fs/tar: Initialize name in grub_cpio_find_file()
authorB Horn <b@horn.uk>
Sun, 12 May 2024 01:47:54 +0000 (02:47 +0100)
committerFelix Zielcke <fzielcke@z-51.de>
Wed, 11 Jun 2025 15:42:34 +0000 (17:42 +0200)
commit100412fb9b1994b9052cebadda63cb0ce3b3b82b
tree079fd032c0190ffd03f74974536728a989dcea7d
parent77c09b81b9194fcd624f9bbe6a67c1b27f2b323a
fs/tar: Initialize name in grub_cpio_find_file()

It was possible to iterate through grub_cpio_find_file() without
allocating name and not setting mode to GRUB_ARCHELP_ATTR_END, which
would cause the uninitialized value for name to be used as an argument
for canonicalize() in grub_archelp_dir().

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name fs-tar-Initialize-name-in-grub_cpio_find_file.patch
grub-core/fs/tar.c