mirror of https://github.com/acidanthera/audk.git
6d57592740
"FileBuffer" is a non-optional input (pointer) parameter to
DxeImageVerificationHandler(). Normally, when an edk2 function receives a
NULL argument for such a parameter, we return EFI_INVALID_PARAMETER or
RETURN_INVALID_PARAMETER. However, those don't conform to the
SECURITY2_FILE_AUTHENTICATION_HANDLER prototype.
Return EFI_ACCESS_DENIED when "FileBuffer" is NULL; it means that no image
has been loaded.
This patch does not change the control flow in the function, it only
changes the "Status" outcome from API-incompatible error codes to
EFI_ACCESS_DENIED, under some circumstances.
Cc: Chao Zhang <chao.b.zhang@intel.com>
Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Jiewen Yao <jiewen.yao@intel.com>
Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=2129
Fixes:
|
||
|---|---|---|
| .. | ||
| AuthVariableLib | ||
| DxeImageAuthenticationStatusLib | ||
| DxeImageVerificationLib | ||
| DxeRsa2048Sha256GuidedSectionExtractLib | ||
| DxeTcg2PhysicalPresenceLib | ||
| DxeTcgPhysicalPresenceLib | ||
| DxeTpm2MeasureBootLib | ||
| DxeTpmMeasureBootLib | ||
| DxeTpmMeasurementLib | ||
| FmpAuthenticationLibPkcs7 | ||
| FmpAuthenticationLibRsa2048Sha256 | ||
| HashInstanceLibSha1 | ||
| HashInstanceLibSha256 | ||
| HashInstanceLibSha384 | ||
| HashInstanceLibSha512 | ||
| HashInstanceLibSm3 | ||
| HashLibBaseCryptoRouter | ||
| HashLibTpm2 | ||
| PeiRsa2048Sha256GuidedSectionExtractLib | ||
| PeiTcg2PhysicalPresenceLib | ||
| PlatformSecureLibNull | ||
| SmmTcg2PhysicalPresenceLib | ||
| Tcg2PpVendorLibNull | ||
| TcgPpVendorLibNull | ||
| TcgStorageCoreLib | ||
| TcgStorageOpalLib | ||
| Tpm2CommandLib | ||
| Tpm2DeviceLibDTpm | ||
| Tpm2DeviceLibRouter | ||
| Tpm2DeviceLibTcg2 | ||
| Tpm12CommandLib | ||
| Tpm12DeviceLibDTpm | ||
| Tpm12DeviceLibTcg | ||
| TpmCommLib | ||