grub2/grub-core/loader/i386
Alexey Makhalov e39786ab46 relocator: Protect grub_relocator_alloc_chunk_align() max_addr against integer underflow
This commit introduces integer underflow mitigation in max_addr calculation
in grub_relocator_alloc_chunk_align() invocation.

It consists of 2 fixes:
  1. Introduced grub_relocator_alloc_chunk_align_safe() wrapper function to perform
     sanity check for min/max and size values, and to make safe invocation of
     grub_relocator_alloc_chunk_align() with validated max_addr value. Replace all
     invocations such as grub_relocator_alloc_chunk_align(..., min_addr, max_addr - size, size, ...)
     by grub_relocator_alloc_chunk_align_safe(..., min_addr, max_addr, size, ...).
  2. Introduced UP_TO_TOP32(s) macro for the cases where max_addr is 32-bit top
     address (0xffffffff - size + 1) or similar.

Signed-off-by: Alexey Makhalov <amakhalov@vmware.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>

Patch-Name: relocator-chunk-align-underflow.patch
2020-07-24 22:43:30 +01:00
..
coreboot verifiers: File type for fine-grained signature-verification controlling 2018-11-09 13:25:31 +01:00
efi Do not overwrite sentinel byte in boot_params, breaks lockdown 2020-03-07 12:21:23 +00:00
pc relocator: Protect grub_relocator_alloc_chunk_align() max_addr against integer underflow 2020-07-24 22:43:30 +01:00
bsd32.c automake commit without merge history 2010-05-06 11:34:04 +05:30
bsd64.c automake commit without merge history 2010-05-06 11:34:04 +05:30
bsd_pagetable.c * grub-core/commands/legacycfg.c (grub_cmd_legacy_kernel): 2010-10-16 22:16:52 +02:00
bsd.c malloc: Use overflow checking primitives where we do complex allocations 2020-07-24 22:42:22 +01:00
bsdXX.c calloc: Use calloc() at most places 2020-07-24 22:42:16 +01:00
linux.c relocator: Protect grub_relocator_alloc_chunk_align() max_addr against integer underflow 2020-07-24 22:43:30 +01:00
multiboot_mbi.c relocator: Protect grub_relocator_alloc_chunk_align() max_addr against integer underflow 2020-07-24 22:43:30 +01:00
xen_file32.c Add new ports: i386-xen and x86_64-xen. This allows running GRUB in 2013-11-09 21:29:11 +01:00
xen_file64.c Add new ports: i386-xen and x86_64-xen. This allows running GRUB in 2013-11-09 21:29:11 +01:00
xen_file.c verifiers: File type for fine-grained signature-verification controlling 2018-11-09 13:25:31 +01:00
xen_fileXX.c xen: Look for Xen notes in section headers too 2019-03-19 11:38:29 +01:00
xen.c relocator: Protect grub_relocator_alloc_chunk_addr() input args against integer underflow/overflow 2020-07-24 22:43:25 +01:00
xnu.c xnu: Fix double free in grub_xnu_devprop_add_property() 2020-07-24 22:42:42 +01:00