]> git.ipfire.org Git - thirdparty/grub.git/commit
fs/ntfs: Correct possible access violations
authorAndrew Hamilton <adhamilt@gmail.com>
Thu, 22 May 2025 03:20:39 +0000 (22:20 -0500)
committerDaniel Kiper <daniel.kiper@oracle.com>
Thu, 29 May 2025 13:45:24 +0000 (15:45 +0200)
commit8c95307a0b690dc2d0aba012878f9dca5a50f2cc
tree3b5b648671188dc17283850bcfc6b10441e83a68
parent06914b6141890c8e783868df99082e941d981698
fs/ntfs: Correct possible access violations

Correct several memory access violations found during fuzzing.
The issues fixed here could occur if certain specific malformed NTFS
file systems were presented to GRUB. Currently, GRUB does not allow NTFS
file system access when lockdown mode is enforced, so these should be of
minimal impact.

The changes made in this commit generally correct issues where pointers
into data buffers were being calculated using lengths read from the
NTFS file system without sufficient bounds/sanity checking; or
attempting to access elements of a structure to free them, when the
structure pointer is NULL.

Signed-off-by: Andrew Hamilton <adhamilt@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
grub-core/fs/ntfs.c