]> git.proxmox.com Git - mirror_edk2.git/commit
NetworkPkg/Ip4Dxe: Check the received package length (CVE-2019-14559).
authorJiaxin Wu <Jiaxin.wu@intel.com>
Mon, 29 Apr 2019 01:51:53 +0000 (09:51 +0800)
committermergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Wed, 19 Feb 2020 10:13:42 +0000 (10:13 +0000)
commit578bcdc2605e3438b9cbdac4e68339f90f5bf8af
tree8d6f8541f9fbbd20a9d7046322ce3f1b2a049887
parent6d8f4bafadb52a4a674de1a2eb463f84154d066d
NetworkPkg/Ip4Dxe: Check the received package length (CVE-2019-14559).

v3: correct the coding style.
v2: correct the commit message & add BZ number.

REF: https://bugzilla.tianocore.org/show_bug.cgi?id=1610

This patch is to check the received package length to make sure the package
has a valid length field.

Cc: Fu Siyuan <siyuan.fu@intel.com>
Cc: Maciej Rabeda <maciej.rabeda@linux.intel.com>
Signed-off-by: Wu Jiaxin <jiaxin.wu@intel.com>
Reviewed-by: Siyuan Fu <siyuan.fu@intel.com>
NetworkPkg/Ip4Dxe/Ip4Input.c