]> Savannah Git Hosting - grub.git/commit
commands/usbtest: Use correct string length field
authorJamie <volticks@gmail.com>
Mon, 14 Jul 2025 08:52:59 +0000 (09:52 +0100)
committerDaniel Kiper <daniel.kiper@oracle.com>
Tue, 18 Nov 2025 13:34:44 +0000 (14:34 +0100)
commit549a9cc372fd0b96a4ccdfad0e12140476cc62a3
tree80094d53f9bca154b2281e600ef7a6997916fa6a
parent9df1e693e70c5a274b6d60dc76efe2694b89c2fc
commands/usbtest: Use correct string length field

An incorrect length field is used for buffer allocation. This leads to
grub_utf16_to_utf8() receiving an incorrect/different length and possibly
causing OOB write. This makes sure to use the correct length.

Fixes: CVE-2025-61661
Reported-by: Jamie <volticks@gmail.com>
Signed-off-by: Jamie <volticks@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
grub-core/commands/usbtest.c