[PATCH] fs: efivarfs: skip variables whose name does not fit struct dirent

Sascha Hauer s.hauer at pengutronix.de
Tue Oct 20 06:56:36 PDT 2026


On Thu, 15 Oct 2026 16:08:01 +0200, Ahmad Fatoum wrote:
> efivarfs fills struct dirent in its own readdir, so it doesn't benefit
> from the length check in fillonedir() and strcpy()s the variable name
> and GUID suffix into the 256 byte d_name unchecked.
> 
> The names come from the firmware, which allows up to 1023 characters
> here, and efivars_create() takes them from the path, so creating a
> variable with a 300 character name and listing /efivars overruns the
> directory allocation.
> 
> [...]

Applied, thanks!

[1/1] fs: efivarfs: skip variables whose name does not fit struct dirent
      https://git.pengutronix.de/cgit/barebox/commit/?id=69e4768c46df (link may not be stable)

Best regards,
-- 
Sascha Hauer <s.hauer at pengutronix.de>




More information about the barebox mailing list