mirror of https://github.com/acidanthera/audk.git
7a96634889
In function FindFileEntry(): Instead of using the function parameter 'FileEntry', use a local variable to store the buffer allocated for disk read operation. For the below calling stack: UdfOpenVolume() -> FindRootDirectory() -> FindFileEntry() In FindFileEntry(), the call to 'DiskIo->ReadDisk()' is possible (e.g. media change for a CD/DVD ROM device) to trigger a re-install of the BlockIO(2) protocol which will further lead to a call of the BindingStop() & BingdingStart() of the UdfDxe driver. Meanwhile, for the above listed calling stack, the '**FileEntry' parameter passed into FindFileEntry() is '&PrivFsData->Root'. 'PrivFsData' is a driver-managed private data, it will be freed in BindingStop() and re-allocate in BingdingStart(). In such case, if '*FileEntry' is used to store the allocated buffer, the information will be lost if 'DiskIo->ReadDisk()' triggers a re-install of the BlockIO(2) protocol. The subsequent call of the FreePool API: FreePool (*FileEntry); will cause issues. This commit uses a local variable to store the allocated buffer. Cc: Ruiyu Ni <ruiyu.ni@intel.com> Cc: Star Zeng <star.zeng@intel.com> Cc: Eric Dong <eric.dong@intel.com> Contributed-under: TianoCore Contribution Agreement 1.1 Signed-off-by: Hao Wu <hao.a.wu@intel.com> Reviewed-by: Paulo Alcantara <pcacjr@zytor.com> |
||
|---|---|---|
| .. | ||
| Acpi | ||
| BdsDxe | ||
| BootManagerPolicyDxe | ||
| CapsulePei | ||
| CapsuleRuntimeDxe | ||
| Console | ||
| DebugPortDxe | ||
| DebugSupportDxe | ||
| DevicePathDxe | ||
| Disk | ||
| DisplayEngineDxe | ||
| DriverHealthManagerDxe | ||
| DriverSampleDxe | ||
| EbcDxe | ||
| EsrtDxe | ||
| FaultTolerantWriteDxe | ||
| FaultTolerantWritePei | ||
| FileExplorerDxe | ||
| FvSimpleFileSystemDxe | ||
| HiiDatabaseDxe | ||
| HiiResourcesSampleDxe | ||
| LegacyRegion2Dxe | ||
| LoadFileOnFv2 | ||
| LockBox/SmmLockBox | ||
| MemoryTest | ||
| Metronome | ||
| MonotonicCounterRuntimeDxe | ||
| Network | ||
| PCD | ||
| PcatSingleSegmentPciCfg2Pei | ||
| PlatformDriOverrideDxe | ||
| PrintDxe | ||
| PropertiesTableAttributesDxe | ||
| RegularExpressionDxe | ||
| ReportStatusCodeRouter | ||
| ResetSystemRuntimeDxe | ||
| SectionExtractionDxe | ||
| SectionExtractionPei | ||
| SecurityStubDxe | ||
| SerialDxe | ||
| SetupBrowserDxe | ||
| SmbiosDxe | ||
| SmbiosMeasurementDxe | ||
| SmmCommunicationBufferDxe | ||
| StatusCodeHandler | ||
| TimestampDxe | ||
| Variable | ||
| WatchdogTimerDxe | ||