mirror of https://github.com/acidanthera/audk.git
b85048261a
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=2534 Extend validation of ACPI structure lengths which are read from the ACPI table being parsed. Additionally check if the structure 'Length' field value is positive. If not, stop parsing the faulting table. Some ACPI tables define internal structures of variable size. The 'Length' field inside the substructure is used to update a pointer used for table traversal. If the byte-length of the structure is equal to 0, acpiview can enter an infinite loop. This condition can occur if, for example, the zero-allocated ACPI table buffer is not fully populated. This is typically a bug on the ACPI table writer side. In short, this method helps acpiview recover gracefully from a zero-valued ACPI structure length. Signed-off-by: Krzysztof Koch <krzysztof.koch@arm.com> Reviewed-by: Sami Mujawar <sami.mujawar@arm.com> Reviewed-by: Zhichao Gao <zhichao.gao@intel.com> |
||
|---|---|---|
| .. | ||
| Parsers | ||
| AcpiParser.c | ||
| AcpiParser.h | ||
| AcpiTableParser.c | ||
| AcpiTableParser.h | ||
| AcpiView.c | ||
| AcpiView.h | ||
| UefiShellAcpiViewCommandLib.c | ||
| UefiShellAcpiViewCommandLib.h | ||
| UefiShellAcpiViewCommandLib.inf | ||
| UefiShellAcpiViewCommandLib.uni | ||