[bug #62072] If a multicast RA message is received during UEFI PXE boot, grub2 program will crash

[Qiumiao Zhang]

URL:
  <https://savannah.gnu.org/bugs/?62072>

                 Summary: If a multicast RA message is received during UEFI
PXE boot, grub2 program will crash
                 Project: GNU GRUB
            Submitted by: century6
            Submitted on: Thu 17 Feb 2022 11:54:56 AM UTC
                Category: Network
                Severity: Major
                Priority: 5 - Normal
              Item Group: Software Error
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: Qiumiao Zhang
        Originator Email: zhangqiumiao1@huawei.com
             Open/Closed: Open
                 Release: 
                 Release: 2.02
         Discussion Lock: Any
         Reproducibility: Every Time
         Planned Release: None

    _______________________________________________________

Details:

Versions affected: 2.02, 2.04
Reproduced on: UEFI PXE over IPv6
Tested on: QEMU virtual machine (aarch64) with Linux

During UEFI PXE boot in IPv6 network, if the DHCP server adopts stateful
automatic configuration, when the client receives the ICMP6_ROUTER_ADVERTISE
message multicast from the server, it will cause the problem of dereference
null pointer and cause the grub2 program to crash.



    _______________________________________________________

File Attachments:


-------------------------------------------------------
Date: Thu 17 Feb 2022 11:54:56 AM UTC  Name: grub2_1.png  Size: 632KiB   By:
century6

<http://savannah.gnu.org/bugs/download.php?file_id=52875>
-------------------------------------------------------
Date: Thu 17 Feb 2022 11:54:56 AM UTC  Name: grub2_2.png  Size: 5KiB   By:
century6

<http://savannah.gnu.org/bugs/download.php?file_id=52876>

    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?62072>

_______________________________________________
  Message sent via Savannah
  https://savannah.gnu.org/