bugGNU GRUB - Bugs: bug #59887, potential truncation of mdraid...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #59887: potential truncation of mdraid device list

Submitter:  Kees Cook <keescook>
Submitted:  Sat 16 Jan 2021 10:49:30 AM UTC
   
 
Category:  Installation Severity:  Major
Priority:  5 - Normal Item Group:  None
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Release:  2.02
Release:  Reproducibility:  Every Time
Planned Release:  None

Sat 16 Jan 2021 10:49:30 AM UTC, original submission:  

The consumer of grub_util_raid_getmembers() expects a NULL terminated list of device names. It has no idea about how many devices are registered in the array; it only cares about active devices. As a result, there cannot be gaps in the list, otherwise the first listed inactive device will cause all remaining devices to effectively vanish. This is especially troublesome if a root filesystem were on an array with the first device being a hot spare: the array would appear to have no disks and the root filesystem would become invisible to grub.

https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912043

Kees Cook <keescook>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #50725:  fix-md-array-enumeration.patch added by keescook (1KiB - text/x-patch - also fix the indexing)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by keescook (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2021-01-16 keescook Attached File- Added fix-md-array-enumeration.patch, #50725
    2021-01-16 keescook Attached File- Added fix-md-array-list-truncation.patch, #50724

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code