dilim/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2026-08-12 12:16:06 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
42e5b6d00435f9c43e850fbd3ed38b7046720df8
systemd/src/boot
History
Luca Boccassi 42e5b6d004 boot: bound PE section VirtualSize before zeroing the inner kernel 
The inner-kernel section loader checks VirtualAddress + SizeOfRawData
against kernel_size_in_memory (for the memcpy), but the memzero right
after it clears up to VirtualAddress + VirtualSize, and VirtualSize is
only constrained to be >= SizeOfRawData.

Reject a VirtualAddress + VirtualSize that overflows or exceeds
kernel_size_in_memory, mirroring the existing SizeOfRawData checks.

Follow-up for cab9c7b5a4

(cherry picked from commit feeba8fa3b)
(cherry picked from commit 0f3dd7ab02)
(cherry picked from commit 2889746af2)
2026-07-23 22:34:28 +01:00
..
hwids/test
test: move test hwids to separate subdirectory
2026-02-26 10:24:32 +00:00
proto
boot: before starting the random seed logic, let's check if the backing volume is r/o
2026-06-26 16:24:12 +01:00
addon.c
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
bcd.c
boot: Clean up includes
2025-05-22 11:10:20 +02:00
bcd.h
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
boot.c
boot/stub: honor PE SectionAlignment when loading inner kernel
2026-06-26 16:24:12 +01:00
chid.c
chid: don't hardcode magic numbers for non-official CHIDs
2025-08-11 11:18:53 +02:00
chid.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
console.c
console: when switching console modes and one doesn't work, always go for the next
2025-06-24 00:48:38 +09:00
console.h
treewide: fix header file definitions
2025-05-21 10:50:25 +02:00
cpio.c
boot: downgrade log level for an error we ignore
2026-05-27 12:20:19 +01:00
cpio.h
boot: Clean up includes
2025-05-22 11:10:20 +02:00
device-path-util.c
boot: make device_path_next_node() robust against malformed zero-length nodes
2026-07-23 22:33:27 +01:00
device-path-util.h
boot: make device_path_next_node() robust against malformed zero-length nodes
2026-07-23 22:33:27 +01:00
devicetree.c
boot: fix loop bound and OOB in devicetree_get_compatible()
2026-05-27 12:20:18 +01:00
devicetree.h
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
drivers.c
sd-boot: efi-log: use log levels internally
2025-09-18 08:54:52 +09:00
drivers.h
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
edid.c
boot: Clean up includes
2025-05-22 11:10:20 +02:00
edid.h
boot: Clean up includes
2025-05-22 11:10:20 +02:00
efi-efivars.c
boot: initialize return parameters on zero-length EFI variable read
2026-07-23 22:33:27 +01:00
efi-efivars.h
boot: Clean up includes
2025-05-22 11:10:20 +02:00
efi-firmware.c
boot: Clean up includes
2025-05-22 11:10:20 +02:00
efi-firmware.h
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
efi-log.c
sd-boot: efi-log: fix __stack_chk_guard type
2026-05-27 12:20:19 +01:00
efi-log.h
clang-tidy: Fix all remaining misc-include-cleaner violations
2025-11-22 10:19:41 +01:00
efi-string-table.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
efi-string.c
efi-string: Unquote single-quoted strings as well as double
2026-02-06 14:29:11 +00:00
efi-string.h
boot: Clean up includes
2025-05-22 11:10:20 +02:00
efi.h
boot: before starting the random seed logic, let's check if the backing volume is r/o
2026-06-26 16:24:12 +01:00
export-vars.c
boot: add LoaderTpm2ActivePcrBanks runtime variable
2025-07-14 20:56:22 +01:00
export-vars.h
tree-wide: add missing '#pragma once'
2025-11-05 05:16:34 +09:00
fuzz-bcd.c
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
fuzz-efi-osrel.c
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
fuzz-efi-printf.c
