mirror of https://github.com/acidanthera/audk.git
dd5c7e3c52
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=2947 When calculating memory regions and store the information in the gSystemMemory in file WinHost.c, the code below will cause overflow, because _wtoi (MemorySizeStr) return an int value and SIZE_1MB is also an int value, if MemorySizeStr is lager for example 2048, then result of multiplication will overflow. for (Index = 0, Done = FALSE; !Done; Index++) { // // Save the size of the memory and make a Unicode filename SystemMemory00 // gSystemMemory[Index].Size = _wtoi (MemorySizeStr) * SIZE_1MB; Cc: Jordan Justen <jordan.l.justen@intel.com> Cc: Andrew Fish <afish@apple.com> Reviewed-by: Ray Ni <ray.ni@intel.com> Signed-off-by: Wenyi Xie <xiewenyi2@huawei.com> |
||
|---|---|---|
| .. | ||
| WinBlockIo.c | ||
| WinFileSystem.c | ||
| WinGop.h | ||
| WinGopInput.c | ||
| WinGopScreen.c | ||
| WinHost.c | ||
| WinHost.h | ||
| WinHost.inf | ||
| WinInclude.h | ||
| WinMemoryAllocationLib.c | ||
| WinPacketFilter.c | ||
| WinThunk.c | ||