Luca Boccassi 42e5b6d004 boot: bound PE section VirtualSize before zeroing the inner kernel ...

The inner-kernel section loader checks VirtualAddress + SizeOfRawData
against kernel_size_in_memory (for the memcpy), but the memzero right
after it clears up to VirtualAddress + VirtualSize, and VirtualSize is
only constrained to be >= SizeOfRawData.

Reject a VirtualAddress + VirtualSize that overflows or exceeds
kernel_size_in_memory, mirroring the existing SizeOfRawData checks.

Follow-up for cab9c7b5a4

(cherry picked from commit feeba8fa3b)
(cherry picked from commit 0f3dd7ab02)
(cherry picked from commit 2889746af2)

2026-07-23 22:34:28 +01:00

..

ac-power

…

analyze

calendarspec: warn on weekday/date conflict in systemd-analyze and systemd-run

2026-07-23 22:32:19 +01:00

ask-password

ask-password: do not reuse flags across Varlink calls

2026-06-26 16:24:12 +01:00

backlight

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

basic

calendarspec: warn on weekday/date conflict in systemd-analyze and systemd-run

2026-07-23 22:32:19 +01:00

battery-check

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

binfmt

…

bless-boot

bless-boot: avoid false maybe-uninitialized warning

2026-07-23 22:32:14 +01:00

boot

boot: bound PE section VirtualSize before zeroing the inner kernel

2026-07-23 22:34:28 +01:00

bootctl

bootctl,sbsign: fix $SOURCE_DATE_EPOCH parsing

2026-02-06 14:29:09 +00:00

busctl

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

cgls

cgroup-show: drop unnecessary call of cg_mangle_path()

2025-11-17 21:31:51 +09:00

cgtop

cgtop: fix confusion in --help

2026-02-25 21:25:28 +00:00

core

calendarspec: warn on weekday/date conflict in systemd-analyze and systemd-run

2026-07-23 22:32:19 +01:00

coredump

coredumpctl: use break instead of continue for time bound checks

2026-07-23 22:32:14 +01:00

coverage

…

creds

meson: Still build libshared even if libmount is disabled

2025-11-24 13:09:41 +01:00

cryptenroll

cryptenroll: Save primary algorithm type to the LUKS token

2026-03-12 09:40:48 +01:00

cryptsetup

cryptsetup: Invalidate ineffective try_discover_key before trying

2026-06-26 16:24:12 +01:00

debug-generator

debug-generator: use unsigned bit shift for breakpoint flags

2026-05-27 12:20:16 +01:00

delta

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

detect-virt

tree-wide: combine DUMP_STRING_TABLE() and return

2025-10-02 16:19:03 +02:00

dissect

loop-util: use auto-detect open mode for loop device setup

2026-05-27 12:20:17 +01:00

environment-d-generator

…

escape

tree-wide: flatten nested error checks

2025-12-10 18:59:44 +09:00

factory-reset

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

firstboot

firstboot/homectl: hide plymouth splashscreen when asking questions

2026-02-06 14:29:09 +00:00

fsck

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

fstab-generator

misc: fix minor error handling issues

2026-06-26 16:24:12 +01:00

fundamental

confidential-virt: fix comment regarding vmm.c location

2026-06-26 16:24:13 +01:00

fuzz

pe-binary: bound section data against file size, cap UKI zero-padding hash, validate optional header size

2026-06-26 14:52:28 +01:00

getty-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

gpt-auto-generator

gpt-auto-generator: fix error propagation in add_root_mount()

2026-06-26 16:24:12 +01:00

growfs

various: fix typos

2026-05-27 09:42:51 +01:00

hibernate-resume

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

home

homed: fix home_unlocking_finish reporting success as failure

2026-06-26 16:24:13 +01:00

hostname

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

hwdb

…

id128

…

import

import: don't assert on missing signature file

2026-06-26 14:50:36 +01:00

include

musl: fix build on 32-bit architecture

2026-06-26 16:24:12 +01:00

integritysetup

generator: order cryptsetup/verity/integrity after systemd-udevd

2026-06-26 16:24:13 +01:00

journal

journald: bound field length in extra-fields reader

2026-06-26 16:24:13 +01:00

journal-remote

journal-remote: fix hostname double-free on request_meta() error paths

2026-06-26 16:24:13 +01:00

kernel-install

kernel-install(uki): filter comments from cmdline

2026-05-27 09:46:03 +01:00

keyutil

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

libc

musl: introduce wrappers for getopt() and getopt_long()

2025-12-05 11:01:09 +01:00

libsystemd

sd-journal: rate-limit tail timestamp refresh during iteration

2026-07-23 22:31:22 +01:00

libsystemd-network

dhcp6: reject IA_PD_PREFIX with invalid prefix length

2026-06-26 16:24:13 +01:00

libudev

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

locale

treewide: fix typos in the entire codebase

2026-05-27 12:20:19 +01:00

login

logind: fix typo in reboot-to-boot-loader-entry path

2026-07-23 22:31:15 +01:00

machine

machined: drop superfluos 'supervisor' varlink input parameter for register method

2026-07-23 22:32:19 +01:00

machine-id-setup

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

measure

measure: fix oom check

2026-05-27 12:20:18 +01:00

modules-load

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

mount

mount: honor --timeout-idle-sec=SEC option (#41010)

