mirror of https://github.com/acidanthera/audk.git
130e629284
The input param String of AsciiStrStr() requires a pointer to Null-terminated string, however in HttpUtilitiesParse(), the Buffersize before AllocateZeroPool() is equal to the size of TCP header, after the CopyMem(), it might not end with Null-terminator. It might cause memory access overflow. Cc: Fu Siyuan <siyuan.fu@intel.com> Cc: Wu Jiaxin <jiaxin.wu@intel.com> Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1204 Contributed-under: TianoCore Contribution Agreement 1.1 Signed-off-by: Songpeng Li <songpeng.li@intel.com> Reviewed-by: Fu Siyuan <siyuan.fu@intel.com> |
||
|---|---|---|
| .. | ||
| Application | ||
| Dhcp6Dxe | ||
| DnsDxe | ||
| HttpBootDxe | ||
| HttpDxe | ||
| HttpUtilitiesDxe | ||
| IScsiDxe | ||
| Include/Guid | ||
| Ip6Dxe | ||
| IpSecDxe | ||
| Mtftp6Dxe | ||
| TcpDxe | ||
| TlsAuthConfigDxe | ||
| TlsDxe | ||
| Udp6Dxe | ||
| UefiPxeBcDxe | ||
| NetworkPkg.dec | ||
| NetworkPkg.dsc | ||
| NetworkPkg.uni | ||
| NetworkPkgExtra.uni | ||