]> git.proxmox.com Git - mirror_edk2.git/commit
MdeModulePkg/DxeCore: base code protection on permission attributes
authorArd Biesheuvel <ard.biesheuvel@linaro.org>
Fri, 24 Feb 2017 17:51:04 +0000 (17:51 +0000)
committerArd Biesheuvel <ard.biesheuvel@linaro.org>
Sun, 26 Feb 2017 13:50:21 +0000 (13:50 +0000)
commita2ed40c02bf24ec335d68056d92a6c164a61b35f
treece96c17e13aebc7d0be1ed89985e27fc4d715611
parentdf453e1b7c7c3612d1fa3311bfb4c9d153ec9ad8
MdeModulePkg/DxeCore: base code protection on permission attributes

Instead of assuming that a PE/COFF section of type EFI_IMAGE_SCN_CNT_CODE
can always be mapped read-only, classify a section as a code section only
if it has the executable attribute set and the writable attribute cleared.

This adheres more closely to the PE/COFF spec, and avoids issues with
Linux OS loaders that may consist of a single read/write/execute section.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
MdeModulePkg/Core/Dxe/Misc/MemoryProtection.c