B Horn d8a937ccae script/execute: Limit the recursion depth ...

If unbounded recursion is allowed it becomes possible to collide the
stack with the heap. As UEFI firmware often lacks guard pages this
becomes an exploitable issue as it is possible in some cases to do
a controlled overwrite of a section of this heap region with
arbitrary data.

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>

2025-01-23 16:22:47 +01:00

..

argv.c

malloc: Use overflow checking primitives where we do complex allocations

2020-07-29 16:55:47 +02:00

execute.c

script/execute: Limit the recursion depth

2025-01-23 16:22:47 +01:00

function.c

script: Avoid a use-after-free when redefining a function during execution

2020-07-29 16:55:48 +02:00

lexer.c

script: Remove trailing whitespaces

2022-03-14 15:59:45 +01:00

main.c

Remove nested functions from script reading and parsing.

2013-01-15 12:03:25 +00:00

parser.y

script: Do not allow a delimiter between function name and block start

2020-09-18 22:31:30 +02:00

script.c

Remove nested functions from script reading and parsing.

2013-01-15 12:03:25 +00:00

yylex.l

yylex: Make lexer fatal errors actually be fatal

2020-07-29 16:55:47 +02:00