Add comment for modules which have external input.

[mirror_edk2.git] / CryptoPkg / Library / BaseCryptLib / SmmCryptLib.inf

diff --git a/CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf b/CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
index f7bccc4379ae260d4bf84143081a08094c0ec182..ac3494a20cc7740ff3f900510e81a5b4051bd468 100644 (file)
--- a/CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
+++ b/CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
@@ -10,6 +10,11 @@
 #  5) DhGenerateParameter\r
 #  6) DhGenerateKey\r
 #\r
+#  Caution: This module requires additional review when modified.\r
+#  This library will have external input - signature.\r
+#  This external input must be validated carefully to avoid security issue like\r
+#  buffer overflow, integer overflow.\r
+#\r
 #  Copyright (c) 2010 - 2012, Intel Corporation. All rights reserved.<BR>\r
 #  This program and the accompanying materials\r
 #  are licensed and made available under the terms and conditions of the BSD License\r