Re: [edk2-devel] [PATCH EDK2 v1 1/1] EmulatorPkg/host: fix overflow in Mult

["Laszlo Ersek" <lersek@redhat.com>]

Ray,

On 09/01/20 12:58, wenyi,xie via groups.io wrote:
> REF:https://bugzilla.tianocore.org/show_bug.cgi?id=2947
> 
> When calculating memory regions and store the information in the
> gSystemMemory in file WinHost.c, the code below will cause overflow,
> because _wtoi (MemorySizeStr) return an int value and SIZE_1MB is
> also an int value, if MemorySizeStr is lager for example 2048, then
> result of multiplication will overflow.
> 
> for (Index = 0, Done = FALSE; !Done; Index++) {
>   //
>   // Save the size of the memory and make a Unicode filename SystemMemory00
>   //
>   gSystemMemory[Index].Size = _wtoi (MemorySizeStr) * SIZE_1MB;
> 
> Cc: Jordan Justen <jordan.l.justen@intel.com>
> Cc: Andrew Fish <afish@apple.com>
> Cc: Ray Ni <ray.ni@intel.com>
> Signed-off-by: Wenyi Xie <xiewenyi2@huawei.com>
> ---
>  EmulatorPkg/Win/Host/WinHost.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/EmulatorPkg/Win/Host/WinHost.c b/EmulatorPkg/Win/Host/WinHost.c
> index 0838c56ddea8..876cb8d4be8b 100644
> --- a/EmulatorPkg/Win/Host/WinHost.c
> +++ b/EmulatorPkg/Win/Host/WinHost.c
> @@ -577,7 +577,7 @@ Returns:
>      //
>      // Save the size of the memory and make a Unicode filename SystemMemory00, ...
>      //
> -    gSystemMemory[Index].Size = _wtoi (MemorySizeStr) * SIZE_1MB;
> +    gSystemMemory[Index].Size = ((UINT64)_wtoi (MemorySizeStr)) * ((UINT64)SIZE_1MB);
>  
>      //
>      // Find the next region
> 

if you'd like this fix to be in edk2-stable202008, then please approve
the patch as soon as you can.

Thanks!
Laszlo