Fix a security hole in shell binaries:
authorqhuang8 <qhuang8@6f19259b-4bc3-4df7-8a09-765794883524>
Wed, 27 Jan 2010 14:49:47 +0000 (14:49 +0000)
committerqhuang8 <qhuang8@6f19259b-4bc3-4df7-8a09-765794883524>
Wed, 27 Jan 2010 14:49:47 +0000 (14:49 +0000)
For gBS->LoadImage() if the return status is EFI_SECURITY_VIOLATION, the image handle may not be NULL.
Shell environment should not have the assumption that the output ImageHandle must be NULL if the error status is returned by gBS->LoadImage().

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@9838 6f19259b-4bc3-4df7-8a09-765794883524

92 files changed:
EdkShellBinPkg/Bin/Ia32/Apps/Dblk.efi
EdkShellBinPkg/Bin/Ia32/Apps/Devices.efi
EdkShellBinPkg/Bin/Ia32/Apps/Devtree.efi
EdkShellBinPkg/Bin/Ia32/Apps/Guid.efi
EdkShellBinPkg/Bin/Ia32/Apps/IfConfig.efi
EdkShellBinPkg/Bin/Ia32/Apps/IpConfig.efi
EdkShellBinPkg/Bin/Ia32/Apps/LoadPciRom.efi
EdkShellBinPkg/Bin/Ia32/Apps/Mount.efi
EdkShellBinPkg/Bin/Ia32/Apps/Openinfo.efi
EdkShellBinPkg/Bin/Ia32/Apps/Ping.efi
EdkShellBinPkg/Bin/Ia32/Apps/SmbiosView.efi
EdkShellBinPkg/Bin/Ia32/Apps/TelnetMgmt.efi
EdkShellBinPkg/Bin/Ia32/Apps/comp.efi
EdkShellBinPkg/Bin/Ia32/Apps/dmem.efi
EdkShellBinPkg/Bin/Ia32/Apps/dmpstore.efi
EdkShellBinPkg/Bin/Ia32/Apps/edit.efi
EdkShellBinPkg/Bin/Ia32/Apps/eficompress.efi
EdkShellBinPkg/Bin/Ia32/Apps/efidecompress.efi
EdkShellBinPkg/Bin/Ia32/Apps/err.efi
EdkShellBinPkg/Bin/Ia32/Apps/hexedit.efi
EdkShellBinPkg/Bin/Ia32/Apps/mem.efi
EdkShellBinPkg/Bin/Ia32/Apps/memmap.efi
EdkShellBinPkg/Bin/Ia32/Apps/mm.efi
EdkShellBinPkg/Bin/Ia32/Apps/mode.efi
EdkShellBinPkg/Bin/Ia32/Apps/pci.efi
EdkShellBinPkg/Bin/Ia32/Apps/sermode.efi
EdkShellBinPkg/Bin/Ia32/Apps/stall.efi
EdkShellBinPkg/Bin/Ia32/Apps/timezone.efi
EdkShellBinPkg/Bin/Ipf/Apps/Dblk.efi
EdkShellBinPkg/Bin/Ipf/Apps/Devices.efi
EdkShellBinPkg/Bin/Ipf/Apps/Devtree.efi
EdkShellBinPkg/Bin/Ipf/Apps/Guid.efi
EdkShellBinPkg/Bin/Ipf/Apps/IfConfig.efi
EdkShellBinPkg/Bin/Ipf/Apps/IpConfig.efi
EdkShellBinPkg/Bin/Ipf/Apps/LoadPciRom.efi
EdkShellBinPkg/Bin/Ipf/Apps/Mount.efi
EdkShellBinPkg/Bin/Ipf/Apps/Openinfo.efi
EdkShellBinPkg/Bin/Ipf/Apps/Ping.efi
EdkShellBinPkg/Bin/Ipf/Apps/SmbiosView.efi
EdkShellBinPkg/Bin/Ipf/Apps/TelnetMgmt.efi
EdkShellBinPkg/Bin/Ipf/Apps/comp.efi
EdkShellBinPkg/Bin/Ipf/Apps/dmem.efi
EdkShellBinPkg/Bin/Ipf/Apps/dmpstore.efi
EdkShellBinPkg/Bin/Ipf/Apps/edit.efi
EdkShellBinPkg/Bin/Ipf/Apps/eficompress.efi
EdkShellBinPkg/Bin/Ipf/Apps/efidecompress.efi
EdkShellBinPkg/Bin/Ipf/Apps/err.efi
EdkShellBinPkg/Bin/Ipf/Apps/hexedit.efi
EdkShellBinPkg/Bin/Ipf/Apps/mem.efi
EdkShellBinPkg/Bin/Ipf/Apps/memmap.efi
EdkShellBinPkg/Bin/Ipf/Apps/mm.efi
EdkShellBinPkg/Bin/Ipf/Apps/mode.efi
EdkShellBinPkg/Bin/Ipf/Apps/pci.efi
EdkShellBinPkg/Bin/Ipf/Apps/sermode.efi
EdkShellBinPkg/Bin/Ipf/Apps/stall.efi
EdkShellBinPkg/Bin/Ipf/Apps/timezone.efi
EdkShellBinPkg/Bin/X64/Apps/Dblk.efi
EdkShellBinPkg/Bin/X64/Apps/Devices.efi
EdkShellBinPkg/Bin/X64/Apps/Devtree.efi
EdkShellBinPkg/Bin/X64/Apps/Guid.efi
EdkShellBinPkg/Bin/X64/Apps/IfConfig.efi
EdkShellBinPkg/Bin/X64/Apps/IpConfig.efi
EdkShellBinPkg/Bin/X64/Apps/LoadPciRom.efi
EdkShellBinPkg/Bin/X64/Apps/Mount.efi
EdkShellBinPkg/Bin/X64/Apps/Openinfo.efi
EdkShellBinPkg/Bin/X64/Apps/Ping.efi
EdkShellBinPkg/Bin/X64/Apps/SmbiosView.efi
EdkShellBinPkg/Bin/X64/Apps/TelnetMgmt.efi
EdkShellBinPkg/Bin/X64/Apps/comp.efi
EdkShellBinPkg/Bin/X64/Apps/dmem.efi
EdkShellBinPkg/Bin/X64/Apps/dmpstore.efi
EdkShellBinPkg/Bin/X64/Apps/edit.efi
EdkShellBinPkg/Bin/X64/Apps/eficompress.efi
EdkShellBinPkg/Bin/X64/Apps/efidecompress.efi
EdkShellBinPkg/Bin/X64/Apps/err.efi
EdkShellBinPkg/Bin/X64/Apps/hexedit.efi
EdkShellBinPkg/Bin/X64/Apps/mem.efi
EdkShellBinPkg/Bin/X64/Apps/memmap.efi
EdkShellBinPkg/Bin/X64/Apps/mm.efi
EdkShellBinPkg/Bin/X64/Apps/mode.efi
EdkShellBinPkg/Bin/X64/Apps/pci.efi
EdkShellBinPkg/Bin/X64/Apps/sermode.efi
EdkShellBinPkg/Bin/X64/Apps/stall.efi
EdkShellBinPkg/Bin/X64/Apps/timezone.efi
EdkShellBinPkg/FullShell/Ia32/Shell_Full.efi
EdkShellBinPkg/FullShell/Ipf/Shell_Full.efi
