<feed xmlns='http://www.w3.org/2005/Atom'>
<title>Tianocore/edk2.git/ShellPkg/Library/UefiShellLib, branch dependabot/github_actions/actions/setup-python-6</title>
<subtitle>EDK II (mirror)</subtitle>
<id>https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Factions%2Fsetup-python-6</id>
<link rel='self' href='https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Factions%2Fsetup-python-6'/>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/'/>
<updated>2025-06-13T21:11:49+00:00</updated>
<entry>
<title>ShellPkg/UefiShellLib: Fix Buffer underflow</title>
<updated>2025-06-13T21:11:49+00:00</updated>
<author>
<name>Pierre Gondois</name>
<email>pierre.gondois@arm.com</email>
</author>
<published>2025-06-12T11:28:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=c2eb2136b41eb051847ddba68d28de8863a2babd'/>
<id>urn:sha1:c2eb2136b41eb051847ddba68d28de8863a2babd</id>
<content type='text'>
Having StrLen(Buffer) == 0 results in a Buffer underflow.
Also, StrLen iterates over the Buffer elements until finding a NULL
character. This results in a quadratic search for '\r' characters
in the while loop.

Fix these issues.

Signed-off-by: Pierre Gondois &lt;pierre.gondois@arm.com&gt;
</content>
</entry>
<entry>
<title>ShellPkg/UefiShellLib: Accept "0 " as valid numeric string</title>
<updated>2024-12-16T18:34:43+00:00</updated>
<author>
<name>Tormod Volden</name>
<email>debian.tormod@gmail.com</email>
</author>
<published>2024-07-23T22:22:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=e99d532fd7224e68026543834ed9c0fe3cfaf88c'/>
<id>urn:sha1:e99d532fd7224e68026543834ed9c0fe3cfaf88c</id>
<content type='text'>
InternalShellIsHexOrDecimalNumber() would fail to interpret e.g. "0 " or
"00 " as valid numeric strings. After skipping the "0" digits as
leading zeroes, it would check if the next character is a valid hex or
decimal digit, which would then fail on the terminating character.

Therefore return success if "leading" zeroes have been consumed and
there are no more characters.

InternalShellStrHexToUint64() would fail to interpret e.g. "0 " or "00 "
as valid numeric strings. After skipping the "0" digits as leading
zeroes, it would find itself surprised by the following space.

Restrict the "bad space" check to the case where it had just consumed
the "x" or "X" marker. Otherwise the space is fine (depending on
StopAtSpace either end of number or interspersed space) since there
were only zeroes so far.

REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3080

Signed-off-by: Tormod Volden &lt;debian.tormod@gmail.com&gt;
</content>
</entry>
<entry>
<title>ShellPkg/UefiShellLib: Only write value if successful conversion</title>
<updated>2024-12-16T18:34:43+00:00</updated>
<author>
<name>Tormod Volden</name>
<email>debian.tormod@gmail.com</email>
</author>
<published>2024-07-23T22:03:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=d63d5884d7c2f7660175161187ce90852bc2a891'/>
<id>urn:sha1:d63d5884d7c2f7660175161187ce90852bc2a891</id>
<content type='text'>
The ShellConvertStringToUint64() function documentation says:
"Upon a successful return the value of the conversion."

So do not write any value if the conversion failed.

Signed-off-by: Tormod Volden &lt;debian.tormod@gmail.com&gt;
</content>
</entry>
<entry>
<title>ShellPkg/UefiShellLib: Simplify check for empty string</title>
<updated>2024-12-16T18:34:43+00:00</updated>
<author>
<name>Tormod Volden</name>
<email>debian.tormod@gmail.com</email>
</author>
<published>2024-07-24T11:52:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=f34a945a8024b8cb548168cae3a4a81600620ebb'/>
<id>urn:sha1:f34a945a8024b8cb548168cae3a4a81600620ebb</id>
<content type='text'>
StrSize() uses StrLen() which counts until the terminating NULL
character.

For checking for an empty string it is more efficient to directly check
for the NULL terminator instead of calling StrSize().

Signed-off-by: Tormod Volden &lt;debian.tormod@gmail.com&gt;
</content>
</entry>
<entry>
<title>ShellPkg/UefiShellLib: Correct check for empty string</title>
<updated>2024-12-16T18:34:43+00:00</updated>
<author>
<name>Tormod Volden</name>
<email>debian.tormod@gmail.com</email>
</author>
<published>2024-07-23T21:51:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=e11a912aa3bd6b3ad69bb90f36f6860de33d846a'/>
<id>urn:sha1:e11a912aa3bd6b3ad69bb90f36f6860de33d846a</id>
<content type='text'>
StrSize() will never return zero since it counts the terminating NULL
character.

An empty string will have the storage size of the terminator.

