diff options
author | Jiaxin Wu <jiaxin.wu@intel.com> | 2017-12-22 11:28:42 +0800 |
---|---|---|
committer | Jiaxin Wu <jiaxin.wu@intel.com> | 2017-12-26 16:43:24 +0800 |
commit | 8b40f01a3f03c16897a01b827b7e3e8943274aac (patch) | |
tree | 07a8605adecd33d2a3b347318cec622a64d67300 /NetworkPkg/TcpDxe | |
parent | 5644e5cecebeeefea90cfda093df68e0aa6e0361 (diff) | |
download | edk2-8b40f01a3f03c16897a01b827b7e3e8943274aac.zip edk2-8b40f01a3f03c16897a01b827b7e3e8943274aac.tar.gz edk2-8b40f01a3f03c16897a01b827b7e3e8943274aac.tar.bz2 |
NetworkPkg/TcpDxe: Check FragmentBuffer for NULL before use
According the Spec, the FragmentBuffers in FragmentTable are allocated
by the application when calling Receive() function. This patch is to
check whether the FragmentBuffer is valid or not.
Cc: Fu Siyuan <siyuan.fu@intel.com>
Cc: Wang Fan <fan.wang@intel.com>
Cc: Ye Ting <ting.ye@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Wu Jiaxin <jiaxin.wu@intel.com>
Reviewed-by: Fu Siyuan <siyuan.fu@intel.com>
Diffstat (limited to 'NetworkPkg/TcpDxe')
-rw-r--r-- | NetworkPkg/TcpDxe/TcpMain.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/NetworkPkg/TcpDxe/TcpMain.c b/NetworkPkg/TcpDxe/TcpMain.c index fc3713e..e349d2d 100644 --- a/NetworkPkg/TcpDxe/TcpMain.c +++ b/NetworkPkg/TcpDxe/TcpMain.c @@ -40,6 +40,9 @@ TcpChkDataBuf ( UINT32 Len;
for (Index = 0, Len = 0; Index < FragmentCount; Index++) {
+ if (FragmentTable[Index].FragmentBuffer == NULL) {
+ return EFI_INVALID_PARAMETER;
+ }
Len = Len + FragmentTable[Index].FragmentLength;
}
|