bugGNU GRUB - Bugs: bug #45119, Grub-macbless has a buffer overflow

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #45119: Grub-macbless has a buffer overflow

Submitter:  Gregory Disney-Leugers <gdl>
Submitted:  Sun 17 May 2015 08:09:27 AM UTC
   
 
Category:  Security Severity:  Major
Priority:  5 - Normal Item Group:  Software Error
Status:  Fixed Privacy:  Public
Assigned to:  None Originator Name:  Gregory Disney-Leguers
Open/Closed:  Closed Release:  2.02~beta1
Release:  Reproducibility:  Every Time
Planned Release:  None

Wed 02 Mar 2016 10:47:41 AM UTC, comment #2: 

Supposing it's fixed. Feel free to reopen if it's not the case.

Vladimir Serbinenko <phcoder>
Group administrator
Sun 17 May 2015 11:21:46 AM UTC, comment #1: 

There is no fprintf on line 134 in grub git master. Anyway, I fixed crash caused by grub-macbless - please test if current git master works for you.

Andrei Borzenkov <arvidjaar>
Group Member
Sun 17 May 2015 08:09:27 AM UTC, original submission:  

grub-macbless contains a buffer overflow, due to fprintf() at line 134
at https://github.com/coreos/grub/blame/master/util/grub-macbless.c.
Steps to reproduce:
1. `/usr/sbin/grub-macbless --x86 `perl -e 'print "A"x1024 .
"\xfc\xff\xff\xff"x2`
2. gdb /usr/sbin/grub-macbless core.2067 Expected result: Segmentation
Fault caused by buffer overflow.

Gregory Disney-Leugers <gdl>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by phcoder (Posted a comment)
  • -email is unavailable- added by arvidjaar (Posted a comment)
  • -email is unavailable- added by gdl (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-03-02 phcoder StatusNone Fixed
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code