From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mga17.intel.com (mga17.intel.com [192.55.52.151]) by mx.groups.io with SMTP id smtpd.web11.7425.1572319163349934775 for ; Mon, 28 Oct 2019 20:19:23 -0700 Authentication-Results: mx.groups.io; dkim=missing; spf=pass (domain: intel.com, ip: 192.55.52.151, mailfrom: jian.j.wang@intel.com) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by fmsmga107.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 28 Oct 2019 20:19:22 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,242,1569308400"; d="scan'208";a="229912980" Received: from fmsmsx107.amr.corp.intel.com ([10.18.124.205]) by fmsmga002.fm.intel.com with ESMTP; 28 Oct 2019 20:19:22 -0700 Received: from shsmsx102.ccr.corp.intel.com (10.239.4.154) by fmsmsx107.amr.corp.intel.com (10.18.124.205) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 28 Oct 2019 20:19:22 -0700 Received: from shsmsx107.ccr.corp.intel.com ([169.254.9.63]) by shsmsx102.ccr.corp.intel.com ([169.254.2.108]) with mapi id 14.03.0439.000; Tue, 29 Oct 2019 11:19:20 +0800 From: "Wang, Jian J" To: "Wu, Jiaxin" , "devel@edk2.groups.io" , "lersek@redhat.com" , "David Woodhouse" CC: Sivaraman Nainar , "Lu, XiaoyuX" Subject: Re: [edk2-devel] [PATCH v2 4/8] CryptoPkg/Crt: satisfy "inet_pton.c" dependencies (CVE-2019-14553) Thread-Topic: [edk2-devel] [PATCH v2 4/8] CryptoPkg/Crt: satisfy "inet_pton.c" dependencies (CVE-2019-14553) Thread-Index: AQHVjfJuOczGG6pfwEuuw3J44IJtNadwY6aAgACPGNA= Date: Tue, 29 Oct 2019 03:19:20 +0000 Message-ID: References: <20191026053719.10453-1-lersek@redhat.com> <20191026053719.10453-5-lersek@redhat.com> <895558F6EA4E3B41AC93A00D163B727416F915DB@SHSMSX107.ccr.corp.intel.com> In-Reply-To: <895558F6EA4E3B41AC93A00D163B727416F915DB@SHSMSX107.ccr.corp.intel.com> Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiMTk1ZDlmMTctMDM0OS00MzIyLWEwZjctYzU3ZGU0N2NlNTQzIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoiMFdyUjFTN1IrNHVmWWY0ajZMK0dLd2cxdjQzZXArSWZrR3lrK3NUaHc3VTBqN3JoRVhzQ1wvOTlrNDJkMFF2M3QifQ== x-ctpclassification: CTP_NT dlp-product: dlpe-windows dlp-version: 11.2.0.6 dlp-reaction: no-action x-originating-ip: [10.239.127.40] MIME-Version: 1.0 Return-Path: jian.j.wang@intel.com Content-Language: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSmlheGluLA0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IFd1LCBK aWF4aW4gPGppYXhpbi53dUBpbnRlbC5jb20+DQo+IFNlbnQ6IFR1ZXNkYXksIE9jdG9iZXIgMjks IDIwMTkgMTA6NDUgQU0NCj4gVG86IGRldmVsQGVkazIuZ3JvdXBzLmlvOyBsZXJzZWtAcmVkaGF0 