2026-03-12 09:40:48 +01:00

mountfsd

Improve error logging for fstat failure

2026-05-27 12:20:19 +01:00

mute-console

mute-console: don't unmute twice when not running as varlink service

2025-10-07 13:38:21 +02:00

network

network: roll back ipv6ll_address on link_ipv6ll_gained() failure

2026-06-26 16:24:13 +01:00

notify

notify: add one more assert

2026-05-27 09:39:48 +01:00

nspawn

nspawn: parse PrivateUsers=managed in settings

2026-06-26 14:52:28 +01:00

nsresourced

nsresourced: fix typo

2026-05-27 12:20:20 +01:00

nss-myhostname

nss-myhostname: fix maybe-uninitialized warning

2026-05-27 12:20:19 +01:00

nss-mymachines

…

nss-resolve

nss-resolve: fix blank array checks and improve NSS status codes

2026-06-26 16:24:13 +01:00

nss-systemd

nss-systemd: avoid ELF TLS for recursion guard

2026-06-26 16:24:12 +01:00

oom

oomd: reject invalid arguments early

2026-06-26 16:24:12 +01:00

path

systemd-path: add 'system-search-configuration'

2025-11-13 14:11:11 +01:00

pcrextend

pcrextend: refuse empty measurement over Varlink

2026-06-26 16:24:13 +01:00

pcrlock

pcrlock: reject device path node shorter than its header

2026-06-26 16:24:13 +01:00

portable

portable: fix double-free in normalize_portable_changes()

2026-06-26 16:24:12 +01:00

pstore

…

ptyfwd

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

quotacheck

quotacheck: don't apply an invalid quotacheck.mode= value

2026-07-23 22:31:29 +01:00

random-seed

random-seed: fix wrong error variable in log_error_errno()

2026-06-26 16:24:12 +01:00

rc-local-generator

…

remount-fs

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

repart

repart: fix SizeMinBytes/SizeMaxBytes rounding direction

2026-06-26 16:24:12 +01:00

reply-password

…

resolve

resolve: fix segfault when built with OPENSSL_NO_DEPRECATED_3_0

2026-07-23 22:32:14 +01:00

rfkill

…

rpm

rpm: Make sure we only match files in the directories in triggers

2025-10-24 10:29:40 +09:00

run

calendarspec: warn on weekday/date conflict in systemd-analyze and systemd-run

2026-07-23 22:32:19 +01:00

run-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

sbsign

various: fix compilation with openssl-4.0.0-beta1

2026-05-27 12:20:18 +01:00

shared

machined: drop superfluos 'supervisor' varlink input parameter for register method

2026-07-23 22:32:19 +01:00

shutdown

shutdown: check WATCHDOG_PID= if it is set

2026-05-27 12:20:17 +01:00

sleep

blockdev-util: Add recursive lookup flag

2026-02-06 14:29:10 +00:00

socket-activate

socket-activate: fix comment

2026-05-27 12:20:19 +01:00

socket-proxy

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

ssh-generator

ssh-proxy: Default to root user

2026-06-26 14:52:28 +01:00

stdio-bridge

stdio-bridge: remove unreachable return

2025-11-13 21:28:17 +01:00

storagetm

misc: fix minor error handling issues

2026-06-26 16:24:12 +01:00

sulogin-shell

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

sysctl

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

sysext

sysext,sysusers: fix wrong error variable in two error paths

2026-06-26 16:24:12 +01:00

system-update-generator

…

systemctl

systemctl: fix continue placement in clean-or-freeze error handling

2026-06-26 16:24:13 +01:00

systemd

hwdb: bounds-check trie offsets against the mmap before dereferencing

2026-06-26 14:50:36 +01:00

sysupdate

sysupdate: reject short manifest hashes

2026-06-26 16:24:12 +01:00

sysusers

sysext,sysusers: fix wrong error variable in two error paths

2026-06-26 16:24:12 +01:00

sysv-generator

…

test

test-socket-util: convert to new ASSERT macros

2026-07-23 22:33:26 +01:00

timedate

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

timesync

timesync: verify the actual size of the received data

2026-05-27 12:20:18 +01:00

tmpfiles

tmpfiles: fix device node major:minor logging to use i->major_minor

2026-07-23 22:31:15 +01:00

tpm2-setup

tpm2-util: be more graceful with nvindex space exhaustion issues

2026-05-27 12:20:28 +01:00

tty-ask-password-agent

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

udev

cdrom_id: zero scsi response buffers before parsing

2026-06-26 16:24:13 +01:00

ukify

ukify: show all sections and profiles in inspect JSON output

2026-07-23 22:31:29 +01:00

update-done

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

update-utmp

…

user-sessions

…

userdb

userdbctl: fix erroneous errno

2026-05-27 12:20:19 +01:00

validatefs

…

varlinkctl

tree-wide: extend $LISTEN_FDS protocol with $LISTEN_PIDFDID

2025-10-22 09:34:14 +02:00

vconsole

…

veritysetup

libcryptsetup: drop several unnecessary checks for existences of functions by libcryptsetyp

2025-11-02 05:49:29 +09:00

version

meson: add tools/meson.build

2025-12-01 16:18:11 +01:00

vmspawn

vmspawn: don't abort VM launch when an optional swtpm fails to start

2026-06-26 16:24:12 +01:00

volatile-root

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

vpick

vpick: Fix pick_filter_image_any

2026-02-06 14:29:10 +00:00

xdg-autostart-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00