From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id C550CD6DDE0 for ; Fri, 15 Nov 2024 07:36:03 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1tBqrz-0000CO-Kw; Fri, 15 Nov 2024 02:35:56 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tBqrx-0000CB-FY for grub-devel@gnu.org; Fri, 15 Nov 2024 02:35:53 -0500 Received: from mail-lf1-x12d.google.com ([2a00:1450:4864:20::12d]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1tBqru-0008UZ-4d for grub-devel@gnu.org; Fri, 15 Nov 2024 02:35:52 -0500 Received: by mail-lf1-x12d.google.com with SMTP id 2adb3069b0e04-539f8490856so366837e87.2 for ; Thu, 14 Nov 2024 23:35:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.com; s=google; t=1731656148; x=1732260948; darn=gnu.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=ZEEZ1/NHEP7HmpXlsCFw4vakSRYe/JD2m203gwh49DY=; b=HDbz+HDHTJzhg9k5a1tX7+98ejL3+D2Anlf6Wk6PWiyJA8RgwTLeh+kaETtxG/6zue CIiplTYz9YJSbarAvmvJwgqkS5Eo10zCcA4+agwWxrTqaYGY5GU5eJ9Y7TJyByPj90Fl Q4693x4I/ja5flnsP2cdY0P+LZ/8yJ7rd9GHYmxNbE5OH0iI36YJLjShBFEA1OPx1jjk Gwy1XqjCtiEleyaumbrICUpkSG3R4z9vw8MA0Zunj/liXJ/U1gIqFRBSvBidCWzHTOOc bAQ4i8a+BtVjsRtyaELFg4mdnbvx51bm/Q6DqE8APgAj8g8BCbnQCf7wqhJEc3OGj/vh 76Tg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1731656148; x=1732260948; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=ZEEZ1/NHEP7HmpXlsCFw4vakSRYe/JD2m203gwh49DY=; b=DDTEH0GrGZy5JEE11kgWzBujDugtqpeayXs9ldgRJaAUKCovXq3SxRrY3X4wzYgFk3 4uAT7pu9iYQxP+cgO+E0l59jyCpDfV/6/iKAZx2a+Qnk+RUXd/+i2RByi64AdycdHFcz EPV6f2l4Nso+hBQMVCG5ILFzV/I0ABBf1ovTaTxRcLzWNkOQCTSrPCwtFoWLhL3NTpnA kL9FUfDyiIbnWnmN9fJtdtkN42C3tQJwfXAk1BS5OYw8pnAs1NsaDEHDRLoVcWr0FY8j 448ZxjEtIADXOk+4xx8Qn4leMd25hC+EqidTfE9e0hOsZD8YiwmBVnzx2KPjASUrefjM lFxw== X-Gm-Message-State: AOJu0YyVs99N0RuFaGTHWI9RTrdf1kOP1GZVx9TqHG6Fxs2+UpYES+EC n9KWRusBltZKvxmI0iAbjv8+plW2G6bFN4G7AB7wdqWlB8dSmcNIaV/oUJAN9wPp5ogbMyZ+lbM S X-Google-Smtp-Source: AGHT+IHdxofCi3gybqP58cGNk2tbUa2MY4guV2KRkDJv16+N7yQB2CrW/fG2tXtVF7cMs6WQDuQzzA== X-Received: by 2002:a05:6512:3994:b0:53d:a89b:4ca8 with SMTP id 2adb3069b0e04-53dab2a60a4mr676135e87.24.1731656148207; Thu, 14 Nov 2024 23:35:48 -0800 (PST) Received: from localhost (111-240-136-29.dynamic-ip.hinet.net. [111.240.136.29]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-724770eef19sm780564b3a.25.2024.11.14.23.35.47 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 14 Nov 2024 23:35:47 -0800 (PST) To: The development of GNU GRUB Subject: [PATCH v23 08/33] libtasn1: fix the potential buffer overrun Date: Fri, 15 Nov 2024 15:34:36 +0800 Message-ID: <20241115073506.2784-9-glin@suse.