]> git.proxmox.com Git - mirror_edk2.git/commit
OvmfPkg/SecureBootConfigDxe: Avoid illegal access
authorGary Ching-Pang Lin <glin@suse.com>
Sun, 18 Aug 2013 07:04:02 +0000 (07:04 +0000)
committerjljusten <jljusten@6f19259b-4bc3-4df7-8a09-765794883524>
Sun, 18 Aug 2013 07:04:02 +0000 (07:04 +0000)
commitdfd3119ab2e28b60b33b65b49249124994ffce63
treec4de17ef0dfff4facbb416928ee64e9897773985
parent4388b0ee0c87e88071b1056429c8294305f36d1b
OvmfPkg/SecureBootConfigDxe: Avoid illegal access

When enrolling the certificate from a file, the suffix check function
check the last 4 characters to filter out non-DER files. However,
if the length of the file name is less than 4, the address prior to
the file name will be accessed while it shouldn't. This commit checks
the length of the file name to avoid illegal access.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Gary Ching-Pang Lin <glin@suse.com>
Reviewed-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Jordan Justen <jordan.l.justen@intel.com>
Reviewed-by: Guo Dong <guo.dong@intel.com>
git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@14556 6f19259b-4bc3-4df7-8a09-765794883524
OvmfPkg/SecureBootConfigDxe/SecureBootConfigImpl.c