]> git.proxmox.com Git - mirror_edk2.git/commit
CryptoPkg/BaseCryptLib: Eliminate extra buffer copy in Pkcs7Verify()
authorBob Morgan <bobm@nvidia.com>
Fri, 10 Sep 2021 21:34:14 +0000 (05:34 +0800)
committermergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Wed, 13 Oct 2021 01:45:18 +0000 (01:45 +0000)
commitf22feb0e3b3f08b95201b258b104c45a2acef71f
tree7b057f48ef2ebacf28902f0f58561cbc0e128957
parentba4ae92234b1985a89b3abed221d825b8d9ef9e2
CryptoPkg/BaseCryptLib: Eliminate extra buffer copy in Pkcs7Verify()

REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3617

Create a read-only openSSL BIO wrapper for the existing input
buffer passed to Pkcs7Verify() instead of copying the buffer
into an empty writable BIO which causes memory allocations
within openSSL.

Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Xiaoyu Lu <xiaoyux.lu@intel.com>
Cc: Guomin Jiang <guomin.jiang@intel.com>
Signed-off-by: Bob Morgan <bobm@nvidia.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7VerifyCommon.c