Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932934AbcDYP3p (ORCPT ); Mon, 25 Apr 2016 11:29:45 -0400 Received: from mail-wm0-f68.google.com ([74.125.82.68]:33057 "EHLO mail-wm0-f68.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932511AbcDYP3n (ORCPT ); Mon, 25 Apr 2016 11:29:43 -0400 Date: Mon, 25 Apr 2016 17:29:38 +0200 From: Ingo Molnar To: Matt Fleming Cc: Thomas Gleixner , "H . Peter Anvin" , Ard Biesheuvel , linux-kernel@vger.kernel.org, linux-efi@vger.kernel.org, Chris Wilson , Jani Nikula , Jason Andryuk , Laszlo Ersek , Matthew Garrett , Peter Jones Subject: Re: [GIT PULL] EFI urgent fix Message-ID: <20160425152938.GA12231@gmail.com> References: <1461583602-31599-1-git-send-email-matt@codeblueprint.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1461583602-31599-1-git-send-email-matt@codeblueprint.co.uk> User-Agent: Mutt/1.5.23 (2014-03-12) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1194 Lines: 33 * Matt Fleming wrote: > Folks, please pull the following fix from Laszlo that ensures we don't > perform an out-of-bounds access when matching EFI variable names > against the variable protection whitelist. > > The following changes since commit c3b46c73264b03000d1e18b22f5caf63332547c9: > > Linux 4.6-rc4 (2016-04-17 19:13:32 -0700) > > are available in the git repository at: > > git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi.git tags/efi-urgent > > for you to fetch changes up to 630ba0cc7a6dbafbdee43795617c872b35cde1b4: > > efi: Fix out-of-bounds read in variable_matches() (2016-04-22 19:41:41 +0100) > > ---------------------------------------------------------------- > * Avoid out-of-bounds access in the efivars code when performing > string matching on converted EFI variable names - Laszlo Ersek > > ---------------------------------------------------------------- > Laszlo Ersek (1): > efi: Fix out-of-bounds read in variable_matches() > > drivers/firmware/efi/vars.c | 37 ++++++++++++++++++++++++++----------- > 1 file changed, 26 insertions(+), 11 deletions(-) Pulled into tip:efi/urgent, thanks Matt! Ingo