Mintsuki
|
34b5380d0b
|
protos/linux_risc: Fix use-after-free of module handle in verbose print
v11.2.1
|
2026-04-04 15:34:07 +02:00 |
|
Mintsuki
|
18e3547432
|
protos/linux_risc: Use overflow-checked add for kernel allocation size
|
2026-04-04 15:34:07 +02:00 |
|
Mintsuki
|
bfe3544c13
|
lib/misc: Use overflow-checked multiply in ALIGN_UP macro
|
2026-04-04 15:34:07 +02:00 |
|
Mintsuki
|
40fb2269b7
|
docs: Update ChangeLog and README.md for 11.2.1
|
2026-04-04 15:06:04 +02:00 |
|
Mintsuki
|
a24f496c2e
|
Revert "misc: Enforce hash verification when UEFI Secure Boot is active"
This reverts commit 9e2f3e7587.
|
2026-04-04 15:02:58 +02:00 |
|
Mintsuki
|
3f3a748d42
|
Revert "misc: Exempt EFI chainload and cosmetic resources from Secure Boot hash enforcement"
This reverts commit 4793ace8b2.
|
2026-04-04 15:02:58 +02:00 |
|
Mintsuki
|
2b527d1fa7
|
Revert "docs: Update ChangeLog for Secure Boot hash enforcement exemptions"
This reverts commit 4034c13379.
|
2026-04-04 15:02:57 +02:00 |
|
Mintsuki
|
3b7c85ff71
|
drivers/disk: Add disk_create_index() workaround for optical drive on VMware/BIOS
|
2026-04-04 14:37:09 +02:00 |
|
Mintsuki
|
4034c13379
|
docs: Update ChangeLog for Secure Boot hash enforcement exemptions
v11.2.0
|
2026-04-02 23:19:20 +02:00 |
|
Mintsuki
|
4793ace8b2
|
misc: Exempt EFI chainload and cosmetic resources from Secure Boot hash enforcement
|
2026-04-02 23:13:39 +02:00 |
|
Mintsuki
|
80eb990213
|
docs: Update ChangeLog and README.md for 11.2.0
|
2026-04-02 22:46:02 +02:00 |
|
Mintsuki
|
9e2f3e7587
|
misc: Enforce hash verification when UEFI Secure Boot is active
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
17ce3d7538
|
build: Use -malign-double for IA-32 UEFI to match UEFI spec struct alignment
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
8c95baeea9
|
drivers/disk: Fix unique sector pool being clobbered by find_unique_sectors()
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
97c595de07
|
lib/gterm: Avoid nested CHECKED_MUL calls to fix -Wshadow
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
b0152c9a67
|
lib/elf: Validate section header bounds in elf_section_hdr_info functions
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
35ade5f557
|
misc: Remove unnecessary casts in CHECKED_ADD/CHECKED_MUL calls
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
5156d1bd51
|
protos/multiboot: Check for overflow in load_size + bss_size
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
a758e57880
|
lib/misc: Check for overflow in DTB reallocation size
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
b84876aed7
|
lib/gterm: Check for overflow in font size calculation
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
18848b6f4a
|
lib/gterm, lib/image: Check for overflow in canvas and image size calculations
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
b4f336d098
|
lib/config: Validate hex characters in config checksum
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
b699192d0d
|
protos/multiboot2: Validate header tag sizes before casting
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
dda61b00fa
|
lib/config: Reject config file too large for size_t
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
003f01fff0
|
lib/rand: Make sure that, on x86-64, 64-bit rdrand/rdseed is always done over 32-bit
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
658906f085
|
lib/elf: Consistently NULL-check is_reloc before dereference
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
5df9958154
|
lib/pe: Validate SizeOfOptionalHeader is large enough
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
dd2354bae9
|
sys/cpu: Add retry limit to rdrand/rdseed macros
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
eac7fd4c65
|
mm/pmm: Add bounds check on EFI reclaimable entry count
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
91e5e5668f
|
lib/elf: Add file_size parameter to elf_bits for bounds checking
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
f1814a42d9
|
protos/efi_boot_entry: Validate boot variable size before accessing description
|
2026-04-02 22:21:54 +02:00 |
|
Mintsuki
|
4b22cb6f42
|
fs/fat32: Reject out-of-order and non-contiguous LFN entries
|
2026-04-02 22:21:53 +02:00 |
|
Mintsuki
|
de46c9523a
|
protos/multiboot2: Fix GCC build error with break in statement expression
|
2026-04-02 02:00:22 +02:00 |
|
Mintsuki
|
74ddd08758
|
lib/rand: Mix hardware entropy on non-x86 via RNDR and EFI RNG protocol
|
2026-04-02 01:44:59 +02:00 |
|
Mintsuki
|
a28a8ec0a2
|
protos/linux_x86: Use uint64_t for initrd_addr_max to prevent 32-bit wrap
|
2026-04-02 01:44:59 +02:00 |
|
Mintsuki
|
198bd3b8b0
|
sys/smp: Use fence instruction for RISC-V AP trampoline store ordering
|
2026-04-02 01:44:59 +02:00 |
|
Mintsuki
|
947a9b2c3a
|
sys/lapic, sys/smp: Validate MADT entry length against table boundary
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
bb4f6c4c9f
|
mm/pmm: Add bounds check to UEFI memory map import loop
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
01186e2051
|
lib/pe: Use uint64_t for sections offset calculation to prevent 32-bit overflow
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
33bc059f6d
|
lib/elf: Validate image size fits address space in elf64_load_elsewhere
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
0a24c40c7e
|
host/limine: Validate uninstall data entry size before malloc
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
f7c265f806
|
sys/cpu: Fix locked_read memory operand constraint to input+output
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
1c2942c5f8
|
lib/part: Check for overflow in cache block size calculation
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
ca253330a8
|
lib/elsewhere: Add bounds check to elsewhere_append
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
7041ea96c0
|
lib/gterm, lib/image: Reject zero font scale and zero-dimension images
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
af9fdbe7b0
|
protos/multiboot1: Remove dead NULL check on cmdline
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
9e8d1cee14
|
mm/pmm: Check for overflow in UEFI memmap AllocatePool size
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
525632106a
|
fs/iso9660: Handle Rock Ridge NM continuation entries
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
8309c20ab0
|
mm/pmm: Use CHECKED_ADD for alignment overflow check in ext_mem_alloc
|
2026-04-02 01:44:58 +02:00 |
|
Mintsuki
|
f4ce0420c0
|
lib/elf: Validate file bounds in relocation engine and vaddr translation
|
2026-04-02 01:44:58 +02:00 |
|