From 80448f6c1aed17ee0fbfa79bab7e7b8eeb2eb084 Mon Sep 17 00:00:00 2001
From: ydong10 <ydong10@6f19259b-4bc3-4df7-8a09-765794883524>
Date: Mon, 20 Sep 2010 03:20:56 +0000
Subject: Refine some code to make code run safely.

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@10893 6f19259b-4bc3-4df7-8a09-765794883524
---
 OptionRomPkg/UndiRuntimeDxe/Decode.c | 10 +++++-----
 OptionRomPkg/UndiRuntimeDxe/E100b.c  | 11 +++++++----
 OptionRomPkg/UndiRuntimeDxe/Init.c   |  2 +-
 3 files changed, 13 insertions(+), 10 deletions(-)

(limited to 'OptionRomPkg/UndiRuntimeDxe')

diff --git a/OptionRomPkg/UndiRuntimeDxe/Decode.c b/OptionRomPkg/UndiRuntimeDxe/Decode.c
index 56a7012787..0eabc2ad8f 100644
--- a/OptionRomPkg/UndiRuntimeDxe/Decode.c
+++ b/OptionRomPkg/UndiRuntimeDxe/Decode.c
@@ -254,9 +254,9 @@ UNDI_GetInitInfo (
   DbPtr->MCastFilterCnt = MAX_MCAST_ADDRESS_CNT;
 
   DbPtr->TxBufCnt = TX_BUFFER_COUNT;
-  DbPtr->TxBufSize = sizeof (TxCB);
+  DbPtr->TxBufSize = (UINT16) sizeof (TxCB);
   DbPtr->RxBufCnt = RX_BUFFER_COUNT;
-  DbPtr->RxBufSize = sizeof (RxFD);
+  DbPtr->RxBufSize = (UINT16) sizeof (RxFD);
 
   DbPtr->IFtype = PXE_IFTYPE_ETHERNET;
   DbPtr->SupportedDuplexModes = PXE_DUPLEX_ENABLE_FULL_SUPPORTED |
@@ -1032,7 +1032,7 @@ UNDI_Status (
     //
     // We already filled in 2 UINT32s.
     //
-    CdbPtr->DBsize = sizeof (UINT32) * 2;
+    CdbPtr->DBsize = (UINT16) (sizeof (UINT32) * 2);
 
     //
     // will claim any hanging free CBs
@@ -1042,7 +1042,7 @@ UNDI_Status (
     if (AdapterInfo->xmit_done_head == AdapterInfo->xmit_done_tail) {
       CdbPtr->StatFlags |= PXE_STATFLAGS_GET_STATUS_TXBUF_QUEUE_EMPTY;
     } else {
-      for (Index = 0; NumEntries >= sizeof (UINT64); Index++, NumEntries -= sizeof (UINT64)) {
+      for (Index = 0; ((Index < MAX_XMIT_BUFFERS) && (NumEntries >= sizeof (UINT64))); Index++, NumEntries -= sizeof (UINT64)) {
         if (AdapterInfo->xmit_done_head != AdapterInfo->xmit_done_tail) {
           DbPtr->TxBuffer[Index]      = AdapterInfo->xmit_done[AdapterInfo->xmit_done_head];
           AdapterInfo->xmit_done_head = next (AdapterInfo->xmit_done_head);
@@ -1476,7 +1476,7 @@ PxeStructInit (
   // Initialize the !PXE structure
   //
   PxePtr->Signature = PXE_ROMID_SIGNATURE;
-  PxePtr->Len       = sizeof (PXE_SW_UNDI);
+  PxePtr->Len       = (UINT8) sizeof (PXE_SW_UNDI);
   //
   // cksum
   //
diff --git a/OptionRomPkg/UndiRuntimeDxe/E100b.c b/OptionRomPkg/UndiRuntimeDxe/E100b.c
index 6f953c3195..41308ba6fd 100644
--- a/OptionRomPkg/UndiRuntimeDxe/E100b.c
+++ b/OptionRomPkg/UndiRuntimeDxe/E100b.c
@@ -517,7 +517,8 @@ Configure (
   UINT8 my_filter;
 
   cmd_ptr   = GetFreeCB (AdapterInfo);
-  data_ptr  = (UINT8 *) (&cmd_ptr->PhysTBDArrayAddres);
+  ASSERT (cmd_ptr != NULL);
+  data_ptr  = (UINT8 *) cmd_ptr + sizeof (struct CB_Header);
 
   //
   // start the config data right after the command header
@@ -588,7 +589,8 @@ E100bSetupIAAddr (
   eaddrs    = (UINT16 *) AdapterInfo->CurrentNodeAddress;
 
   cmd_ptr   = GetFreeCB (AdapterInfo);
-  data_ptr  = (UINT16 *) (&cmd_ptr->PhysTBDArrayAddres);
+  ASSERT (cmd_ptr != NULL);
+  data_ptr  = (UINT16 *) ((UINT8 *) cmd_ptr +sizeof (struct CB_Header));
 
   //
   // AVOID a bug (?!) here by marking the command already completed.
@@ -1022,6 +1024,7 @@ E100bTransmit (
 
   tx_ptr_1  = (PXE_CPB_TRANSMIT *) (UINTN) cpb;
   tx_ptr_f  = (PXE_CPB_TRANSMIT_FRAGMENTS *) (UINTN) cpb;
+  Tmp_ptr = 0;
 
   //
   // stop reentrancy here
@@ -1387,7 +1390,7 @@ E100bReadEepromAndStationAddress (
   // in words
   //
   AdapterInfo->NVData_Len = eeprom_len = (UINT16) (1 << addr_len);
-  for (Index2 = 0, Index = 0; Index < eeprom_len; Index++) {
+  for (Index2 = 0, Index = 0; ((Index2 < PXE_MAC_LENGTH - 1) && (Index < eeprom_len)); Index++) {
     UINT16  value;
     value         = E100bReadEeprom (AdapterInfo, Index, addr_len);
     eedata[Index] = value;
@@ -2258,7 +2261,7 @@ E100bStatistics (
                   AdapterInfo->statistics->tx_lost_carrier;
 
   if (DBsize > sizeof db) {
-    DBsize = sizeof db;
+    DBsize = (UINT16) sizeof (db);
   }
 
   CopyMem ((VOID *) (UINTN) DBaddr, (VOID *) &db, (UINTN) DBsize);
diff --git a/OptionRomPkg/UndiRuntimeDxe/Init.c b/OptionRomPkg/UndiRuntimeDxe/Init.c
index 7406b6d290..77931681e7 100644
--- a/OptionRomPkg/UndiRuntimeDxe/Init.c
+++ b/OptionRomPkg/UndiRuntimeDxe/Init.c
@@ -882,7 +882,7 @@ AppendMac2DevPath (
 
   MacAddrNode.Header.Type       = MESSAGING_DEVICE_PATH;
   MacAddrNode.Header.SubType    = MSG_MAC_ADDR_DP;
-  MacAddrNode.Header.Length[0]  = sizeof (MacAddrNode);
+  MacAddrNode.Header.Length[0]  = (UINT8) sizeof (MacAddrNode);
   MacAddrNode.Header.Length[1]  = 0;
 
   //
-- 
cgit v1.2.3