Add comment for modules which have external input.

[mirror_edk2.git] / SecurityPkg / Library / DxeImageVerificationLib / DxeImageVerificationLib.inf

diff --git a/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.inf b/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.inf
index 5874d6b66b3abd48bcc5a39e5ad0fba1c349aa8a..e561a648a1986177ad635f583e2f1f7ed0f2f58f 100644 (file)
--- a/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.inf
+++ b/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.inf
@@ -2,7 +2,12 @@
 #  The library instance provides security service of image verification.\r
 #  Image verification Library module supports UEFI2.3.1\r
 #\r
-# Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.<BR>\r
+#  Caution: This module requires additional review when modified.\r
+#  This library will have external input - PE/COFF image.\r
+#  This external input must be validated carefully to avoid security issue like\r
+#  buffer overflow, integer overflow.\r
+#\r
+# Copyright (c) 2009 - 2012, Intel Corporation. All rights reserved.<BR>\r
 # This program and the accompanying materials\r
 # are licensed and made available under the terms and conditions of the BSD License\r
 # which accompanies this distribution. The full text of the license may be found at\r
@@ -48,6 +53,7 @@
   DevicePathLib\r
   BaseCryptLib\r
   SecurityManagementLib\r
+  PeCoffLib\r
 \r
 [Protocols]\r
   gEfiFirmwareVolume2ProtocolGuid\r
@@ -62,6 +68,7 @@
   gEfiCertSha256Guid\r
   gEfiCertX509Guid\r
   gEfiCertRsa2048Guid\r
+  gEfiSecureBootEnableDisableGuid\r
   \r
 [Pcd]\r
   gEfiSecurityPkgTokenSpaceGuid.PcdOptionRomImageVerificationPolicy\r