diff options
| author | Michael Brown | 2017-09-07 00:18:29 +0200 |
|---|---|---|
| committer | Michael Brown | 2017-09-07 00:28:21 +0200 |
| commit | 3f429bdcfe0c3698f886e93a1f603656ccaa0f28 (patch) | |
| tree | c68f71887170586c36c84e5e68e76f68a53c0372 /src/scripts | |
| parent | [dns] Report current DNS query as job progress status message (diff) | |
| download | ipxe-3f429bdcfe0c3698f886e93a1f603656ccaa0f28.tar.gz ipxe-3f429bdcfe0c3698f886e93a1f603656ccaa0f28.tar.xz ipxe-3f429bdcfe0c3698f886e93a1f603656ccaa0f28.zip | |
[efi] Check buffer length for packets retrieved via our SNP protocol
We do not currently check the length of the caller's buffer for
received packets. This creates a potential buffer overrun when iPXE
is being used via the SNP or UNDI protocols.
Fix by checking the buffer length and correctly returning the required
length and an EFI_BUFFER_TOO_SMALL error.
Reported-by: Paul McMillan <paul.mcmillan@oracle.com>
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/scripts')
0 files changed, 0 insertions, 0 deletions