Re: [PATCH 1/4] luks: fix out-of-bounds copy of UUID

2020-06-06 Thread Petr Vorel
Hi, Reviewed-by: Petr Vorel Kind regards, Petr ___ Grub-devel mailing list Grub-devel@gnu.org https://lists.gnu.org/mailman/listinfo/grub-devel

[PATCH 1/4] luks: fix out-of-bounds copy of UUID

2020-05-30 Thread Patrick Steinhardt
When configuring a LUKS disk, we copy over the UUID from the LUKS header into the new `grub_cryptodisk_t` structure via `grub_memcpy ()`. As size we mistakenly use the size of the `grub_cryptodisk_t` UUID field, which is guaranteed to be strictly bigger than the LUKS UUID field we're copying. As a