tree 4e415095b42ce8fd845767e1326d27e7cdbc66e8
parent 3c0d7a2985fb79ad8b292e069db6c715d2316c86
author Simon Glass <sjg@chromium.org> 1613434085 -0700
committer Tom Rini <trini@konsulko.com> 1613434638 -0500

fdt_region: Check for a single root node of the correct name

At present fdt_find_regions() assumes that the FIT is a valid devicetree.
If the FIT has two root nodes this is currently not detected in this
function, nor does libfdt's fdt_check_full() notice. Also it is possible
for the root node to have a name even though it should not.

Add checks for these and return -FDT_ERR_BADSTRUCTURE if a problem is
detected.

CVE-2021-27097

Signed-off-by: Simon Glass <sjg@chromium.org>
Reported-by: Bruce Monroe <bruce.monroe@intel.com>
Reported-by: Arie Haenel <arie.haenel@intel.com>
Reported-by: Julien Lenoir <julien.lenoir@intel.com>