proxmox-mirrors/efi-boot-shim
1
0
Fork 0
mirror of https://git.proxmox.com/git/efi-boot-shim synced 2025-08-08 12:14:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Make sure the variables are not broken

Browse Source
This commit is contained in:
Gary Ching-Pang Lin 2012-09-21 16:44:56 +08:00
parent 6306b495c5
commit 6919a3f7c7
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
MokManager.c
View File

@ -101,6 +101,9 @@ static MokListNode *build_mok_list(UINT32 num, void *Data, UINTN DataSize) {
int i; int i;
void *ptr; void *ptr;
if (DataSize < sizeof(UINT32))
return NULL;
list = AllocatePool(sizeof(MokListNode) * num); list = AllocatePool(sizeof(MokListNode) * num);
if (!list) { if (!list) {
@ -478,7 +481,7 @@ static EFI_STATUS check_mok_request(EFI_HANDLE image_handle)
efi_status = get_variable(L"MokNew", shim_lock_guid, &attributes, efi_status = get_variable(L"MokNew", shim_lock_guid, &attributes,
&MokNewSize, &MokNew); &MokNewSize, &MokNew);
if (efi_status != EFI_SUCCESS) { if (efi_status != EFI_SUCCESS || MokNewSize < sizeof(UINT32)) {
goto error; goto error;
} }

5
shim.c
View File

@ -107,6 +107,9 @@ static MokListNode *build_mok_list(UINT32 num, void *Data, UINTN DataSize) {
int i, remain = DataSize; int i, remain = DataSize;
void *ptr; void *ptr;
if (DataSize < sizeof(UINT32))
return NULL;
list = AllocatePool(sizeof(MokListNode) * num); list = AllocatePool(sizeof(MokListNode) * num);
if (!list) { if (!list) {
@ -601,7 +604,7 @@ static EFI_STATUS verify_buffer (char *data, int datasize,
status = get_variable(L"MokList", shim_lock_guid, &attributes, status = get_variable(L"MokList", shim_lock_guid, &attributes,
&MokListDataSize, &MokListData); &MokListDataSize, &MokListData);
if (status != EFI_SUCCESS) { if (status != EFI_SUCCESS || MokListDataSize < sizeof(UINT32)) {
status = EFI_ACCESS_DENIED; status = EFI_ACCESS_DENIED;
Print(L"Invalid signature\n"); Print(L"Invalid signature\n");
goto done; goto done;