EdkShellBinPkg/FullShell/X64/Shell_full.efi
EdkShellBinPkg/MinimumShell/Ia32/Shell.efi
EdkShellBinPkg/MinimumShell/Ipf/Shell.efi
EdkShellBinPkg/MinimumShell/X64/Shell.efi
EdkShellBinPkg/ReadMe.txt
EdkShellBinPkg/SecurityPatch.diff [new file with mode: 0644]

index 104879a..6ddc3ae 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/Dblk.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/Dblk.efi differ
index 9caf7f7..fad072a 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/Devices.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/Devices.efi differ
index e955e1a..4351222 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/Devtree.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/Devtree.efi differ
index bf11f0d..a0f49d2 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/Guid.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/Guid.efi differ
index 312e517..299da06 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/IfConfig.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/IfConfig.efi differ
index 216a7be..091b88b 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/IpConfig.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/IpConfig.efi differ
index b5dd97f..49b680a 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/LoadPciRom.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/LoadPciRom.efi differ
index 56ade1c..071f320 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/Mount.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/Mount.efi differ
index 2b8f35b..909b37a 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/Openinfo.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/Openinfo.efi differ
index 5af429e..995251d 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/Ping.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/Ping.efi differ
index 29e4737..54b8313 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/SmbiosView.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/SmbiosView.efi differ
index 4731764..802dd5b 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/TelnetMgmt.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/TelnetMgmt.efi differ
index 6f270b1..858b401 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/comp.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/comp.efi differ
index c324134..64ae861 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/dmem.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/dmem.efi differ
index 759d096..a920463 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/dmpstore.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/dmpstore.efi differ
index acf3aa1..8914cb6 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/edit.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/edit.efi differ
index 9552fe0..8459d04 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/eficompress.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/eficompress.efi differ
index 2238af9..0d26d19 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/efidecompress.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/efidecompress.efi differ
index 073e77d..690a46b 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/err.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/err.efi differ
index c8ccad0..9339b7f 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/hexedit.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/hexedit.efi differ
index 32318c8..279b374 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/mem.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/mem.efi differ
index c94ef49..4e9a8ad 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/memmap.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/memmap.efi differ
index 77ab9f8..967093e 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/mm.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/mm.efi differ
index 9ffe2a6..02ce6b2 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/mode.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/mode.efi differ
