fs/hfs: Fix stack OOB write with grub_strcpy()
authorB Horn <b@horn.uk>
Sun, 12 May 2024 01:48:33 +0000 (02:48 +0100)
committerFelix Zielcke <fzielcke@z-51.de>
Wed, 11 Jun 2025 15:42:34 +0000 (17:42 +0200)
commit77c09b81b9194fcd624f9bbe6a67c1b27f2b323a
treed20b0a2b1860391dc0a2b536c781a9308dabe20b
parent6d2cb4a9bb98f9e0a26b08bcdd8614677149b533
fs/hfs: Fix stack OOB write with grub_strcpy()

Replaced with grub_strlcpy().

Fixes: CVE-2024-45782
Fixes: CVE-2024-56737
Fixes: https://savannah.gnu.org/bugs/?66599
Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
grub-core/fs/hfs.c