mirror of https://github.com/acidanthera/audk.git
84d77d9bf5
Fixes CodeQL alerts for CWE-457: https://cwe.mitre.org/data/definitions/457.html Checks the return value from `ASN1_get_object()` to verify values set by the function are valid. Note that the function returns literal `0x80`: `return (0x80);` That is used to check the return value is as the case in other areas of the code. Cc: Erich McMillan <emcmillan@microsoft.com> Cc: Guomin Jiang <guomin.jiang@intel.com> Cc: Jian J Wang <jian.j.wang@intel.com> Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Michael Kubacki <mikuback@linux.microsoft.com> Cc: Xiaoyu Lu <xiaoyu1.lu@intel.com> Co-authored-by: Erich McMillan <emcmillan@microsoft.com> Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com> Reviewed-by: Jiewen Yao <Jiewen.yao@intel.com> Reviewed-by: Oliver Smith-Denny <osd@smith-denny.com> |
||
---|---|---|
.. | ||
Bn | ||
Cipher | ||
Hash | ||
Hmac | ||
Kdf | ||
Pem | ||
Pk | ||
Rand | ||
SysCall | ||
BaseCryptLib.inf | ||
BaseCryptLib.uni | ||
InternalCryptLib.h | ||
PeiCryptLib.inf | ||
PeiCryptLib.uni | ||
RuntimeCryptLib.inf | ||
RuntimeCryptLib.uni | ||
SecCryptLib.inf | ||
SecCryptLib.uni | ||
SmmCryptLib.inf | ||
SmmCryptLib.uni | ||
UnitTestHostBaseCryptLib.inf |