mirror of
https://github.com/ipxe/ipxe
synced 2025-12-22 13:00:39 +03:00
[efi] Fix uninitialised data in HII IFR structures
The HII IFR structures are allocated via realloc() rather than zalloc(), and so are not automatically zeroed. This results in the presence of uninitialised and invalid data, causing crashes elsewhere in the UEFI firmware. Fix by explicitly zeroing the newly allocated portion of any IFR structure in efi_ifr_op(). Debugged-by: Laszlo Ersek <lersek@redhat.com> Debugged-by: Gary Lin <glin@suse.com> Signed-off-by: Michael Brown <mcb30@ipxe.org>
This commit is contained in:
@@ -117,6 +117,7 @@ static void * efi_ifr_op ( struct efi_ifr_builder *ifr, unsigned int opcode,
|
||||
ifr->ops_len = new_ops_len;
|
||||
|
||||
/* Fill in opcode header */
|
||||
memset ( op, 0, len );
|
||||
op->OpCode = opcode;
|
||||
op->Length = len;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user