mirror of https://github.com/acidanthera/audk.git
2239ea71b6
The input param String of AsciiStrStr() requires a pointer to Null-terminated string, however in HttpTcpReceiveHeader(), the Buffersize before AllocateZeroPool() is equal to the size of TCP header, after the CopyMem(), it might not end with Null-terminator. It might cause memory access overflow. Cc: Fu Siyuan <siyuan.fu@intel.com> Cc: Wu Jiaxin <jiaxin.wu@intel.com> Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1204 Contributed-under: TianoCore Contribution Agreement 1.1 Signed-off-by: Songpeng Li <songpeng.li@intel.com> Reviewed-by: Fu Siyuan <siyuan.fu@intel.com> |
||
---|---|---|
.. | ||
ComponentName.c | ||
ComponentName.h | ||
HttpDns.c | ||
HttpDns.h | ||
HttpDriver.c | ||
HttpDriver.h | ||
HttpDxe.inf | ||
HttpDxe.uni | ||
HttpDxeExtra.uni | ||
HttpImpl.c | ||
HttpImpl.h | ||
HttpProto.c | ||
HttpProto.h | ||
HttpsSupport.c | ||
HttpsSupport.h |