grub2/grub-core/normal
Hector Marco-Gisbert 832cd1c6c3 Fix security issue when reading username and password
This patch fixes two integer underflows at:
  * grub-core/lib/crypto.c
  * grub-core/normal/auth.c

CVE-2015-8370

Signed-off-by: Hector Marco-Gisbert <hecmargi@upv.es>
Signed-off-by: Ismael Ripoll-Ripoll <iripoll@disca.upv.es>
Also-By: Andrey Borzenkov <arvidjaar@gmail.com>

Bug-Debian: https://bugs.debian.org/808122
Last-Update: 2015-12-16

Patch-Name: CVE-2015-8370.patch
2015-12-16 09:39:53 +00:00
..
auth.c Fix security issue when reading username and password 2015-12-16 09:39:53 +00:00
autofs.c * grub-core/normal/autofs.c (autoload_fs_module): Save and restore 2012-07-22 16:23:46 +02:00
charset.c * grub-core/normal/charset.c: Fix premature line wrap and crash. 2013-12-11 17:06:00 +01:00
cmdline.c * grub-core/normal/cmdline.c (grub_cmdline_get): Plug memory leak. 2013-11-18 02:43:29 +01:00
color.c Make color variables global instead of it being per-terminal. 2013-01-21 17:53:41 +01:00
completion.c * include/grub/misc.h (grub_strcat): Removed. All users changed to 2013-11-01 16:27:37 +01:00
context.c Fix several memory leaks. 2013-05-04 13:47:10 +02:00
crypto.c * grub-core/normal/crypto.c (read_crypto_list): Fix incorrect 2013-03-07 08:41:27 +01:00
datetime.c * grub-core/normal/datetime.c (grub_get_weekday): Use if rather than 2013-11-13 09:26:13 +01:00
dyncmd.c * grub-core/normal/dyncmd.c (read_command_list): Don't access freed 2012-06-13 01:04:14 +02:00
main.c Add configure option to reduce visual clutter at boot time 2015-11-25 16:04:39 +00:00
menu_entry.c * grub-core/normal/menu_entry.c (get_logical_num_lines): Use unsigned 2013-10-26 01:01:06 +02:00
menu_text.c Inline printf templates when possible to enable format checking. 2013-12-21 13:40:18 +01:00
menu.c Add configure option to bypass boot menu if possible 2015-11-25 16:04:39 +00:00
misc.c Mark few forgotten strings for translation. 2013-05-07 11:41:47 +02:00
term.c * grub-core/normal/term.c (grub_set_more): Use bool logic rather than 2013-11-13 02:27:11 +01:00