SOURCES/0281-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch

file added

+67

SOURCES/0282-safemath-Add-some-arithmetic-primitives-that-check-f.patch

file added

+124

SOURCES/0283-calloc-Make-sure-we-always-have-an-overflow-checking.patch

file added

+240

SOURCES/0284-calloc-Use-calloc-at-most-places.patch

file added

+1942

SOURCES/0285-malloc-Use-overflow-checking-primitives-where-we-do-.patch

file added

+1320

SOURCES/0286-iso9660-Don-t-leak-memory-on-realloc-failures.patch

file added

+66

SOURCES/0287-font-Do-not-load-more-than-one-NAME-section.patch

file added

+35

SOURCES/0288-gfxmenu-Fix-double-free-in-load_image.patch

file added

+33

SOURCES/0289-xnu-Fix-double-free-in-grub_xnu_devprop_add_property.patch

file added

+53

SOURCES/0290-lzma-Make-sure-we-don-t-dereference-past-array.patch

file added

+49

SOURCES/0291-term-Fix-overflow-on-user-inputs.patch

file added

+63

SOURCES/0292-udf-Fix-memory-leak.patch

file added

+53

SOURCES/0293-multiboot2-Fix-memory-leak-if-grub_create_loader_cmd.patch

file added

+44

SOURCES/0294-tftp-Do-not-use-priority-queue.patch

file added

+286

SOURCES/0295-relocator-Protect-grub_relocator_alloc_chunk_addr-in.patch

file added

+147

SOURCES/0296-relocator-Protect-grub_relocator_alloc_chunk_align-m.patch

file added

+335

SOURCES/0297-script-Remove-unused-fields-from-grub_script_functio.patch

file added

+30

SOURCES/0298-script-Avoid-a-use-after-free-when-redefining-a-func.patch

file added

+105

SOURCES/0299-relocator-Fix-grub_relocator_alloc_chunk_align-top-m.patch

file added

+43

SOURCES/0300-hfsplus-fix-two-more-overflows.patch

file added

+54

SOURCES/0301-lvm-fix-two-more-potential-data-dependent-alloc-over.patch

file added

+109

SOURCES/0302-emu-make-grub_free-NULL-safe.patch

file added

+31

SOURCES/0303-efi-fix-some-malformed-device-path-arithmetic-errors.patch

file added

+248

SOURCES/0304-Fix-a-regression-caused-by-efi-fix-some-malformed-de.patch

file added

+85

SOURCES/0305-update-safemath-with-fallback-code-for-gcc-older-tha.patch

file added

+147

SOURCES/0306-efi-Fix-use-after-free-in-halt-reboot-path.patch

file added

+162

SOURCES/0307-efi-dhcp-fix-some-allocation-error-checking.patch

file added

+37

SOURCES/0308-efi-http-fix-some-allocation-error-checking.patch

file added

+39

SOURCES/0309-efi-ip-46-_config.c-fix-some-potential-allocation-ov.patch

file added

+127

SOURCES/0310-Fix-up-some-types-for-gcc-4.8-compat-safemath.h.patch

file added

+216

SOURCES/0311-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch

file added

+48

SOURCES/0312-linux-loader-avoid-overflow-on-initrd-size-calculati.patch

file added

+25

SOURCES/0313-linuxefi-fail-kernel-validation-without-shim-protoco.patch

file added

+97

SOURCES/0314-linux-Fix-integer-overflows-in-initrd-size-handling.patch

file added

+165

SOURCES/0315-blscfg-Always-look-for-BLS-snippets-in-the-root-devi.patch

file added

+47

SOURCES/0316-blscfg-Don-t-hardcode-an-env-var-as-fallback-for-the.patch

file added

+47

SOURCES/0317-tftp-roll-over-block-counter-to-prevent-timeouts-wit.patch

file added

+51

SOURCES/0318-at_keyboard-use-set-1-when-keyboard-is-in-Translate-.patch

file added

+121

SOURCES/0319-grub-install-disable-support-for-EFI-platforms.patch

file added

+118

SOURCES/0320-New-with-debug-timestamps-configure-flag-to-prepend-.patch

file added

+112

SOURCES/0321-Added-debug-statements-to-grub_disk_open-and-grub_di.patch

