UEFITool 0.19.4

- solved a possible crash of EFI11/Tiano decompression routine

Tiano/EfiTianoDecompress.c

@@ -681,6 +681,12 @@ Returns: (VOID)
 
             DataIdx = Sd->mOutBuf - DecodeP(Sd) - 1;
 
+            // Check to prevent possible heap corruption
+            if (DataIdx >= Sd->mOrigSize - BytesRemain) {
+                Sd->mBadTableFlag = 1;
+                return;
+            }
+
             BytesRemain--;
             while ((INT16)(BytesRemain) >= 0) {
                 Sd->mDstBase[Sd->mOutBuf++] = Sd->mDstBase[DataIdx++];
@@ -989,4 +995,4 @@ EFI_INVALID_PARAMETER - The source data is corrupted
         ScratchSize,
         2
         );
-}
+}

ffsengine.cpp

@@ -2146,6 +2146,7 @@ UINT8 FfsEngine::decompress(const QByteArray & compressedData, const UINT8 compr
         scratch = new UINT8[scratchSize];
 
         // Decompress section data
+
         //TODO: separate EFI1.1 from Tiano another way
         // Try Tiano decompression first
         if (ERR_SUCCESS != TianoDecompress(data, dataSize, decompressed, decompressedSize, scratch, scratchSize)) {
@@ -2153,6 +2154,7 @@ UINT8 FfsEngine::decompress(const QByteArray & compressedData, const UINT8 compr
             if (ERR_SUCCESS != EfiDecompress(data, dataSize, decompressed, decompressedSize, scratch, scratchSize)) {
                 if (algorithm)
                     *algorithm = COMPRESSION_ALGORITHM_UNKNOWN;
+
                 delete[] decompressed;
                 delete[] scratch;
                 return ERR_STANDARD_DECOMPRESSION_FAILED;

uefitool.cpp

@@ -17,7 +17,7 @@
 UEFITool::UEFITool(QWidget *parent) :
 QMainWindow(parent),
 ui(new Ui::UEFITool), 
-version(tr("0.19.3"))
+version(tr("0.19.4"))
 {
     clipboard = QApplication::clipboard();