From nobody Sat May 4 21:27:04 2024 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of groups.io designates 66.175.222.108 as permitted sender) client-ip=66.175.222.108; envelope-from=bounce+27952+69487+1787277+3901457@groups.io; helo=mail02.groups.io; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of groups.io designates 66.175.222.108 as permitted sender) smtp.mailfrom=bounce+27952+69487+1787277+3901457@groups.io ARC-Seal: i=1; a=rsa-sha256; t=1609205707; cv=none; d=zohomail.com; s=zohoarc; b=ZjZC6LhJW2qzMmynvuaG99O+tYWfQaK/lU/iPi7eySV3XDXFk/fJj+rTFQDqdwn8ZxmiijZPgoMvCiIKcASJ/wumbSRg86XeXFNytkuXo7CRXUXQP1i39K2mUY6hhK1gNEnBb40hCPQCXQhoP6cmGVK50VUH/qR6J4RH98pW/Es= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1609205707; h=Content-Transfer-Encoding:Cc:Date:From:List-Id:List-Unsubscribe:MIME-Version:Message-ID:Reply-To:Sender:Subject:To; bh=jh1KNm9eZ/rcZtXgWoufOL24CGxT3tSx0deEyNxJIJA=; b=XohQe3cfvN2uQCPtF22ulzOd+bDoYCdzYTgR3lJ/oyq/1AnvcTf6gQBliLFgr4kgBogz4jYtGLW8vncmWV9ADfoiq26rn6pxPyB8xjK+B66HONxnaDKnBDF5ADWQdZDcHZaEaLblRtDgSWXLzcB6wMwwkgOIUdLhhv5vxUnOnas= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of groups.io designates 66.175.222.108 as permitted sender) smtp.mailfrom=bounce+27952+69487+1787277+3901457@groups.io Received: from mail02.groups.io (mail02.groups.io [66.175.222.108]) by mx.zohomail.com with SMTPS id 1609205707576570.2090428596596; Mon, 28 Dec 2020 17:35:07 -0800 (PST) Return-Path: X-Received: by 127.0.0.2 with SMTP id hSdBYY1788612xImtMlTsXxO; Mon, 28 Dec 2020 17:35:07 -0800 X-Received: from spamsz.greatwall.com.cn (spamsz.greatwall.com.cn [58.60.186.99]) by mx.groups.io with SMTP id smtpd.web12.9836.1608632321533341616 for ; Tue, 22 Dec 2020 02:18:44 -0800 X-ASG-Debug-ID: 1608632316-0ec572145855bd0001-xsgHyH X-Received: from greatwall.com.cn (mailsz01.greatwall.com.cn [10.11.120.1]) by spamsz.greatwall.com.cn with ESMTP id tb6bOADgCjGa42st for ; Tue, 22 Dec 2020 18:18:36 +0800 (CST) X-Barracuda-Envelope-From: gechao@greatwall.com.cn X-Barracuda-RBL-Trusted-Forwarder: 10.11.120.1 X-Received: from DESKTOP-8UEJ5KU.greatwall.com.cn (unknown [10.11.15.76]) by mailsz.greatwall.com.cn (Coremail) with SMTP id AXgLCgBnoKXax+Ff1uE2AA--.26785S2; Tue, 22 Dec 2020 18:18:03 +0800 (CST) From: gechao@greatwall.com.cn X-Barracuda-RBL-Trusted-Forwarder: 10.11.15.76 To: devel@edk2.groups.io, zhichao.gao@intel.com Cc: ray.ni@intel.com, gechao Subject: [edk2-devel] [PATCH] MdeModulePkg/TerminalDxe: Fix terminal fifo buffer overflow with UINT8 type Date: Tue, 22 Dec 2020 18:18:32 +0800 X-ASG-Orig-Subj: [PATCH] MdeModulePkg/TerminalDxe: Fix terminal fifo buffer overflow with UINT8 type Message-Id: <5d397bc53140165ed278ea5bf020b0c69acd18eb.1608632264.git.gechao@greatwall.com.cn> MIME-Version: 1.0 X-CM-TRANSID: AXgLCgBnoKXax+Ff1uE2AA--.26785S2 X-Coremail-Antispam: 1UD129KBjvdXoWrZr1rtrWDAw1DuF1xWr1UAwb_yoWkWFb_Wa 409w1UAw1UWr93Zr18CF1YyF4vgay7ZFW8A39xZa9xAa45GF40qr97W34vqanrGrsrX397 G3WUCrZ3tFyUujkaLaAFLSUrUUUUUb8apTn2vfkv8UJUUUU8Yxn0WfASr-VFAUDa7-sFnT 9fnUUIcSsGvfJTRUUUbcxFF20E14v26r1j6r4UM7CY07I20VC2zVCF04k26cxKx2IYs7xG 6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rwA2F7IY1VAKz4vEj48ve4kI8w A2z4x0Y4vE2Ix0cI8IcVAFwI0_Ar0_tr1l84ACjcxK6xIIjxv20xvEc7CjxVAFwI0_Gr1j 6F4UJwA2z4x0Y4vEx4A2jsIE14v26rxl6s0DM28EF7xvwVC2z280aVCY1x0267AKxVW0oV