|
 |
529d1b |
From 9bc1e24859630c933410bfb77658bd69ee400e16 Mon Sep 17 00:00:00 2001
|
|
|
529d1b |
From: Peter Jones <pjones@redhat.com>
|
|
|
529d1b |
Date: Wed, 13 Jun 2018 09:25:58 -0400
|
|
|
529d1b |
Subject: [PATCH 08/17] Make efidp_make_file() have even more, better input
|
|
|
529d1b |
constraints.
|
|
|
529d1b |
|
|
|
529d1b |
This is all in the effort to convince coverity that it doesn't
|
|
|
529d1b |
dereference buf when size==0, which it already doesn't.
|
|
|
529d1b |
|
|
|
529d1b |
Signed-off-by: Peter Jones <pjones@redhat.com>
|
|
|
529d1b |
---
|
|
|
529d1b |
src/dp-media.c | 6 ++++++
|
|
|
529d1b |
src/dp.c | 10 +++++++++-
|
|
|
529d1b |
2 files changed, 15 insertions(+), 1 deletion(-)
|
|
|
529d1b |
|
|
|
529d1b |
diff --git a/src/dp-media.c b/src/dp-media.c
|
|
|
529d1b |
index cec6b8bb58d..96a576fdc2a 100644
|
|
|
529d1b |
--- a/src/dp-media.c
|
|
|
529d1b |
+++ b/src/dp-media.c
|
|
|
529d1b |
@@ -162,6 +162,12 @@ efidp_make_file(uint8_t *buf, ssize_t size, char *filepath)
|
|
|
529d1b |
ssize_t len = utf8len(lf, -1) + 1;
|
|
|
529d1b |
ssize_t req = sizeof (*file) + len * sizeof (uint16_t);
|
|
|
529d1b |
|
|
|
529d1b |
+ if (len == 0) {
|
|
|
529d1b |
+ errno = EINVAL;
|
|
|
529d1b |
+ efi_error("%s() called with %s file path", __func__,
|
|
|
529d1b |
+ filepath == NULL ? "NULL" : "empty");
|
|
|
529d1b |
+ return -1;
|
|
|
529d1b |
+ }
|
|
|
529d1b |
sz = efidp_make_generic(buf, size, EFIDP_MEDIA_TYPE, EFIDP_MEDIA_FILE,
|
|
|
529d1b |
req);
|
|
|
529d1b |
if (size && sz == req) {
|
|
|
529d1b |
diff --git a/src/dp.c b/src/dp.c
|
|
|
529d1b |
index 4e76e25b1a1..82d60b4f9be 100644
|
|
|
529d1b |
--- a/src/dp.c
|
|
|
529d1b |
+++ b/src/dp.c
|
|
|
529d1b |
@@ -443,9 +443,17 @@ efidp_make_generic(uint8_t *buf, ssize_t size, uint8_t type, uint8_t subtype,
|
|
|
529d1b |
|
|
|
529d1b |
if (!size)
|
|
|
529d1b |
return total_size;
|
|
|
529d1b |
+
|
|
|
529d1b |
+ if (!buf) {
|
|
|
529d1b |
+ errno = EINVAL;
|
|
|
529d1b |
+ efi_error("%s was called with nonzero size and NULL buffer",
|
|
|
529d1b |
+ __func__);
|
|
|
529d1b |
+ return -1;
|
|
|
529d1b |
+ }
|
|
|
529d1b |
+
|
|
|
529d1b |
if (size < total_size) {
|
|
|
529d1b |
+ errno = ENOSPC;
|
|
|
529d1b |
efi_error("total size is bigger than size limit");
|
|
|
529d1b |
- errno = ENOSPC;
|
|
|
529d1b |
return -1;
|
|
|
529d1b |
}
|
|
|
529d1b |
|
|
|
529d1b |
--
|
|
|
529d1b |
2.17.1
|
|
|
529d1b |
|