EFI: don't leak heap contents through XEN_EFI_get_next_variable_name
authorJan Beulich <jbeulich@suse.com>
Thu, 5 Mar 2020 10:33:59 +0000 (11:33 +0100)
committerJan Beulich <jbeulich@suse.com>
Thu, 5 Mar 2020 10:33:59 +0000 (11:33 +0100)
commit8348cc77e6744a377ffd52c914f08e0dcc4074b6
tree153a24372e751edb009ecc9761cda02514f40e6b
parenta4f502e03023253a14fe1ed06ab7011a0f08e647
EFI: don't leak heap contents through XEN_EFI_get_next_variable_name

Commit 1f4eb9d27d0e ("EFI: fix getting EFI variable list on some
systems") switched to using the caller provided size for the copy-out
without making sure the copied buffer is properly scrubbed.

Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: George Dunlap <george.dunlap@citrix.com>
master commit: 4783ee894f6bfb0f4deec9f1fe8e7faceafaa1a2
master date: 2020-02-06 09:52:33 +0100
xen/common/efi/runtime.c