[syslinux] [PATCH 4/5] installers: fix a possible buffer overflow when looking for LDLINUX_MAGIC

Pete Batard
Wed, 24 Feb 2016 13:02:39 -0000

If the ldlinux being processed is garbage, the search for LDLINUX_MAGIC
will overflow its buffer - fix that.
I did encounter this issue in Rufus as, due to notorious
incompatibilities between different versions of ldlinux.sys and the
com32's residing on an ISO, we download a version specific ldlinux.sys
from our server... which may get trashed if the user sits behind one of
these corporate firewalls that modifies the download payload and
replaces it with something like "You are not authorized to download this
file"...
-------------- next part --------------