)]}'
{
  "commit": "6a3fb7e0111bbd564b4244a9cbd458995fde684c",
  "tree": "7b1993851ce4edc070c20ac9bec48b0c7a934712",
  "parents": [
    "c41279f7b01f176b8c924f563cd6ae833f176be2"
  ],
  "author": {
    "name": "Kajal Agarwal",
    "email": "kajal.agarwal@arm.com",
    "time": "Wed Oct 21 14:50:25 2026 +0000"
  },
  "committer": {
    "name": "mergify[bot]",
    "email": "37929162+mergify[bot]@users.noreply.github.com",
    "time": "Thu Oct 22 18:23:18 2026 +0000"
  },
  "message": "ArmPkg/ArmPsciMpServicesDxe: Validate processor index before access\n\nEnableDisableAP() reads the target processor\u0027s status before checking\nwhether ProcessorNumber is within the per-processor data array. An invalid\nindex can therefore cause an out-of-bounds read instead of returning\nEFI_NOT_FOUND.\n\nMove the per-processor data access after the existing caller, processor\nindex and BSP checks. Read StatusFlag through the validated CpuData pointer\nto preserve the existing behavior for valid APs.\n\nSigned-off-by: Kajal Agarwal \u003ckajal.agarwal@arm.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "51ccc3f8d0e788db0ec839a57be8aaebf6b30daa",
      "old_mode": 33188,
      "old_path": "ArmPkg/Drivers/ArmPsciMpServicesDxe/ArmPsciMpServicesDxe.c",
      "new_id": "5debe2d0784b9bdbc55e4b9e6a36234bd7830554",
      "new_mode": 33188,
      "new_path": "ArmPkg/Drivers/ArmPsciMpServicesDxe/ArmPsciMpServicesDxe.c"
    }
  ]
}