diff options
| author | Aaron Pop <aaronpop@microsoft.com> | 2026-09-09 23:37:54 +0300 |
|---|---|---|
| committer | mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> | 2026-11-04 22:35:46 +0300 |
| commit | 6e3d7df43d56d3870b06828d94348371f752e282 (patch) | |
| tree | b9555251127b68904cc763e3a2ef135a5dcc8201 /PcAtChipsetPkg/PcatRealTimeClockRuntimeDxe | |
| parent | 2bcdc4c1ab5292b153b592eb11711f4025688545 (diff) | |
| download | edk2-master.tar.xz | |
CodeQL static analysis reports out-of-bounds reads in the iSCSI DHCP
root path parsing loops. The loop conditions read TmpStr[Index] before
checking Index against Length.
When a delimiter is absent before the end of the root path, Index
reaches Length and the old conditions perform a one-past-end read before
terminating. DHCP root paths are externally supplied, so the parser must
validate the index before accessing the buffer.
Reorder the conditions in the IPv4 and IPv6 parsing paths so the bounds
check short-circuits the buffer access. This prevents the out-of-bounds
reads and resolves the CodeQL static scanning failures.
Signed-off-by: Aaron Pop <aaronpop@microsoft.com>
Diffstat (limited to 'PcAtChipsetPkg/PcatRealTimeClockRuntimeDxe')
0 files changed, 0 insertions, 0 deletions
