Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1386270

[GIT PULL] EFI urgent fix

From Matt Fleming <matt@codeblueprint.co.uk>
Newsgroups linux.kernel
Subject [GIT PULL] EFI urgent fix
Date 2016-04-25 13:30 +0200
Message-ID <rrMSe-4Wa-13@gated-at.bofh.it> (permalink)
Organization linux.* mail to news gateway

Show all headers | View raw


Folks, please pull the following fix from Laszlo that ensures we don't
perform an out-of-bounds access when matching EFI variable names
against the variable protection whitelist.

The following changes since commit c3b46c73264b03000d1e18b22f5caf63332547c9:

  Linux 4.6-rc4 (2016-04-17 19:13:32 -0700)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi.git tags/efi-urgent

for you to fetch changes up to 630ba0cc7a6dbafbdee43795617c872b35cde1b4:

  efi: Fix out-of-bounds read in variable_matches() (2016-04-22 19:41:41 +0100)

----------------------------------------------------------------
 * Avoid out-of-bounds access in the efivars code when performing
   string matching on converted EFI variable names - Laszlo Ersek

----------------------------------------------------------------
Laszlo Ersek (1):
      efi: Fix out-of-bounds read in variable_matches()

 drivers/firmware/efi/vars.c | 37 ++++++++++++++++++++++++++-----------
 1 file changed, 26 insertions(+), 11 deletions(-)

Back to linux.kernel | Previous | NextNext in thread | Find similar | Unroll thread


Thread

[GIT PULL] EFI urgent fix Matt Fleming <matt@codeblueprint.co.uk> - 2016-04-25 13:30 +0200
  [PATCH] efi: Fix out-of-bounds read in variable_matches() Matt Fleming <matt@codeblueprint.co.uk> - 2016-04-25 13:30 +0200
  Re: [GIT PULL] EFI urgent fix Ingo Molnar <mingo@kernel.org> - 2016-04-25 17:30 +0200

csiph-web