Lncvrt/grub
1
0 Fork 0
mirror of https://git.savannah.gnu.org/git/grub.git synced 2026-10-21 14:59:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
11,460 Commits 28 Branches 23 Tags
b71ae6db282fa25ca4ea6f8169161a2131ee6b9a
Commit Graph
2 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jamie 7debdce1e9 commands/usbtest: Ensure string length is sufficient in usb string processing 
If descstrp->length is less than 2 this will result in underflow in
"descstrp->length / 2 - 1" math. Let's fix the check to make sure the
value is sufficient.

Signed-off-by: Jamie <volticks@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
 2025-11-18 14:34:44 +01:00
Jamie 549a9cc372 commands/usbtest: Use correct string length field 
An incorrect length field is used for buffer allocation. This leads to
grub_utf16_to_utf8() receiving an incorrect/different length and possibly
causing OOB write. This makes sure to use the correct length.

Fixes: CVE-2025-61661

Reported-by: Jamie <volticks@gmail.com>
Signed-off-by: Jamie <volticks@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
 2025-11-18 14:34:44 +01:00