:: commit 9ffe317b587924d6c26392ea619c4d830cc540c7

Mintsuki <mintsuki@protonmail.com> — 2026-01-12 11:15

parents: 3f30da7e12

limine: Add bounds check for request array in deprecated .limine_reqs path

diff --git a/common/protos/limine.c b/common/protos/limine.c
index 8a558dc5..0c257e27 100644
--- a/common/protos/limine.c
+++ b/common/protos/limine.c
@@ -549,6 +549,9 @@ noreturn void limine_load(char *config, char *cmdline) {
     requests_count = 0;
     if (base_revision == 0 && kernel_format == EXECUTABLE_FORMAT_ELF && elf64_load_section(kernel, &limine_reqs, ".limine_reqs", 0, slide)) {
         for (size_t i = 0; ; i++) {
+            if (i >= MAX_REQUESTS) {
+                panic(true, "limine: Maximum requests exceeded");
+            }
             if (limine_reqs[i] == 0) {
                 break;
             }
tab: 248 wrap: offon