tftp: prevent overwriting reserved memory
This fixes CVE-2018-18439 ("insufficient boundary checks in network image boot") by using lmb to check for a valid range to store received blocks. Signed-off-by:Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com> Acked-by:
Joe Hershberger <joe.hershberger@ni.com> [trini: Always build lib/lmb.o on LMB and lib/fdtdec.o on OF_LIBFDT] Signed-off-by:
Tom Rini <trini@konsulko.com>
Loading
Please register or sign in to comment