From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mga12.intel.com (mga12.intel.com [192.55.52.136]) by mx.groups.io with SMTP id smtpd.web12.10972.1603160910337660937 for ; Mon, 19 Oct 2020 19:28:30 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@intel.onmicrosoft.com header.s=selector2-intel-onmicrosoft-com header.b=iot2zQpe; spf=pass (domain: intel.com, ip: 192.55.52.136, mailfrom: jian.j.wang@intel.com) IronPort-SDR: fQUn+WPmPPCbbKCVc2mFEsP9t4vDtqvvjD+oG5rJkZWZ6QiwuQYZr3xBT64o7ZbCsPrjHBa45t 6425PNYjFMQA== X-IronPort-AV: E=McAfee;i="6000,8403,9779"; a="146435585" X-IronPort-AV: E=Sophos;i="5.77,395,1596524400"; d="scan'208";a="146435585" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga001.fm.intel.com ([10.253.24.23]) by fmsmga106.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 19 Oct 2020 19:28:27 -0700 IronPort-SDR: cOKYuTWMNQwcAJ+P3ap2Ja4SR58YdtSSRgRwy/evfvZACwF6+AI3yNJrGvbjtHtql/cIUj8eaB xPeaKYYItFkw== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.77,395,1596524400"; d="scan'208";a="422375158" Received: from orsmsx603.amr.corp.intel.com ([10.22.229.16]) by fmsmga001.fm.intel.com with ESMTP; 19 Oct 2020 19:28:27 -0700 Received: from orsmsx602.amr.corp.intel.com (10.22.229.15) by ORSMSX603.amr.corp.intel.com (10.22.229.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Mon, 19 Oct 2020 19:28:27 -0700 Received: from ORSEDG601.ED.cps.intel.com (10.7.248.6) by orsmsx602.amr.corp.intel.com (10.22.229.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5 via Frontend Transport; Mon, 19 Oct 2020 19:28:27 -0700 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (104.47.58.174) by edgegateway.intel.com (134.134.137.102) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.1713.5; Mon, 19 Oct 2020 19:28:26 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Vhr0+GjroZWsypWwuI6QaJV+t2qgnD5DMFrSBHpCb5poBBNpc7b1m+6yrCWRQF4L4kjRjY+LxCjW+b6Cdkm6NTlOM9QMrVl/n3E8aulVRs2MG1OTSxq8OK57QJxXZyhnNkB/e6fBX+T/mrEEmbCz7BRpMt9FhOLovRcImNq6Kf7xSHtfLzbG9Ls2znEnCcB7+fQn2q6oDXuneFgD+/seTKLczVShvhuwPWnogwiAvhCWlgrQpAc/ur+nX2Ti7cbxrazLdWkRz6NLZgRBIJsww17ots00yRPRZJ0Ug61Swtub4XRG1AJTvC6GWjBj3xzXzAMz6NaVksZ5vAritfCNvQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QXkDzyOKnDZTJ8tR9eT0CMAqnngOJLA1BKKD+THIu8A=; b=KCk5yJDjPqhTRS68NvGK5yZBak7TaO6TcpxiLsuksstPpFqJu+N656dyVo8Xec5ANkWx/d3r5n31lixBl3DbV3oTtL/cgBb9nNja2O2m+C2KLGRrWx9+1HnoxU5mu+6Bq8xPEwGLyi+rj81zV/smvyucHFLvDpY9NYC3M63ul9AosveeIGdb+JLuP76RVDP4TqQb+b2fAKjBRZtBmm7mL2gPyatQO5khRWRE7aKYPqOjKuEsZPyidYv3VklxzPb+TsCb0U8ZRQemCP7woQLNGlPDK0wQF0DYAhFWKadmEgs/AjcT0Sasoi6cs7Q44erAarFrF2jbWn9nXwmDHB9y6w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel.onmicrosoft.com; s=selector2-intel-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QXkDzyOKnDZTJ8tR9eT0CMAqnngOJLA1BKKD+THIu8A=; b=iot2zQpeMmCXx3lzL35JNOc1dks7KVJzivmL/Fg196aVxPiy05UGT6tbKjfbLsbhc4NbemOqtVqlNscmK045yyAq894XLYWu9suYOmpJehcyb3rpMrh1uKL70U9cLjTQnTNtBV73cgCXtjeYC+wapkb61s//pPU/pnGDHeqj1PI= Received: