(subset) [PATCH 1/3] board: samsung: fix set_board_info() board_name buffer overflow

Tom Rini trini at konsulko.com
Tue Apr 14 04:09:24 CEST 2026


On Sat, 28 Mar 2026 13:01:31 +0700, Ngo Luong Thanh Tra wrote:

> Replace unbounded sprintf() with snprintf() using sizeof(info) as
> the bound when constructing the board_name string from bdname and
> bdtype. The previous call had no size limit and could overflow the
> 64-byte stack buffer if the concatenated string exceeded 63 bytes.
> 
> 

Applied to u-boot/master, thanks!

[1/3] board: samsung: fix set_board_info() board_name buffer overflow
      commit: e228b6a50418e261ee09fa326464935acdabe610
[2/3] board: toradex: fix tdx-cfg-block prompt buffer overflow
      commit: 564e180d701f3946e6adc7895f2524728b985f03
-- 
Tom



More information about the U-Boot mailing list