Branch: refs/heads/UDK2015 Home: https://github.com/tianocore/edk2 Commit: 904e345d94f1ed6400f1fe5c4831bc1975971899 https://github.com/tianocore/edk2/commit/904e345d94f1ed6400f1fe5c4831bc1975971899 Author: Dong, Eric <eric.d...@intel.com> Date: 2016-08-03 (Wed, 03 Aug 2016)
Changed paths: M SecurityPkg/Tcg/Opal/OpalPasswordDxe/OpalHii.c M SecurityPkg/Tcg/Opal/OpalPasswordDxe/OpalHiiFormValues.h Log Message: ----------- SecurityPkg OpalPasswordDxe: Fix buffer overflow issue. In current code, PSID is processed as string and the length is 0x20. Current code only reserved 0x20 length buffer for it, no extra buffer for the '\0'. When driver call UnicodeStrToAsciiStrS to convert PSID, it search the '\0' for the end. So extra dirty data saved in PSID info which caused PSID revert action failed. This patch reserved extra 1 byte data for the '\0'. Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Eric Dong <eric.d...@intel.com> Cc: Star Zeng <star.z...@intel.com> Reviewed-by: Star Zeng <star.z...@intel.com> (cherry picked from commit 4636e4426a31802c25bd8409be9031c4d20324f4)
------------------------------------------------------------------------------
_______________________________________________ edk2-commits mailing list edk2-commits@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/edk2-commits