mirror of https://github.com/acidanthera/audk.git
7c410b3d41
There are some explicit time(NULL) calls in openssl-1.1.0xx source, but the dummy time() wrapper in ConstantTimeClock.c (used by PEI and SMM module) has no any checks on NULL parameter. This is one bug and will cause the memory access issue. This patch adds the NULL parameter checking in time() wrapper. Cc: Ting Ye <ting.ye@intel.com> Cc: Eric Dong <eric.dong@intel.com> Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Qin Long <qin.long@intel.com> Reviewed-by: Laszlo Ersek <lersek@redhat.com> |
||
|---|---|---|
| .. | ||
| BaseCryptLib | ||
| BaseCryptLibRuntimeCryptProtocol | ||
| Include | ||
| IntrinsicLib | ||
| OpensslLib | ||
| TlsLib | ||