On Thu, 15 Oct 2026 16:08:01 +0200, Ahmad Fatoum wrote:
> efivarfs fills struct dirent in its own readdir, so it doesn't benefit
> from the length check in fillonedir() and strcpy()s the variable name
> and GUID suffix into the 256 byte d_name unchecked.
>
> The names come from the firmware, which allows up to 1023 characters
> here, and efivars_create() takes them from the path, so creating a
> variable with a 300 character name and listing /efivars overruns the
> directory allocation.
>
> [...]
Applied, thanks!
[1/1] fs: efivarfs: skip variables whose name does not fit struct dirent
https://git.pengutronix.de/cgit/barebox/commit/?id=69e4768c46df (link may
not be stable)
Best regards,
--
Sascha Hauer <[email protected]>
