[U-Boot] [PATCH] fdt: Fix string property comparison overflow

Tom Rini trini at konsulko.com
Mon Jun 4 21:58:43 UTC 2018


On Mon, Jun 04, 2018 at 06:42:28AM +0100, Peter Robinson wrote:
> On Mon, Jun 4, 2018 at 1:22 AM, Teddy Reed <teddy.reed at gmail.com> wrote:
> > FDT property searching can overflow when comparing strings. This will
> > result in undefined behavior.
> >
> > This check assures that property name lengths do not overrun the string
> > region or the totalsize.
> 
> The lib/libfdt is mostly a sync from upstream dtc [1] so I suspect
> it's a problem there too and should probably sent and accepted there
> and it'll then be pulled back in a resync.
> 
> Peter
> 
> [1] https://git.kernel.org/pub/scm/utils/dtc/dtc.git

Indeed, thanks!

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.denx.de/pipermail/u-boot/attachments/20180604/ec07a54f/attachment.sig>


More information about the U-Boot mailing list