summaryrefslogtreecommitdiffstats
path: root/MdePkg/Library/BaseUefiDecompressLib/BaseUefiDecompressLib.c
diff options
context:
space:
mode:
authorHao Wu <hao.a.wu@intel.com>2018-10-16 13:09:43 +0800
committerHao Wu <hao.a.wu@intel.com>2018-10-23 14:25:04 +0800
commit68099b52b0fcc1d45864154954d776d91afb33e0 (patch)
treeeec1460c85596dd6d3a10495dfc151f470a4e8a8 /MdePkg/Library/BaseUefiDecompressLib/BaseUefiDecompressLib.c
parent85acb5e8ffef026b80241b1657ed4fba26e382b1 (diff)
downloadedk2-68099b52b0fcc1d45864154954d776d91afb33e0.tar.gz
edk2-68099b52b0fcc1d45864154954d776d91afb33e0.tar.bz2
edk2-68099b52b0fcc1d45864154954d776d91afb33e0.zip
MdeModulePkg/UdfDxe: Avoid possible use of already-freed data
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1255 For function ReadFile(): If the line Status = GetAedAdsData ( ... ); is reached multiple times during the 'for' loop, freeing the data pointed by variable 'Data' may potentially lead to variable 'Ad' referencing the already-freed data. After calling function GetAllocationDescriptor(), 'Data' and 'Ad' may point to the same memory (with some possible offset). Hence, this commit will move the FreePool() call backwards to ensure the data will no longer be used. Cc: Ruiyu Ni <ruiyu.ni@intel.com> Contributed-under: TianoCore Contribution Agreement 1.1 Signed-off-by: Hao Wu <hao.a.wu@intel.com> Reviewed-by: Paulo Alcantara <palcantara@suse.de> Acked-by: Star Zeng <star.zeng@intel.com>
Diffstat (limited to 'MdePkg/Library/BaseUefiDecompressLib/BaseUefiDecompressLib.c')
0 files changed, 0 insertions, 0 deletions