diff options
| author | Heinrich Schuchardt <xypron.glpk@gmx.de> | 2018-09-23 04:08:09 +0200 |
|---|---|---|
| committer | Alexander Graf <agraf@suse.de> | 2018-09-23 21:55:31 +0200 |
| commit | 506dc52d5da1b6fea15da39904487c4b0218eaf2 (patch) | |
| tree | 80a5c8fc3587a497aec8f2bd1215e15eb369610b /cmd/bootefi.c | |
| parent | 60ce592cd090c9f79ae378ed88e811fe70307ebd (diff) | |
efi_loader: avoid out of bound access in efi_get_variable()
In efi_get_variable() a string is longer than the allocated space which
results in overwriting the linked list of malloc().
The prefixes used for variables are 41 characters long, e.g.
efi_67029eb5-0af2-f6b1-da53-fcb566dd1ce6_
Change PREFIX_LEN to 41.
Fixes: faff21556748 ("efi_loader: remove limit on variable length")
Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
Signed-off-by: Alexander Graf <agraf@suse.de>
Diffstat (limited to 'cmd/bootefi.c')
0 files changed, 0 insertions, 0 deletions