Reviewed-by: Qin Long <[email protected]>

Best Regards & Thanks,
LONG, Qin

> -----Original Message-----
> From: edk2-devel [mailto:[email protected]] On Behalf Of
> Hao Wu
> Sent: Sunday, July 10, 2016 9:34 AM
> To: [email protected]
> Cc: Wu, Hao A; Ye, Ting; Long, Qin
> Subject: [edk2] [PATCH] CryptoPkg BaseCryptLib: Init the content of struct
> 'CertCtx' before use
> 
> Some fields in structure 'CertCtx' might be used uninitialized in function
> Pkcs7GetCertificatesList().
> 
> This commit makes sure that 'CertCtx' gets initialized before being used.
> 
> Cc: Long Qin <[email protected]>
> Cc: Ye Ting <[email protected]>
> Contributed-under: TianoCore Contribution Agreement 1.0
> Signed-off-by: Hao Wu <[email protected]>
> ---
>  CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7Verify.c | 4 +++-
>  1 file changed, 3 insertions(+), 1 deletion(-)
> 
> diff --git a/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7Verify.c
> b/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7Verify.c
> index 559610d..efa3796 100644
> --- a/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7Verify.c
> +++ b/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7Verify.c
> @@ -10,7 +10,7 @@
>    WrapPkcs7Data(), Pkcs7GetSigners(), Pkcs7Verify() will get UEFI
> Authenticated
>    Variable and will do basic check for data structure.
> 
> -Copyright (c) 2009 - 2015, Intel Corporation. All rights reserved.<BR>
> +Copyright (c) 2009 - 2016, Intel Corporation. All rights reserved.<BR>
>  This program and the accompanying materials  are licensed and made
> available under the terms and conditions of the BSD License  which
> accompanies this distribution.  The full text of the license may be found at
> @@ -489,6 +489,8 @@ Pkcs7GetCertificatesList (
>    OldBuf         = NULL;
>    Signers        = NULL;
> 
> +  ZeroMem (&CertCtx, sizeof (CertCtx));
> +
>    //
>    // Parameter Checking
>    //
> --
> 1.9.5.msysgit.0
> 
> _______________________________________________
> edk2-devel mailing list
> [email protected]
> https://lists.01.org/mailman/listinfo/edk2-devel
_______________________________________________
edk2-devel mailing list
[email protected]
https://lists.01.org/mailman/listinfo/edk2-devel

Reply via email to