Heinrich SchuchardtandTom Rini 79f8f31d58 common/spl: guard against buffer overflow in spl_fit_get_image_name() ...

A malformed FIT image could have an image name property that is not NUL
terminated. Reject such images.

Reported-by: Mikhail Kshevetskiy <mikhail.kshevetskiy@iopsys.eu>
Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>
Tested-by: E Shattow <e@freeshell.de>

2025-06-26 11:58:17 -06:00

..

eeprom

…

init

…

spl

common/spl: guard against buffer overflow in spl_fit_get_image_name()

2025-06-26 11:58:17 -06:00

autoboot.c

…

avb_verify.c

…

bloblist.c

…

board_f.c

x86: Correct condition for init_cache_f_r()

2025-06-04 08:15:12 -06:00

board_info.c

…

board_r.c

…

bootstage.c

…

bouncebuf.c

…

button_cmd.c

…

cli_getch.c

…

cli_hush_modern.c

…

cli_hush_upstream.c

…

cli_hush.c

…

cli_readline.c

…

cli_simple.c

…

cli.c

…

command.c

…

console.c

…

cros_ec.c

…

cyclic.c

…

ddr_spd.c

…

dfu.c

…

dlmalloc.c

…

dlmalloc.src

…

edid.c

…

event.c

…

exports.c

…

flash.c

…

hash.c

…

hwconfig.c

…

iomux.c

…

iotrace.c

…

kallsyms.c

…

Kconfig

…

kgdb_stubs.c

…

kgdb.c

…

log_console.c

…

log_syslog.c

…

log.c

…

main.c

…

Makefile

…

malloc_simple.c

…

mcheck_core.inc.h

…

memsize.c

…

memtop.c

…

menu.c

…

miiphyutil.c

…

qfw.c

…

s_record.c

…

scp03.c

…

splash_source.c

…

splash.c

…

stackprot.c

…

stdio.c

…

system_map.c

…

update.c

…

usb_hub.c

…

usb_kbd.c

…

usb_onboard_hub.c

…

usb_storage.c

…

usb.c

…

version.c

…

xyzModem.c

…