<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style></style></head><body lang=ZH-CN link=blue vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1>Jiewen:<o:p></o:p> I am OK to merge this bug fix into this stable tag. If no objection, you can merge it tomorrow. <o:p></o:p><o:p> </o:p>Thanks<o:p></o:p>Liming<o:p></o:p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'>发件人: bounce+27952+67779+4905953+8761045@groups.io <bounce+27952+67779+4905953+8761045@groups.io> 代表 Yao, Jiewen 发送时间: 2020年11月22日 20:26 收件人: Kun Qin <kun.q@outlook.com>; gaoliming <gaoliming@byosoft.com.cn>; devel@edk2.groups.io 抄送: Wang, Jian J <jian.j.wang@intel.com>; Lu, XiaoyuX <xiaoyux.lu@intel.com>; Jiang, Guomin <guomin.jiang@intel.com> 主题: Re: [edk2-devel] [PATCH v1 1/1] CryptoPkg: BaseCryptLib: Fix buffer double free in CryptPkcs7VerifyEku<o:p></o:p></div></div><o:p> </o:p>I can help to merge if it is approved.<o:p></o:p><o:p> </o:p>I will add reviewed-by tag when I merge it.<o:p></o:p><o:p> </o:p>Thank you<o:p></o:p>Yao Jiewen<o:p></o:p><o:p> </o:p><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'>From: Kun Qin <<a href="mailto:kun.q@outlook.com">kun.q@outlook.com</a>> Sent: Sunday, November 22, 2020 3:10 PM To: gaoliming <<a href="mailto:gaoliming@byosoft.com.cn">gaoliming@byosoft.com.cn</a>>; <a href="mailto:devel@edk2.groups.io">devel@edk2.groups.io</a>; Yao, Jiewen <<a href="mailto:jiewen.yao@intel.com">jiewen.yao@intel.com</a>> Cc: Wang, Jian J <<a href="mailto:jian.j.wang@intel.com">jian.j.wang@intel.com</a>>; Lu, XiaoyuX <<a href="mailto:xiaoyux.lu@intel.com">xiaoyux.lu@intel.com</a>>; Jiang, Guomin <<a href="mailto:guomin.jiang@intel.com">guomin.jiang@intel.com</a>> Subject: RE: [edk2-devel] [PATCH v1 1/1] CryptoPkg: BaseCryptLib: Fix buffer double free in CryptPkcs7VerifyEku<o:p></o:p></div></div><o:p> </o:p>Hi Liming,<o:p></o:p><o:p> </o:p>It will be great if we can get this in. But I have been having trouble sending a v2 patch that incorporates Jiewen’s “Reviewed-by” tag through git command line for the past week (no other changes). It kept giving me an error of "No host provider available to service this request". Please let me know if you have any suggestions.<o:p></o:p><o:p> </o:p>Thanks,<o:p></o:p>Kun<o:p></o:p><o:p> </o:p><o:p> </o:p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'>From: <a href="mailto:gaoliming@byosoft.com.cn">gaoliming</a> Sent: Thursday, November 19, 2020 9:39 PM To: <a href="mailto:devel@edk2.groups.io">devel@edk2.groups.io</a>; <a href="mailto:jiewen.yao@intel.com">jiewen.yao@intel.com</a>; <a href="mailto:kun.q@outlook.com">'Kun Qin'</a> Cc: <a href="mailto:jian.j.wang@intel.com">'Wang, Jian J'</a>; <a href="mailto:xiaoyux.lu@intel.com">'Lu, XiaoyuX'</a>; <a href="mailto:guomin.jiang@intel.com">'Jiang, Guomin'</a> Subject: 回复: [edk2-devel] [PATCH v1 1/1] CryptoPkg: BaseCryptLib: Fix buffer double free in CryptPkcs7VerifyEku<o:p></o:p></div><o:p> </o:p>Kun: This is a bug fix. It passed code review. Do you request to merge it for this stable tag 202011? Thanks Liming > -----邮件原件----- > 发件人: <a href="mailto:bounce+27952+67567+4905953+8761045@groups.io">bounce+27952+67567+4905953+8761045@groups.io</a> > <<a href="mailto:bounce+27952+67567+4905953+8761045@groups.io">bounce+27952+67567+4905953+8761045@groups.io</a>> 代表 Yao, Jiewen > 发送时间: 2020年11月14日 8:32 > 收件人: Kun Qin <<a href="mailto:kun.q@outlook.com">kun.q@outlook.com</a>>; <a href="mailto:devel@edk2.groups.io">devel@edk2.groups.io</a> > 抄送: Wang, Jian J <<a