Re: [edk2-devel] [PATCH 1/3] Ext4Pkg: Fix out-of-bounds read in Ext4ReadDir

2023-01-14 Thread Marvin Häuser
Reviewed-by: Marvin Häuser mailto:mhaeu...@posteo.de>> (Still two comments for next time) > On 12. Jan 2023, at 00:59, Pedro Falcato wrote: > > Fix an out-of-bounds read inside CompareMem() when > checking for "." or ".." by explicitly bounding name_len > to [0, 2] beforehand. > > Reported-by:

[edk2-devel] [PATCH 1/3] Ext4Pkg: Fix out-of-bounds read in Ext4ReadDir

2023-01-11 Thread Pedro Falcato
Fix an out-of-bounds read inside CompareMem() when checking for "." or ".." by explicitly bounding name_len to [0, 2] beforehand. Reported-by: Savva Mitrofanov Fixes: 45e37d8533ca8 ("Ext4Pkg: Hide "." and ".." entries from Read() callers.") Cc: Marvin Häuser Signed-off-by: Pedro Falcato --- Fe