audk/MdeModulePkg/Universal/Variable/RuntimeDxe
lzeng14 3588bb3529 If DataSize or VariableNameSize is near MAX_ADDRESS, this can cause the computed PayLoadSize to overflow to a small value and pass the check in InitCommunicateBuffer(). To protect against this vulnerability, check DataSize and VariableNameSize to make sure PayloadSize doesn't overflow.
Signed-off-by: Star Zeng <star.zeng@intel.com>
Reviewed-by: Ruiyu Ni <ruiyu.ni@intel.com>

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@14252 6f19259b-4bc3-4df7-8a09-765794883524
2013-04-08 06:56:08 +00:00
..
Reclaim.c Add SMM Variable implementation. 2010-12-10 09:27:54 +00:00
Variable.c If DataSize or VariableNameSize is near MAX_ADDRESS, this can cause the computed PayLoadSize to overflow to a small value and pass the check in InitCommunicateBuffer(). To protect against this vulnerability, check DataSize and VariableNameSize to make sure PayloadSize doesn't overflow. 2013-04-08 06:56:08 +00:00
Variable.h 1. Update the logic of UpdateVariable() for updating variable from: 2013-01-18 01:12:32 +00:00
VariableDxe.c 1. Don't assume that flush the HOB variable to flash must be successful. 2013-01-04 12:21:59 +00:00
VariableRuntimeDxe.inf According to UEFI spec 2.3.1a. hardware error record variable should use the EFI_HARDWARE_ERROR_VARIABLE VendorGuid and have the L"HwErrRec####" name convention, #### is a printed hex value and no 0x or h is included in the hex value. 2012-05-30 02:53:10 +00:00
VariableSmm.c Use SMM_VARIABLE_COMMUNICATE_HEADER_SIZE instead of OFFSET_OF (SMM_VARIABLE_COMMUNICATE_HEADER, Data). 2012-12-12 14:12:49 +00:00
VariableSmm.inf MdeModulePkg: eliminate all implicit library dependencies for all modules in MdeModulePkg on PcdLib 2012-11-01 06:59:25 +00:00
VariableSmmRuntimeDxe.c If DataSize or VariableNameSize is near MAX_ADDRESS, this can cause the computed PayLoadSize to overflow to a small value and pass the check in InitCommunicateBuffer(). To protect against this vulnerability, check DataSize and VariableNameSize to make sure PayloadSize doesn't overflow. 2013-04-08 06:56:08 +00:00
VariableSmmRuntimeDxe.inf Puts SMM variable common definitions in SmmVariableCommon.h. 2011-02-28 07:31:45 +00:00