Skip to content
Snippets Groups Projects
Commit a156c47e authored by Simon Goldschmidt's avatar Simon Goldschmidt Committed by Tom Rini
Browse files

tftp: prevent overwriting reserved memory


This fixes CVE-2018-18439 ("insufficient boundary checks in network
image boot") by using lmb to check for a valid range to store
received blocks.

Signed-off-by: default avatarSimon Goldschmidt <simon.k.r.goldschmidt@gmail.com>
Acked-by: default avatarJoe Hershberger <joe.hershberger@ni.com>
[trini: Always build lib/lmb.o on LMB and lib/fdtdec.o on OF_LIBFDT]
Signed-off-by: default avatarTom Rini <trini@konsulko.com>
parent a85c213f
No related branches found
No related tags found
No related merge requests found
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment