summaryrefslogtreecommitdiff
path: root/doc/develop
diff options
context:
space:
mode:
authorVincent StehlĂ© <[email protected]>2026-01-27 17:18:43 +0100
committerHeinrich Schuchardt <[email protected]>2026-02-06 09:32:32 +0100
commitbeec6834544d8288d34ef0cd8e3c40aa890a8a10 (patch)
tree6c92b3ed432c1e6ce295749981fc6af641674438 /doc/develop
parentb5213bbfdcb1812be510427857827ee8becb9f8f (diff)
efi_loader: fix use after free in efi_exit() with tcg2
The efi_exit() function frees the loaded image memory by calling efi_delete_image(). However, when CONFIG_EFI_TCG2_PROTOCOL is enabled, the image_obj->image_type structure member is accessed after the memory has been freed. Fix this by performing the tcg2 measurement before the image deletion. Fixes: 8fc4e0b4273a ("efi_loader: add boot variable measurement") Suggested-by: Ilias Apalodimas <[email protected]> Signed-off-by: Vincent StehlĂ© <[email protected]> Cc: Heinrich Schuchardt <[email protected]> Cc: Tom Rini <[email protected]> Cc: Masahisa Kojima <[email protected]> Acked-by: Masahisa Kojima <[email protected]> Reviewed-by: Heinrich Schuchardt <[email protected]>
Diffstat (limited to 'doc/develop')
0 files changed, 0 insertions, 0 deletions