| commit | a96cf8fd141cf94f59969db6f28a84763ff40653 | [log] [tgz] |
|---|---|---|
| author | Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com> | Mon Jan 14 22:38:22 2019 +0100 |
| committer | Tom Rini <trini@konsulko.com> | Wed Jan 16 23:15:53 2019 -0500 |
| tree | 10344e1016918d333cf38f540d3888b406235293 | |
| parent | d7439628a80333a2f223cea9c189ed6b33898c85 [diff] |
tftp: prevent overwriting reserved memory
This fixes CVE-2018-18439 ("insufficient boundary checks in network
image boot") by using lmb to check for a valid range to store
received blocks.
Signed-off-by: Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com>
Acked-by: Joe Hershberger <joe.hershberger@ni.com>
[trini: Always build lib/lmb.o on LMB and lib/fdtdec.o on OF_LIBFDT]
Signed-off-by: Tom Rini <trini@konsulko.com>