Re: [edk2-devel] [PATCH] MdePkg: PE loader should zero out dest buffer on allocation

2020-01-13 Thread Laszlo Ersek
On 01/13/20 09:18, Zhiguang Liu wrote: > REF: https://bugzilla.tianocore.org/show_bug.cgi?id=1999 > > When PE loader loads image to memory, the first section of image may > not locate right next to the image header, which causes some memory > space remaining uninitialized. This is a security issue

Re: [edk2-devel] [PATCH] MdePkg: PE loader should zero out dest buffer on allocation

2020-01-13 Thread Marvin Häuser
Good day, Please see my comment in the related BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=1999#c5 Best regards, Marvin Am 13.01.2020 um 09:18 schrieb Zhiguang Liu: REF: https://bugzilla.tianocore.org/show_bug.cgi?id=1999 When PE loader loads image to memory, the first section of ima

[edk2-devel] [PATCH] MdePkg: PE loader should zero out dest buffer on allocation

2020-01-13 Thread Zhiguang Liu
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=1999 When PE loader loads image to memory, the first section of image may not locate right next to the image header, which causes some memory space remaining uninitialized. This is a security issue. This patch compares the ending address of image