audk/NetworkPkg/Ip6Dxe
Michael Kubacki 1c76101134 NetworkPkg/Ip6Dxe: Validate source data record length
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=2273

Ip6ConfigReadConfigData() reads configuration data from a UEFI variable
and copies the data to another buffer. This change checks that the
length
of the data record being copied does not exceed the size of the source
UEFI variable data buffer.

If the size is exceeded, this change follows existing logic to treat the
variable as corrupted and deletes the variable so it will be set again.

Cc: Siyuan Fu <siyuan.fu@intel.com>
Cc: Maciej Rabeda <maciej.rabeda@linux.intel.com>
Cc: Jiaxin Wu <jiaxin.wu@intel.com>
Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com>
Reviewed-by: Siyuan Fu <siyuan.fu@intel.com>
Reviewed-by: Maciej Rabeda <maciej.rabeda@linux.intel.com>
2020-04-17 17:34:33 +00:00
..
ComponentName.c
Ip6Common.c
Ip6Common.h
Ip6Config.vfr
Ip6ConfigImpl.c NetworkPkg/Ip6Dxe: Validate source data record length 2020-04-17 17:34:33 +00:00
Ip6ConfigImpl.h
Ip6ConfigNv.c
Ip6ConfigNv.h
Ip6Driver.c
Ip6Driver.h
Ip6Dxe.inf
Ip6Dxe.uni
Ip6DxeExtra.uni
Ip6DxeStrings.uni
Ip6Icmp.c
Ip6Icmp.h
Ip6If.c
Ip6If.h
Ip6Impl.c
Ip6Impl.h
Ip6Input.c
Ip6Input.h
Ip6Mld.c
Ip6Mld.h
Ip6Nd.c
Ip6Nd.h
Ip6NvData.h
Ip6Option.c
Ip6Option.h
Ip6Output.c
Ip6Output.h
Ip6Route.c
Ip6Route.h