diff options
| author | Miki Demeter <miki.demeter@intel.com> | 2022-10-27 16:20:54 -0700 |
|---|---|---|
| committer | mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> | 2022-11-04 01:58:20 +0000 |
| commit | cab1f02565d3b29081dd21afb074f35fdb4e1fd6 (patch) | |
| tree | e6dbe57aa48dccaccb62ce8ebe1606ce9b9cc2d8 /MdeModulePkg/Core/PiSmmCore/PiSmmCore.h | |
| parent | c46204e25f5b929fae2b336c03c73fada632d4f4 (diff) | |
| download | edk2-cab1f02565d3b29081dd21afb074f35fdb4e1fd6.tar.gz edk2-cab1f02565d3b29081dd21afb074f35fdb4e1fd6.tar.bz2 edk2-cab1f02565d3b29081dd21afb074f35fdb4e1fd6.zip | |
MdeModulePkg/PiSmmCore: SmmEntryPoint underflow (CVE-2021-38578)
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=3387
Added use of SafeIntLib to validate values are not causing overflows or
underflows in user controlled values when calculating buffer sizes.
Signed-off-by: Miki Demeter <miki.demeter@intel.com>
Reviewed-by: Michael D Kinney <michael.d.kinney@intel.com>
Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Liming Gao <gaoliming@byosoft.com.cn>
Reviewed-by: Liming Gao <gaoliming@byosoft.com.cn>
Diffstat (limited to 'MdeModulePkg/Core/PiSmmCore/PiSmmCore.h')
| -rw-r--r-- | MdeModulePkg/Core/PiSmmCore/PiSmmCore.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/MdeModulePkg/Core/PiSmmCore/PiSmmCore.h b/MdeModulePkg/Core/PiSmmCore/PiSmmCore.h index 71422b9dfc..b8a490a8c3 100644 --- a/MdeModulePkg/Core/PiSmmCore/PiSmmCore.h +++ b/MdeModulePkg/Core/PiSmmCore/PiSmmCore.h @@ -54,6 +54,7 @@ #include <Library/PerformanceLib.h>
#include <Library/HobLib.h>
#include <Library/SmmMemLib.h>
+#include <Library/SafeIntLib.h>
#include "PiSmmCorePrivateData.h"
#include "HeapGuard.h"
|