Cq3wAS0I0E0xvYzxvE52x082IY62kv0487Mc02F40EFcxC0VAKzVAqx4xG6I80ewAv7VC0 I7IYx2IY67AKxVWUJVWUGwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY6r1j6r 4UM4x0Y48IcxkI7VAKI48JM4x0x7Aq67IIx4CEVc8vx2IErcIFxwAKzVCY07xG64k0F24l 42xK82IYc2Ij64vIr41l4I8I3I0E4IkC6x0Yz7v_Jr0_Gr1lx2IqxVAqx4xG67AKxVWUJV WUGwC20s026x8GjcxK67AKxVWUGVWUWwC2zVAF1VAY17CE14v26r126r1DMIIYrxkI7VAK I48JMIIF0xvE2Ix0cI8IcVAFwI0_Jr0_JF4lIxAIcVC0I7IYx2IY6xkF7I0E14v26r1j6r 4UMIIF0xvE42xK8VAvwI8IcIk0rVWrZr1j6s0DMIIF0xvEx4A2jsIE14v26r1j6r4UMIIF 0xvEx4A2jsIEc7CjxVAFwI0_Jr0_GrUvcSsGvfC2KfnxnUUI43ZEXa7VUjRVbDUUUUU== X-CM-SenderInfo: xjhfxtvr6j2vpdwztz3oof0zgofq/ X-Barracuda-Connect: mailsz01.greatwall.com.cn[10.11.120.1] X-Barracuda-Start-Time: 1608632316 X-Barracuda-URL: https://spamfw.greatwall.com.cn:443/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at greatwall.com.cn X-Barracuda-Scan-Msg-Size: 1111 X-Barracuda-BRTS-Status: 1 X-Barracuda-Bayes: INNOCENT GLOBAL 0.4136 1.0000 0.0000 X-Barracuda-Spam-Score: 0.00 X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=NO_REAL_NAME X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.86704 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- 0.00 NO_REAL_NAME From: does not include a real name Precedence: Bulk List-Unsubscribe: Sender: devel@edk2.groups.io List-Id: Mailing-List: list devel@edk2.groups.io; contact devel+owner@edk2.groups.io Reply-To: devel@edk2.groups.io,gechao@greatwall.com.cn X-Gm-Message-State: aH0OCrc9TINyqNHHyh4PG4bjx1787277AA= Content-Transfer-Encoding: quoted-printable DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=groups.io; q=dns/txt; s=20140610; t=1609205707; bh=AfcED/IjuBbfrYem0HwmBevyyPe4Ef90kQetuD7b9ms=; h=Cc:Date:From:Reply-To:Subject:To; b=shKYMM96BFw6ExGrgTyPghudnP3YIWmkcDao601Ts2YGJriC1S+GrJweNqzDJ6LIg0a 5LGjGNxgFYPrgRKwq3ZXEElNudmGOYTIdRbRkgExhIkSve5oveiEko3HCD0UZmbRsp4JE Y2ysI28hq5P1b9oOyqko/5PAacx8tWC+z4E= X-ZohoMail-DKIM: pass (identity @groups.io) Content-Type: text/plain; charset="utf-8" From: gechao The maximum fifo buffer length is RAW_FIFO_MAX_NUMBER + 1 =3D 257, but the maximum value of terminal fifo buffer index is sizeof(UINT8) - 1 =3D 255 wi= th UINT8 type, so check if fifo buffer is empty or full with below expression, ((Tail + 1) % (RAW_FIFO_MAX_NUMBER + 1)) =3D=3D Head, (Tail + 1) might be sizeof(UINT8) + 1 =3D 256, for UINT8 type, it does not make any sense. Signed-off-by: gechao --- MdeModulePkg/Universal/Console/TerminalDxe/Terminal.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/MdeModulePkg/Universal/Console/TerminalDxe/Terminal.h b/MdeMod= ulePkg/Universal/Console/TerminalDxe/Terminal.h index 378ace13ce..360e58e847 100644 --- a/MdeModulePkg/Universal/Console/TerminalDxe/Terminal.h +++ b/MdeModulePkg/Universal/Console/TerminalDxe/Terminal.h @@ -37,7 +37,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent #include =20 =20 -#define RAW_FIFO_MAX_NUMBER 256 +#define RAW_FIFO_MAX_NUMBER 255 #define FIFO_MAX_NUMBER 128 =20 typedef struct { --=20 2.25.1 -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#69487): https://edk2.groups.io/g/devel/message/69487 Mute This Topic: https://groups.io/mt/79282845/1787277 Group Owner: devel+owner@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [importer@patchew.org] -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-