Branch: refs/heads/master
Home: https://github.com/tianocore/edk2
Commit: a859f4fc0397ec4a9d1af016b7e1f03ccf14b605
https://github.com/tianocore/edk2/commit/a859f4fc0397ec4a9d1af016b7e1f03ccf14b605
Author: John Baldwin <[email protected]>
Date: 2024-09-03 (Tue, 03 Sep 2024)
Changed paths:
M MdePkg/Library/UefiDevicePathLib/DevicePathToText.c
Log Message:
-----------
MdePkg: Fix a buffer overread.
DevPathToTextUsbWWID allocates a separate copy of the SerialNumber
string to append a null terminator if the original string is not null
terminated. However, by using AllocateCopyPool, it tries to copy
'Length + 1' words from the existing string containing 'Length'
characters into the target string. Split the copy out to only copy
'Length' characters instead.
This was reported by GCC's -Wstringop-overread when compiling a copy
of this routine included in a library on FreeBSD.
Signed-off-by: John Baldwin <[email protected]>
To unsubscribe from these emails, change your notification settings at
https://github.com/tianocore/edk2/settings/notifications
_______________________________________________
edk2-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/edk2-commits
