[coreboot] [PATCH] Avoid cross-device renames in build_opt_tbl

Peter Stuge peter at stuge.se
Thu Dec 4 05:06:43 CET 2008


Carl-Daniel Hailfinger wrote:
> +		tmpfilename = malloc(strlen(option) + strlen(TMPFILE_TEMPLATE) + 1);
..
> +		tmpfilename = malloc(strlen(header) + strlen(TMPFILE_TEMPLATE) + 1);

Watch out for those exploits.


//Peter




More information about the coreboot mailing list