From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from list by lists.gnu.org with archive (Exim 4.90_1) id 1puGLB-0004hM-J8 for mharc-grub-devel@gnu.org; Wed, 03 May 2023 13:32:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1puGL7-0004fO-MZ for grub-devel@gnu.org; Wed, 03 May 2023 13:32:30 -0400 Received: from mx0b-00069f02.pphosted.com ([205.220.177.32]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1puGL5-0001IE-PU for grub-devel@gnu.org; Wed, 03 May 2023 13:32:29 -0400 Received: from pps.filterd (m0246630.ppops.net [127.0.0.1]) by mx0b-00069f02.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 343Gx8DI017900; Wed, 3 May 2023 17:32:22 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=from : to : cc : subject : date : message-id : mime-version : content-transfer-encoding; s=corp-2023-03-30; bh=lztheir0C/+CjjEaV+Tugc2cbswUf5BcgD5KteqhG4g=; b=zjEXguBwYLgFhTeGAxyQ1Cem2aLiLvsZ7U84+Wn8nZBTZ0pOkb7QGBFZrE6Z8C5txH+f Hdm82wFBx+vBqTb2uDCCvjGneQpQxFViX1XTrKqE4SdW7ADzyMVENy8pUg4szpuxjC0D EjbA9wM6dkI8xw21qOdaf4+90dz1IvSxwkW7AFwR8kiK6e2eOr0TpEE4OOsLB1ZL1i5A POpoldy4L9i/cOpzCBu9TQUJ58TbG7t3SVRT1ZJr/DHD9V80Fvi7HMLXGPnomTSuQPVV KwBOwcE5miJyPoojpAZM+runBuEL2oSWHAH1HS1uP5xlu0vyvQLNnOSfjFcsJ8VQZ1yg +Q== Received: from iadpaimrmta03.imrmtpd1.prodappiadaev1.oraclevcn.com (iadpaimrmta03.appoci.oracle.com [130.35.103.27]) by mx0b-00069f02.pphosted.com (PPS) with ESMTPS id 3q8sne7ynx-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 03 May 2023 17:32:22 +0000 Received: from pps.filterd (iadpaimrmta03.imrmtpd1.prodappiadaev1.oraclevcn.com [127.0.0.1]) by iadpaimrmta03.imrmtpd1.prodappiadaev1.oraclevcn.com (8.17.1.19/8.17.1.19) with ESMTP id 343H2Xq0026716; Wed, 3 May 2023 17:32:21 GMT Received: from pps.reinject (localhost [127.0.0.1]) by iadpaimrmta03.imrmtpd1.prodappiadaev1.oraclevcn.com (PPS) with ESMTPS id 3q8spdq2tj-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 03 May 2023 17:32:21 +0000 Received: from iadpaimrmta03.imrmtpd1.prodappiadaev1.oraclevcn.com (iadpaimrmta03.imrmtpd1.prodappiadaev1.oraclevcn.com [127.0.0.1]) by pps.reinject (8.17.1.5/8.17.1.5) with ESMTP id 343HSjS1033624; Wed, 3 May 2023 17:32:21 GMT Received: from localhost (lidochen-ol8-1.allregionaliads.osdevelopmeniad.oraclevcn.com [100.100.250.72]) by iadpaimrmta03.imrmtpd1.prodappiadaev1.oraclevcn.com (PPS) with ESMTP id 3q8spdq2t3-1; Wed, 03 May 2023 17:32:21 +0000 From: Lidong Chen To: grub-devel@gnu.org Cc: daniel.kiper@oracle.com, phcoder@gmail.com, lidong.chen@oracle.com Subject: [PATCH v2 0/4] Prevent out-of-bound reads Date: Wed, 3 May 2023 17:32:16 +0000 Message-Id: X-Mailer: git-send-email 2.31.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.254,Aquarius:18.0.942,Hydra:6.0.573,FMLib:17.11.170.22 definitions=2023-05-03_12,2023-05-03_01,2023-02-09_01 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 malwarescore=0 bulkscore=0 spamscore=0 mlxlogscore=597 mlxscore=0 adultscore=0 phishscore=0 suspectscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2303200000 definitions=main-2305030149 X-Proofpoint-GUID: HF2Z-qsgHyaIYuG2MCriUIG-ffmuURc0 X-Proofpoint-ORIG-GUID: HF2Z-qsgHyaIYuG2MCriUIG-ffmuURc0 Received-SPF: pass client-ip=205.220.177.32; envelope-from=lidong.chen@oracle.com; helo=mx0b-00069f02.pphosted.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 May 2023 17:32:31 -0000 v2: - patch 4/4: Only mark the informative errors for translation based on the comments. - patch 2/4: Include a reference to the fix in the patch 2/4 commit message. - No changes to the rest of 2 patches. Lidong Chen (4): fs/hfsplus: Validate btree node size fs/hfsplus: Prevent out of bound access in catalog file fs/hfsplus: Set grub errno to prevent NULL pointer access fs/hfsplus: Mark error strings for translation grub-core/fs/hfsplus.c | 33 ++++++++++++++++++++++++++++----- 1 file changed, 28 insertions(+), 5 deletions(-) -- 2.39.1