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20241115073506.2784-1-glin@suse.com> References: <20241115073506.2784-1-glin@suse.com> MIME-Version: 1.0 Received-SPF: pass client-ip=2a00:1450:4864:20::12d; envelope-from=glin@suse.com; helo=mail-lf1-x12d.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Gary Lin via Grub-devel Reply-To: The development of GNU GRUB Cc: Gary Lin , Daniel Kiper , Hernan Gatta , Daniel Axtens , shkhisti@microsoft.com, jaskaran.khurana@microsoft.com, christopher.co@microsoft.com, daniel.mihai@microsoft.com, jaredz@redhat.com, development@efficientek.com, jejb@linux.ibm.com, mchang@suse.com, patrick.colp@oracle.com, Stefan Berger , Vladimir Serbinenko Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org Sender: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org SW4gX2FzbjFfdGFnX2RlcigpLCB0aGUgZmlyc3Qgd2hpbGUgbG9vcCBmb3IgdGhlIGxvbmcgZm9y bSBtYXkgZW5kIHVwCndpdGggYSAnaycgdmFsdWUgd2l0aCAnQVNOMV9NQVhfVEFHX1NJWkUnIGFu ZCBjYXVzZSB0aGUgYnVmZmVyIG92ZXJydW4KaW4gdGhlIHNlY29uZCB3aGlsZSBsb29wLiBUaGlz IGNvbW1pdCB0d2Vha3MgdGhlIGNvbmRpdGlvbmFsIGNoZWNrIHRvCmF2b2lkIHByb2R1Y2luZyBh IHRvbyBsYXJnZSAnaycuCgpUaGlzIGlzIGEgcXVpY2sgZml4IGFuZCBtYXkgZGlmZmVyIGZyb20g dGhlIG9mZmljaWFsIHVwc3RyZWFtIGZpeC4KCmxpYnRhc24xIGlzc3VlOiBodHRwczovL2dpdGxh Yi5jb20vZ251dGxzL2xpYnRhc24xLy0vaXNzdWVzLzQ5CgpTaWduZWQtb2ZmLWJ5OiBHYXJ5IExp biA8Z2xpbkBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IERhbmllbCBLaXBlciA8ZGFuaWVsLmtpcGVy QG9yYWNsZS5jb20+Ci0tLQogLi4uc24xLWZpeC10aGUtcG90ZW50aWFsLWJ1ZmZlci1vdmVycnVu LnBhdGNoIHwgMzYgKysrKysrKysrKysrKysrKysrKwogMSBmaWxlIGNoYW5nZWQsIDM2IGluc2Vy dGlvbnMoKykKIGNyZWF0ZSBtb2RlIDEwMDY0NCBncnViLWNvcmUvbGliL2xpYnRhc24xLXBhdGNo ZXMvMDAwNi1saWJ0YXNuMS1maXgtdGhlLXBvdGVudGlhbC1idWZmZXItb3ZlcnJ1bi5wYXRjaAoK ZGlmZiAtLWdpdCBhL2dydWItY29yZS9saWIvbGlidGFzbjEtcGF0Y2hlcy8wMDA2LWxpYnRhc24x LWZpeC10aGUtcG90ZW50aWFsLWJ1ZmZlci1vdmVycnVuLnBhdGNoIGIvZ3J1Yi1jb3JlL2xpYi9s aWJ0YXNuMS1wYXRjaGVzLzAwMDYtbGlidGFzbjEtZml4LXRoZS1wb3RlbnRpYWwtYnVmZmVyLW92 