]> dgit.raspbian.org Git - grub2.git/commit
fs/tar: Initialize name in grub_cpio_find_file()
authorB Horn <b@horn.uk>
Sun, 12 May 2024 01:47:54 +0000 (02:47 +0100)
committerAurelien Jarno <aurel32@debian.org>
Thu, 30 Apr 2026 19:02:01 +0000 (21:02 +0200)
commit6cb74ee3cb9eb01d38432698d04ec48966ced05c
tree4711ef459fbc33ae74d6f41ae32598a5a1767c6f
parentf47568420a41aa50e9bd6d81261b4304073c341e
fs/tar: Initialize name in grub_cpio_find_file()

It was possible to iterate through grub_cpio_find_file() without
allocating name and not setting mode to GRUB_ARCHELP_ATTR_END, which
would cause the uninitialized value for name to be used as an argument
for canonicalize() in grub_archelp_dir().

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name fs-tar-Initialize-name-in-grub_cpio_find_file.patch
grub-core/fs/tar.c