In IsDevicePathValid API, code should validate the device path
buffer not exceed the input MaxSize before reference the path
info. This patched series add this check.

Eric Dong (2):
  MdePkg UefiDevicePathLib: Validate buffer length before use buffer.
  MdePkg UefiDevicePathLibDevicePathProtocol: Validate before use.

 .../UefiDevicePathLib/DevicePathUtilities.c        | 25 ++++++++++++++++------
 .../UefiDevicePathLib.c                            | 24 +++++++++++++++------
 2 files changed, 35 insertions(+), 14 deletions(-)

-- 
2.6.4.windows.1

_______________________________________________
edk2-devel mailing list
edk2-devel@lists.01.org
https://lists.01.org/mailman/listinfo/edk2-devel

Reply via email to