]> git.proxmox.com Git - mirror_edk2.git/commit - MdeModulePkg/Universal/Disk/UdfDxe/FileSystemOperations.c
MdeModulePkg/UdfDxe: Add boundary check for ComponentIdentifier decode
authorHao Wu <hao.a.wu@intel.com>
Wed, 13 Dec 2017 06:39:07 +0000 (14:39 +0800)
committerHao Wu <hao.a.wu@intel.com>
Tue, 23 Oct 2018 06:23:35 +0000 (14:23 +0800)
commit89f75aa04a97293a8ed9db2a90851a5053730cf5
tree822702d88269a3b46febe066e368243cc85828c4
parent5c0748f43f4e1cc15fdd0be64a764eacd7df92f6
MdeModulePkg/UdfDxe: Add boundary check for ComponentIdentifier decode

REF:https://bugzilla.tianocore.org/show_bug.cgi?id=828

Within ResolveSymlink():

The boundary check will validate the 'LengthofComponentIdentifier' field
of a Path Component matches the data within the relating (Extended) File
Entry.

Cc: Ruiyu Ni <ruiyu.ni@intel.com>
Cc: Jiewen Yao <jiewen.yao@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Hao Wu <hao.a.wu@intel.com>
Reviewed-by: Paulo Alcantara <palcantara@suse.de>
Acked-by: Star Zeng <star.zeng@intel.com>
MdeModulePkg/Universal/Disk/UdfDxe/FileSystemOperations.c