Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1386270
| From | Matt Fleming <matt@codeblueprint.co.uk> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | [GIT PULL] EFI urgent fix |
| Date | 2016-04-25 13:30 +0200 |
| Message-ID | <rrMSe-4Wa-13@gated-at.bofh.it> (permalink) |
| Organization | linux.* mail to news gateway |
Folks, please pull the following fix from Laszlo that ensures we don't
perform an out-of-bounds access when matching EFI variable names
against the variable protection whitelist.
The following changes since commit c3b46c73264b03000d1e18b22f5caf63332547c9:
Linux 4.6-rc4 (2016-04-17 19:13:32 -0700)
are available in the git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi.git tags/efi-urgent
for you to fetch changes up to 630ba0cc7a6dbafbdee43795617c872b35cde1b4:
efi: Fix out-of-bounds read in variable_matches() (2016-04-22 19:41:41 +0100)
----------------------------------------------------------------
* Avoid out-of-bounds access in the efivars code when performing
string matching on converted EFI variable names - Laszlo Ersek
----------------------------------------------------------------
Laszlo Ersek (1):
efi: Fix out-of-bounds read in variable_matches()
drivers/firmware/efi/vars.c | 37 ++++++++++++++++++++++++++-----------
1 file changed, 26 insertions(+), 11 deletions(-)
Back to linux.kernel | Previous | Next — Next in thread | Find similar | Unroll thread
[GIT PULL] EFI urgent fix Matt Fleming <matt@codeblueprint.co.uk> - 2016-04-25 13:30 +0200 [PATCH] efi: Fix out-of-bounds read in variable_matches() Matt Fleming <matt@codeblueprint.co.uk> - 2016-04-25 13:30 +0200 Re: [GIT PULL] EFI urgent fix Ingo Molnar <mingo@kernel.org> - 2016-04-25 17:30 +0200
csiph-web