Branch: refs/heads/master
Home: https://github.com/tianocore/edk2
Commit: b3a2f7ff24e156e8c4d694fffff01e95a048c536
https://github.com/tianocore/edk2/commit/b3a2f7ff24e156e8c4d694fffff01e95a048c536
Author: Santhosh Kumar V <[email protected]>
Date: 2025-05-13 (Tue, 13 May 2025)
Changed paths:
M NetworkPkg/IScsiDxe/IScsiProto.c
Log Message:
-----------
NetworkPkg/IScsiDxe:Fix for out of bound memory access for bz4207
(CVE-2024-38805)
In IScsiBuildKeyValueList, check if we have any data left (Len > 0) before
advancing the Data pointer and reducing Len.
Avoids wrapping Len. Also Used SafeUint32SubSafeUint32Sub call to reduce the
Len .
Signed-off-by: santhosh kumar V <[email protected]>
To unsubscribe from these emails, change your notification settings at
https://github.com/tianocore/edk2/settings/notifications
_______________________________________________
edk2-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/edk2-commits
