s390-tools

mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00

Files

Marc Hartmayer a2663ec8d3 zipl/boot: Fix unsigned long overflow

Fix two issues in boot menu input parsing:

1. ebcdic_strtoul returns unsigned long but the value was stored in an int.
2. ebcdic_strtoul could overflow if @value exceeds ULONG_MAX.

Both problems are easy to trigger by entering an excessively large value
in the boot menu, which can lead to unsigned long overflow and memory
corruption.

Use a checked addition to prevent overflow and change menu_read() return
type to unsigned long.

Suggested-by: Eduard Shishkin <edward6@linux.ibm.com>
Reviewed-by: Eduard Shishkin <edward6@linux.ibm.com>
Signed-off-by: Marc Hartmayer <mhartmay@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2026-01-19 13:01:01 +01:00

boot

zipl/boot: Fix unsigned long overflow

2026-01-19 13:01:01 +01:00

doc

zipl/Makefile: create an empty environment file /etc/ziplenv

2022-06-03 18:40:36 +02:00

dracut

zipl/ngdump: Bail out if ngdump meta could not be saved

2025-08-13 13:52:23 +02:00

include

zipl/src: Use a matrix of component ranges instead of an array