from SN6PR11MB3312.namprd11.prod.outlook.com (2603:10b6:805:c8::14) by SN6PR11MB3085.namprd11.prod.outlook.com (2603:10b6:805:da::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.28; Tue, 20 Oct 2020 02:28:21 +0000 Received: from SN6PR11MB3312.namprd11.prod.outlook.com ([fe80::a437:a214:838b:64f8]) by SN6PR11MB3312.namprd11.prod.outlook.com ([fe80::a437:a214:838b:64f8%5]) with mapi id 15.20.3477.028; Tue, 20 Oct 2020 02:28:21 +0000 From: "Wang, Jian J" To: "devel@edk2.groups.io" , "lersek@redhat.com" CC: "Lu, XiaoyuX" , "Jiang, Guomin" , "Yao, Jiewen" Subject: Re: [edk2-devel] [PATCH] CryptoPkg/BaseCryptLib: fix NULL dereference (CVE-2019-14584) Thread-Topic: [edk2-devel] [PATCH] CryptoPkg/BaseCryptLib: fix NULL dereference (CVE-2019-14584) Thread-Index: AQHWpkvy4qFHX3BaQUSnfPEkDaeeH6mfxJRA Date: Tue, 20 Oct 2020 02:28:21 +0000 Message-ID: References: <20201016051450.708-1-jian.j.wang@intel.com> In-Reply-To: Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiMzZlOWExYzAtNTFkYi00NjYwLWI3M2UtOGU3YWY5MDBiNmJmIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoiaUprS0RqeXFSUGJIRWZwVHB5VXV3Q1JuV2htdzcwQzE5V1VSc1RnZHlQckx1aEM3ckRLakRsVmxzSlZKbXlcL0wifQ== dlp-reaction: no-action dlp-version: 11.5.1.3 dlp-product: dlpe-windows x-ctpclassification: CTP_NT authentication-results: edk2.groups.io; dkim=none (message not signed) header.d=none;edk2.groups.io; dmarc=none action=none header.from=intel.com; x-originating-ip: [192.198.147.206] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 929e39f3-8ed8-46bf-e755-08d8749fd052 x-ms-traffictypediagnostic: SN6PR11MB3085: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 7kv1MpOzOQ5uJn1/aKXqPuWgjp/E54z57jxHRG+xs3VwPrmuhGdVK/kgScU+3KXY/ZriOoiVJFD/+6wwvpGe9q6bsOXYVibgbH1hHUd+yTfycV9FUlnzTZqaoIV+FUang3P8HeZ/7QgDDPR09JAzk9p3YlsYe0kx4bEdp8xNLkZtTGODFhZZlkvQ/eJv0vo0y7/Mb8NWHirU8pbOmMEntSfibu+rhORUfBkXzZW/oTA0oOiYofV+ZtootdV4cyayD5VjfQSsT4SpS3J4K74QkRARKgmRIzdX+9NyxhfxGfogpl3vVbMqpWD1aVmcri8YGpyodCY3RPJtnOFjKX4yEvfWBqbvBVa8qyYu5l7lYHQBr36dG4fsDNo3PV88zOpvVbsnB+Qcvrpwp0yzWtxcvg== x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SN6PR11MB3312.