One question below. Reviewed-by: Jaben Carsey <jaben.car...@intel.com>
> -----Original Message----- > From: Hao Wu [mailto:hao.a...@intel.com] > Sent: Wednesday, July 01, 2015 1:00 AM > To: edk2-devel@lists.sourceforge.net > Subject: [edk2] [PATCH] FatPkg EnhancedFatDxe: Use safe string functions > > Unsafe string functions are replaced with safe ones. > > Safe string functions will assert if DestMax is not greater than > StrnLenS(Source, DestMax). Therefore, additional assert for checking the > size of source and destination buffers can be removed. > > Contributed-under: TianoCore Contribution Agreement 1.0 > Signed-off-by: Hao Wu <hao.a...@intel.com> > Reviewed-by: Ruiyu Ni <ruiyu...@intel.com> > --- > EnhancedFatDxe/DirectoryManage.c | 18 +++++++++++++++--- > EnhancedFatDxe/Fat.h | 5 +++-- > EnhancedFatDxe/FileName.c | 14 +++++++------- > EnhancedFatDxe/Hash.c | 9 ++++++--- > 4 files changed, 31 insertions(+), 15 deletions(-) > > diff --git a/EnhancedFatDxe/DirectoryManage.c > b/EnhancedFatDxe/DirectoryManage.c > index 53e80f7..4b44ec3 100644 > --- a/EnhancedFatDxe/DirectoryManage.c > +++ b/EnhancedFatDxe/DirectoryManage.c > @@ -1,6 +1,6 @@ > /*++ > > -Copyright (c) 2005 - 2013, Intel Corporation. All rights reserved.<BR> > +Copyright (c) 2005 - 2015, Intel Corporation. All rights reserved.<BR> > This program and the accompanying materials are licensed and made > available under the terms and conditions of the Software License > Agreement which accompanies this distribution. > @@ -112,7 +112,15 @@ Returns: > // Write LFN directory entry > // > SetMem (LfnBuffer, sizeof (CHAR16) * LFN_CHAR_TOTAL * EntryCount, > 0xff); Why do you set the whole buffer to 0xFF? What's the value here? > - StrCpy (LfnBuffer, DirEnt->FileString); > + Status = StrCpyS ( > + LfnBuffer, > + sizeof (LfnBuffer) / sizeof (LfnBuffer[0]), > + DirEnt->FileString > + ); > + if (EFI_ERROR (Status)) { > + return Status; > + } > + > LfnBufferPointer = LfnBuffer; > LfnEntry.Attributes = FAT_ATTRIBUTE_LFN; > LfnEntry.Type = 0; > @@ -345,7 +353,11 @@ Returns: > // Fail to get the long file name from long file name entry, > // get the file name from short name > // > - FatGetFileNameViaCaseFlag (DirEnt, LfnBuffer); > + FatGetFileNameViaCaseFlag ( > + DirEnt, > + LfnBuffer, > + sizeof (LfnBuffer) / sizeof (LfnBuffer[0]) > + ); > } > > DirEnt->FileString = AllocateCopyPool (StrSize (LfnBuffer), LfnBuffer); > diff -- > git a/EnhancedFatDxe/Fat.h b/EnhancedFatDxe/Fat.h index > 7a3cd06..27d7937 100644 > --- a/EnhancedFatDxe/Fat.h > +++ b/EnhancedFatDxe/Fat.h > @@ -1237,8 +1237,9 @@ FatSetCaseFlag ( > > VOID > FatGetFileNameViaCaseFlag ( > - IN FAT_DIRENT *DirEnt, > - OUT CHAR16 *FileString > + IN FAT_DIRENT *DirEnt, > + IN OUT CHAR16 *FileString, > + IN UINTN FileStringMax > ); > > UINT8 > diff --git a/EnhancedFatDxe/FileName.c b/EnhancedFatDxe/FileName.c > index 1ba2706..1f8aad2 100644 > --- a/EnhancedFatDxe/FileName.c > +++ b/EnhancedFatDxe/FileName.c > @@ -1,6 +1,6 @@ > /*++ > > -Copyright (c) 2005 - 2007, Intel Corporation. All rights reserved.<BR> > +Copyright (c) 2005 - 2015, Intel Corporation. All rights reserved.