[AzihsmDxe] Added out buf len guard for DecodeBytes and DecodeBytesPadded

[Rajesh Gali (rajesh-gali)]

This pull request strengthens buffer overrun protections in the MBOR decoding routines by ensuring decoded data does not exceed the capacity of destination buffers. It does so by updating function signatures to accept buffer sizes, adding bounds checks, and updating all affected call sites and documentation accordingly.

API and bounds checking updates:

• Updated the signatures of AziHsmMborDecodeBytes and AziHsmMborDecodePaddedBytes in both AziHsmMbor.c and AziHsmMbor.h to require a BufferSize parameter, reflecting the capacity of the destination buffer. [1] [2] [3] [4]
• Added explicit checks in both decoding functions to verify that the decoded length does not exceed the provided buffer size, returning EFI_BUFFER_TOO_SMALL and logging an error if the check fails. [1] [2]

Call site adjustments:

• Updated all calls to AziHsmMborDecodeBytes and AziHsmMborDecodePaddedBytes in AziHsmDdi.c to pass the appropriate buffer size, ensuring that the new bounds checks are enforced throughout the codebase. [1] [2] [3]

Documentation improvements:

• Updated function documentation in AziHsmMbor.h to describe the new BufferSize parameter and clarify the conditions under which EFI_BUFFER_TOO_SMALL is returned. [1] [2]