diff options
| author | Michael Brown | 2008-08-14 04:03:53 +0200 |
|---|---|---|
| committer | Michael Brown | 2008-08-14 04:03:53 +0200 |
| commit | 8f8f5acf0930710f8974af8a644305c3b3afabdf (patch) | |
| tree | 28fc1f570dcd187ffc23c7954abaa7e8169a5a13 /src/include | |
| parent | [dhcp] Do not restrict minimum retry time for ProxyDHCPREQUEST (diff) | |
| download | ipxe-8f8f5acf0930710f8974af8a644305c3b3afabdf.tar.gz ipxe-8f8f5acf0930710f8974af8a644305c3b3afabdf.tar.xz ipxe-8f8f5acf0930710f8974af8a644305c3b3afabdf.zip | |
[settings] Avoid overwriting the start of .text in fetch_string_setting()
fetch_string_setting() was subtracting one from the length of the
to-be-NUL-terminated buffer in order to obtain the length of the
unterminated buffer to be passed to fetch_setting(). This works
extremely well unless the length of the to-be-NUL-terminated buffer is
zero, at which point we end up giving fetch_setting() a buffer of
length -1UL, thereby inviting it to overwrite as much memory as it
wants...
Diffstat (limited to 'src/include')
0 files changed, 0 insertions, 0 deletions