mirror of https://github.com/acidanthera/audk.git
70892b13b2
This patch fix a use-after-free issue where unregistering an MMI handler could lead to the deletion of the MMI_HANDLER while it is still in use by MmiManage(). The fix involves modifying MmiHandlerUnRegister() to detect whether it is being called from within the MmiManage() stack. If so, the removal of the MMI_HANDLER is deferred until MmiManage() has finished executing. Additionally, due to the possibility of recursive MmiManage() calls, the unregistration and subsequent removal of the MMI_HANDLER are ensured to occur only after the outermost MmiManage() invocation has completed. Cc: Liming Gao <gaoliming@byosoft.com.cn> Cc: Jiaxin Wu <jiaxin.wu@intel.com> Reviewed-by: Ray Ni <ray.ni@intel.com> Cc: Laszlo Ersek <lersek@redhat.com> Cc: Ard Biesheuvel <ardb+tianocore@kernel.org> Cc: Sami Mujawar <sami.mujawar@arm.com> Signed-off-by: Zhiguang Liu <zhiguang.liu@intel.com> |
||
|---|---|---|
| .. | ||
| Dependency.c | ||
| Dispatcher.c | ||
| FwVol.c | ||
| Handle.c | ||
| InstallConfigurationTable.c | ||
| Locate.c | ||
| Mmi.c | ||
| Notify.c | ||
| Page.c | ||
| Pool.c | ||
| StandaloneMmCore.c | ||
| StandaloneMmCore.h | ||
| StandaloneMmCore.inf | ||
| StandaloneMmCorePrivateData.h | ||