]> git.proxmox.com Git - mirror_edk2.git/commit
MdePkg/BaseLib: Fix out-of-bounds reads in SafeString
authorPedro Falcato <pedro.falcato@gmail.com>
Thu, 3 Nov 2022 01:11:49 +0000 (09:11 +0800)
committermergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Mon, 7 Nov 2022 01:57:09 +0000 (01:57 +0000)
commit35043a5ec05db6aa86b1b380416923fd1c3506e6
treeb1329ff38fd3abb6162bbbeff136ab0f4c6da1f5
parentb556f2445c251adf405ac966b48c237d20c0d46c
MdePkg/BaseLib: Fix out-of-bounds reads in SafeString

There was a OOB access in *StrHexTo* functions, when passed strings like
"XDEADBEEF".

OpenCore folks established an ASAN-equipped project to fuzz Ext4Dxe,
which was able to catch these (mostly harmless) issues.

Cc: Vitaly Cheptsov <vit9696@protonmail.com>
Cc: Marvin H?user <mhaeuser@posteo.de>
Cc: Michael D Kinney <michael.d.kinney@intel.com>
Cc: Liming Gao <gaoliming@byosoft.com.cn>
Cc: Zhiguang Liu <zhiguang.liu@intel.com>
Signed-off-by: Pedro Falcato <pedro.falcato@gmail.com>
Acked-by: Michael D Kinney <michael.d.kinney@intel.com>
Reviewed-by: Jiewen Yao <Jiewen.yao@Intel.com>
Reviewed-by: Liming Gao <gaoliming@byosoft.com.cn>
MdePkg/Library/BaseLib/SafeString.c