[PATCH 1/2] image-host: add a check of the return value of snprintf.

Hugo Cornelis hugo.cornelis at essensium.com
Fri Dec 29 22:07:37 CET 2023


This patch allows to generate a sensible error message when generating
binary images using very long filenames.

This can happen with Buildroot and Yocto builds.

Signed-off-by: Hugo Cornelis <hugo.cornelis at essensium.com>
---

 tools/image-host.c | 29 +++++++++++++++++++++++++----
 1 file changed, 25 insertions(+), 4 deletions(-)

diff --git a/tools/image-host.c b/tools/image-host.c
index ca4950312f..3719f36117 100644
--- a/tools/image-host.c
+++ b/tools/image-host.c
@@ -378,6 +378,7 @@ static int fit_image_setup_cipher(struct image_cipher_info *info,
 	char *algo_name;
 	char filename[128];
 	int ret = -1;
+	int snprintf_return;
 
 	if (fit_image_cipher_get_algo(fit, noffset, &algo_name)) {
 		fprintf(stderr, "Can't get algo name for cipher in image '%s'\n",
@@ -414,8 +415,18 @@ static int fit_image_setup_cipher(struct image_cipher_info *info,
 	}
 
 	/* Read the key in the file */
-	snprintf(filename, sizeof(filename), "%s/%s%s",
-		 info->keydir, info->keyname, ".bin");
+	snprintf_return = snprintf(filename, sizeof(filename), "%s/%s%s",
+				   info->keydir, info->keyname, ".bin");
+	if (snprintf_return >= sizeof(filename)) {
+		printf("Can't format the key filename when setting up the cipher: insufficient buffer space\n");
+		ret = -1;
+		goto out;
+	}
+	if (snprintf_return < 0) {
+		printf("Can't format the key filename when setting up the cipher: snprintf error\n");
+		ret = -1;
+		goto out;
+	}
 	info->key = malloc(info->cipher->key_len);
 	if (!info->key) {
 		fprintf(stderr, "Can't allocate memory for key\n");
@@ -436,8 +447,18 @@ static int fit_image_setup_cipher(struct image_cipher_info *info,
 
 	if (info->ivname) {
 		/* Read the IV in the file */
-		snprintf(filename, sizeof(filename), "%s/%s%s",
-			 info->keydir, info->ivname, ".bin");
+		snprintf_return = snprintf(filename, sizeof(filename), "%s/%s%s",
+					   info->keydir, info->ivname, ".bin");
+		if (snprintf_return >= sizeof(filename)) {
+			printf("Can't format the IV filename when setting up the cipher: insufficient buffer space\n");
+			ret = -1;
+			goto out;
+		}
+		if (snprintf_return < 0) {
+			printf("Can't format the IV filename when setting up the cipher: snprintf error\n");
+			ret = -1;
+			goto out;
+		}
 		ret = fit_image_read_data(filename, (unsigned char *)info->iv,
 					  info->cipher->iv_len);
 	} else {
-- 
2.34.1



More information about the U-Boot mailing list