From: Jan Janssen <medhefgo@web.de>
Date: Thu, 24 Mar 2022 09:35:30 +0000 (+0100)
Subject: boot: Restrict block IO buf size
X-Git-Tag: v251-rc2~164^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5ec92856113867771a2017c4da4909815326624f;p=thirdparty%2Fsystemd.git

boot: Restrict block IO buf size
---

diff --git a/src/boot/efi/boot.c b/src/boot/efi/boot.c
index e7e5a6a367a..96e56a78391 100644
--- a/src/boot/efi/boot.c
+++ b/src/boot/efi/boot.c
@@ -2042,10 +2042,10 @@ static EFI_STATUS boot_windows_bitlocker(void) {
         for (UINTN i = 0; i < n_handles; i++) {
                 EFI_BLOCK_IO *block_io;
                 err = BS->HandleProtocol(handles[i], &BlockIoProtocol, (void **) &block_io);
-                if (EFI_ERROR(err) || block_io->Media->BlockSize < 512)
+                if (EFI_ERROR(err) || block_io->Media->BlockSize < 512 || block_io->Media->BlockSize > 4096)
                         continue;
 
-                CHAR8 buf[block_io->Media->BlockSize];
+                CHAR8 buf[4096];
                 err = block_io->ReadBlocks(block_io, block_io->Media->MediaId, 0, sizeof(buf), buf);
                 if (EFI_ERROR(err))
                         continue;