Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MdeModulePkg/DxeCapsuleLibFmp: Check for NULL in IsValidCapsuleHeader #10780

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

zurcher
Copy link
Contributor

@zurcher zurcher commented Feb 23, 2025

Description

Add a NULL check in IsValidCapsuleHeader before dereferencing CapsuleHeader

  • Breaking change?
  • Impacts security?
  • Includes tests?

How This Was Tested

Published HOB with EFI_HOB_TYPE_UEFI_CAPSULE and BaseAddress = 0.
Confirmed IsValidCapsuleHeader returned FALSE instead of crashing.

Integration Instructions

N/A

@zurcher
Copy link
Contributor Author

zurcher commented Feb 23, 2025

Examples of unchecked calls:

Signed-off-by: Christopher Zurcher <christopher.zurcher@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant