From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mga17.intel.com (mga17.intel.com [192.55.52.151]) by mx.groups.io with SMTP id smtpd.web12.1610.1599028884592113067 for ; Tue, 01 Sep 2020 23:41:24 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@intel.onmicrosoft.com header.s=selector2-intel-onmicrosoft-com header.b=H10o2ywH; spf=pass (domain: intel.com, ip: 192.55.52.151, mailfrom: jiewen.yao@intel.com) IronPort-SDR: hmDJipN0EK+R8t4BqHkY0T81CpEw4uweR1vOqizYEcSde6k071xklHAik24C1SMmOxEJGN/Xwt OTZRg33YOmgw== X-IronPort-AV: E=McAfee;i="6000,8403,9731"; a="137379484" X-IronPort-AV: E=Sophos;i="5.76,381,1592895600"; d="scan'208";a="137379484" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga002.jf.intel.com ([10.7.209.21]) by fmsmga107.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 01 Sep 2020 23:41:20 -0700 IronPort-SDR: DP/eHG3ieITjKcnVn4Zw1bQ/kdeMmMY8L0bOtCiFCRgtBWWsK7yi7DowadeCKgP6Nf8eMuGqBG ESndoe2MEQsA== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.76,381,1592895600"; d="scan'208";a="315009668" Received: from orsmsx601.amr.corp.intel.com ([10.22.229.14]) by orsmga002.jf.intel.com with ESMTP; 01 Sep 2020 23:41:19 -0700 Received: from orsmsx603.amr.corp.intel.com (10.22.229.16) by ORSMSX601.amr.corp.intel.com (10.22.229.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Tue, 1 Sep 2020 23:41:19 -0700 Received: from ORSEDG601.ED.cps.intel.com (10.7.248.6) by orsmsx603.amr.corp.intel.com (10.22.229.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5 via Frontend Transport; Tue, 1 Sep 2020 23:41:19 -0700 Received: from NAM11-CO1-obe.outbound.protection.outlook.com (104.47.56.171) by edgegateway.intel.com (134.134.137.102) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.1713.5; Tue, 1 Sep 2020 23:41:18 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MdEmsydts4XXJehtLSnvYwKU4vT96uhVHDFbZ9CnzDqIL9EBbzEwJY37ogPx5KEsn9qE9AYOmS8sY2I95dSPbYUh6JvndHXjX/oog+vrQhBtyuxmOAhk1BSukCbtuCPRijg+S86wS/DqIUUbLYc1EGC4PInKFFaxp2RD+XmvOeZTqo74B/5HOL4t4GEsX2k1w/e0734912nmMiYHm0hsAALcuXpLIFDVmX0Ao+YJwgVKk9eaAAiQUFGFSW1gtBrlUtPbweg9+b1jCD/2mSI3yqBSYjmjJPyoZfwtv6R0vrNNpELbj0uwgC0DQ3kRxywPdywxYhkK8qyT3QmLa2ySTw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Vhy2lyjjQIKjQkBhwO6N/k6HF8rG7ncND+RSu7c1INo=; b=IQ18Ts0i77NrkzPq4GWrs3/FEapWBU/zzBB5mVfgjdBESxJpeol12AR/oZEkm5OxOUv6JhCyDUbEqg2dkW5cR5OF313BCiZr/9AtnZBHbA/wFgIH6+nwuNSwkGupUvri/ZS6p5Io0sDdaSr0sCKyma0ZCzWCPfKd4upy5PJe0OkBwavSRgheFcR1Xit0xuvuL2o9weaVOCOLrkOLuX2EjdC7TV9QfSV6rrxC8uB7OJMOGIzeY8CwGBTrGufK3vosZttkwxZM9A9xatJfn1yf9K7T6LiKdyOsQ60/cojGbImFyLnEr+cI61bb/o1hn4G2d0mUuSUxkaNLk+GhaXEF2w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel.onmicrosoft.com; s=selector2-intel-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Vhy2lyjjQIKjQkBhwO6N/k6HF8rG7ncND+RSu7c1INo=; b=H10o2ywHk3EM24vhI949KKg0CBIlIb9T3u9SDn2fXmwIWem6gP1EOjo3ekNJkGBEi642obKBVottGNaWgWk2h4nYulvWZvb3TxyOzmOZhMfcywCdb83T4e8t5B6jOxkP3ReRUMVh8KdmLMi2P2c6liO4f03zehp2KKyxWI3lLrw= Received: from CY4PR11MB1288.namprd11.prod.outlook.com (2603:10b6:903:23::8) by CY4PR1101MB2166.namprd11.prod.outlook.com (2603:10b6:910:1e::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3326.23; Wed, 2 Sep 2020 06:41:17 +0000 Received: from CY4PR11MB1288.namprd11.prod.outlook.com ([fe80::163:9209:a92d:812]) by CY4PR11MB1288.namprd11.prod.outlook.com ([fe80::163:9209:a92d:812%6]) with mapi id 15.20.3326.025; Wed, 2 Sep 2020 06:41:17 +0000 From: "Yao, Jiewen" To: "devel@edk2.groups.io" , "lersek@redhat.com" CC: "Wang, Jian J" , "Xu, Min M" , Wenyi Xie , =?utf-8?B?UGhpbGlwcGUgTWF0aGlldS1EYXVkw6k=?= , "Liming Gao (Byosoft address)" Subject: Re: [edk2-devel] [PATCH 0/3] SecurityPkg/DxeImageVerificationLib: catch alignment overflow (CVE-2019-14562) Thread-Topic: [edk2-devel] [PATCH 0/3] SecurityPkg/DxeImageVerificationLib: catch alignment overflow (CVE-2019-14562) Thread-Index: AQHWgEASLJ2VHu1+nkqrpW5FgQEmWqlUuvzggAAq5QCAAAGaoA== Date: Wed, 2 Sep 2020 06:41:17 +0000 Message-ID: References: <20200901091221.20948-1-lersek@redhat.com> In-Reply-To: Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-version: 11.5.1.3 dlp-product: dlpe-windows dlp-reaction: no-action authentication-results: edk2.groups.io; dkim=none (message not signed) header.d=none;edk2.groups.io; dmarc=none action=none header.from=intel.com; x-originating-ip: [101.87.137.65] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: ea98203a-38ec-4cd6-112d-08d84f0b323f x-ms-traffictypediagnostic: CY4PR1101MB2166: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: vk9svUTU8oIQIh/lrveYB4qd1Hy3Bc+7sRRgzqtEyRYKXsTi39ep9pnRMfdSwqa50udC41mt70C8fy1790XHCqUw3qgSQX0MIZyZAQ7D72JwQJuWzofqOiagEUth6nDO6bBvj3gI/WUnSGt2QAN1Qj4goHVDXPZReU5wRFcGlV2oBwFoHlFEeYv6q+m2SQUJgB2jX6WYQmoN9hCb3EJqFgEGrxADraxMyO59yCNBZhRZgHZYo9FwYkMEok6hM9xjCDcwCMgVYngu4oaF3lU8mSVrmtoIS5hGe9t0pdyra7FCI+TuXYLHi/C9Nb1OZDums9z+b3D9TTtyHENMq1yaskZ8PBIR/y8HBr0zu9BshxtgwYxMTVA1qhJEthkkah1qM5ggUDrWAuF/G4JBgXPoJA== x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CY4PR11MB1288.