boot: Clean up includes
2025-05-22 11:10:20 +02:00
fuzz-efi-string.c
fuzz-efi-string: add missing OOM check
2025-07-26 05:00:02 +09:00
generate-hwids-section.py
tools: make all .py program files executable
2025-07-25 12:33:13 +02:00
graphics.c
boot: Clean up includes
2025-05-22 11:10:20 +02:00
graphics.h
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
initrd.c
boot: Clean up includes
2025-05-22 11:10:20 +02:00
initrd.h
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
line-edit.c
boot: Clean up includes
2025-05-22 11:10:20 +02:00
line-edit.h
boot: split out line editor
2025-02-25 21:08:38 +01:00
linux_x86.c
boot: clamp setup header copy size to sizeof(SetupHeader)
2026-05-27 12:20:17 +01:00
linux.c
boot: bound PE section VirtualSize before zeroing the inner kernel
2026-07-23 22:34:28 +01:00
linux.h
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
measure.c
measure: figure success of measurement correctly
2026-04-13 13:12:53 +01:00
measure.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
meson.build
boot: enable only IMAFDCZicsrZifencei for RISC-V
2026-06-26 16:24:12 +01:00
part-discovery.c
boot: reject GPT headers with SizeOfPartitionEntry below the minimum
2026-07-23 22:32:19 +01:00
part-discovery.h
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
pe.c
boot: reject inner kernel entry point outside the image
2026-07-23 22:34:28 +01:00
pe.h
boot/stub: honor PE SectionAlignment when loading inner kernel
2026-06-26 16:24:12 +01:00
random-seed.c
boot: before starting the random seed logic, let's check if the backing volume is r/o
2026-06-26 16:24:12 +01:00
random-seed.h
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
secure-boot.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
secure-boot.h
boot: rename ENROLL_TIMEOUT_TYPE_MAX -> ENROLL_TIMEOUT_MAX
2025-09-24 18:22:12 +09:00
shim.c
tree-wide: Small fixes for various clang-tidy warnings
2025-11-26 16:22:00 +09:00
shim.h
boot: skip shim-specific logic when running with new shim
2025-05-09 17:07:14 +01:00
smbios.c
boot: Clean up includes
2025-05-22 11:10:20 +02:00
smbios.h
sd-boot: also read type #1 entries from SMBIOS Type #11
2025-02-21 10:04:15 +01:00
splash.c
boot: fix integer overflow and division by zero in BMP splash parser
2026-05-27 12:20:18 +01:00
splash.h
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
stub.c
stub: Fix NULL pointer deref when there are no initrds
2026-02-06 14:29:09 +00:00
sysfail.c
sd-boot: use sysfail entry for UEFI firmware update failure
2025-05-12 15:37:47 +02:00
sysfail.h
boot: Clean up includes
2025-05-22 11:10:20 +02:00
test-bcd.c
boot: Clean up includes
2025-05-22 11:10:20 +02:00
test-chid-match.c
boot: Clean up includes
2025-05-22 11:10:20 +02:00
test-efi-string.c
test-efi-string: add more cases
2026-05-27 12:20:17 +01:00
ticks.c
boot: Clean up includes
2025-05-22 11:10:20 +02:00
ticks.h
boot: Clean up includes
2025-05-22 11:10:20 +02:00
ubsan.c
tree-wide: Ensure source file names are unique
2025-05-20 10:29:59 +02:00
UEFI_SECURITY.md
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00
url-discovery.c
sd-stub: if we are http booted, query source URL and write to EFI variable
2025-02-21 10:03:32 +01:00
url-discovery.h
tree-wide: Make sure all headers are standalone
2025-04-23 10:33:38 +02:00
util.c
boot: before starting the random seed logic, let's check if the backing volume is r/o
2026-06-26 16:24:12 +01:00
util.h
boot: before starting the random seed logic, let's check if the backing volume is r/o
2026-06-26 16:24:12 +01:00
vmm.c
boot: initialize return parameters on zero-length EFI variable read
2026-07-23 22:33:27 +01:00
vmm.h
Rename src/boot/efi to just src/boot
2024-11-07 14:52:06 +01:00