| commit | 714e36df93021ca63a4d8925d9de76c438ab4405 | [log] [tgz] |
|---|---|---|
| author | Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com> | Fri Dec 14 21:13:57 2018 +0100 |
| committer | Tom Rini <trini@konsulko.com> | Sat Dec 15 10:09:29 2018 -0500 |
| tree | c50e6a7bcf26fc15dfad040e897507e4db5c110c | |
| parent | f186301b29afa6f88d12104c680906f94e43ec1d [diff] |
tftp: prevent overwriting reserved memory
This fixes CVE-2018-18439 ("insufficient boundary checks in network
image boot") by using lmb to check for a valid range to store
received blocks.
Signed-off-by: Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com>