Pushed at 4d76bbcce62e3b972cd226e5f0e43d21db48a3f7.

Thanks,
Star

-----Original Message-----
From: Zeng, Star 
Sent: Friday, July 6, 2018 3:30 PM
To: Thomas Palmer <[email protected]>; [email protected]
Cc: Dong, Eric <[email protected]>; [email protected]; [email protected]; 
Zeng, Star <[email protected]>
Subject: RE: [PATCH 1/1] MdeModulePkg/UefiBootManagerLib: Fix small 
LoadOptionToVariable leak

Reviewed-by: Star Zeng <[email protected]>

-----Original Message-----
From: Thomas Palmer [mailto:[email protected]] 
Sent: Wednesday, July 4, 2018 12:41 AM
To: [email protected]
Cc: Dong, Eric <[email protected]>; Zeng, Star <[email protected]>; 
[email protected]; [email protected]; Thomas Palmer <[email protected]>
Subject: [PATCH 1/1] MdeModulePkg/UefiBootManagerLib: Fix small 
LoadOptionToVariable leak

After calling SetVariable, the allocated memory in Variable should be freed.

Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Thomas Palmer <[email protected]>
---
 .../Library/UefiBootManagerLib/BmLoadOption.c         | 19 +++++++++++--------
 1 file changed, 11 insertions(+), 8 deletions(-)

diff --git a/MdeModulePkg/Library/UefiBootManagerLib/BmLoadOption.c 
b/MdeModulePkg/Library/UefiBootManagerLib/BmLoadOption.c
index ff0c65a2efc6..7bf96646c690 100644
--- a/MdeModulePkg/Library/UefiBootManagerLib/BmLoadOption.c
+++ b/MdeModulePkg/Library/UefiBootManagerLib/BmLoadOption.c
@@ -2,7 +2,7 @@
   Load option library functions which relate with creating and processing load 
options.
 
 Copyright (c) 2011 - 2018, Intel Corporation. All rights reserved.<BR>
-(C) Copyright 2015-2016 Hewlett Packard Enterprise Development LP<BR>
+(C) Copyright 2015-2018 Hewlett Packard Enterprise Development LP<BR>
 This program and the accompanying materials  are licensed and made available 
under the terms and conditions of the BSD License  which accompanies this 
distribution.  The full text of the license may be found at @@ -250,13 +250,16 
@@ structure.
     VariableAttributes = EFI_VARIABLE_BOOTSERVICE_ACCESS | 
EFI_VARIABLE_RUNTIME_ACCESS;
   }
 
-  return gRT->SetVariable (
-                OptionName,
-                &gEfiGlobalVariableGuid,
-                VariableAttributes,
-                VariableSize,
-                Variable
-                );
+  Status = gRT->SetVariable (
+                  OptionName,
+                  &gEfiGlobalVariableGuid,
+                  VariableAttributes,
+                  VariableSize,
+                  Variable
+                  );
+  FreePool (Variable);
+
+  return Status;
 }
 
 /**
--
2.7.4

_______________________________________________
edk2-devel mailing list
[email protected]
https://lists.01.org/mailman/listinfo/edk2-devel

Reply via email to