Possible memory corruption in LAN91xDxe driver

Bug #1304406 reported by Mark Salter
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Linaro UEFI
New
Undecided
Roy Franz

Bug Description

While looking in LAN91xDxe.c for another problem, I observed a
possible memory corruption problem:

SnpStatistics (
  IN EFI_SIMPLE_NETWORK_PROTOCOL* Snp,
  IN BOOLEAN Reset,
  IN OUT UINTN *StatSize,
      OUT EFI_NETWORK_STATISTICS *Statistics
  )
{
...
   // Fill in the statistics
  CopyMem(&Statistics, &LanDriver->Stats, sizeof(EFI_NETWORK_STATISTICS));
...
}

Shouldn't that be:

  CopyMem(Statistics, &LanDriver->Stats, sizeof(EFI_NETWORK_STATISTICS));

Revision history for this message
Leif Lindholm (leif-lindholm) wrote :

Again, Steve, please have a look for 2014.05.

Changed in linaro-uefi:
assignee: nobody → Steven Kinney (steven-kinney)
Ilias Biris (ibiris)
Changed in linaro-uefi:
assignee: Steven Kinney (steven-kinney) → Roy Franz (roy-franz)
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.