Lidong Chen cd24e25910 net/bootp: Prevent a UAF in network interface unregister ...

A UAF occurs in grub_net_network_level_interface_unregister()
when inter->name is accessed after being freed in grub_cmd_bootp().
Fix it by deferring grub_free(ifaces[j].name) until after
grub_net_network_level_interface_unregister() completes.

Signed-off-by: Lidong Chen <lidong.chen@oracle.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>

2025-10-24 20:05:07 +02:00

..

drivers

net/drivers/ieee1275/ofnet: Add missing grub_malloc()

2025-03-26 15:15:22 +01:00

arp.c

net/arp: Fix uninitialized scalar variable

2022-04-04 20:28:54 +02:00

bootp.c

net/bootp: Prevent a UAF in network interface unregister

2025-10-24 20:05:07 +02:00

dns.c

net: Prevent overflows when allocating memory for arrays

2025-02-13 15:45:57 +01:00

ethernet.c

net: Remove trailing whitespaces

2022-03-14 15:58:06 +01:00

http.c

net/http: Fix gcc-13 errors relating to type signedness

2023-12-05 15:55:10 +01:00

icmp6.c

net: Fix NULL pointer dereference when parsing ICMP6_ROUTER_ADVERTISE messages

2022-04-26 15:53:11 +02:00

icmp.c

arp, icmp: Fix handling in case of oversized or invalid packets.

2015-03-27 12:18:25 +01:00

ip.c

net/ip: Do IP fragment maths safely

2022-06-07 16:39:33 +02:00

net.c

net: Check if returned pointer for allocated memory is NULL

2025-02-13 15:45:57 +01:00

netbuff.c

net/netbuff: Block overly large netbuff allocs

2022-06-07 16:39:33 +02:00

tcp.c

net/tcp: Fix TCP port number reused on reboot

2025-10-11 15:36:53 +02:00

tftp.c

net/tftp: Fix stack buffer overflow in tftp_open()

2025-02-13 15:45:55 +01:00

udp.c

net: Remove trailing whitespaces

2022-03-14 15:58:06 +01:00