-10 22:30:07 +00:00
Udp6Dxe NetworkPkg/Udp6Dxe: Fix various typos 2020-02-10 22:30:07 +00:00
UefiPxeBcDxe NetworkPkg/UefiPxeBcDxe: handle competing DHCP servers (more) gracefully 2020-04-01 14:12:09 +00:00
VlanConfigDxe NetworkPkg/VlanConfigDxe: Fix few typos 2020-02-10 22:30:07 +00:00
WifiConnectionManagerDxe NetworkPkg: add missing newline at end of file 2019-10-04 11:18:22 +01:00
Network.dsc.inc NetworkPkg: Add RISCV64 architecture 2020-05-07 03:17:15 +00:00
Network.fdf.inc NetworkPkg: Move Network library and drivers from MdeModulePkg to NetworkPkg 2019-05-27 09:25:18 +08:00
NetworkComponents.dsc.inc NetworkPkg: Move Network library and drivers from MdeModulePkg to NetworkPkg 2019-05-27 09:25:18 +08:00
NetworkDefines.dsc.inc NetworkPkg: Add DSC/FDF include segment files to NetworkPkg. 2019-05-08 16:10:39 +08:00
NetworkLibs.dsc.inc NetworkPkg: Move Network library and drivers from MdeModulePkg to NetworkPkg 2019-05-27 09:25:18 +08:00
NetworkPcds.dsc.inc NetworkPkg: Add DSC/FDF include segment files to NetworkPkg. 2019-05-08 16:10:39 +08:00
NetworkPkg.ci.yaml NetworkPkg/NetworkPkg.ci.yaml: Add configuration for Ecc check 2020-08-17 03:28:09 +00:00
NetworkPkg.dec NetworkPkg/SnpDxe: Add PCD to remove ExitBootServices event from SNP driver. 2019-10-21 14:50:51 +08:00
NetworkPkg.dsc NetworkPkg: Add RngLib entry to .dsc file. 2020-10-09 09:01:45 +00:00
NetworkPkg.uni NetworkPkg/NetworkPkg.uni: Add missing strings for PCD 2019-12-04 05:05:57 +00:00
NetworkPkgExtra.uni NetworkPkg: Replace BSD License with BSD+Patent License 2019-04-09 10:58:15 -07:00