czhang46 d17c4eac56 Fix a potential SMM memory dump issue. If pass communication buffer with DataBuffer to SMM SetVariable which is big enough to cover SMM range. Then GetVariable can dump SMM memory contents. Add more range check for SetVariable ... Signed-off-by: Chao Zhang <chao.b.zhang@intel.com> Reviewed-by : Dong Guo <guo.dong@intel.com> Reviewed-by : Jiewen Yao <jiewen.yao@intel.com> git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@14292 6f19259b-4bc3-4df7-8a09-765794883524		2013-04-19 01:35:02 +00:00
..
AuthService.c	Add error handling code to prevent variable store corruption in release build.	2013-02-21 01:35:22 +00:00
AuthService.h	Move the declaration of gEfiCertDbGuid to the package's Include folder.	2012-11-28 06:59:13 +00:00
Reclaim.c	Add security package to repository.	2011-09-02 07:49:32 +00:00
Variable.c	If DataSize or VariableNameSize is near MAX_ADDRESS, this can cause the computed PayLoadSize to overflow to a small value and pass the check in InitCommunicateBuffer(). To protect against this vulnerability, check DataSize and VariableNameSize to make sure PayloadSize doesn't overflow.	2013-04-08 06:56:08 +00:00
Variable.h	Add error handling code to prevent variable store corruption in release build.	2013-02-21 01:35:22 +00:00
VariableDxe.c	SecurityPkg: Update VariableAuthenticated driver with following changes:	2011-10-28 09:55:09 +00:00
VariableRuntimeDxe.inf	Add comment for modules which have external input.	2012-06-12 08:28:43 +00:00
VariableSmm.c	Fix a potential SMM memory dump issue. If pass communication buffer with DataBuffer to SMM SetVariable which is big enough to cover SMM range. Then GetVariable can dump SMM memory contents. Add more range check for SetVariable	2013-04-19 01:35:02 +00:00
VariableSmm.inf	Add SMRAM range check to variable SMM SMI handler.	2012-07-09 08:26:35 +00:00
VariableSmmRuntimeDxe.c	Fix SMM Variable driver stack GetVariable return INVALID_PARAMETER when DataSize is bigger than SMM communication buffer.	2013-04-15 01:56:31 +00:00
VariableSmmRuntimeDxe.inf	Add comment for modules which have external input.	2012-06-12 08:28:43 +00:00