[PATCH] boot: Check noffset before use

Tom Rini trini at konsulko.com
Sat Dec 6 15:10:58 CET 2025


On Thu, 20 Nov 2025 05:15:30 +0100, Marek Vasut wrote:

> If noffset is negative, do not pass it to fit_get_name() and then further to
> libfdt, this will crash sandbox with SIGSEGV because libfdt can not handle
> negative node offsets without full tree check, which U-Boot inhibits to keep
> size lower.
> 
> Instead, always check noffset before use, and if the return value indicates
> failure, exit right away.
> 
> [...]

Applied to u-boot/next, thanks!

[1/1] boot: Check noffset before use
      commit: 717f8ded395fc0369620c3935980642fed909345
-- 
Tom




More information about the U-Boot mailing list