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(346002)(366004)(376002)(396003)(136003)(39860400002)(71200400001)(5660300002)(64756008)(66556008)(966005)(6506007)(54906003)(52536014)(110136005)(86362001)(478600001)(316002)(53546011)(83380400001)(8676002)(8936002)(7696005)(186003)(66476007)(2906002)(66946007)(76116006)(66446008)(55016002)(26005)(9686003)(33656002)(15650500001)(4326008);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata: mTHBF8Q/r3kYG39fMqGBIYwPNfzUTJKkj05fP4zcoWgwdaa0a812CTpF37ShIZAr/tAaJAr8SAHzljwG63G4qP6zJ0BIKh+CwMe64K3fKs/x5E97fVGLFTeqPRF01SxU1J9HgAC5XRPIhXtAzKq3jOErGtymLxQSXckZJhufe0GO6gWECRltktElZrtlCCAkT6PlA7iDvyhSqHoYu6vmwPzQ7f+pqfQnJvmEOyhd1CHZUhEJH8AWfAR7d8pgOp2jJrooPgJUZHC6DT538l/3oRQx3dhRzrxi1JD+ppg4udhHBQhzCi+B1O/vrfHK0YPOAsmaIsxxeKlXUoLWjAYgxkQW5k6ekV6TULinlqqhyY3GGGIwJOVtz5smEKJ/CWgmTZMOl2ofPp51aDjjTBfwS4f4qXqmQOk9/CguqQEAkjh9gZH+cDcjxndiJh6HRvMSUJPHV7odfdcrBNgCzigo3MgSbwF80B/ijnLIvFrmYtEi3eZ57oBtHEgQLuF7BpqlnBifczHtsUFbshYlMIiQZowGn+g/HyDLQ79aPAzFv7vYS8DyNPJ4SapR1brCxI5ihzIBV8V+2XN1x/cXuoIGYuS+M7GxzOcDobUXLKpr+g7+nz10pgvhdG0vkwZVqlxRXtSkgrfST1sniEghSxfLcQ== MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: CY4PR11MB1288.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: ea98203a-38ec-4cd6-112d-08d84f0b323f X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Sep 2020 06:41:17.7744 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: IYdlgoqxB+IMQUOQDhKOsKZ47R2rWil3plI6gUEozRJjt5fCcp8Owa1tIcxL3Oh2pshNI6JlwpmSCFTP4dE3OQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR1101MB2166 Return-Path: jiewen.yao@intel.com X-OriginatorOrg: intel.com Content-Language: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 WWVzLiBJIHJlY29tbWVuZCB0byBtZXJnZSB0byBzdGFibGUyMDIwMDguDQoNCg0KPiAtLS0tLU9y aWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBkZXZlbEBlZGsyLmdyb3Vwcy5pbyA8ZGV2ZWxA ZWRrMi5ncm91cHMuaW8+IE9uIEJlaGFsZiBPZiBMYXN6bG8gRXJzZWsNCj4gU2VudDogV2VkbmVz ZGF5LCBTZXB0ZW1iZXIgMiwgMjAyMCAyOjM1IFBNDQo+IFRvOiBkZXZlbEBlZGsyLmdyb3Vwcy5p bzsgWWFvLCBKaWV3ZW4gPGppZXdlbi55YW9AaW50ZWwuY29tPg0KPiBDYzogV2FuZywgSmlhbiBK IDxqaWFuLmoud2FuZ0BpbnRlbC5jb20+OyBYdSwgTWluIE0gPG1pbi5tLnh1QGludGVsLmNvbT47 DQo+IFdlbnlpIFhpZSA8eGlld2VueWkyQGh1YXdlaS5jb20+OyBQaGlsaXBwZSBNYXRoaWV1LURh dWTDqQ0KPiA8cGhpbG1kQHJlZGhhdC5jb20+OyBMaW1pbmcgR2FvIChCeW9zb2Z0IGFkZHJlc3Mp DQo+IDxnYW9saW1pbmdAYnlvc29mdC5jb20uY24+DQo+IFN1YmplY3Q6IFJlOiBbZWRrMi1kZXZl bF0gW1BBVENIIDAvM10gU2VjdXJpdHlQa2cvRHhlSW1hZ2VWZXJpZmljYXRpb25MaWI6DQo+IGNh dGNoIGFsaWdubWVudCBvdmVyZmxvdyAoQ1ZFLTIwMTktMTQ1NjIpDQo+IA0KPiAoK0xpbWluZywg K1BoaWwpDQo+IA0KPiBPbiAwOS8wMi8yMCAwNjowMiwgWWFvLCBKaWV3ZW4gd3JvdGU6DQo+ID4g