<BR> > This program and the accompanying materials are licensed and made > available under the terms and conditions of the Software License > Agreement which accompanies this distribution. > @@ -298,7 +298,6 @@ Returns: > CHAR16 Buffer[FAT_MAIN_NAME_LEN + 1 + FAT_EXTEND_NAME_LEN + > 1]; > UINT8 OutCaseFlag; > > - ASSERT (StrSize (Str) <= sizeof (Buffer)); > // > // Assume the case of input string is mixed > // > @@ -307,7 +306,7 @@ Returns: > // Lower case a copy of the string, if it matches the > // original then the string is lower case > // > - StrCpy (Buffer, Str); > + StrCpyS (Buffer, sizeof (Buffer) / sizeof (Buffer[0]), Str); > FatStrLwr (Buffer); > if (StrCmp (Str, Buffer) == 0) { > OutCaseFlag = InCaseFlag; > @@ -316,7 +315,7 @@ Returns: > // Upper case a copy of the string, if it matches the > // original then the string is upper case > // > - StrCpy (Buffer, Str); > + StrCpyS (Buffer, sizeof (Buffer) / sizeof (Buffer[0]), Str); > FatStrUpr (Buffer); > if (StrCmp (Str, Buffer) == 0) { > OutCaseFlag = 0; > @@ -388,8 +387,9 @@ Returns: > > VOID > FatGetFileNameViaCaseFlag ( > - IN FAT_DIRENT *DirEnt, > - OUT CHAR16 *FileString > + IN FAT_DIRENT *DirEnt, > + IN OUT CHAR16 *FileString, > + IN UINTN FileStringMax > ) > /*++ > > @@ -421,7 +421,7 @@ Returns: > FatNameToStr (File8Dot3Name + FAT_MAIN_NAME_LEN, > FAT_EXTEND_NAME_LEN, CaseFlag & FAT_CASE_EXT_LOWER, > &TempExt[1]); > if (TempExt[1] != 0) { > TempExt[0] = L'.'; > - StrCat (FileString, TempExt); > + StrCatS (FileString, FileStringMax, TempExt); > } > } > > diff --git a/EnhancedFatDxe/Hash.c b/EnhancedFatDxe/Hash.c index > d186e35..d933f90 100644 > --- a/EnhancedFatDxe/Hash.c > +++ b/EnhancedFatDxe/Hash.c > @@ -1,6 +1,6 @@ > /*++ > > -Copyright (c) 2005 - 2014, Intel Corporation. All rights reserved.<BR> > +Copyright (c) 2005 - 2015, Intel Corporation. All rights reserved.<BR> > This program and the accompanying materials are licensed and made > available under the terms and conditions of the Software License > Agreement which accompanies this distribution. > @@ -43,8 +43,11 @@ Returns: > { > UINT32 HashValue; > CHAR16 UpCasedLongFileName[EFI_PATH_STRING_LENGTH]; > - StrnCpy (UpCasedLongFileName, LongNameString, > EFI_PATH_STRING_LENGTH - 1); > - UpCasedLongFileName[EFI_PATH_STRING_LENGTH - 1] = L'\0'; > + StrCpyS ( > + UpCasedLongFileName, > + sizeof (UpCasedLongFileName) / sizeof (UpCasedLongFileName[0]), > + LongNameString > + ); > FatStrUpr (UpCasedLongFileName); > gBS->CalculateCrc32 (UpCasedLongFileName, StrSize > (UpCasedLongFileName), &HashValue); > return (HashValue & HASH_TABLE_MASK); > -- > 1.9.5.msysgit.0 > > > ------------------------------------------------------------------------------ > Don't Limit Your Business. Reach for the Cloud. > GigeNET's Cloud Solutions provide you with the tools and support that > you need to offload your IT needs and focus on growing your business. > Configured For All Businesses. Start Your Cloud Today. > https://www.gigenetcloud.com/ > _______________________________________________ > edk2-devel mailing list > edk2-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/edk2-devel ------------------------------------------------------------------------------ Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ _______________________________________________ edk2-devel mailing list edk2-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/edk2-devel