tianocore / edk2-redfish-client

Utilizes the EFI protocols provided by EDK2 Redfish Foundation to communicate with the Redfish service for creating, consuming, and updating the Redfish properties which are managed by firmware.
Other
7 stars 5 forks source link

RedfishClientPkg/RedfishFeatureUtilityLib: fix memory corruption issue #94

Closed nicklela closed 3 months ago

nicklela commented 3 months ago

Description

JsonValue in response payload is incorrectly released in GetHttpResponseEtag() and GetHttpResponseLocation() functions. Redfish response instance will be released by caller and this causes double free issue.

Add status code NULL pointer check before accessing status code.

How This Was Tested

Test on server platform