VGhlIHNlcmllcyAoMX4zKSBpcyByZXZpZXdlZC1ieTogSmlld2VuIFlhbyA8amlld2VuLnlhb0Bp bnRlbC5jb20+DQo+IA0KPiBUaGFuayB5b3UgRXZlcnlvbmUgZm9yIHRoZSByZXZpZXdzIGFuZCB0 ZXN0aW5nLg0KPiANCj4gSmlld2VuOiBkbyB5b3UgdGhpbmsgd2Ugc2hvdWxkIG1lcmdlIHRoaXMg c2VyaWVzIGludG8gdGhlIG1hc3RlciBicmFuY2gNCj4gYmVmb3JlIGVkazItc3RhYmxlMjAyMDA4 PyBJIHRoaW5rIGl0IHF1YWxpZmllcyAoaXQgaXMgYSBDVkUgZml4KSwgYnV0IEkNCj4gd291bGQg bGlrZSAqeW91KiB0byBkZWNpZGUgYWJvdXQgaXQuDQo+IA0KPiBUaGFua3MNCj4gTGFzemxvDQo+ IA0KPiA+DQo+ID4gVGhhbmsgeW91DQo+ID4gWWFvIEppZXdlbg0KPiA+DQo+ID4+IC0tLS0tT3Jp Z2luYWwgTWVzc2FnZS0tLS0tDQo+ID4+IEZyb206IGRldmVsQGVkazIuZ3JvdXBzLmlvIDxkZXZl bEBlZGsyLmdyb3Vwcy5pbz4gT24gQmVoYWxmIE9mIExhc3psbw0KPiBFcnNlaw0KPiA+PiBTZW50 OiBUdWVzZGF5LCBTZXB0ZW1iZXIgMSwgMjAyMCA1OjEyIFBNDQo+ID4+IFRvOiBlZGsyLWRldmVs LWdyb3Vwcy1pbyA8ZGV2ZWxAZWRrMi5ncm91cHMuaW8+DQo+ID4+IENjOiBXYW5nLCBKaWFuIEog PGppYW4uai53YW5nQGludGVsLmNvbT47IFlhbywgSmlld2VuDQo+IDxqaWV3ZW4ueWFvQGludGVs LmNvbT47DQo+ID4+IFh1LCBNaW4gTSA8bWluLm0ueHVAaW50ZWwuY29tPjsgV2VueWkgWGllIDx4 aWV3ZW55aTJAaHVhd2VpLmNvbT4NCj4gPj4gU3ViamVjdDogW2VkazItZGV2ZWxdIFtQQVRDSCAw LzNdIFNlY3VyaXR5UGtnL0R4ZUltYWdlVmVyaWZpY2F0aW9uTGliOg0KPiBjYXRjaA0KPiA+PiBh bGlnbm1lbnQgb3ZlcmZsb3cgKENWRS0yMDE5LTE0NTYyKQ0KPiA+Pg0KPiA+PiBSZWY6ICAgIGh0 dHBzOi8vYnVnemlsbGEudGlhbm9jb3JlLm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjIxNQ0KPiA+PiBS ZXBvOiAgIGh0dHBzOi8vcGFndXJlLmlvL2xlcnNlay9lZGsyLmdpdA0KPiA+PiBCcmFuY2g6IHRp YW5vY29yZV8yMjE1DQo+ID4+DQo+ID4+IEknbSBuZXV0cmFsIG9uIHdoZXRoZXIgdGhpcyBiZWNv bWVzIHBhcnQgb2YgZWRrMi1zdGFibGUyMDIwMDguDQo+ID4+DQo+ID4+IENjOiBKaWFuIEogV2Fu ZyA8amlhbi5qLndhbmdAaW50ZWwuY29tPg0KPiA+PiBDYzogSmlld2VuIFlhbyA8amlld2VuLnlh b0BpbnRlbC5jb20+DQo+ID4+IENjOiBNaW4gWHUgPG1pbi5tLnh1QGludGVsLmNvbT4NCj4gPj4g Q2M6IFdlbnlpIFhpZSA8eGlld2VueWkyQGh1YXdlaS5jb20+DQo+ID4+DQo+ID4+IFRoYW5rcywN Cj4gPj4gTGFzemxvDQo+ID4+DQo+ID4+IExhc3psbyBFcnNlayAoMyk6DQo+ID4+ICAgU2VjdXJp dHlQa2cvRHhlSW1hZ2VWZXJpZmljYXRpb25MaWI6IGV4dHJhY3QgU2VjRGF0YURpckVuZCwNCj4g Pj4gICAgIFNlY0RhdGFEaXJMZWZ0DQo+ID4+ICAgU2VjdXJpdHlQa2cvRHhlSW1hZ2VWZXJpZmlj YXRpb25MaWI6IGFzc2lnbiBXaW5DZXJ0aWZpY2F0ZSBhZnRlciBzaXplDQo+ID4+ICAgICBjaGVj aw0KPiA+PiAgIFNlY3VyaXR5UGtnL0R4ZUltYWdlVmVyaWZpY2F0aW9uTGliOiBjYXRjaCBhbGln bm1lbnQgb3ZlcmZsb3cNCj4gPj4gICAgIChDVkUtMjAxOS0xNDU2MikNCj4gPj4NCj4gPj4gIFNl Y3VyaXR5UGtnL0xpYnJhcnkvRHhlSW1hZ2VWZXJpZmljYXRpb25MaWIvRHhlSW1hZ2VWZXJpZmlj YXRpb25MaWIuYyB8IDE2DQo+ID4+ICsrKysrKysrKysrKy0tLS0NCj4gPj4gIDEgZmlsZSBjaGFu Z2VkLCAxMiBpbnNlcnRpb25zKCspLCA0IGRlbGV0aW9ucygtKQ0KPiA+Pg0KPiA+PiAtLQ0KPiA+ PiAyLjE5LjEuMy5nMzAyNDdhYTVkMjAxDQo+ID4+DQo+ID4+DQo+ID4+DQo+ID4NCj4gPg0KPiA+ DQo+ID4NCj4gDQo+IA0KPiANCg0K