mirror_edk2/MdeModulePkg/Universal/FaultTolerantWriteDxe
lzeng14 5e5bb2a9ba 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue.
2. Add check to ensure CommBufferPayloadSize not exceed mVariableBufferPayloadSize or is enough to hold function structure in VariableSmm and FtwSmm.
3. Align FtwGetLastWrite() in FaultTolerantWriteSmmDxe.c to FtwGetLastWrite() in FaultTolerantWrite.c.

Signed-off-by: Star Zeng <star.zeng@intel.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@14325 6f19259b-4bc3-4df7-8a09-765794883524
2013-05-07 05:38:32 +00:00
..
FaultTolerantWrite.c Fix the issue that FTW driver fail to reclaim WorkSpace. 2012-09-14 06:54:35 +00:00
FaultTolerantWrite.h Initialize a local work space header to be used by IsValidWorkSpace() and InitWorkSpaceHeader() to avoid executing code(gBS->CalculateCrc32 ()) outside SMRAM while inside SMM. 2012-12-21 00:52:57 +00:00
FaultTolerantWriteDxe.c update comments and correct reclaim algorithm if there is no record existing in FTW working block. 2011-02-16 05:31:53 +00:00
FaultTolerantWriteDxe.inf MdeModulePkg: eliminate all implicit library dependencies for all modules in MdeModulePkg on PcdLib 2012-11-01 06:59:25 +00:00
FaultTolerantWriteSmm.c 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue. 2013-05-07 05:38:32 +00:00
FaultTolerantWriteSmm.inf Mallicious code may use SmmFaultTolerantWriteHandler() to update some flash area directly, like Variable region, so return EFI_ACCESS_DENIED after End Of Dxe in SmmFaultTolerantWriteHandler(). 2013-04-24 09:33:48 +00:00
FaultTolerantWriteSmmCommon.h Add SMM FTW wrapper driver since non-SMM FTW protocol can be used by some consumers (Such as capsule update) when SMM FTW driver is applied. 2011-01-12 09:05:27 +00:00
FaultTolerantWriteSmmDxe.c 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue. 2013-05-07 05:38:32 +00:00
FaultTolerantWriteSmmDxe.h Add SMM FTW wrapper driver since non-SMM FTW protocol can be used by some consumers (Such as capsule update) when SMM FTW driver is applied. 2011-01-12 09:05:27 +00:00
FaultTolerantWriteSmmDxe.inf Mallicious code may use SmmFaultTolerantWriteHandler() to update some flash area directly, like Variable region, so return EFI_ACCESS_DENIED after End Of Dxe in SmmFaultTolerantWriteHandler(). 2013-04-24 09:33:48 +00:00
FtwMisc.c Initialize a local work space header to be used by IsValidWorkSpace() and InitWorkSpaceHeader() to avoid executing code(gBS->CalculateCrc32 ()) outside SMRAM while inside SMM. 2012-12-21 00:52:57 +00:00
UpdateWorkingBlock.c Initialize a local work space header to be used by IsValidWorkSpace() and InitWorkSpaceHeader() to avoid executing code(gBS->CalculateCrc32 ()) outside SMRAM while inside SMM. 2012-12-21 00:52:57 +00:00