[PATCH] boot: Check noffset before use
Tom Rini
trini at konsulko.com
Sat Dec 6 15:10:58 CET 2025
On Thu, 20 Nov 2025 05:15:30 +0100, Marek Vasut wrote:
> If noffset is negative, do not pass it to fit_get_name() and then further to
> libfdt, this will crash sandbox with SIGSEGV because libfdt can not handle
> negative node offsets without full tree check, which U-Boot inhibits to keep
> size lower.
>
> Instead, always check noffset before use, and if the return value indicates
> failure, exit right away.
>
> [...]
Applied to u-boot/next, thanks!
[1/1] boot: Check noffset before use
commit: 717f8ded395fc0369620c3935980642fed909345
--
Tom
More information about the U-Boot
mailing list