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(136003)(396003)(366004)(376002)(346002)(39860400002)(4326008)(55016002)(6506007)(110136005)(5660300002)(54906003)(66476007)(9686003)(2906002)(66556008)(7696005)(33656002)(53546011)(478600001)(8936002)(66446008)(8676002)(64756008)(71200400001)(66946007)(76116006)(966005)(86362001)(186003)(52536014)(26005)(107886003)(316002)(83380400001);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata: 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 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SN6PR11MB3312.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 929e39f3-8ed8-46bf-e755-08d8749fd052 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Oct 2020 02:28:21.5122 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: nuKe4sJqDczQyEjslbl+M0rpTYpXSu/YNO4x2bH7jp6ajS1w7RvAqcFrDIP4Djr84xbqzx6+sbn/ZoeGnPUsWQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR11MB3085 Return-Path: jian.j.wang@intel.com X-OriginatorOrg: intel.com Content-Language: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TGFzemxvLA0KDQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogZGV2ZWxA ZWRrMi5ncm91cHMuaW8gPGRldmVsQGVkazIuZ3JvdXBzLmlvPiBPbiBCZWhhbGYgT2YgTGFzemxv IEVyc2VrDQo+IFNlbnQ6IFR1ZXNkYXksIE9jdG9iZXIgMjAsIDIwMjAgMzoxMyBBTQ0KPiBUbzog ZGV2ZWxAZWRrMi5ncm91cHMuaW87IFdhbmcsIEppYW4gSiA8amlhbi5qLndhbmdAaW50ZWwuY29t Pg0KPiBDYzogTHUsIFhpYW95dVggPHhpYW95dXgubHVAaW50ZWwuY29tPjsgSmlhbmcsIEd1b21p bg0KPiA8Z3VvbWluLmppYW5nQGludGVsLmNvbT47IFlhbywgSmlld2VuIDxqaWV3ZW4ueWFvQGlu dGVsLmNvbT4NCj4gU3ViamVjdDogUmU6IFtlZGsyLWRldmVsXSBbUEFUQ0hdIENyeXB0b1BrZy9C YXNlQ3J5cHRMaWI6IGZpeCBOVUxMDQo+IGRlcmVmZXJlbmNlIChDVkUtMjAxOS0xNDU4NCkNCj4g DQo+IE9uIDEwLzE2LzIwIDA3OjE0LCBXYW5nLCBKaWFuIEogd3JvdGU6DQo+ID4gUkVGOiBodHRw czovL2J1Z3ppbGxhLnRpYW5vY29yZS5vcmcvc2hvd19idWcuY2dpP2lkPTE5MTQNCj4gPg0KPiA+ IEF1dGhlbnRpY29kZVZlcmlmeSgpIGNhbGxzIE9wZW5TU0xzIGQyaV9QS0NTNygpIEFQSSB0byBw YXJzZSBhc24gZW5jb2RlZA0KPiA+IHNpZ25lZCBhdXRoZW50aWNvZGUgcGtjcyM3IGRhdGEuIHdo ZW4gdGhpcyBzdWNjZXNzZnVsbHkgcmV0dXJucywgYSB0eXBlDQo+ID4gY2hlY2sgaXMgZG9uZSBi eSBjYWxsaW5nIFBLQ1M3X3R5cGVfaXNfc2lnbmVkKCkgYW5kIHRoZW4NCj4gPiBQa2NzNy0+ZC5z aWduLT5jb250ZW50cy0+dHlwZSBpcyB1c2VkLiBJdCBpcyBwb3NzaWJsZSB0byBjb25zdHJ1Y3Qg YW4gYXNuMQ0KPiA+IGJsb2IgdGhhdCBzdWNjZXNzZnVsbHkgZGVjb2RlcyBhbmQgaGF2ZSBkMmlf UEtDUzcoKSByZXR1cm4gYSB2YWxpZCBwb2ludGVyDQo+ID4gYW5kIGhhdmUgUEtDUzdfdHlwZV9p c19zaWduZWQoKSBhbHNvIHJldHVybiBzdWNjZXNzICBidXQgaGF2ZSBQa2NzNy0+ZC5zaWduDQo+ ID4gYmUgYSBOVUxMIHBvaW50ZXIuDQo+ID4NCj4gPiBMb29raW5nIGF0IGhvdyBQS0NTN192ZXJp ZnkoKSBbaW5zaWRlIG9mIE9wZW5TU0xdIGltcGxlbWVudHMgY2hlY2tpbmcgZm9yDQo+ID4gcGtj czcgc3RydWN0cyBpdCBkb2VzIHRoZSBmb2xsb3dpbmc6DQo+ID4gLSBjYWxsIFBLQ1M3X3R5cGVf aXNfc2lnbmVkKCkNCj4gPiAtIGNhbGwgUEtDUzdfZ2V0X2RldGFjaGVkKCkNCj4gPiBMb29raW5n IGludG8gaG93IFBLQ1M3X2dldF9kZXRhdGNoZWQoKSBpcyBpbXBsZW1lbnRlZCwgaXQgY2hlY2tz IHRvIHNlZSBpZg0KPiA+IHA3LT5kLnNpZ24gaXMgTlVMTCBvciBpZiBwNy0+ZC5zaWduLT5jb250 