]> git.ipfire.org Git - thirdparty/systemd.git/commit
boot: add checks for invalid splash images in UKI
authorLuca Boccassi <luca.boccassi@gmail.com>
Fri, 13 Mar 2026 01:52:12 +0000 (01:52 +0000)
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Thu, 26 Mar 2026 10:52:23 +0000 (11:52 +0100)
commit186032e1ed93dde8671d4a3106715bd34f9181e0
treec9f575eb3a8be13677aabefefe47f2b6372db7fa
parent82d96837dbe96ddade8ade60393ce3b537ce5cde
boot: add checks for invalid splash images in UKI

A malformed bmp with 8bits depth but smaller color
map would cause out of bounds reads. This is not a real
problem as the image is signed, but better to be safe.

Reported on yeswehack.com as:
YWH-PGM9780-135

Follow-up for 0fa2cac4f0cdefaf1addd7f1fe0fd8113db9360b
src/boot/splash.c