sysadmin/ipxe
1
0
Fork 0
mirror of https://github.com/ipxe/ipxe synced 2026-02-02 07:52:48 +03:00
Code Issues Packages Projects Releases Wiki Activity

[smbios] Avoid reading beyond end of constructed SMBIOS setting

Browse Source 
Signed-off-by: Michael Brown <mcb30@ipxe.org>
This commit is contained in:
Michael Brown
2024-07-31 16:20:37 +01:00
parent 0dc8933f67
commit 60d682409e
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/interface/smbios/smbios_settings.c
View File

@@ -130,6 +130,13 @@ static int smbios_fetch ( struct settings *settings __unused,
return rc; return rc;
} }
/* Limit length */
if ( tag_offset > sizeof ( buf ) ) {
tag_len = 0;
} else if ( ( tag_offset + tag_len ) > sizeof ( buf ) ) {
tag_len = ( sizeof ( buf ) - tag_offset );
}
/* Mangle UUIDs if necessary. iPXE treats UUIDs as /* Mangle UUIDs if necessary. iPXE treats UUIDs as
* being in network byte order (big-endian). SMBIOS * being in network byte order (big-endian). SMBIOS
* specification version 2.6 states that UUIDs are * specification version 2.6 states that UUIDs are