In IsDevicePathValid API, code should validate the device path
buffer not exceed the input MaxSize before reference the path
info. This patched series add this check.

Eric Dong (2):
  MdePkg UefiDevicePathLib: Validate buffer length before use buffer.
  MdePkg UefiDevicePathLibDevicePathProtocol: Validate before use.

 .../UefiDevicePathLib/DevicePathUtilities.c        | 25 ++++++++++++++++------
 .../UefiDevicePathLib.c                            | 24 +++++++++++++++------
 2 files changed, 35 insertions(+), 14 deletions(-)


edk2-devel mailing list

Reply via email to