file added

+47

SOURCES/0322-Introduce-function-grub_debug_is_enabled-void-return.patch

file added

+51

SOURCES/0323-Don-t-clear-screen-when-debugging-is-enabled.patch

file added

+27

SOURCES/0324-grub_file_-instrumentation-new-file-debug-tag.patch

file added

+71

SOURCES/0325-ieee1275-Avoiding-many-unecessary-open-close.patch

file added

+136

SOURCES/0326-ieee1275-powerpc-implements-fibre-channel-discovery-.patch

file added

+90

SOURCES/0327-ieee1275-powerpc-enables-device-mapper-discovery.patch

file added

+106

SOURCES/0328-Add-at_keyboard_fallback_set-var-to-force-the-set-ma.patch

file added

+239

SOURCES/0329-bufio-Use-grub_size_t-instead-of-plain-int-for-size.patch

file added

+60

SOURCES/0330-verifiers-File-type-for-fine-grained-signature-verif.patch

file added

+1738

SOURCES/0331-verifiers-Framework-core.patch

file added

+1026

SOURCES/0332-verifiers-Add-possibility-to-verify-kernel-and-modul.patch

file added

+520

SOURCES/0333-verifiers-Add-possibility-to-defer-verification-to-o.patch

file added

+91

SOURCES/0334-verifiers-Rename-verify-module-to-pgp-module.patch

file added

+36

SOURCES/0335-pgp-Fix-emu-build-and-tests-after-pgp-module-renamin.patch

file added

+55

SOURCES/0336-include-grub-file.h-Add-device-tree-file-type.patch

file added

+30

SOURCES/0337-grub-core-loader-efi-fdt.c-Fixup-grub_file_open-call.patch

file added

+28

SOURCES/0338-arm64-efi-Fix-breakage-caused-by-verifiers.patch

file added

+38

SOURCES/0339-arm-uboot-ia64-sparc64-Fix-up-grub_file_open-calls.patch

file added

+74

SOURCES/0340-verifiers-fix-double-close-on-pgp-s-sig-file-descrip.patch

file added

+146

SOURCES/0341-verifiers-Xen-fallout-cleanup.patch

file added

+46

SOURCES/0342-verifiers-ARM-Xen-fallout-cleanup.patch

file added

+63

SOURCES/0343-verifiers-IA-64-fallout-cleanup.patch

file added

+28

SOURCES/0344-verifiers-PowerPC-fallout-cleanup.patch

file added

+37

SOURCES/0345-verifiers-MIPS-fallout-cleanup.patch

file added

+27

SOURCES/0346-verifiers-Fix-calling-uninitialized-function-pointer.patch

file added

+41

SOURCES/0347-rhel-extra-file-type-fixes.patch

file added

+124

SOURCES/0348-dl-Add-support-for-persistent-modules.patch

file added

+65

SOURCES/0349-Add-suport-for-signing-grub-with-an-appended-signatu.patch

file added

+309

SOURCES/0350-docs-grub-Document-signing-grub-under-UEFI.patch

file added

+59

SOURCES/0351-docs-grub-Document-signing-grub-with-an-appended-sig.patch

file added

+67

SOURCES/0352-docs-grub-grub-install-is-no-longer-a-shell-script.patch

file added

+33

SOURCES/0353-docs-grub-pubkey-has-been-supported-for-some-time.patch

file added

+36

SOURCES/0354-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch

file added

+44

SOURCES/0355-verifiers-provide-unsafe-module-list.patch

file added

+96

SOURCES/0356-pgp-factor-out-rsa_pad.patch

file added

+191

SOURCES/0357-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch

file added

+71

SOURCES/0358-posix_wrap-tweaks-in-preparation-for-libtasn1.patch

file added

+64

SOURCES/0359-libtasn1-import-libtasn1-4.16.0.patch

file added

+8934

SOURCES/0360-libtasn1-disable-code-not-needed-in-grub.patch

file added

+307

SOURCES/0361-libtasn1-changes-for-grub-compatibility.patch

file added

+202

SOURCES/0362-libtasn1-compile-into-asn1-module.patch

file added

+70

SOURCES/0363-test_asn1-test-module-for-libtasn1.patch

file added

+1455

SOURCES/0364-grub-install-support-embedding-x509-certificates.patch