Signed-off-by: Tormod Volden &lt;debian.tormod@gmail.com&gt;
</content>
</entry>
<entry>
<title>ShellPkg/UefiShellLib: Prevent out-of-bounds access</title>
<updated>2024-12-16T18:34:43+00:00</updated>
<author>
<name>Tormod Volden</name>
<email>debian.tormod@gmail.com</email>
</author>
<published>2024-07-23T21:23:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=ef3a1ef397a2677cccd0e3e7f1287f29f0094e17'/>
<id>urn:sha1:ef3a1ef397a2677cccd0e3e7f1287f29f0094e17</id>
<content type='text'>
If InternalShellStrHexToUint64() is passed a string that starts with 'X'
or 'x' it would try to read the byte before the start of the string
buffer.

Instead check if leading zeroes have been consumed.

Signed-off-by: Tormod Volden &lt;debian.tormod@gmail.com&gt;
</content>
</entry>
<entry>
<title>ShellPkg: CodeQL Fixes</title>
<updated>2024-10-29T02:09:18+00:00</updated>
<author>
<name>Oliver Smith-Denny</name>
<email>osde@microsoft.com</email>
</author>
<published>2024-10-03T17:31:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=334f5748869996eee994f9dee41f3e6a3d9bd087'/>
<id>urn:sha1:334f5748869996eee994f9dee41f3e6a3d9bd087</id>
<content type='text'>
Includes changes across the module for the following CodeQL rules:
 - cpp/comparison-with-wider-type
 - cpp/overflow-buffer
 - cpp/redundant-null-check-param
 - cpp/uselesstest

Co-authored-by: Taylor Beebe &lt;taylor.d.beebe@gmail.com&gt;

Signed-off-by: Oliver Smith-Denny &lt;osde@linux.microsoft.com&gt;
</content>
</entry>
<entry>
<title>ShellPkg: Fix typos</title>
<updated>2023-12-08T13:25:11+00:00</updated>
<author>
<name>Page Chen</name>
<email>paiching_chen@apple.com</email>
</author>
<published>2023-11-09T19:27:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=fe2abc9b74b9b869e29f0ebc6dfaa54001b53e9b'/>
<id>urn:sha1:fe2abc9b74b9b869e29f0ebc6dfaa54001b53e9b</id>
<content type='text'>
begining-&gt;beginning
dirve-&gt;drive
duplicat-&gt;duplicate
fuly-&gt;fully
Funciton-&gt;Function
Functino-&gt;Function
optioanl-&gt;optional
poitners-&gt;pointers
rountine-&gt;routine
sucessful-&gt;successful
sucessfully-&gt;successfully

Signed-off-by: Page Chen &lt;paiching_chen@apple.com&gt;
Cc: Zhichao Gao &lt;zhichao.gao@intel.com&gt;
Cc: Andrew Fish &lt;afish@apple.com&gt;
Message-Id: &lt;829d2bed2a848229d719d7ae7b64ef1a47782720.1699557986.git.paiching_chen@apple.com&gt;
Reviewed-by: Zhichao Gao &lt;zhichao.gao@intel.com&gt;
</content>
</entry>
<entry>
<title>ShellPkg: Increase PcdShellPrintBufferSize from UINT16 to UINT32</title>
<updated>2023-10-17T03:04:05+00:00</updated>
<author>
<name>Giri Mudusuru</name>
<email>girim@apple.com</email>
</author>
<published>2023-06-06T06:02:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=a445e1a42ccf3cb9f70537c7cd80ece689bf4d9a'/>
<id>urn:sha1:a445e1a42ccf3cb9f70537c7cd80ece689bf4d9a</id>
<content type='text'>
Increase max buffer size to support more than 64K.

Signed-off-by: Giri Mudusuru &lt;girim@apple.com&gt;
Cc: Ray Ni &lt;ray.ni@intel.com&gt;
Cc: Zhichao Gao &lt;zhichao.gao@intel.com&gt;
Cc: Andrew Fish &lt;afish@apple.com&gt;
Reviewed-by: Zhichao Gao &lt;zhichao.gao@intel.com&gt;
</content>
</entry>
<entry>
<title>ShellPkg: Apply uncrustify changes</title>
<updated>2021-12-07T17:24:28+00:00</updated>
<author>
<name>Michael Kubacki</name>
<email>michael.kubacki@microsoft.com</email>
</author>
<published>2021-12-05T22:54:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=47d20b54f9a65b08aa602a1866c1b59a69088dfc'/>
<id>urn:sha1:47d20b54f9a65b08aa602a1866c1b59a69088dfc</id>
<content type='text'>
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3737

Apply uncrustify changes to .c/.h files in the ShellPkg package

Cc: Andrew Fish &lt;afish@apple.com&gt;
Cc: Leif Lindholm &lt;leif@nuviainc.com&gt;
Cc: Michael D Kinney &lt;michael.d.kinney@intel.com&gt;
Signed-off-by: Michael Kubacki &lt;michael.kubacki@microsoft.com&gt;
Reviewed-by: Ray Ni &lt;ray.ni@intel.com&gt;
</content>
</entry>
</feed>