index 1593a8f..2f9a045 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/pci.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/pci.efi differ
index 1a7b0cc..ce3bd24 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/sermode.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/sermode.efi differ
index cf059d1..2511644 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/stall.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/stall.efi differ
index 1842794..b2c8768 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ia32/Apps/timezone.efi and b/EdkShellBinPkg/Bin/Ia32/Apps/timezone.efi differ
index d45552f..a1c6ba4 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/Dblk.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/Dblk.efi differ
index 8e6aad2..193ae20 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/Devices.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/Devices.efi differ
index cebd77e..649031c 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/Devtree.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/Devtree.efi differ
index 3f1c0fd..f53f5b0 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/Guid.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/Guid.efi differ
index 6823865..8ce7185 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/IfConfig.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/IfConfig.efi differ
index 8dccbde..de78afe 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/IpConfig.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/IpConfig.efi differ
index 3be69d1..2893adb 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/LoadPciRom.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/LoadPciRom.efi differ
index 5809ecb..3d1dad2 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/Mount.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/Mount.efi differ
index d781a53..7407651 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/Openinfo.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/Openinfo.efi differ
index b5bad29..1f69265 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/Ping.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/Ping.efi differ
index 0ed43f4..6191d1e 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/SmbiosView.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/SmbiosView.efi differ
index 44eb55d..ef4e32a 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/TelnetMgmt.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/TelnetMgmt.efi differ
index 48fcde6..5fe5627 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/comp.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/comp.efi differ
index e3404c1..5fe3ceb 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/dmem.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/dmem.efi differ
index 531a5f5..325c4cb 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/dmpstore.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/dmpstore.efi differ
index 40e0420..9bff0fd 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/edit.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/edit.efi differ
index 89403a9..adf0716 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/eficompress.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/eficompress.efi differ
index 61319bb..5e7dc0e 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/efidecompress.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/efidecompress.efi differ
index 52667c4..3a6b6d7 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/err.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/err.efi differ
index 5e99f58..55027c8 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/hexedit.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/hexedit.efi differ
index d2e5530..0a8b0c8 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/mem.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/mem.efi differ
index 4f56b5f..b1755b7 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/memmap.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/memmap.efi differ
