]> git.proxmox.com Git - mirror_edk2.git/commit
BaseTools: Add more checker in Decompress algorithm to access the valid buffer (CVE...
authorLiming Gao <liming.gao@intel.com>
Tue, 16 Oct 2018 02:06:13 +0000 (10:06 +0800)
committerLiming Gao <liming.gao@intel.com>
Wed, 24 Oct 2018 00:24:15 +0000 (08:24 +0800)
commit041d89bc0f0119df37a5fce1d0f16495ff905089
treeb4b94975badee7d7e2fcf03f0e5b3a060b3c882e
parent684db6da64bc7b5faee4e1174e801c245f563b5c
BaseTools: Add more checker in Decompress algorithm to access the valid buffer (CVE FIX)

Fix CVE-2017-5731,CVE-2017-5732,CVE-2017-5733,CVE-2017-5734,CVE-2017-5735
https://bugzilla.tianocore.org/show_bug.cgi?id=686

Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Holtsclaw Brent <brent.holtsclaw@intel.com>
Signed-off-by: Liming Gao <liming.gao@intel.com>
Reviewed-by: Star Zeng <star.zeng@intel.com>
Acked-by: Laszlo Ersek <lersek@redhat.com>
BaseTools/Source/C/Common/Decompress.c
BaseTools/Source/C/TianoCompress/TianoCompress.c