file added

+255

SOURCES/0365-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch

file added

+639

SOURCES/0366-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch

file added

+1542

SOURCES/0367-appended-signatures-support-verifying-appended-signa.patch

file added

+719

SOURCES/0368-appended-signatures-verification-tests.patch

file added

+897

SOURCES/0369-appended-signatures-documentation.patch

file added

+329

SOURCES/0370-ieee1275-link-appended-signature-enforcement-to-ibm-.patch

file added

+137

SOURCES/0371-include-grub-verify.h-Add-include-guard.patch

file added

+37

SOURCES/0372-arm64-xen-Fix-too-few-arguments-to-function-grub_cre.patch

file added

+40

SOURCES/0373-kern-Add-lockdown-support.patch

file added

+440

SOURCES/0374-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch

file added

+53

SOURCES/0375-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch

file added

+52

SOURCES/0376-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch

file added

+137

SOURCES/0377-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch

file added

+72

SOURCES/0378-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch

file added

+66

SOURCES/0379-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch

file added

+108

SOURCES/0380-commands-setpci-Restrict-setpci-command-when-locked-.patch

file added

+33

SOURCES/0381-commands-hdparm-Restrict-hdparm-command-when-locked-.patch

file added

+31

SOURCES/0382-gdb-Restrict-GDB-access-when-locked-down.patch

file added

+58

SOURCES/0383-loader-xnu-Don-t-allow-loading-extension-and-package.patch

file added

+57

SOURCES/0384-docs-Document-the-cutmem-command.patch

file added

+61

SOURCES/0385-dl-Only-allow-unloading-modules-that-are-not-depende.patch

file added

+83

SOURCES/0386-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch

file added

+112

SOURCES/0387-mmap-Fix-memory-leak-when-iterating-over-mapped-memo.patch

file added

+36

SOURCES/0388-net-net-Fix-possible-dereference-to-of-a-NULL-pointe.patch

file added

+36

SOURCES/0389-net-tftp-Fix-dangling-memory-pointer.patch

file added

+30

SOURCES/0390-kern-parser-Fix-resource-leak-if-argc-0.patch

file added

+47

SOURCES/0391-kern-efi-Fix-memory-leak-on-failure.patch

file added

+27

SOURCES/0392-kern-efi-mm-Fix-possible-NULL-pointer-dereference.patch

file added

+65

SOURCES/0393-gnulib-regexec-Resolve-unused-variable.patch

file added

+73

SOURCES/0394-gnulib-regcomp-Fix-uninitialized-token-structure.patch

file added

+64

SOURCES/0395-gnulib-argp-help-Fix-dereference-of-a-possibly-NULL-.patch

file added

+64

SOURCES/0396-gnulib-regexec-Fix-possible-null-dereference.patch

file added

+65

SOURCES/0397-gnulib-regcomp-Fix-uninitialized-re_token.patch

file added

+64

SOURCES/0398-io-lzopio-Resolve-unnecessary-self-assignment-errors.patch

file added

+38

SOURCES/0399-kern-partition-Check-for-NULL-before-dereferencing-i.patch

file added

+40

SOURCES/0400-disk-ldm-Make-sure-comp-data-is-freed-before-exiting.patch

file added

+125

SOURCES/0401-disk-ldm-If-failed-then-free-vg-variable-too.patch

file added

+25

SOURCES/0402-disk-ldm-Fix-memory-leak-on-uninserted-lv-references.patch

file added

+47

SOURCES/0403-disk-cryptodisk-Fix-potential-integer-overflow.patch

file added

+47

SOURCES/0404-hfsplus-Check-that-the-volume-name-length-is-valid.patch

file added

+40

SOURCES/0405-zfs-Fix-possible-negative-shift-operation.patch

