audk/MdeModulePkg/Universal/Variable/RuntimeDxe
lzeng14 5e5bb2a9ba 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue.
2. Add check to ensure CommBufferPayloadSize not exceed mVariableBufferPayloadSize or is enough to hold function structure in VariableSmm and FtwSmm.
3. Align FtwGetLastWrite() in FaultTolerantWriteSmmDxe.c to FtwGetLastWrite() in FaultTolerantWrite.c.

Signed-off-by: Star Zeng <star.zeng@intel.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@14325 6f19259b-4bc3-4df7-8a09-765794883524
2013-05-07 05:38:32 +00:00
..
Reclaim.c Add SMM Variable implementation. 2010-12-10 09:27:54 +00:00
Variable.c Fix potential overflow for SetVariable interface 2013-04-22 08:52:58 +00:00
Variable.h 1. Update the logic of UpdateVariable() for updating variable from: 2013-01-18 01:12:32 +00:00
VariableDxe.c 1. Don't assume that flush the HOB variable to flash must be successful. 2013-01-04 12:21:59 +00:00
VariableRuntimeDxe.inf According to UEFI spec 2.3.1a. hardware error record variable should use the EFI_HARDWARE_ERROR_VARIABLE VendorGuid and have the L"HwErrRec####" name convention, #### is a printed hex value and no 0x or h is included in the hex value. 2012-05-30 02:53:10 +00:00
VariableSmm.c 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue. 2013-05-07 05:38:32 +00:00
VariableSmm.inf MdeModulePkg: eliminate all implicit library dependencies for all modules in MdeModulePkg on PcdLib 2012-11-01 06:59:25 +00:00
VariableSmmRuntimeDxe.c 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue. 2013-05-07 05:38:32 +00:00
VariableSmmRuntimeDxe.inf Puts SMM variable common definitions in SmmVariableCommon.h. 2011-02-28 07:31:45 +00:00