audk/SecurityPkg/VariableAuthenticated/RuntimeDxe
lzeng14 5e5bb2a9ba 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue.
2. Add check to ensure CommBufferPayloadSize not exceed mVariableBufferPayloadSize or is enough to hold function structure in VariableSmm and FtwSmm.
3. Align FtwGetLastWrite() in FaultTolerantWriteSmmDxe.c to FtwGetLastWrite() in FaultTolerantWrite.c.

Signed-off-by: Star Zeng <star.zeng@intel.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@14325 6f19259b-4bc3-4df7-8a09-765794883524
2013-05-07 05:38:32 +00:00
..
AuthService.c Fix memory overflow & VariableSize check issue for SetVariable append write. 2013-05-02 01:42:39 +00:00
AuthService.h Fix memory overflow & VariableSize check issue for SetVariable append write. 2013-05-02 01:42:39 +00:00
Reclaim.c Add security package to repository. 2011-09-02 07:49:32 +00:00
Variable.c Fix memory overflow & VariableSize check issue for SetVariable append write. 2013-05-02 01:42:39 +00:00
Variable.h Add error handling code to prevent variable store corruption in release build. 2013-02-21 01:35:22 +00:00
VariableDxe.c SecurityPkg: Update VariableAuthenticated driver with following changes: 2011-10-28 09:55:09 +00:00
VariableRuntimeDxe.inf Add comment for modules which have external input. 2012-06-12 08:28:43 +00:00
VariableSmm.c 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue. 2013-05-07 05:38:32 +00:00
VariableSmm.inf Add SMRAM range check to variable SMM SMI handler. 2012-07-09 08:26:35 +00:00
VariableSmmRuntimeDxe.c 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue. 2013-05-07 05:38:32 +00:00
VariableSmmRuntimeDxe.inf Add comment for modules which have external input. 2012-06-12 08:28:43 +00:00