grub/grub-core
Lidong Chen c68b7d2362 commands/test: Stack overflow due to unlimited recursion depth
The test_parse() evaluates test expression recursively. Due to lack of
recursion depth check a specially crafted expression may cause a stack
overflow. The recursion is only triggered by the parentheses usage and
it can be unlimited. However, sensible expressions are unlikely to
contain more than a few parentheses. So, this patch limits the recursion
depth to 100, which should be sufficient.

Reported-by: Nils Langius <nils@langius.de>
Signed-off-by: Lidong Chen <lidong.chen@oracle.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-02-13 15:45:56 +01:00
..
2023-01-19 17:39:04 +01:00
2024-06-06 16:55:15 +02:00
2024-11-28 21:50:54 +01:00
2017-05-03 12:49:31 +02:00
2017-05-03 12:49:31 +02:00