ZXJydW4ucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwLi5mOWY0NWFl NzIKLS0tIC9kZXYvbnVsbAorKysgYi9ncnViLWNvcmUvbGliL2xpYnRhc24xLXBhdGNoZXMvMDAw Ni1saWJ0YXNuMS1maXgtdGhlLXBvdGVudGlhbC1idWZmZXItb3ZlcnJ1bi5wYXRjaApAQCAtMCww ICsxLDM2IEBACitGcm9tIGY2MjlmNThiMDFiM2U4ODA1MmJlNWU1MGY1MWE2NjcxODEyMDNlMDUg TW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBHYXJ5IExpbiA8Z2xpbkBzdXNlLmNvbT4K K0RhdGU6IE1vbiwgOCBBcHIgMjAyNCAxNDo1NzoyMSArMDgwMAorU3ViamVjdDogW1BBVENIIDA2 LzEzXSBsaWJ0YXNuMTogZml4IHRoZSBwb3RlbnRpYWwgYnVmZmVyIG92ZXJydW4KKworSW4gX2Fz bjFfdGFnX2RlcigpLCB0aGUgZmlyc3Qgd2hpbGUgbG9vcCBmb3IgdGhlIGxvbmcgZm9ybSBtYXkg ZW5kIHVwCit3aXRoIGEgJ2snIHZhbHVlIHdpdGggJ0FTTjFfTUFYX1RBR19TSVpFJyBhbmQgY2F1 c2UgdGhlIGJ1ZmZlciBvdmVycnVuCitpbiB0aGUgc2Vjb25kIHdoaWxlIGxvb3AuIFRoaXMgY29t bWl0IHR3ZWFrcyB0aGUgY29uZGl0aW9uYWwgY2hlY2sgdG8KK2F2b2lkIHByb2R1Y2luZyBhIHRv byBsYXJnZSAnaycuCisKK1RoaXMgaXMgYSBxdWljayBmaXggYW5kIG1heSBkaWZmZXIgZnJvbSB0 aGUgb2ZmaWNpYWwgdXBzdHJlYW0gZml4LgorCitsaWJ0YXNuMSBpc3N1ZTogaHR0cHM6Ly9naXRs YWIuY29tL2dudXRscy9saWJ0YXNuMS8tL2lzc3Vlcy80OQorCitTaWduZWQtb2ZmLWJ5OiBHYXJ5 IExpbiA8Z2xpbkBzdXNlLmNvbT4KK1Jldmlld2VkLWJ5OiBEYW5pZWwgS2lwZXIgPGRhbmllbC5r aXBlckBvcmFjbGUuY29tPgorLS0tCisgZ3J1Yi1jb3JlL2xpYi9saWJ0YXNuMS1ncnViL2xpYi9j b2RpbmcuYyB8IDIgKy0KKyAxIGZpbGUgY2hhbmdlZCwgMSBpbnNlcnRpb24oKyksIDEgZGVsZXRp b24oLSkKKworZGlmZiAtLWdpdCBhL2dydWItY29yZS9saWIvbGlidGFzbjEtZ3J1Yi9saWIvY29k aW5nLmMgYi9ncnViLWNvcmUvbGliL2xpYnRhc24xLWdydWIvbGliL2NvZGluZy5jCitpbmRleCA1 ZDAzYmNhOWQuLjA0NTg4MjlhNSAxMDA2NDQKKy0tLSBhL2dydWItY29yZS9saWIvbGlidGFzbjEt Z3J1Yi9saWIvY29kaW5nLmMKKysrKyBiL2dydWItY29yZS9saWIvbGlidGFzbjEtZ3J1Yi9saWIv Y29kaW5nLmMKK0BAIC0xNDMsNyArMTQzLDcgQEAgX2FzbjFfdGFnX2RlciAodW5zaWduZWQgY2hh ciBjbGFzcywgdW5zaWduZWQgaW50IHRhZ192YWx1ZSwKKyAJICB0ZW1wW2srK10gPSB0YWdfdmFs dWUgJiAweDdGOworIAkgIHRhZ192YWx1ZSA+Pj0gNzsKKyAKKy0JICBpZiAoayA+IEFTTjFfTUFY X1RBR19TSVpFIC0gMSkKKysJICBpZiAoayA+PSBBU04xX01BWF9UQUdfU0laRSAtIDEpCisgCSAg ICBicmVhazsJCS8qIHdpbGwgbm90IGVuY29kZSBsYXJnZXIgdGFncyAqLworIAl9CisgICAgICAg KmFuc19sZW4gPSBrICsgMTsKKy0tIAorMi40My4wCisKLS0gCjIuNDMuMAoKCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCkdydWItZGV2ZWwgbWFpbGluZyBs aXN0CkdydWItZGV2ZWxAZ251Lm9yZwpodHRwczovL2xpc3RzLmdudS5vcmcvbWFpbG1hbi9saXN0 aW5mby9ncnViLWRldmVsCg==