Ext4Pkg: Improve extent node validation on the number of entries
Improve the extent tree node validation by validating the number of entries the node advertises against the theoretical max (derived from the size of on-disk structs and the block size (or i_data, if inline extents). Previously, we did not validate the number of entries. This could be exploited for out-of-bounds reads and crashes. Cc: Marvin Häuser <mhaeuser@posteo.de> Fixes: d9ceedca ("Ext4Pkg: Add Ext4Dxe driver.") Reported-by:Savva Mitrofanov <savvamtr@gmail.com> Signed-off-by:
Pedro Falcato <pedro.falcato@gmail.com> Reviewed-by:
Marvin Häuser <mhaeuser@posteo.de>
Loading
Please register or sign in to comment