f725fa7cb2
This modifies most of the places we do some form of:
X = malloc(Y * Z);
to use calloc(Y, Z) instead.
Among other issues, this fixes:
- allocation of integer overflow in grub_png_decode_image_header()
reported by Chris Coulson,
- allocation of integer overflow in luks_recover_key()
reported by Chris Coulson,
- allocation of integer overflow in grub_lvm_detect()
reported by Chris Coulson.
Fixes: CVE-2020-14308
Signed-off-by: Peter Jones <pjones@redhat.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
75 lines
1.7 KiB
C
75 lines
1.7 KiB
C
/*
|
|
* GRUB -- GRand Unified Bootloader
|
|
* Copyright (C) 2013 Free Software Foundation, Inc.
|
|
*
|
|
* GRUB is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* GRUB is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with GRUB. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include <grub/term.h>
|
|
#include <grub/mm.h>
|
|
#include <grub/dl.h>
|
|
#include <grub/test.h>
|
|
|
|
GRUB_MOD_LICENSE ("GPLv3+");
|
|
|
|
static int *seq;
|
|
static int seqptr, nseq;
|
|
static struct grub_term_input *saved;
|
|
static int fake_input;
|
|
|
|
static int
|
|
fake_getkey (struct grub_term_input *term __attribute__ ((unused)))
|
|
{
|
|
if (seq && seqptr < nseq)
|
|
return seq[seqptr++];
|
|
return -1;
|
|
}
|
|
|
|
static struct grub_term_input fake_input_term =
|
|
{
|
|
.name = "fake",
|
|
.getkey = fake_getkey
|
|
};
|
|
|
|
void
|
|
grub_terminal_input_fake_sequence (int *seq_in, int nseq_in)
|
|
{
|
|
if (!fake_input)
|
|
saved = grub_term_inputs;
|
|
if (seq)
|
|
grub_free (seq);
|
|
seq = grub_calloc (nseq_in, sizeof (seq[0]));
|
|
if (!seq)
|
|
return;
|
|
|
|
grub_term_inputs = &fake_input_term;
|
|
grub_memcpy (seq, seq_in, nseq_in * sizeof (seq[0]));
|
|
|
|
nseq = nseq_in;
|
|
seqptr = 0;
|
|
fake_input = 1;
|
|
}
|
|
|
|
void
|
|
grub_terminal_input_fake_sequence_end (void)
|
|
{
|
|
if (!fake_input)
|
|
return;
|
|
fake_input = 0;
|
|
grub_term_inputs = saved;
|
|
grub_free (seq);
|
|
seq = 0;
|
|
nseq = 0;
|
|
seqptr = 0;
|
|
}
|