MdeModulePkg/Variable: [CVE-2017-5753] Fix bounds check bypass

[mirror_edk2.git] / MdeModulePkg / Universal / Variable / RuntimeDxe / PrivilegePolymorphic.h

diff --git a/MdeModulePkg/Universal/Variable/RuntimeDxe/PrivilegePolymorphic.h b/MdeModulePkg/Universal/Variable/RuntimeDxe/PrivilegePolymorphic.h
index b98b8556a23a96361da84a6c37176b9e6765b817..a324ad23650fbf6f5ccce01b6072aab2beea053f 100644 (file)
--- a/MdeModulePkg/Universal/Variable/RuntimeDxe/PrivilegePolymorphic.h
+++ b/MdeModulePkg/Universal/Variable/RuntimeDxe/PrivilegePolymorphic.h
@@ -7,7 +7,7 @@
   vs. non-privileged driver code.\r
 \r
   Copyright (c) 2017, Red Hat, Inc.<BR>\r
-  Copyright (c) 2010 - 2017, Intel Corporation. All rights reserved.<BR>\r
+  Copyright (c) 2010 - 2018, Intel Corporation. All rights reserved.<BR>\r
 \r
   This program and the accompanying materials are licensed and made available\r
   under the terms and conditions of the BSD License which accompanies this\r
@@ -84,4 +84,15 @@ SetVariableCheckHandlerMor (
   IN VOID       *Data\r
   );\r
 \r
+/**\r
+  This service is consumed by the variable modules to perform a serializing\r
+  operation on all load-from-memory instructions that were issued prior to the\r
+  call of this function.\r
+\r
+**/\r
+VOID\r
+MemoryLoadFence (\r
+  VOID\r
+  );\r
+\r
 #endif\r