f725fa7cb2
This modifies most of the places we do some form of:
X = malloc(Y * Z);
to use calloc(Y, Z) instead.
Among other issues, this fixes:
- allocation of integer overflow in grub_png_decode_image_header()
reported by Chris Coulson,
- allocation of integer overflow in luks_recover_key()
reported by Chris Coulson,
- allocation of integer overflow in grub_lvm_detect()
reported by Chris Coulson.
Fixes: CVE-2020-14308
Signed-off-by: Peter Jones <pjones@redhat.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
106 lines
2.5 KiB
C
106 lines
2.5 KiB
C
/*
|
|
* GRUB -- GRand Unified Bootloader
|
|
* Copyright (C) 2010,2012,2013 Free Software Foundation, Inc.
|
|
*
|
|
* GRUB is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* GRUB is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with GRUB. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
|
|
#include <config.h>
|
|
|
|
#include <grub/util/misc.h>
|
|
#include <grub/i18n.h>
|
|
#include <grub/term.h>
|
|
#include <grub/font.h>
|
|
#include <grub/gfxmenu_view.h>
|
|
#include <grub/color.h>
|
|
#include <grub/util/install.h>
|
|
#include <grub/command.h>
|
|
#include <grub/env.h>
|
|
|
|
#define _GNU_SOURCE 1
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <unistd.h>
|
|
#include <errno.h>
|
|
|
|
#include "progname.h"
|
|
|
|
void grub_file_init (void);
|
|
void grub_host_init (void);
|
|
void grub_hostfs_init (void);
|
|
|
|
int
|
|
main (int argc, char *argv[])
|
|
{
|
|
char **argv2;
|
|
int i;
|
|
int had_file = 0, had_separator = 0;
|
|
grub_command_t cmd;
|
|
grub_err_t err;
|
|
|
|
grub_util_host_init (&argc, &argv);
|
|
|
|
argv2 = xcalloc (argc, sizeof (argv2[0]));
|
|
|
|
if (argc == 2 && strcmp (argv[1], "--version") == 0)
|
|
{
|
|
printf ("%s (%s) %s\n", program_name, PACKAGE_NAME, PACKAGE_VERSION);
|
|
}
|
|
|
|
for (i = 1; i < argc; i++)
|
|
{
|
|
if (argv[i][0] == '-' && argv[i][1] == '-'
|
|
&& argv[i][2] == '\0' && !had_separator)
|
|
{
|
|
had_separator = 1;
|
|
argv2[i - 1] = xstrdup (argv[i]);
|
|
continue;
|
|
}
|
|
if (argv[i][0] == '-' && !had_separator)
|
|
{
|
|
argv2[i - 1] = xstrdup (argv[i]);
|
|
continue;
|
|
}
|
|
if (had_file)
|
|
grub_util_error ("one argument expected");
|
|
argv2[i - 1] = grub_canonicalize_file_name (argv[i]);
|
|
if (!argv2[i - 1])
|
|
{
|
|
grub_util_error (_("cannot open `%s': %s"), argv[i],
|
|
strerror (errno));
|
|
}
|
|
had_file = 1;
|
|
}
|
|
argv2[i - 1] = NULL;
|
|
|
|
/* Initialize all modules. */
|
|
grub_init_all ();
|
|
grub_file_init ();
|
|
grub_hostfs_init ();
|
|
grub_host_init ();
|
|
|
|
grub_env_set ("root", "host");
|
|
|
|
cmd = grub_command_find ("file");
|
|
if (! cmd)
|
|
grub_util_error (_("can't find command `%s'"), "file");
|
|
|
|
err = (cmd->func) (cmd, argc - 1, argv2);
|
|
if (err && err != GRUB_ERR_TEST_FAILURE)
|
|
grub_print_error ();
|
|
return err;
|
|
}
|