file added

+39

SOURCES/0406-zfs-Fix-resource-leaks-while-constructing-path.patch

file added

+118

SOURCES/0407-zfs-Fix-possible-integer-overflows.patch

file added

+53

SOURCES/0408-zfsinfo-Correct-a-check-for-error-allocating-memory.patch

file added

+32

SOURCES/0409-affs-Fix-memory-leaks.patch

file added

+79

SOURCES/0410-libgcrypt-mpi-Fix-possible-unintended-sign-extension.patch

file added

+32

SOURCES/0411-libgcrypt-mpi-Fix-possible-NULL-dereference.patch

file added

+30

SOURCES/0412-syslinux-Fix-memory-leak-while-parsing.patch

file added

+40

SOURCES/0413-normal-completion-Fix-leaking-of-memory-when-process.patch

file added

+49

SOURCES/0414-commands-hashsum-Fix-a-memory-leak.patch

file added

+53

SOURCES/0415-video-efi_gop-Remove-unnecessary-return-value-of-gru.patch

file added

+91

SOURCES/0416-video-fb-fbfill-Fix-potential-integer-overflow.patch

file added

+75

SOURCES/0417-video-fb-video_fb-Fix-multiple-integer-overflows.patch

file added

+101

SOURCES/0418-video-fb-video_fb-Fix-possible-integer-overflow.patch

file added

+36

SOURCES/0419-video-readers-jpeg-Test-for-an-invalid-next-marker-r.patch

file added

+35

SOURCES/0420-gfxmenu-gui_list-Remove-code-that-coverity-is-flaggi.patch

file added

+31

SOURCES/0421-loader-bsd-Check-for-NULL-arg-up-front.patch

file added

+44

SOURCES/0422-loader-xnu-Fix-memory-leak.patch

file added

+36

SOURCES/0423-loader-xnu-Free-driverkey-data-when-an-error-is-dete.patch

file added

+74

SOURCES/0424-loader-xnu-Check-if-pointer-is-NULL-before-using-it.patch

file added

+39

SOURCES/0425-util-grub-editenv-Fix-incorrect-casting-of-a-signed-.patch

file added

+43

SOURCES/0426-util-glue-efi-Fix-incorrect-use-of-a-possibly-negati.patch

file added

+47

SOURCES/0427-script-execute-Fix-NULL-dereference-in-grub_script_e.patch

file added

+25

SOURCES/0428-commands-ls-Require-device_name-is-not-NULL-before-p.patch

file added

+30

SOURCES/0429-script-execute-Avoid-crash-when-using-outside-a-func.patch

file added

+34

SOURCES/0430-lib-arg-Block-repeated-short-options-that-require-an.patch

file added

+51

SOURCES/0431-script-execute-Don-t-crash-on-a-for-loop-with-no-ite.patch

file added

+36

SOURCES/0432-commands-menuentry-Fix-quoting-in-setparams_prefix.patch

file added

+43

SOURCES/0433-kern-misc-Always-set-end-in-grub_strtoull.patch

file added

+43

SOURCES/0434-video-readers-jpeg-Catch-files-with-unsupported-quan.patch

file added

+49

SOURCES/0435-video-readers-jpeg-Catch-OOB-reads-writes-in-grub_jp.patch

file added

+44

SOURCES/0436-video-readers-jpeg-Don-t-decode-data-before-start-of.patch

file added

+36

SOURCES/0437-term-gfxterm-Don-t-set-up-a-font-with-glyphs-that-ar.patch

file added

+48

SOURCES/0438-fs-fshelp-Catch-impermissibly-large-block-sizes-in-r.patch

file added

+43

SOURCES/0439-fs-hfsplus-Don-t-fetch-a-key-beyond-the-end-of-the-n.patch

file added

+29

SOURCES/0440-fs-hfsplus-Don-t-use-uninitialized-data-on-corrupt-f.patch

file added

+104

SOURCES/0441-fs-hfs-Disable-under-lockdown.patch

file added

+43

SOURCES/0442-fs-sfs-Fix-over-read-of-root-object-name.patch

file added

+46

SOURCES/0443-fs-jfs-Do-not-move-to-leaf-level-if-name-length-is-n.patch

file added

+30

SOURCES/0444-fs-jfs-Limit-the-extents-that-getblk-can-consider.patch

file added

+58

SOURCES/0445-fs-jfs-Catch-infinite-recursion.patch

file added

+42

SOURCES/0446-fs-nilfs2-Reject-too-large-keys.patch

