Branch: refs/heads/master
  Home:   https://github.com/tianocore/edk2
  Commit: 8504d2be17c98265049ec334711aad4c0baed1d7
      
https://github.com/tianocore/edk2/commit/8504d2be17c98265049ec334711aad4c0baed1d7
  Author: Sureshkumar Ponnusamy <sureshkumar.ponnus...@microsoft.com>
  Date:   2024-09-03 (Tue, 03 Sep 2024)

  Changed paths:
    M MdeModulePkg/Universal/FaultTolerantWriteDxe/FtwMisc.c

  Log Message:
  -----------
  MdeModulePkg/FaultTolerantWriteDxe: Fix buffer overrun issue

- This PR aims to  prevent a buffer overrun issue found in FtwGetLastWriteHeader
function.As per the current code, when there is a malformed blocks (with all 
bytes as 0s)
then `Offset += FTW_WRITE_TOTAL_SIZE (FtwHeader->NumberOfWrites,
FtwHeader->PrivateDataSize)` would access beyond FtwWorkSpaceSize.

- Also added the signature check to validate work space

Signed-off-by: Sureshkumar Ponnusamy <sponnus...@microsoft.com>



To unsubscribe from these emails, change your notification settings at 
https://github.com/tianocore/edk2/settings/notifications


_______________________________________________
edk2-commits mailing list
edk2-commits@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/edk2-commits

Reply via email to