audk/MdeModulePkg/Universal/Disk/UdfDxe
Hao Wu 7a96634889 MdeModulePkg/UdfDxe: Avoid possible loss track of allocated buffer
In function FindFileEntry():

Instead of using the function parameter 'FileEntry', use a local
variable to store the buffer allocated for disk read operation.

For the below calling stack:
UdfOpenVolume() -> FindRootDirectory() -> FindFileEntry()

In FindFileEntry(), the call to 'DiskIo->ReadDisk()' is possible (e.g.
media change for a CD/DVD ROM device) to trigger a re-install of the
BlockIO(2) protocol which will further lead to a call of the BindingStop()
& BingdingStart() of the UdfDxe driver.

Meanwhile, for the above listed calling stack, the '**FileEntry'
parameter passed into FindFileEntry() is '&PrivFsData->Root'. 'PrivFsData'
is a driver-managed private data, it will be freed in BindingStop() and
re-allocate in BingdingStart().

In such case, if '*FileEntry' is used to store the allocated buffer, the
information will be lost if 'DiskIo->ReadDisk()' triggers a re-install of
the BlockIO(2) protocol. The subsequent call of the FreePool API:

FreePool (*FileEntry);

will cause issues.

This commit uses a local variable to store the allocated buffer.

Cc: Ruiyu Ni <ruiyu.ni@intel.com>
Cc: Star Zeng <star.zeng@intel.com>
Cc: Eric Dong <eric.dong@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Hao Wu <hao.a.wu@intel.com>
Reviewed-by: Paulo Alcantara <pcacjr@zytor.com>
2017-11-20 08:54:22 +08:00
..
ComponentName.c
File.c MdeModulePkg/UDF: Fix creation of UDF logical partition 2017-09-25 15:36:27 +08:00
FileName.c MdeModulePkg/Udf: Refine function description comments 2017-09-19 12:43:58 +08:00
FileSystemOperations.c MdeModulePkg/UdfDxe: Avoid possible loss track of allocated buffer 2017-11-20 08:54:22 +08:00
Udf.c MdeModulePkg/UDF: Fix creation of UDF logical partition 2017-09-25 15:36:27 +08:00
Udf.h MdeModulePkg/UDF: Fix creation of UDF logical partition 2017-09-25 15:36:27 +08:00
UdfDxe.inf