diff options
| author | Hao Wu <hao.a.wu@intel.com> | 2015-06-30 06:31:28 +0000 |
|---|---|---|
| committer | hwu1225 <hwu1225@Edk2> | 2015-06-30 06:31:28 +0000 |
| commit | 269e0aebcf978640f16361882f423c7b9593215c (patch) | |
| tree | 5c7c390d8d86d6506d3924033d31dc05996af5f9 /SecurityPkg | |
| parent | ecd58a2511ddbf72125575609a8ac144a1edba52 (diff) | |
| download | edk2-platforms-269e0aebcf978640f16361882f423c7b9593215c.tar.xz | |
PerformancePkg Dp_App: Resolve buffer size mismatch
CHAR16 array mGaugeString[DP_GAUGE_STRING_LENGTH + 1] is pass into
function GetShortPdbFileName(). However, in this function it treats the
size of the input buffer as DXE_PERFORMANCE_STRING_SIZE.
Though DXE_PERFORMANCE_STRING_SIZE is smaller than DP_GAUGE_STRING_LENGTH
now, but this manner might introduce a potential risk of buffer overflow.
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Hao Wu <hao.a.wu@intel.com>
Reviewed-by: Star Zeng <star.zeng@intel.com>
git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@17746 6f19259b-4bc3-4df7-8a09-765794883524
Diffstat (limited to 'SecurityPkg')
0 files changed, 0 insertions, 0 deletions