| commit | b823daa0071af5456e8197fd5d33bf651cc7bd40 | [log] [tgz] |
|---|---|---|
| author | Simon Glass <sjg@chromium.org> | Mon Feb 15 17:08:12 2021 -0700 |
| committer | Tom Rini <trini@konsulko.com> | Mon Feb 15 22:31:54 2021 -0500 |
| tree | 2de8580b23f833e100a186448625721d71625521 | |
| parent | 19d2c02758e3564c133f596077a4daa33af85f86 [diff] |
image: Check for unit addresses in FITs Using unit addresses in a FIT is a security risk. Add a check for this and disallow it. CVE-2021-27138 Signed-off-by: Simon Glass <sjg@chromium.org> Reported-by: Bruce Monroe <bruce.monroe@intel.com> Reported-by: Arie Haenel <arie.haenel@intel.com> Reported-by: Julien Lenoir <julien.lenoir@intel.com>