index 33f5a1b..7d7ebde 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/mm.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/mm.efi differ
index b54d36b..807dfa6 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/mode.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/mode.efi differ
index ef0232e..9dbb666 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/pci.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/pci.efi differ
index 3d2cf4a..aebb8d7 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/sermode.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/sermode.efi differ
index ec351a8..a85e031 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/stall.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/stall.efi differ
index 4802b55..15683ef 100644 (file)
Binary files a/EdkShellBinPkg/Bin/Ipf/Apps/timezone.efi and b/EdkShellBinPkg/Bin/Ipf/Apps/timezone.efi differ
index dc4f29f..dabd93e 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/Dblk.efi and b/EdkShellBinPkg/Bin/X64/Apps/Dblk.efi differ
index 957b3a5..7067407 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/Devices.efi and b/EdkShellBinPkg/Bin/X64/Apps/Devices.efi differ
index 3005dcb..811c456 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/Devtree.efi and b/EdkShellBinPkg/Bin/X64/Apps/Devtree.efi differ
index 4fe3587..b13a851 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/Guid.efi and b/EdkShellBinPkg/Bin/X64/Apps/Guid.efi differ
index b8899ff..2a5d110 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/IfConfig.efi and b/EdkShellBinPkg/Bin/X64/Apps/IfConfig.efi differ
index ee2e244..df0cddf 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/IpConfig.efi and b/EdkShellBinPkg/Bin/X64/Apps/IpConfig.efi differ
index 73e9608..25516b4 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/LoadPciRom.efi and b/EdkShellBinPkg/Bin/X64/Apps/LoadPciRom.efi differ
index fcfe219..ca780a0 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/Mount.efi and b/EdkShellBinPkg/Bin/X64/Apps/Mount.efi differ
index b6e3aec..dc6e4c2 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/Openinfo.efi and b/EdkShellBinPkg/Bin/X64/Apps/Openinfo.efi differ
index f509b2f..c46df50 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/Ping.efi and b/EdkShellBinPkg/Bin/X64/Apps/Ping.efi differ
index effc7d4..a846d25 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/SmbiosView.efi and b/EdkShellBinPkg/Bin/X64/Apps/SmbiosView.efi differ
index febb97a..1e6d9dd 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/TelnetMgmt.efi and b/EdkShellBinPkg/Bin/X64/Apps/TelnetMgmt.efi differ
index 1497c6c..af2d2a8 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/comp.efi and b/EdkShellBinPkg/Bin/X64/Apps/comp.efi differ
index b4f1bd6..91eb3a4 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/dmem.efi and b/EdkShellBinPkg/Bin/X64/Apps/dmem.efi differ
index 540b653..5588b57 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/dmpstore.efi and b/EdkShellBinPkg/Bin/X64/Apps/dmpstore.efi differ
index 8a63921..5187fba 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/edit.efi and b/EdkShellBinPkg/Bin/X64/Apps/edit.efi differ
index f551f00..c186539 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/eficompress.efi and b/EdkShellBinPkg/Bin/X64/Apps/eficompress.efi differ
index a8cda71..cffe2b1 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/efidecompress.efi and b/EdkShellBinPkg/Bin/X64/Apps/efidecompress.efi differ
index 6468d0c..1987210 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/err.efi and b/EdkShellBinPkg/Bin/X64/Apps/err.efi differ
index 630f07c..e423d9d 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/hexedit.efi and b/EdkShellBinPkg/Bin/X64/Apps/hexedit.efi differ
index 51da8e4..18a3557 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/mem.efi and b/EdkShellBinPkg/Bin/X64/Apps/mem.efi differ
index 2258d3b..2404724 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/memmap.efi and b/EdkShellBinPkg/Bin/X64/Apps/memmap.efi differ
