summaryrefslogtreecommitdiffstats
path: root/NetworkPkg/Library/DxeHttpLib/DxeHttpLib.c
diff options
context:
space:
mode:
authorMichael Kubacki <michael.kubacki@microsoft.com>2022-11-08 15:30:35 -0500
committermergify[bot] <37929162+mergify[bot]@users.noreply.github.com>2023-04-03 15:29:08 +0000
commit3fab32d41dc7f45db498800328db9f1fb6699075 (patch)
treeb87aacbe380c15f3fdf3fe10c00d0016ce4c3fd0 /NetworkPkg/Library/DxeHttpLib/DxeHttpLib.c
parent321240b135e37ac1b9be1317f78ce2a3b526bf02 (diff)
downloadedk2-3fab32d41dc7f45db498800328db9f1fb6699075.tar.gz
edk2-3fab32d41dc7f45db498800328db9f1fb6699075.tar.bz2
edk2-3fab32d41dc7f45db498800328db9f1fb6699075.zip
NetworkPkg: Fix conditionally uninitialized variables
Fixes CodeQL alerts for CWE-457: https://cwe.mitre.org/data/definitions/457.html Cc: Erich McMillan <emcmillan@microsoft.com> Cc: Jiaxin Wu <jiaxin.wu@intel.com> Cc: Maciej Rabeda <maciej.rabeda@linux.intel.com> Cc: Michael D Kinney <michael.d.kinney@intel.com> Cc: Michael Kubacki <mikuback@linux.microsoft.com> Cc: Siyuan Fu <siyuan.fu@intel.com> Co-authored-by: Erich McMillan <emcmillan@microsoft.com> Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com> Reviewed-by: Michael D Kinney <michael.d.kinney@intel.com> Reviewed-by: Oliver Smith-Denny <osd@smith-denny.com>
Diffstat (limited to 'NetworkPkg/Library/DxeHttpLib/DxeHttpLib.c')
-rw-r--r--NetworkPkg/Library/DxeHttpLib/DxeHttpLib.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/NetworkPkg/Library/DxeHttpLib/DxeHttpLib.c b/NetworkPkg/Library/DxeHttpLib/DxeHttpLib.c
index 6a5d78629b..21813463aa 100644
--- a/NetworkPkg/Library/DxeHttpLib/DxeHttpLib.c
+++ b/NetworkPkg/Library/DxeHttpLib/DxeHttpLib.c
@@ -753,7 +753,7 @@ HttpUrlGetPort (
Status = AsciiStrDecimalToUintnS (Url + Parser->FieldData[HTTP_URI_FIELD_PORT].Offset, (CHAR8 **)NULL, &Data);
- if (Data > HTTP_URI_PORT_MAX_NUM) {
+ if (EFI_ERROR (Status) || (Data > HTTP_URI_PORT_MAX_NUM)) {
Status = EFI_INVALID_PARAMETER;
goto ON_EXIT;
}