]> git.baikalelectronics.ru Git - uboot.git/commit
projects / uboot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f9b4a77) | patch
fs: prevent overwriting reserved memory
authorSimon Goldschmidt <simon.k.r.goldschmidt@gmail.com>
Mon, 14 Jan 2019 21:38:19 +0000 (22:38 +0100)
committerTom Rini <trini@konsulko.com>
Wed, 16 Jan 2019 21:37:05 +0000 (16:37 -0500)
commitd20d4fe1ebdee4a4c78df8703e64c0fac85eede5
tree4e1e3090b5ec43ed88cc2790c080b2a790679d78tree | snapshot
parentf9b4a771842ce435dc3324e62644cc48a4717366commit | diff
fs: prevent overwriting reserved memory

This fixes CVE-2018-18440 ("insufficient boundary checks in filesystem
image load") by using lmb to check the load size of a file against
reserved memory addresses.

Signed-off-by: Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
fs/fs.c diff | blob | history
include/lmb.h diff | blob | history
lib/lmb.c diff | blob | history
"Das U-Boot" Source Tree.