| commit | a156c47e39ad7d007c88919103ee0ee131c6203b | [log] [tgz] |
|---|---|---|
| author | Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com> | Mon Jan 14 22:38:22 2019 +0100 |
| committer | Tom Rini <trini@konsulko.com> | Wed Jan 16 23:15:53 2019 -0500 |
| tree | 10344e1016918d333cf38f540d3888b406235293 | |
| parent | a85c213f4725fc097e28795d87136e05508ba70b [diff] |
tftp: prevent overwriting reserved memory
This fixes CVE-2018-18439 ("insufficient boundary checks in network
image boot") by using lmb to check for a valid range to store
received blocks.
Signed-off-by: Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com>
Acked-by: Joe Hershberger <joe.hershberger@ni.com>
[trini: Always build lib/lmb.o on LMB and lib/fdtdec.o on OF_LIBFDT]
Signed-off-by: Tom Rini <trini@konsulko.com>