fs/tar: Initialize name in grub_cpio_find_file()
authorB Horn <b@horn.uk>
Sun, 12 May 2024 01:47:54 +0000 (02:47 +0100)
committerFelix Zielcke <fzielcke@z-51.de>
Thu, 3 Jul 2025 16:35:51 +0000 (18:35 +0200)
commit290d25741bc8d692a5bd363b5adc9e07187a3fd6
tree761a9fa359560a93a7ae710791242e5f5dc642fb
parent60508c8029b5e8f1f2e515681019f8f7619dad95
fs/tar: Initialize name in grub_cpio_find_file()

It was possible to iterate through grub_cpio_find_file() without
allocating name and not setting mode to GRUB_ARCHELP_ATTR_END, which
would cause the uninitialized value for name to be used as an argument
for canonicalize() in grub_archelp_dir().

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name fs-tar-Initialize-name-in-grub_cpio_find_file.patch
grub-core/fs/tar.c