Branch: refs/heads/master
Home: https://github.com/tianocore/edk2
Commit: 65cacd6fcd44423d0cc264b908030b5b329726fa
https://github.com/tianocore/edk2/commit/65cacd6fcd44423d0cc264b908030b5b329726fa
Author: Mingjie Shen <[email protected]>
Date: 2026-07-07 (Tue, 07 Jul 2026)
Changed paths:
M SecurityPkg/Library/DxeTpmMeasureBootLib/DxeTpmMeasureBootLib.c
Log Message:
-----------
SecurityPkg/DxeTpmMeasureBootLib: Check GPT event size sanitization
TcgMeasureGptTable() ignored the return status of
TpmSanitizePrimaryHeaderGptEventSize(). On failure the EventSize output
is unreliable and was passed straight into AllocateZeroPool() and the
subsequent CopyMem() operations, which can result in an incorrectly
sized allocation and out-of-bounds access when parsing an untrusted GPT.
Check the status and, on error, free the already-allocated PrimaryHeader
and EntryPtr buffers and return EFI_DEVICE_ERROR, matching the handling
already used in DxeTpm2MeasureBootLib's TcgMeasureGptTable().
Signed-off-by: Mingjie Shen <[email protected]>
To unsubscribe from these emails, change your notification settings at
https://github.com/tianocore/edk2/settings/notifications
_______________________________________________
edk2-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/edk2-commits