LmNvbTsgRGF2aWQgV29vZGhvdXNlDQo+IDxkd213MkBpbmZyYWRlYWQub3JnPg0KPiBDYzogV2Fu ZywgSmlhbiBKIDxqaWFuLmoud2FuZ0BpbnRlbC5jb20+OyBTaXZhcmFtYW4gTmFpbmFyDQo+IDxz aXZhcmFtYW5uQGFtaWluZGlhLmNvLmluPjsgTHUsIFhpYW95dVggPHhpYW95dXgubHVAaW50ZWwu Y29tPg0KPiBTdWJqZWN0OiBSRTogW2VkazItZGV2ZWxdIFtQQVRDSCB2MiA0LzhdIENyeXB0b1Br Zy9DcnQ6IHNhdGlzZnkgImluZXRfcHRvbi5jIg0KPiBkZXBlbmRlbmNpZXMgKENWRS0yMDE5LTE0 NTUzKQ0KPiANCj4gPiA+IEhtLg0KPiA+ID4NCj4gPiA+IElmIHlvdSdyZSBwb3J0aW5nIGEgd2hv bGUgc3RhbmRhcmQgQyBsaWJyYXJ5IHRvIEVESzIgdGhlbiBJIHN1cHBvc2UgaXQNCj4gPiA+IG1h a2VzIHNlbnNlIHRvIGJ1aWxkIHVwIGFsbCB0aGlzIGluZnJhc3RydWN0dXJlIGZvciBpdC4NCj4g PiA+DQo+ID4gPiBCdXQgaW4gdGhpcyBjYXNlIHdoZW4gaXQncyBvbmx5IHRoZSBzaW5nbGUgaW5l dF9wdG9uKCkgZnVuY3Rpb24gdGhhdA0KPiA+ID4geW91IG5lZWQsIHBlcmhhcHMgaXQgbWFrZXMg bW9yZSBzZW5zZSB0byAncG9ydCcgdGhhdCBvbmUgZnVuY3Rpb24gdG8NCj4gPiA+IFVFRkkgKG9y IGp1c3QgcmVpbXBsZW1lbnQgaXQgbG9va2luZyBsaWtlIEVESzIgY29kZSksIGluc3RlYWQgb2YN Cj4gPiA+IGJyaW5naW5nIGFsbCB0aGlzIHN0dWZmIGFsb25nIHdpdGggaXQ/DQo+ID4NCj4gPiBJ IGRpZG4ndCB3YW50IHRvIHRha2UgcmVzcG9uc2liaWxpdHkgZm9yIHRvdWNoaW5nIGFueSBvZiB0 aGF0IGNvZGUgLS0gSQ0KPiA+IHdhbnRlZCBpdCB0byBiZSBhIHBpZWNlIG9mIHRoZSBwdXp6bGUg dGhhdCB3ZSdkIGp1c3QgZHJvcCBpbi4gSXRzIGNvZGluZw0KPiA+IHN0eWxlIGlzIHZlcnkgZm9y ZWlnbiB0byBlZGsyIG5vcm1zLCBzbyBvbmNlIHdlIHN0YXJ0ZWQsIHdlIHdvdWxkbid0DQo+ID4g c3RvcCBiZWZvcmUgcmV3cml0aW5nIGl0IG1vcmUgb3IgbGVzcyBjb21wbGV0ZWx5LiAoRm9yIGV4 YW1wbGUgaXQgcXVpdGUNCj4gPiBmcmVxdWVudGx5IGNvbnN1bWVzIHRoZSB2YWx1ZXMgdGhhdCBh c3NpZ25tZW50IGV4cHJlc3Npb25zIGV2YWx1YXRlIHRvLA0KPiA+IHdoaWNoIGlzIGEgaHVnZSBu by1ubyBpbiBlZGsyLCBhcyBmYXIgYXMgSSB1bmRlcnN0YW5kLikgSSBoYXZlIG5vDQo+ID4gY2Fw YWNpdHkgZm9yIHN1Y2ggYSByZXdvcmsgKG9yIGFkZGl0aW9uYWwgb3duZXJzaGlwIC8gcmVzcG9u c2liaWxpdHkpLA0KPiA+IHNvcnJ5Lg0KPiA+DQo+ID4gSSB3b3JrZWQgZnJvbSBGcmlkYXkgZXZl bmluZyB0byBTYXR1cmRheSB+Ni03QU0gYXMgbXkgInNlY29uZCBzcHJpbnQiIG9uDQo+ID4gdGhp cyBjb2RlIGFuZCBpdHMgdGVzdGluZywgdW50aWwgSSB3YXMgc2F0aXNmaWVkIHdpdGggdGhlIHRl c3QgY292ZXJhZ2UuDQo+ID4gSSBhcG9sb2dpemUgYnV0IEkgc2ltcGx5IGNhbm5vdCByZXBlYXQg dGhhdC4gVGhpcyBpcyBhbGwgSSBjYW4NCj4gPiBjb250cmlidXRlIGNvZGUtd2lzZSAoYW5kIHRl c3Rpbmctd2lzZSkgdG8gZml4aW5nIHRoaXMgaXNzdWUuDQo+IA0KPiANCj4gSmlhbiwNCj4gDQo+ IGRvIHlvdSB0aGluayBpdCBtYWtlcyBzZW5zZSB0byBrZWVwIHRoZSBleGl0aW5nIGNvZGluZyBz dHlsZSBvZiBpbmV0X3B0b24oKSBpbg0KPiBlZGsyXENyeXB0b1BrZ1xMaWJyYXJ5XEJhc2VDcnlw dExpYlxTeXNDYWxsPyAoUGVyc29uYWxseSwgSSBjYW4gYWNjZXB0IHRoYXQpLg0KPiANCg0KQXMg bG9uZyBhcyBpdCdzIGtlcHQgaW4gU3lzQ2FsbCwgSSdtIG9rIHdpdGggaXQuDQoNClJlZ2FyZHMs DQpKaWFuDQoNCj4gPg0KPiA+IFRoYW5rcw0KPiA+IExhc3psbw0KPiA+DQo+ID4NCg0K