ZW50cy0+ZC5wdHIgaXMgTlVMTC4NCj4gPg0KPiA+IEFzIHN1Y2gsIHRoZSBmaXggaXMgdG8gZG8g dGhlIHNhbWUgYXMgT3BlblNTTCBhZnRlciBjYWxsaW5nIGQyaV9QS0NTNygpLg0KPiA+IC0gQWRk IGNhbGwgdG8gUEtTN19nZXRfZGV0YWNoZWQoKSB0byBleGlzdGluZyBlcnJvciBoYW5kbGluZw0K PiA+DQo+ID4gQ2M6IFhpYW95dSBMdSA8eGlhb3l1eC5sdUBpbnRlbC5jb20+DQo+ID4gQ2M6IEd1 b21pbiBKaWFuZyA8Z3VvbWluLmppYW5nQGludGVsLmNvbT4NCj4gPiBDYzogSmlld2VuIFlhbyA8 amlld2VuLnlhb0BpbnRlbC5jb20+DQo+ID4gQ2M6IExhc3psbyBFcnNlayA8bGVyc2VrQHJlZGhh dC5jb20+DQo+ID4gU2lnbmVkLW9mZi1ieTogSmlhbiBKIFdhbmcgPGppYW4uai53YW5nQGludGVs LmNvbT4NCj4gPiBSZXZpZXdlZC1ieTogTGFzemxvIEVyc2VrIDxsZXJzZWtAcmVkaGF0LmNvbT4N Cj4gPiAtLS0NCj4gPiAgQ3J5cHRvUGtnL0xpYnJhcnkvQmFzZUNyeXB0TGliL1BrL0NyeXB0QXV0 aGVudGljb2RlLmMgfCA0ICsrLS0NCj4gPiAgMSBmaWxlIGNoYW5nZWQsIDIgaW5zZXJ0aW9ucygr KSwgMiBkZWxldGlvbnMoLSkNCj4gPg0KPiA+IGRpZmYgLS1naXQgYS9DcnlwdG9Qa2cvTGlicmFy eS9CYXNlQ3J5cHRMaWIvUGsvQ3J5cHRBdXRoZW50aWNvZGUuYw0KPiBiL0NyeXB0b1BrZy9MaWJy YXJ5L0Jhc2VDcnlwdExpYi9Qay9DcnlwdEF1dGhlbnRpY29kZS5jDQo+ID4gaW5kZXggMjc3MmIx ZTJiZS4uYWUwZWU2MWZiNiAxMDA2NDQNCj4gPiAtLS0gYS9DcnlwdG9Qa2cvTGlicmFyeS9CYXNl Q3J5cHRMaWIvUGsvQ3J5cHRBdXRoZW50aWNvZGUuYw0KPiA+ICsrKyBiL0NyeXB0b1BrZy9MaWJy YXJ5L0Jhc2VDcnlwdExpYi9Qay9DcnlwdEF1dGhlbnRpY29kZS5jDQo+ID4gQEAgLTksNyArOSw3 IEBADQo+ID4gICAgQXV0aGVudGljb2RlVmVyaWZ5KCkgd2lsbCBnZXQgUEUvQ09GRiBBdXRoZW50 aWNvZGUgYW5kIHdpbGwgZG8gYmFzaWMgY2hlY2sNCj4gZm9yDQo+ID4gICAgZGF0YSBzdHJ1Y3R1 cmUuDQo+ID4NCj4gPiAtQ29weXJpZ2h0IChjKSAyMDExIC0gMjAxNSwgSW50ZWwgQ29ycG9yYXRp b24uIEFsbCByaWdodHMgcmVzZXJ2ZWQuPEJSPg0KPiA+ICtDb3B5cmlnaHQgKGMpIDIwMTEgLSAy MDE5LCBJbnRlbCBDb3Jwb3JhdGlvbi4gQWxsIHJpZ2h0cyByZXNlcnZlZC48QlI+DQo+ID4gIFNQ RFgtTGljZW5zZS1JZGVudGlmaWVyOiBCU0QtMi1DbGF1c2UtUGF0ZW50DQo+ID4NCj4gPiAgKiov DQo+IA0KPiBJdCdzIHByb2JhYmx5IGJlc3QgdG8gYnVtcCB0aGUgKEMpIGRhdGUgdG8gMjAyMDsg aWYgeW91IG11c3QgdXBkYXRlIHRoZQ0KPiAoQykgbGluZSBpbiB0aGUgZmlyc3QgcGxhY2UuDQo+ IA0KPiBPdGhlcndpc2UsIHRoaXMgcGF0Y2ggc2VlbXMgaWRlbnRpY2FsIHRvIHdoYXQgSSByZXZp ZXdlZCBpbg0KPiA8aHR0cHM6Ly9idWd6aWxsYS50aWFub2NvcmUub3JnL3Nob3dfYnVnLmNnaT9p ZD0xOTE0I2M2Piwgc28gbXkgUi1iIHN0YW5kcy4NCj4gDQoNClRoYW5rcyBmb3IgY2F0Y2hpbmcg dGhpcy4gSSdsbCB1cGRhdGUgaXQgYmVmb3JlIHB1c2hpbmcuDQoNClJlZ2FyZHMsDQpKaWFuDQoN Cj4gVGhhbmtzDQo+IExhc3psbw0KPiANCj4gPiBAQCAtMTAwLDcgKzEwMCw3IEBAIEF1dGhlbnRp Y29kZVZlcmlmeSAoDQo+ID4gICAgLy8NCj4gPiAgICAvLyBDaGVjayBpZiBpdCdzIFBLQ1MjNyBT aWduZWQgRGF0YSAoZm9yIEF1dGhlbnRpY29kZSBTY2VuYXJpbykNCj4gPiAgICAvLw0KPiA+IC0g IGlmICghUEtDUzdfdHlwZV9pc19zaWduZWQgKFBrY3M3KSkgew0KPiA+ICsgIGlmICghUEtDUzdf dHlwZV9pc19zaWduZWQgKFBrY3M3KSB8fCBQS0NTN19nZXRfZGV0YWNoZWQgKFBrY3M3KSkgew0K PiA+ICAgICAgZ290byBfRXhpdDsNCj4gPiAgICB9DQo+ID4NCj4gPg0KPiANCj4gDQo+IA0KPiAN Cj4gDQoNCg==