Lidong Chen 86e8f2c4b0 osdep/unix/hostdisk: Fix signed integer overflow ...

The potential overflow issue arises at "size += ret;" because "size"
is of type ssize_t (signed) while "len" is size_t (unsigned). Repeatedly
adding read sizes, "ret", to "size" can potentially exceed the maximum
value of ssize_t, causing it to overflow into a negative or incorrect value.
The fix is to ensure "len" is within the range of SSIZE_MAX.

Fixes: CID 473850
Fixes: CID 473863

Signed-off-by: Lidong Chen <lidong.chen@oracle.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>

2025-06-12 18:56:24 +02:00

..

compress.c

osdep: Remove trailing whitespaces

2022-03-14 15:58:46 +01:00

config.c

config: Where present, ensure config-util.h precedes config.h

2022-03-21 18:47:16 +01:00

cputime.c

config: Where present, ensure config-util.h precedes config.h

2022-03-21 18:47:16 +01:00

dl.c

config: Where present, ensure config-util.h precedes config.h

2022-03-21 18:47:16 +01:00

emuconsole.c

config: Where present, ensure config-util.h precedes config.h

2022-03-21 18:47:16 +01:00

exec.c

osdep: Remove trailing whitespaces

2022-03-14 15:58:46 +01:00

getroot.c

osdep/unix/getroot: Clean up redundant code

2024-01-25 18:11:03 +01:00

hostdisk.c

osdep/unix/hostdisk: Fix signed integer overflow

2025-06-12 18:56:24 +02:00

password.c

unix: do not close stdin in grub_passwd_get

2015-11-18 22:23:58 +03:00

platform.c

osdep: Remove trailing whitespaces

2022-03-14 15:58:46 +01:00

random.c

Add a wrapper for fopen. On unix-like systems just pass-through. On

2013-10-13 20:36:28 +02:00

relpath.c

osdep: Remove trailing whitespaces

2022-03-14 15:58:46 +01:00

sleep.c

Move sleep routines to grub-core/osdep.

2013-10-08 17:38:46 +02:00