Re: 回复: [edk2-devel] [PATCH v3 00/20] NetworkPkg: CVE-2023-45236 and CVE-2023-45237

["Michael Brown" <mcb30@ipxe.org>]

On 30/05/2024 10:31, Gerd Hoffmann wrote:
> On Thu, May 30, 2024 at 01:07:45PM GMT, gaoliming via groups.io wrote:
>> If ASSERT trigs the exception, could call stack show each caller?
> 
> Turned out to be ipxe, apparently it has a exit-boot-services handler
> which triggers all this.

iPXE shouldn't be triggering any protocol installations in response to 
ExitBootServices.

We used to make a good-faith effort to clean up gracefully by 
uninstalling protocols.  This ended up exposing so many bugs in EDK2 and 
third-party UEFI code (where the uninstallation paths seem to almost 
never be tested) that we eventually gave up.  As of commit 
https://github.com/ipxe/ipxe/commit/6769a7c3c, we now deliberately leak 
resources once ExitBootServices has been triggered by skipping the 
cleanup calls to UninstallMultipleProtocolInterfaces etc.

Do you have any more details of the behaviour that you're observing?

Thanks,

Michael



-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#119386): https://edk2.groups.io/g/devel/message/119386
Mute This Topic: https://groups.io/mt/106383321/7686176
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io]
-=-=-=-=-=-=-=-=-=-=-=-