[edk2-devel] [PATCH v1 1/1] CryptoPkg: BaseCryptLib: Fix buffer double free in CryptPkcs7VerifyEku
Yao, Jiewen
jiewen.yao at intel.com
Sat Nov 14 00:31:42 UTC 2020
Sorry, I missed this email.
Reviewed-by: Jiewen Yao <Jiewen.yao at intel.com>
> -----Original Message-----
> From: Kun Qin <kun.q at outlook.com>
> Sent: Wednesday, October 21, 2020 10:32 AM
> To: devel at edk2.groups.io
> Cc: Wang, Jian J <jian.j.wang at intel.com>; Lu, XiaoyuX
> <xiaoyux.lu at intel.com>; Yao, Jiewen <jiewen.yao at intel.com>; Jiang,
> Guomin <guomin.jiang at intel.com>
> Subject: [PATCH v1 1/1] CryptoPkg: BaseCryptLib: Fix buffer double free in
> CryptPkcs7VerifyEku
>
> REF: https://bugzilla.tianocore.org/show_bug.cgi?id=2459
>
> SignerCert is part of Pkcs7 instance when both have valid content. OpenSLL
> PKCS7_free function will release the memory of SignerCert when applicable.
> Freeing SignerCert with X509_free again might cause page fault if use-
> after-free guard is enabled.
>
> Cc: Jian J Wang <jian.j.wang at intel.com>
> Cc: Xiaoyu Lu <xiaoyux.lu at intel.com>
> Cc: Jiewen Yao <jiewen.yao at intel.com>
> Cc: Guomin Jiang <guomin.jiang at intel.com>
>
> Signed-off-by: Kun Qin <kun.q at outlook.com>
> ---
> CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7VerifyEku.c | 4 ----
> 1 file changed, 4 deletions(-)
>
> diff --git a/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7VerifyEku.c
> b/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7VerifyEku.c
> index c9fdb65b99d1..40cc39afe7dd 100644
> --- a/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7VerifyEku.c
> +++ b/CryptoPkg/Library/BaseCryptLib/Pk/CryptPkcs7VerifyEku.c
> @@ -508,10 +508,6 @@ Exit:
> free (SignedData);
>
> }
>
>
>
> - if (SignerCert != NULL) {
>
> - X509_free (SignerCert);
>
> - }
>
> -
>
> if (Pkcs7 != NULL) {
>
> PKCS7_free (Pkcs7);
>
> }
>
> --
> 2.28.0.windows.1
-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#67567): https://edk2.groups.io/g/devel/message/67567
Mute This Topic: https://groups.io/mt/77702130/1813853
Group Owner: devel+owner at edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [edk2-devel-archive at redhat.com]
-=-=-=-=-=-=-=-=-=-=-=-
More information about the edk2-devel-archive
mailing list