Roel Kluin fdb8a42742 x86: fix buffer overflow in efi_init()
If the vendor name (from c16) can be longer than 100 bytes (or missing a
terminating null), then the null is written past the end of vendor[].

Found with Parfait, http://research.sun.com/projects/parfait/

Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Cc: Ingo Molnar <mingo@elte.hu>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: H. Peter Anvin <hpa@zytor.com>
Cc: Huang Ying <ying.huang@intel.com>
2009-08-09 01:08:42 -07:00
..
2009-03-15 07:03:15 +01:00
2009-06-15 15:20:40 +02:00
2009-03-13 11:57:22 +01:00
2009-04-07 13:36:36 +02:00
2009-08-09 01:08:42 -07:00
2009-06-18 18:40:18 -04:00
2009-06-17 21:35:10 -07:00
2008-12-12 11:08:42 +01:00
2009-02-10 13:13:23 +01:00
2009-02-23 00:08:11 +01:00
2009-06-16 19:47:28 -07:00
2009-03-21 16:57:04 +05:30
2009-02-09 12:16:05 +01:00
2009-06-11 23:31:52 +02:00
2009-03-21 16:55:45 +05:30
2009-01-02 17:46:24 +01:00
2009-02-23 00:08:11 +01:00
2009-01-20 17:14:28 +01:00
2009-06-15 12:40:03 +02:00
2009-07-14 16:25:05 +02:00
2009-06-07 12:22:15 +02:00
2009-03-21 16:56:37 +05:30
2009-06-11 23:31:52 +02:00
2009-06-11 23:31:52 +02:00
2008-07-16 12:15:17 -07:00
2008-07-22 14:35:57 +02:00
2008-10-22 22:55:23 -07:00
2009-02-23 00:08:11 +01:00
2008-07-22 14:35:57 +02:00
2009-03-21 16:55:24 +05:30
2009-02-17 17:52:44 +01:00
2009-08-05 10:20:29 +02:00