bugGNU GRUB - Bugs: bug #59887, potential truncation of mdraid...


You are not allowed to post comments on this tracker with your current authentication level.

bug #59887: potential truncation of mdraid device list

Submitted by:  Kees Cook <keescook>
Submitted on:  Sat 16 Jan 2021 10:49:30 AM UTC  
Category:  Installation Severity:  Major
Priority:  5 - Normal Item Group:  None
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Release: 
Release:  2.02 Reproducibility:  Every Time
Planned Release:  None

Sat 16 Jan 2021 10:49:30 AM UTC, original submission:  

The consumer of grub_util_raid_getmembers() expects a NULL terminated list of device names. It has no idea about how many devices are registered in the array; it only cares about active devices. As a result, there cannot be gaps in the list, otherwise the first listed inactive device will cause all remaining devices to effectively vanish. This is especially troublesome if a root filesystem were on an array with the first device being a hot spare: the array would appear to have no disks and the root filesystem would become invisible to grub.


Kees Cook <keescook>


Attached Files
file #50725:  fix-md-array-enumeration.patch added by keescook (1KiB - text/x-patch - also fix the indexing)


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by keescook (Submitted the item)

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.




    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2021-01-16 keescook Attached File- => Added fix-md-array-enumeration.patch, #50725
    2021-01-16 keescook Attached File- => Added fix-md-array-list-truncation.patch, #50724

    Back to the top

    Powered by Savane 3.7