]> git.ipfire.org Git - thirdparty/grub.git/commit
util/resolve: Do not read past the end of the array in read_dep_list()
authorGlenn Washburn <development@efficientek.com>
Thu, 13 Jan 2022 02:55:00 +0000 (20:55 -0600)
committerDaniel Kiper <daniel.kiper@oracle.com>
Tue, 8 Feb 2022 12:39:01 +0000 (13:39 +0100)
commitddf47bdb042ab0ea52bc713b5f80cc48543f0469
tree3414f29d8d9a79ad474b33ae0b8609e86820adfc
parentfcf2594ca12777ffd717819663e1c4b3d737c928
util/resolve: Do not read past the end of the array in read_dep_list()

If the last non-NULL byte of "buf" is not a white-space character (such as
when a read line is longer than the size of "buf"), then "p" will eventually
point to the byte after the last byte in "buf". After which "p" will be
dereferenced in the while conditional leading to an out of bounds read. Make
sure that "p" is inside "buf" before dereferencing it.

Signed-off-by: Glenn Washburn <development@efficientek.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
util/resolve.c