audk/IntelFrameworkPkg/Library/FrameworkUefiLib
Hao Wu 9c0e4db3db IntelFrameworkPkg/UefiLib: Avoid mis-calculate of graphic console size
The commit adds check in function InternalPrintGraphic() to ensure that
the expression:

Blt->Width * Blt->Height * sizeof (EFI_GRAPHICS_OUTPUT_BLT_PIXEL)

will not overflow in the UINTN range.

The commit also adds an explicit UINT32 type cast for 'Blt->Width' to
avoid possible overflow in the int range for:

Blt->Width * Blt->Height

Since both Blt->Width and Blt->Height are of type UINT16. They will be
promoted to int (signed) first, and then perform the multiplication
operation. If the result of multiplication between Blt->Width and
Blt->Height exceeds the range of type int, a potential incorrect size will
be passed into function AllocateZeroPool().

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Hao Wu <hao.a.wu@intel.com>
Reviewed-by: Liming Gao <liming.gao@intel.com>
2017-04-14 13:16:12 +08:00
..
Console.c Enhance CreatePopup to call ReadKeyStroke() before calling WaitForEvent(). This can handle the case when in lazy ConIn mode. 2012-11-15 06:31:43 +00:00
FrameworkUefiLib.inf IntelFrameworkPkg: INF/DEC file updates to EDK II packages 2014-08-28 03:19:58 +00:00
FrameworkUefiLib.uni IntelFrameworkPkg: Convert all .uni files to utf-8 2015-12-15 04:52:47 +00:00
UefiDriverModel.c Fill the ImageHandle and DriverBindingHandle field of Driver Binding Protocol before installing the Driver Binding Protocol instance. 2013-07-10 02:06:49 +00:00
UefiLib.c IntelFrameworkPkg UefiLib: Make the event empty function public 2017-01-20 15:51:17 +08:00
UefiLibInternal.h IntelFrameworkPkg UefiLib: Make the event empty function public 2017-01-20 15:51:17 +08:00
UefiLibPrint.c IntelFrameworkPkg/UefiLib: Avoid mis-calculate of graphic console size 2017-04-14 13:16:12 +08:00
UefiNotTiano.c IntelFrameworkPkg UefiLib: Make the event empty function public 2017-01-20 15:51:17 +08:00