fs/tar: Initialize name in grub_cpio_find_file()
authorB Horn <b@horn.uk>
Sun, 12 May 2024 01:47:54 +0000 (02:47 +0100)
committerMiao Wang <shankerwangmiao@gmail.com>
Sun, 15 Feb 2026 13:50:20 +0000 (13:50 +0000)
commitee1fadb18da48b4827202c2c56dc9e89093a1a20
tree2fa7175d4b7347f309e05c1ae0727efcf7647946
parenta9dffd4298567d616d8fc558963220d3e388f7f4
fs/tar: Initialize name in grub_cpio_find_file()

It was possible to iterate through grub_cpio_find_file() without
allocating name and not setting mode to GRUB_ARCHELP_ATTR_END, which
would cause the uninitialized value for name to be used as an argument
for canonicalize() in grub_archelp_dir().

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name fs-tar-Initialize-name-in-grub_cpio_find_file.patch
grub-core/fs/tar.c