On 09.11.2015 02:33, Paulo Flabiano Smorigo wrote:
> +      /* 64 entries should be enough */
> +      table_size = sizeof (grub_uint64_t) * 64;
Can we do something better than assuming a particular upper limit? You
don't even pass this limit to the function in any way. You basically get
a buffer overflow. Should we perhaps pass the limit in nentries? Or do
something similar?