projects / project / bcm63xx / u-boot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a85c213) | patch
tftp: prevent overwriting reserved memory
authorSimon Goldschmidt <[email protected]>
Mon, 14 Jan 2019 21:38:22 +0000 (22:38 +0100)
committerTom Rini <[email protected]>
Thu, 17 Jan 2019 04:15:53 +0000 (23:15 -0500)
commita156c47e39ad7d007c88919103ee0ee131c6203b
tree10344e1016918d333cf38f540d3888b406235293tree | snapshot
parenta85c213f4725fc097e28795d87136e05508ba70bcommit | diff
tftp: prevent overwriting reserved memory

This fixes CVE-2018-18439 ("insufficient boundary checks in network
image boot") by using lmb to check for a valid range to store
received blocks.

Signed-off-by: Simon Goldschmidt <[email protected]>
Acked-by: Joe Hershberger <[email protected]>
[trini: Always build lib/lmb.o on LMB and lib/fdtdec.o on OF_LIBFDT]
Signed-off-by: Tom Rini <[email protected]>
lib/Makefile diff | blob | history
net/tftp.c diff | blob | history
Broadcom-s U-Boot