Branch: refs/heads/master
  Home:   https://github.com/tianocore/edk2
  Commit: 0cad130cb4885961da201bb9b08424b3fd3d2249
      
https://github.com/tianocore/edk2/commit/0cad130cb4885961da201bb9b08424b3fd3d2249
  Author: nick.wang <[email protected]>
  Date:   2025-10-09 (Thu, 09 Oct 2025)

  Changed paths:
    M MdeModulePkg/Bus/Isa/Ps2KeyboardDxe/Ps2KbdCtrller.c
    M MdeModulePkg/Bus/Isa/Ps2KeyboardDxe/Ps2KbdTextIn.c
    M MdeModulePkg/Bus/Usb/UsbKbDxe/KeyBoard.c
    M MdeModulePkg/Universal/Console/ConSplitterDxe/ConSplitter.c
    M MdeModulePkg/Universal/Console/TerminalDxe/TerminalConIn.c

  Log Message:
  -----------
  MdeModulePkg : Clear keyboard queue buffer after reading

There is a possibility to retrieve user input keystroke data stored in the
queue buffer via the EFI_SIMPLE_TEXT_INPUT_PROTOCOL pointer. To prevent
exposure of the password string, clear the queue buffer by filling it
with zeros after reading.

Signed-off-by: Nick Wang <[email protected]>


  Commit: ab04d09555b91037b8463ea5fb4387f16a5a5015
      
https://github.com/tianocore/edk2/commit/ab04d09555b91037b8463ea5fb4387f16a5a5015
  Author: nick.wang <[email protected]>
  Date:   2025-10-09 (Thu, 09 Oct 2025)

  Changed paths:
    M EmbeddedPkg/Drivers/VirtualKeyboardDxe/VirtualKeyboard.c

  Log Message:
  -----------
  EmbeddedPkg: Clear keyboard queue buffer after reading

There is a possibility to retrieve user input keystroke data stored in the
queue buffer via the EFI_SIMPLE_TEXT_INPUT_PROTOCOL pointer. To prevent
exposure of the password string, clear the queue buffer by filling it
with zeros after reading.

Signed-off-by: Nick Wang <[email protected]>


Compare: https://github.com/tianocore/edk2/compare/f98662c5e35b...ab04d09555b9

To unsubscribe from these emails, change your notification settings at 
https://github.com/tianocore/edk2/settings/notifications


_______________________________________________
edk2-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/edk2-commits

Reply via email to