Reviewed-by: Jaben Carsey <[email protected]>

> -----Original Message-----
> From: edk2-devel [mailto:[email protected]] On Behalf Of Qiu
> Shumin
> Sent: Monday, February 15, 2016 6:07 PM
> To: [email protected]
> Cc: Carsey, Jaben <[email protected]>; Qiu, Shumin
> <[email protected]>
> Subject: [edk2] [PATCH] ShellPkg: Do NULL pointer check before the pointer
> is used.
> Importance: High
> 
> The pointer 'FileInterface->Buffer' returned from 'AllocateZeroPool' in
> function
> 'CreateFileInterfaceMem' may be NULL and will be dereferenced at the
> following code.
> 
> Cc: Jaben Carsey <[email protected]>
> Contributed-under: TianoCore Contribution Agreement 1.0
> Signed-off-by: Qiu Shumin <[email protected]>
> ---
>  ShellPkg/Application/Shell/FileHandleWrappers.c | 6 +++++-
>  1 file changed, 5 insertions(+), 1 deletion(-)
> 
> diff --git a/ShellPkg/Application/Shell/FileHandleWrappers.c
> b/ShellPkg/Application/Shell/FileHandleWrappers.c
> index 168b78b..f8306e2 100644
> --- a/ShellPkg/Application/Shell/FileHandleWrappers.c
> +++ b/ShellPkg/Application/Shell/FileHandleWrappers.c
> @@ -3,7 +3,7 @@
>    StdIn, StdOut, StdErr, etc...).
> 
>    Copyright 2016 Dell Inc.
> -  Copyright (c) 2009 - 2015, Intel Corporation. All rights reserved.<BR>
> +  Copyright (c) 2009 - 2016, Intel Corporation. All rights reserved.<BR>
>    (C) Copyright 2013 Hewlett-Packard Development Company, L.P.<BR>
>    This program and the accompanying materials
>    are licensed and made available under the terms and conditions of the BSD
> License
> @@ -1516,6 +1516,10 @@ CreateFileInterfaceMem(
> 
>    if (Unicode) {
>      FileInterface->Buffer = AllocateZeroPool(sizeof(gUnicodeFileTag));
> +    if (FileInterface->Buffer == NULL) {
> +      FreePool (FileInterface);
> +      return NULL;
> +    }
>      *((CHAR16 *) (FileInterface->Buffer)) = EFI_UNICODE_BYTE_ORDER_MARK;
>      FileInterface->BufferSize = 2;
>      FileInterface->Position = 2;
> --
> 1.9.5.msysgit.1
> 
> _______________________________________________
> edk2-devel mailing list
> [email protected]
> https://lists.01.org/mailman/listinfo/edk2-devel
_______________________________________________
edk2-devel mailing list
[email protected]
https://lists.01.org/mailman/listinfo/edk2-devel

Reply via email to