href="mailto:jian.j.wang@intel.com">jian.j.wang@intel.com</a>>; Lu, XiaoyuX > <<a href="mailto:xiaoyux.lu@intel.com">xiaoyux.lu@intel.com</a>>; Jiang, Guomin <<a href="mailto:guomin.jiang@intel.com">guomin.jiang@intel.com</a>>; Yao, > Jiewen <<a href="mailto:jiewen.yao@intel.com">jiewen.yao@intel.com</a>> > 主题: Re: [edk2-devel] [PATCH v1 1/1] CryptoPkg: BaseCryptLib: Fix buffer > double free in CryptPkcs7VerifyEku > > Sorry, I missed this email. > > Reviewed-by: Jiewen Yao <<a href="mailto:Jiewen.yao@intel.com">Jiewen.yao@intel.com</a>> > > > > -----Original Message----- > > From: Kun Qin <<a href="mailto:kun.q@outlook.com">kun.q@outlook.com</a>> > > Sent: Wednesday, October 21, 2020 10:32 AM > > To: <a href="mailto:devel@edk2.groups.io">devel@edk2.groups.io</a> > > Cc: Wang, Jian J <<a href="mailto:jian.j.wang@intel.com">jian.j.wang@intel.com</a>>; Lu, XiaoyuX > > <<a href="mailto:xiaoyux.lu@intel.com">xiaoyux.lu@intel.com</a>>; Yao, Jiewen <<a href="mailto:jiewen.yao@intel.com">jiewen.yao@intel.com</a>>; Jiang, > > Guomin <<a href="mailto:guomin.jiang@intel.com">guomin.jiang@intel.com</a>> > > Subject: [PATCH v1 1/1] CryptoPkg: BaseCryptLib: Fix buffer double free in > > CryptPkcs7VerifyEku > > > > REF: <a href="https://bugzilla.tianocore.org/show_bug.cgi?id=2459">https://bugzilla.tianocore.org/show_bug.cgi?id=2459</a> > > > > SignerCert is part of Pkcs7 instance when both have valid content. OpenSLL > > PKCS7_free function will release the memory of SignerCert when applicable. > > Freeing SignerCert with X509_free again might cause page fault if use- > > after-free guard is enabled. > > > > Cc: Jian J Wang <<a href="mailto:jian.j.wang@intel.com">jian.j.wang@intel.com</a>> > > Cc: Xiaoyu Lu <<a href="mailto:xiaoyux.lu@intel.com">xiaoyux.lu@intel.com</a>> > > Cc: Jiewen Yao <<a href="mailto:jiewen.yao@intel.com">jiewen.yao@intel.com</a>> > > Cc: Guomin Jiang <<a href="mailto:guomin.jiang@intel.com">guomin.jiang@intel.com</a>> > > > > Signed-off-by: Kun Qin <<a href="mailto:kun.q@outlook.com">kun.q@outlook.com</a>> > > --- > > CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7VerifyEku.c | 4 ---- > > 1 file changed, 4 deletions(-) > > > > diff --git a/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7VerifyEku.c > > b/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7VerifyEku.c > > index c9fdb65b99d1..40cc39afe7dd 100644 > > --- a/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7VerifyEku.c > > +++ b/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7VerifyEku.c > > @@ -508,10 +508,6 @@ Exit: > > free (SignedData); > > > > } > > > > > > > > - if (SignerCert != NULL) { > > > > - X509_free (SignerCert); > > > > - } > > > > - > > > > if (Pkcs7 != NULL) { > > > > PKCS7_free (Pkcs7); > > > > } > > > > -- > > 2.28.0.windows.1 > > > > > <o:p></o:p><o:p> </o:p></div><div></o:p></div></div></body></html> <div width="1" style="color:white;clear:both">_._,_._,_</div> <hr> Groups.io Links: You receive all messages sent to this group. <a target="_blank" href="https://edk2.groups.io/g/devel/message/67781">View/Reply Online (#67781)</a> | | <a target="_blank" href="https://groups.io/mt/78443908/1813853">Mute This Topic</a> | <a href="https://edk2.groups.io/g/devel/post">New Topic</a> <a href="https://edk2.groups.io/g/devel/editsub/1813853">Your Subscription</a> | <a href="mailto:devel+owner@edk2.groups.io">Contact Group Owner</a> | <a href="https://edk2.groups.io/g/devel/unsub">Unsubscribe</a> [edk2-devel-archive@redhat.com] <div width="1" style="color:white;clear:both">_._,_._,_</div>