)]}'
{
  "commit": "b53d06c577301000ad7921b28a76dcfd13b0fdcd",
  "tree": "155e848dbfa54d13dec2798db8936bc75e93e941",
  "parents": [
    "7c9e5bf1e96e740cba2ddcb41f6ee80af09f632b"
  ],
  "author": {
    "name": "Peter Jones",
    "email": "pjones@redhat.com",
    "time": "Mon Jun 15 12:28:27 2020 -0400"
  },
  "committer": {
    "name": "Robert Kolchmeyer",
    "email": "rkolchmeyer@google.com",
    "time": "Wed Aug 05 20:06:35 2020 -0700"
  },
  "message": "grub-lakitu: BACKPORT: FROMGIT: malloc: Use overflow checking primitives where we do complex allocations\n\nThis attempts to fix the places where we do the following where\narithmetic_expr may include unvalidated data:\n\n  X \u003d grub_malloc(arithmetic_expr);\n\nIt accomplishes this by doing the arithmetic ahead of time using grub_add(),\ngrub_sub(), grub_mul() and testing for overflow before proceeding.\n\nAmong other issues, this fixes:\n  - allocation of integer overflow in grub_video_bitmap_create()\n    reported by Chris Coulson,\n  - allocation of integer overflow in grub_png_decode_image_header()\n    reported by Chris Coulson,\n  - allocation of integer overflow in grub_squash_read_symlink()\n    reported by Chris Coulson,\n  - allocation of integer overflow in grub_ext2_read_symlink()\n    reported by Chris Coulson,\n  - allocation of integer overflow in read_section_as_string()\n    reported by Chris Coulson.\n\nFixes: CVE-2020-14309, CVE-2020-14310, CVE-2020-14311\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\nReviewed-by: Daniel Kiper \u003cdaniel.kiper@oracle.com\u003e\nUpstream-commit-id: 5fb2befbf04\n(cherry picked from commit b3dd39088e5b2efb190e33e2a0b71c9d1dc93118\n https://github.com/rhboot/grub2 fedora-31)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n\nConflicts:\n - grub-core/fs/btrfs.c: Adjusted context to match the headers that we\n have in this file\n - grub-core/loader/i386/bsd.c: Adjusted context to match the headers\n that we have in this file\n\nBUG\u003db/162782466\nTEST\u003dshielded_vm_test\n\nChange-Id: I06fca1da927c1922798d82e57e2942359935f453\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "5e3ec0d5e439653cba9d82718bd948edd09cad4b",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/commands/legacycfg.c",
      "new_id": "cc5971f4dbdbc83f73b115698c93863c5c24b78f",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/commands/legacycfg.c"
    },
    {
      "type": "modify",
      "old_id": "9b4e72766ff5f52c807534a17ad3d8190a289896",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/commands/wildcard.c",
      "new_id": "18b2b5e78c5fb421d1c48d4e42c186cbb028e958",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/commands/wildcard.c"
    },
    {
      "type": "modify",
      "old_id": "d3d2009d0acf9499d346aad7c148eb37d5cfa3c0",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/disk/ldm.c",
      "new_id": "cfd5f6c6483869a955d1bb52e3642e7b6adf6830",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/disk/ldm.c"
    },
    {
      "type": "modify",
      "old_id": "8e118b315ce349a6ec557c97bdf6db76aa18007d",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/font/font.c",
      "new_id": "5edb477ac2e792a4ec5e773c1b6fbbf84a65b795",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/font/font.c"
    },
    {
      "type": "modify",
      "old_id": "ed2a8939a1811a0c0efa4ed1fa9a9006549fd782",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/fs/btrfs.c",
      "new_id": "53ae7afccfd220768dd20ecfb5d8e5832d5684d3",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/fs/btrfs.c"
    },
    {
      "type": "modify",
      "old_id": "cdce63bcc9d57e82b7a4f6a644803a1d8320935d",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/fs/ext2.c",
      "new_id": "ecb69ed402877faaf4b714cc0a58bbb8dbc10a86",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/fs/ext2.c"
    },
    {
      "type": "modify",
      "old_id": "092b8f409ec001d26a6b9406195852f74c23956f",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/fs/iso9660.c",
      "new_id": "f45841e2b47d91ef63395edb88fce12ac540645a",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/fs/iso9660.c"
    },
    {
      "type": "modify",
      "old_id": "663931717fdc8530d00e4edcb41cfa9de1d80cde",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/fs/sfs.c",
      "new_id": "3ddc6b5e287013bc630e8924e15ff22551e54cd6",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/fs/sfs.c"
    },
    {