file added

+42

SOURCES/0447-fs-nilfs2-Don-t-search-children-if-provided-number-i.patch

file added

+96

SOURCES/0448-fs-nilfs2-Properly-bail-on-errors-in-grub_nilfs2_btr.patch

file added

+64

SOURCES/0449-io-gzio-Bail-if-gzio-tl-td-is-NULL.patch

file added

+63

SOURCES/0450-io-gzio-Add-init_dynamic_block-clean-up-if-unpacking.patch

file added

+63

SOURCES/0451-io-gzio-Catch-missing-values-in-huft_build-and-bail.patch

file added

+53

SOURCES/0452-io-gzio-Zero-gzio-tl-td-in-init_dynamic_block-if-huf.patch

file added

+38

SOURCES/0453-disk-lvm-Don-t-go-beyond-the-end-of-the-data-we-read.patch

file added

+45

SOURCES/0454-disk-lvm-Don-t-blast-past-the-end-of-the-circular-me.patch

file added

+39

SOURCES/0455-disk-lvm-Bail-on-missing-PV-list.patch

file added

+31

SOURCES/0456-disk-lvm-Do-not-crash-if-an-expected-string-is-not-f.patch

file added

+79

SOURCES/0457-disk-lvm-Do-not-overread-metadata.patch

file added

+107

SOURCES/0458-disk-lvm-Sanitize-rlocn-offset-to-prevent-wild-read.patch

file added

+37

SOURCES/0459-disk-lvm-Do-not-allow-a-LV-to-be-it-s-own-segment-s-.patch

file added

+35

SOURCES/0460-kern-parser-Fix-a-memory-leak.patch

file added

+73

SOURCES/0461-kern-parser-Introduce-process_char-helper.patch

file added

+116

SOURCES/0462-kern-parser-Introduce-terminate_arg-helper.patch

file added

+62

SOURCES/0463-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch

file added

+88

SOURCES/0464-kern-buffer-Add-variable-sized-heap-buffer.patch

file added

+304

SOURCES/0465-kern-parser-Fix-a-stack-buffer-overflow.patch

file added

+244

SOURCES/0466-kern-efi-Add-initial-stack-protector-implementation.patch

file added

+298

SOURCES/0467-util-mkimage-Remove-unused-code-to-add-BSS-section.patch

file added

+57

SOURCES/0468-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch

file added

+109

SOURCES/0469-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch

file added

+35

SOURCES/0470-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch

file added

+165

SOURCES/0471-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch

file added

+69

SOURCES/0472-util-mkimage-Improve-data_size-value-calculation.patch

file added

+46

SOURCES/0473-util-mkimage-Refactor-section-setup-to-use-a-helper.patch

file added

+216

SOURCES/0474-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch

file added

+260

SOURCES/0475-kern-misc-Split-parse_printf_args-into-format-parsin.patch

file added

+46

SOURCES/0476-kern-misc-Add-STRING-type-for-internal-printf-format.patch

file added

+64

SOURCES/0477-kern-misc-Add-function-to-check-printf-format-agains.patch

file added

+215

SOURCES/0478-gfxmenu-gui-Check-printf-format-in-the-gui_progress_.patch

file added

+58

SOURCES/0479-kern-mm-Fix-grub_debug_calloc-compilation-error.patch

file added

+29

SOURCES/0480-efi-net-Fix-malformed-device-path-arithmetic-errors-.patch

file added

+74

SOURCES/grub.macros

file modified

+22 -12

SOURCES/grub.patches

file modified

+200 -0

SOURCES/redhatsecureboot301.cer SOURCES/secureboot.cer

file renamed

file was renamed with no change to the file

SOURCES/redhatsecureboot502.cer

file added

+0

empty file added

SOURCES/redhatsecurebootca3.cer SOURCES/securebootca.cer

file renamed

file was renamed with no change to the file

SOURCES/redhatsecurebootca5.cer

file added

+0

empty file added

SOURCES/sbat.csv.in

file added

+3

SPECS/grub2.spec

file modified

+106 -8