tree 10344e1016918d333cf38f540d3888b406235293
parent d7439628a80333a2f223cea9c189ed6b33898c85
author Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com> 1547501902 +0100
committer Tom Rini <trini@konsulko.com> 1547698553 -0500

tftp: prevent overwriting reserved memory

This fixes CVE-2018-18439 ("insufficient boundary checks in network
image boot") by using lmb to check for a valid range to store
received blocks.

Signed-off-by: Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com>
Acked-by: Joe Hershberger <joe.hershberger@ni.com>
[trini: Always build lib/lmb.o on LMB and lib/fdtdec.o on OF_LIBFDT]
Signed-off-by: Tom Rini <trini@konsulko.com>