      "type": "modify",
      "old_id": "2c967c65a42b28de34989141efadea09c10e2736",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/fs/squash4.c",
      "new_id": "f9bef38fc4220512b478595b893d4b067033eace",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/fs/squash4.c"
    },
    {
      "type": "modify",
      "old_id": "ebf16250a456c48a2b63299d1e13126bceb1cd54",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/fs/udf.c",
      "new_id": "99b001f206663a8746111f6aed757aa8d25480fd",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/fs/udf.c"
    },
    {
      "type": "modify",
      "old_id": "9f66dd6e4c6491e6b2cbfc7866335b432c824502",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/fs/xfs.c",
      "new_id": "1fd4492ee4ec7e1b537ec7dc5b912ef1630889a0",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/fs/xfs.c"
    },
    {
      "type": "modify",
      "old_id": "f6b95d4fb0281c32702174580571c0a72f4c4f69",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/fs/zfs/zfs.c",
      "new_id": "c6204367e78a5f1766af64b4d9e683b62437ca6a",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/fs/zfs/zfs.c"
    },
    {
      "type": "modify",
      "old_id": "1402e0bc29bed1e3871e1bf7bd07b4b9989e9025",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/fs/zfs/zfscrypt.c",
      "new_id": "de3b015f58272050c27b967e91183d4a049dd688",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/fs/zfs/zfscrypt.c"
    },
    {
      "type": "modify",
      "old_id": "fd7744a6ff659138894ae2901e2de8ba682297fe",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/lib/arg.c",
      "new_id": "3288609a5e1f402349c042dd0a212ec774686b93",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/lib/arg.c"
    },
    {
      "type": "modify",
      "old_id": "552f743c3263651630cdb84e9b76814cd3428386",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/loader/i386/bsd.c",
      "new_id": "8b509a7e38cbfc96e6d7257873c11d535bddf413",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/loader/i386/bsd.c"
    },
    {
      "type": "modify",
      "old_id": "e332d5eb4a4b96b95a0013060b5d7ab72e7ec257",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/net/dns.c",
      "new_id": "906ec7d6782aa3721fc01048bd475b88f8373323",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/net/dns.c"
    },
    {
      "type": "modify",
      "old_id": "d57fb72faa82ac9cdf30aa5416133b88a739ea0d",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/normal/charset.c",
      "new_id": "4dfcc31078dcdabdbb7b0a75dd9376ccac173a08",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/normal/charset.c"
    },
    {
      "type": "modify",
      "old_id": "9003609950b39e3f4a96046855bb774ec2532231",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/normal/cmdline.c",
      "new_id": "b4b66ba34ef450647208e789c978c166d5b8ac7c",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/normal/cmdline.c"
    },
    {
      "type": "modify",
      "old_id": "a86f0568431839eebd82c0630c09c81571da18ed",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/normal/menu_entry.c",
      "new_id": "5f0800c8e138d17487829f685713fcce51139526",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/normal/menu_entry.c"
    },
    {
      "type": "modify",
      "old_id": "217ec5d1e1b2fda0ca9ff633f60a2f12a57667e3",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/script/argv.c",
      "new_id": "5751fdd57082cd5faf88d90680eddea407a4f2f9",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/script/argv.c"
    },
    {
      "type": "modify",
      "old_id": "c6bd3172fabce43e4f81570e5ed25e5f41250a27",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/script/lexer.c",
      "new_id": "5fb0cbd0bc9cb17d4f89a4878a5bfdcc8a4491bd",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/script/lexer.c"
    },
    {
      "type": "modify",
      "old_id": "b2e0315665b39db08f6d54d479046c108782d040",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/video/bitmap.c",
      "new_id": "6256e209a6ba0a1f830fb82558d6fef58e252f38",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/video/bitmap.c"
    },
    {
      "type": "modify",
      "old_id": "61bd645379b9a32d18665b9612e81495f67920c8",
      "old_mode": 33188,
      "old_path": "grub-lakitu/grub-core/video/readers/png.c",
      "new_id": "0157ff7420be5cf6e08e305bac7a556f9d4b238d",
      "new_mode": 33188,
      "new_path": "grub-lakitu/grub-core/video/readers/png.c"
    }
  ]
}