Revision: 16200
http://sourceforge.net/p/edk2/code/16200
Author: lzeng14
Date: 2014-10-09 09:37:58 +0000 (Thu, 09 Oct 2014)
Log Message:
-----------
MdeModulePkg DxeCore: Add FVH signature check before VerifyFvHeaderChecksum in
FwVol.
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Star Zeng <[email protected]>
Reviewed-by: Liming Gao <[email protected]>
Modified Paths:
--------------
trunk/edk2/MdeModulePkg/Core/Dxe/FwVol/FwVol.c
Modified: trunk/edk2/MdeModulePkg/Core/Dxe/FwVol/FwVol.c
===================================================================
--- trunk/edk2/MdeModulePkg/Core/Dxe/FwVol/FwVol.c 2014-10-09 01:25:32 UTC
(rev 16199)
+++ trunk/edk2/MdeModulePkg/Core/Dxe/FwVol/FwVol.c 2014-10-09 09:37:58 UTC
(rev 16200)
@@ -658,6 +658,14 @@
}
ASSERT (FwVolHeader != NULL);
+ //
+ // Validate FV Header signature, if not as expected, continue.
+ //
+ if (FwVolHeader->Signature != EFI_FVH_SIGNATURE) {
+ CoreFreePool (FwVolHeader);
+ continue;
+ }
+
if (!VerifyFvHeaderChecksum (FwVolHeader)) {
CoreFreePool (FwVolHeader);
continue;
------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
_______________________________________________
edk2-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/edk2-commits