index 91393ce..f241998 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/mm.efi and b/EdkShellBinPkg/Bin/X64/Apps/mm.efi differ
index 2a4f44d..bae7cfe 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/mode.efi and b/EdkShellBinPkg/Bin/X64/Apps/mode.efi differ
index 0fd1883..8edee34 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/pci.efi and b/EdkShellBinPkg/Bin/X64/Apps/pci.efi differ
index a77e6c5..c33cdc8 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/sermode.efi and b/EdkShellBinPkg/Bin/X64/Apps/sermode.efi differ
index 3fb1dbb..21ed51c 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/stall.efi and b/EdkShellBinPkg/Bin/X64/Apps/stall.efi differ
index b54605b..b0baa0f 100644 (file)
Binary files a/EdkShellBinPkg/Bin/X64/Apps/timezone.efi and b/EdkShellBinPkg/Bin/X64/Apps/timezone.efi differ
index 8af463b..c416e96 100644 (file)
Binary files a/EdkShellBinPkg/FullShell/Ia32/Shell_Full.efi and b/EdkShellBinPkg/FullShell/Ia32/Shell_Full.efi differ
index c18a1ec..b31790f 100644 (file)
Binary files a/EdkShellBinPkg/FullShell/Ipf/Shell_Full.efi and b/EdkShellBinPkg/FullShell/Ipf/Shell_Full.efi differ
index 2329030..b39268d 100644 (file)
Binary files a/EdkShellBinPkg/FullShell/X64/Shell_full.efi and b/EdkShellBinPkg/FullShell/X64/Shell_full.efi differ
index fb4ac3f..974f380 100644 (file)
Binary files a/EdkShellBinPkg/MinimumShell/Ia32/Shell.efi and b/EdkShellBinPkg/MinimumShell/Ia32/Shell.efi differ
index be21bc6..f2a27cd 100644 (file)
Binary files a/EdkShellBinPkg/MinimumShell/Ipf/Shell.efi and b/EdkShellBinPkg/MinimumShell/Ipf/Shell.efi differ
index cef9217..ee61fc1 100644 (file)
Binary files a/EdkShellBinPkg/MinimumShell/X64/Shell.efi and b/EdkShellBinPkg/MinimumShell/X64/Shell.efi differ
index e4a2e33..75a2f60 100644 (file)
@@ -1,10 +1,11 @@
-The binaries of EdkShellBinPkg are generated with Efi-Shell-Dev-Snapshot-20091214.zip and build with Edk Compatibility & BaseTools Package\r
+The binaries of EdkShellBinPkg are generated with Efi-Shell-Dev-Snapshot-20091214.zip (plus a security hot-fix see EdkShellbinPkg\SecurityPatch.diff) and build with Edk Compatibility & BaseTools Package\r
 (r9623)\r
 \r
 The following steps can help to re-generate these binaries for customization:\r
 1. Check out EdkCompatibilityPkg (r9623) to $(WORKSPACE)\EdkCompatibilityPkg (svn https://edk2.tianocore.org/svn/edk2/trunk/edk2/EdkCompatibilityPkg).\r
 2. Check out EdkShellPkg(r9623) to $(WORKSPACE)\EdkShellPkg (svn https://edk2.tianocore.org/svn/edk2/trunk/edk2/EdkShellPkg).\r
-3  Check out Edk Shell project source (r36) to $(WORKSPACE) (svn https://efi-shell.tianocore.org/svn/efi-shell/trunk/Shell).  It is read-only and current revison (r36) is identical to Efi-Shell-Dev-Snapshot-20091214.zip. \r
+3a.Check out Edk Shell project source (r36) to $(WORKSPACE) (svn https://efi-shell.tianocore.org/svn/efi-shell/trunk/Shell).  It is read-only and current revison (r36) is identical to Efi-Shell-Dev-Snapshot-20091214.zip. \r
+3b.Apply the security hot fix in EdkShellBinPkg\SecurityPatch.diff to patch in Shell\shellenv\exec.c\r
 4. Update to the newest BaseTools package. (r9623 or later)\r
 5. Under workspace directory (i.e. c:\EdkII), \r
    To generate Minimum Shell, execute: "build -a IA32 -a X64 -a IPF -p EdkShellPkg\EdkShellPkg.dsc -m EdkShellPkg\Shell\Shell.inf" \r
diff --git a/EdkShellBinPkg/SecurityPatch.diff b/EdkShellBinPkg/SecurityPatch.diff
new file mode 100644 (file)
index 0000000..01a05c0
--- /dev/null
@@ -0,0 +1,15 @@
+Index: shellenv/exec.c\r
+===================================================================\r
+--- shellenv/exec.c    (revision 36)\r
++++ shellenv/exec.c    (working copy)\r
+@@ -2079,6 +2079,10 @@\r
+         if (!EFI_ERROR (Status)) {
+           goto Done;
+         } else {
++          //
++          // Set ImageHandle to NULL if any error status is returned.
++          //
++          ImageHandle = NULL;
+           Status = LibGetImageHeader (
+                      DevicePath,
+                      &DosHeader,