audk/MdePkg/Library/UefiLib
Hao Wu 458cd568b6 MdePkg/UefiLib: Avoid mis-calculate of graphic console size
The commit adds check in function InternalPrintGraphic() to ensure that
the expression:

Blt->Width * Blt->Height * sizeof (EFI_GRAPHICS_OUTPUT_BLT_PIXEL)

will not overflow in the UINTN range.

The commit also adds an explicit UINT32 type cast for 'Blt->Width' to
avoid possible overflow in the int range for:

Blt->Width * Blt->Height

Since both Blt->Width and Blt->Height are of type UINT16. They will be
promoted to int (signed) first, and then perform the multiplication
operation. If the result of multiplication between Blt->Width and
Blt->Height exceeds the range of type int, a potential incorrect size will
be passed into function AllocateZeroPool().

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Hao Wu <hao.a.wu@intel.com>
Reviewed-by: Liming Gao <liming.gao@intel.com>
2017-04-14 13:16:05 +08:00
..
Console.c MdePkg UefiLib: Use safe string functions 2015-06-30 06:29:51 +00:00
UefiDriverModel.c
UefiLib.c MdePkg UefiLib: Make the event empty function public 2017-01-20 15:51:16 +08:00
UefiLib.inf MdePkg: INF/DEC file updates to EDK II packages 2014-08-27 09:33:09 +00:00
UefiLib.uni MdePkg: Convert all .uni files to utf-8 2015-12-15 04:53:50 +00:00
UefiLibInternal.h MdePkg UefiLib: Make the event empty function public 2017-01-20 15:51:16 +08:00
UefiLibPrint.c MdePkg/UefiLib: Avoid mis-calculate of graphic console size 2017-04-14 13:16:05 +08:00
UefiNotTiano.c MdePkg UefiLib: Make the event empty function public 2017-01-20 15:51:16 +08:00