2 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
B Horn	c1a291b01f	fs/ufs: Fix a heap OOB write ... grub_strcpy() was used to copy a symlink name from the filesystem image to a heap allocated buffer. This led to a OOB write to adjacent heap allocations. Fix by using grub_strlcpy(). Fixes: CVE-2024-45781 Reported-by: B Horn <b@horn.uk> Signed-off-by: B Horn <b@horn.uk> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>	2024-12-02 17:32:51 +01:00
B Horn	ea703528a8	misc: Implement grub_strlcpy() ... grub_strlcpy() acts the same way as strlcpy() does on most *NIX, returning the length of src and ensuring dest is always NUL terminated except when size is 0. Signed-off-by: B Horn <b@horn.uk> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>	2024-12-02 17:32:51 +01:00