Fix stack overflow caused by infinite recursion

If an EFI device path node has 0 length, loop will never terminate.

Resolves: bz#2459982
Resolves: CVE-2026-6862

Signed-off-by: Marta Lewandowska <mlewando@redhat.com>

Author: marta-lewandowska

src/include/efivar/efivar-dp.h

@@ -1122,6 +1122,8 @@ efidp_is_valid(const_efidp dp, ssize_t limit)
 		efidp_header *next;
 		if (limit < (int64_t)(sizeof (efidp_header)))
 			return 0;
+		if (hdr->length < 4)
+			return 0;
 
 		switch (hdr->type) {
 		case EFIDP_HARDWARE_TYPE:

src/loadopt.c

@@ -138,7 +138,7 @@ efi_loadopt_optional_data_size(efi_load_option *opt, size_t size)
 	}
 	for (sz = 0; sz < opt->file_path_list_length;
 	     sz += efidp_size((const_efidp)(p + sz)))
-		;
+	    ;
 	if (sz != opt->file_path_list_length) {
 		efi_error("size does not match file path size (%zd/%d)",
 			  sz, opt->file_path_list_length);