MdeModulePkg/Core/Dxe: limit FwVol encapsulation section recursion

[mirror_edk2.git] / MdeModulePkg / MdeModulePkg.dec

diff --git a/MdeModulePkg/MdeModulePkg.dec b/MdeModulePkg/MdeModulePkg.dec
index 00075528198d08d47b058e4515f77acdee9be888..9b52b34494433757ba0ef1ff9a065d8cf4ae6742 100644 (file)
--- a/MdeModulePkg/MdeModulePkg.dec
+++ b/MdeModulePkg/MdeModulePkg.dec
@@ -1529,6 +1529,12 @@
   # @Prompt Enable Capsule On Disk support.\r
   gEfiMdeModulePkgTokenSpaceGuid.PcdCapsuleOnDiskSupport|FALSE|BOOLEAN|0x0000002d\r
 \r
+  ## Maximum permitted encapsulation levels of sections in a firmware volume,\r
+  #  in the DXE phase. Minimum value is 1. Sections nested more deeply are\r
+  #  rejected.\r
+  # @Prompt Maximum permitted FwVol section nesting depth (exclusive).\r
+  gEfiMdeModulePkgTokenSpaceGuid.PcdFwVolDxeMaxEncapsulationDepth|0x10|UINT32|0x00000030\r
+\r
 [PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx]\r
   ## This PCD defines the Console output row. The default value is 25 according to UEFI spec.\r
   #  This PCD could be set to 0 then console output would be at max column and max row.\r