projects / oweals / u-boot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a85c213) | patch
tftp: prevent overwriting reserved memory
authorSimon Goldschmidt <simon.k.r.goldschmidt@gmail.com>
Mon, 14 Jan 2019 21:38:22 +0000 (22:38 +0100)
committerTom Rini <trini@konsulko.com>
Thu, 17 Jan 2019 04:15:53 +0000 (23:15 -0500)
commita156c47e39ad7d007c88919103ee0ee131c6203b
tree10344e1016918d333cf38f540d3888b406235293tree | snapshot
parenta85c213f4725fc097e28795d87136e05508ba70bcommit | diff
tftp: prevent overwriting reserved memory

This fixes CVE-2018-18439 ("insufficient boundary checks in network
image boot") by using lmb to check for a valid range to store
received blocks.

Signed-off-by: Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com>
Acked-by: Joe Hershberger <joe.hershberger@ni.com>
[trini: Always build lib/lmb.o on LMB and lib/fdtdec.o on OF_LIBFDT]
Signed-off-by: Tom Rini <trini@konsulko.com>
lib/Makefile diff | blob | history
net/tftp.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.