fs/hfs: Fix stack OOB write with grub_strcpy()
authorB Horn <b@horn.uk>
Sun, 12 May 2024 01:48:33 +0000 (02:48 +0100)
committerFelix Zielcke <fzielcke@z-51.de>
Thu, 3 Jul 2025 16:35:51 +0000 (18:35 +0200)
commit60508c8029b5e8f1f2e515681019f8f7619dad95
treec733e2439236a700fd10cff0a8cbfdde2dff4ce8
parent094e68ad5ce85b351ecb4fe0ae7e06601ec61eda
fs/hfs: Fix stack OOB write with grub_strcpy()

Replaced with grub_strlcpy().

Fixes: CVE-2024-45782
Fixes: CVE-2024-56737
Fixes: https://savannah.gnu.org/bugs/?66599
Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
grub-core/fs/hfs.c