diff options
| author | hpa <hpa> | 2002-10-22 18:28:26 +0000 |
|---|---|---|
| committer | hpa <hpa> | 2002-10-22 18:28:26 +0000 |
| commit | 6f5159e474dd731591e536f15776c94ce4754f73 (patch) | |
| tree | b20b7e1012d19b843a37507fccaa57dabef9f60f | |
| parent | 07786ed98ed2dce5a8259665bce598fa3c84c0ad (diff) | |
| download | syslinux-6f5159e474dd731591e536f15776c94ce4754f73.tar.gz | |
Fix PXELINUX memory overwrite bug.syslinux-2.00-pre9
| -rw-r--r-- | NEWS | 3 | ||||
| -rw-r--r-- | pxelinux.asm | 8 |
2 files changed, 11 insertions, 0 deletions
@@ -8,6 +8,9 @@ Changes in 2.00: * Fix mbr.asm so that it actually works. * SYSLINUX: The syslinux installer *SHOULD* now be safe to run setuid root. + * PXELINUX: Fix bug where PXELINUX would override random + chunks of the UNDI code segment! Thanks to Kevin Tran for + finding this bug. Changes in 1.76: * ISOLINUX: Remove code no longer used which caused hangs on diff --git a/pxelinux.asm b/pxelinux.asm index 53b46b84..e4572b88 100644 --- a/pxelinux.asm +++ b/pxelinux.asm @@ -306,7 +306,11 @@ _start1: mov al,NULLFILE mov di,FKeyName mov cx,10*(1 << FILENAME_MAX_LG2) + push es ; Save ES -> PXE structure + push ds ; ES <- DS + pop es rep stosb + pop es ; Restore ES ; ; Tell the user we got this far @@ -504,7 +508,11 @@ have_entrypoint: mov di,Sockets mov cx,(MAX_SOCKETS*tftp_port_t_size)/4 xor eax,eax + push es ; Save ES -> PXE structure + push ds ; ES <- DS + pop es rep stosd + pop es ; ; Now attempt to get the BOOTP/DHCP packet that brought us life (and an IP |