[Description]

PeiGetVariable() and PeiGetNextVariableName() do not check NULL pointer access, not follow spec 
[Impaction]
modify the Variable.c file in IntelFrameworkModulePkg/Universal/VariablePei/
[Reference Info]
PeiGetVariable() and PeiGetVariableName() do not follow spec 

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@4900 6f19259b-4bc3-4df7-8a09-765794883524

1 files changed, 3 insertions, 3 deletions

diff --git a/IntelFrameworkModulePkg/Universal/VariablePei/Variable.c b/IntelFrameworkModulePkg/Universal/VariablePei/Variable.c
index 8fc67499fb..0b9fa29bdb 100644
--- a/IntelFrameworkModulePkg/Universal/VariablePei/Variable.c
+++ b/IntelFrameworkModulePkg/Universal/VariablePei/Variable.c
@@ -1,6 +1,6 @@
 /*++

 

-Copyright (c) 2006 - 2007 Intel Corporation. <BR>

+Copyright (c) 2006 - 2008 Intel Corporation. <BR>

 All rights reserved. This program and the accompanying materials

 are licensed and made available under the terms and conditions of the BSD License

 which accompanies this distribution.  The full text of the license may be found at

@@ -598,7 +598,7 @@ Returns:
   UINTN                   VarDataSize;

   EFI_STATUS              Status;

 

-  if (VariableName == NULL || VendorGuid == NULL) {

+  if (VariableName == NULL || VendorGuid == NULL || DataSize == NULL) {

     return EFI_INVALID_PARAMETER;

   }

   //

@@ -725,7 +725,7 @@ Returns:
   UINTN                   VarNameSize;

   EFI_STATUS              Status;

 

-  if (VariableName == NULL) {

+  if (VariableNameSize == NULL || VariableName == NULL || VendorGuid == NULL) {

     return EFI_INVALID_PARAMETER;

   }