audk/MdeModulePkg
Laszlo Ersek 166a6552a8 MdeModulePkg: DxeUdpIoLib: fix non-empty payload path in UDP reception
Commit 1b31acb66c ("MdeModulePkg: Check received packet size before use
it.") introduced a chunk of code under the new "Resume" label, in function
UdpIoOnDgramRcvdDpc(). The new code is supposed to run only when the
received packet has zero-length payload, but a "return" statement was
forgotten, and the code is reached on the normal (nonzero-length payload)
path as well, after the packet has been processed (and possibly freed) by
RxToken->CallBack(). This is a logic bug, with the direct symptom being
use-after-free / General Protection Fault.

Cc: Siyuan Fu <siyuan.fu@intel.com>
Cc: Jiaxin Wu <jiaxin.wu@intel.com>
Cc: Ting Ye <ting.ye@intel.com>
Cc: "Subramanian, Sriram (EG Servers Platform SW)" <sriram-s@hpe.com>
Fixes: 1b31acb66c
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Sriram Subramanian <sriram-s@hpe.com>
2016-04-04 13:53:12 +02:00
..
Application MdeModulePkg: BootManagerMenuApp: remove set but unused variables 2016-03-25 10:52:24 +01:00
Bus MdeModulePkg EmmcDxe: Fix GCC build failure with set but unused variables 2016-03-31 10:44:21 +08:00
Core MdeModulePkg DxeCore: Address boundary check for Type AllocateAddress 2016-03-22 11:00:40 +08:00
Include MdeModulePkg/SdMmc: Add EDKII SD/MMC stack 2016-03-30 11:27:41 +08:00
Library MdeModulePkg: DxeUdpIoLib: fix non-empty payload path in UDP reception 2016-04-04 13:53:12 +02:00
Logo MdeModulePkg: Convert all .uni files to utf-8 2015-12-15 04:56:23 +00:00
Universal MdeModulePkg: Check received packet size before use it. 2016-04-01 13:30:08 +08:00
Contributions.txt */Contributions.txt: Update example email address 2015-02-03 17:29:14 +00:00
License.txt Update copyright format 2012-04-24 06:49:39 +00:00
MdeModulePkg.dec MdeModulePkg/SdMmc: Add EDKII SD/MMC stack 2016-03-30 11:27:41 +08:00
MdeModulePkg.dsc MdeModulePkg/SdMmc: Add EDKII SD/MMC stack 2016-03-30 11:27:41 +08:00
MdeModulePkg.uni MdeModulePkg: Add PcdMaxPeiPerformanceLogEntries16 PROMPT&HELP STR to *.uni 2016-03-15 10:29:33 +08:00
MdeModulePkgExtra.uni MdeModulePkg: Convert all .uni files to utf-8 2015-12-15 04:56:23 +00:00