summaryrefslogtreecommitdiffstats
path: root/CryptoPkg/Library/BaseCryptLib/Pk/CryptAuthenticode.c
diff options
context:
space:
mode:
authortye1 <tye1@6f19259b-4bc3-4df7-8a09-765794883524>2011-10-28 07:41:26 +0000
committertye1 <tye1@6f19259b-4bc3-4df7-8a09-765794883524>2011-10-28 07:41:26 +0000
commitda9e7418daad22aee7b48790c1d1db5d2ede7e58 (patch)
tree2b0db8d7cbf708811e789e99a8fc4bf381dc2dcc /CryptoPkg/Library/BaseCryptLib/Pk/CryptAuthenticode.c
parent91c7aa53896ac4372f7465bbea4a3e8ebcebb877 (diff)
downloadedk2-da9e7418daad22aee7b48790c1d1db5d2ede7e58.tar.gz
edk2-da9e7418daad22aee7b48790c1d1db5d2ede7e58.tar.bz2
edk2-da9e7418daad22aee7b48790c1d1db5d2ede7e58.zip
1. Fix build break issue for NOOPT target.
2. Fix potential system hang issue in X509_STORE_CTX_cleanup. 3. Fix potential overflow when convert UINTN to INT. 4. Update Pkcs7Sign() to output stripped PKCS#7 SignedData. 5. Update Pkcs7Verify() to support both wrapped/stripped PKCS#7 SignedData. Signed-off-by: tye Reviewed-by: xdu2 git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@12593 6f19259b-4bc3-4df7-8a09-765794883524
Diffstat (limited to 'CryptoPkg/Library/BaseCryptLib/Pk/CryptAuthenticode.c')
-rw-r--r--CryptoPkg/Library/BaseCryptLib/Pk/CryptAuthenticode.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/CryptoPkg/Library/BaseCryptLib/Pk/CryptAuthenticode.c b/CryptoPkg/Library/BaseCryptLib/Pk/CryptAuthenticode.c
index 5f93e4af93..0370fd77a5 100644
--- a/CryptoPkg/Library/BaseCryptLib/Pk/CryptAuthenticode.c
+++ b/CryptoPkg/Library/BaseCryptLib/Pk/CryptAuthenticode.c
@@ -65,6 +65,10 @@ AuthenticodeVerify (
ASSERT (AuthData != NULL);
ASSERT (ImageHash != NULL);
+ if (DataSize > INT_MAX) {
+ return FALSE;
+ }
+
Status = FALSE;
Pkcs7 = NULL;
OrigAuthData = AuthData;