[PATCH] board: ten64: Fix OOB read in ft_board_setup
Francois Berder
fberder at outlook.fr
Sat May 9 21:24:17 CEST 2026
base and size arrays can both contain up to total_memory_banks
elements.
This commit fixes the for loop condition to ensure that it does
not attempt to read past the end of both arrays.
Signed-off-by: Francois Berder <fberder at outlook.fr>
---
board/traverse/ten64/ten64.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/board/traverse/ten64/ten64.c b/board/traverse/ten64/ten64.c
index 5941ed11a60..ac8c9a9a81a 100644
--- a/board/traverse/ten64/ten64.c
+++ b/board/traverse/ten64/ten64.c
@@ -285,7 +285,7 @@ int ft_board_setup(void *blob, struct bd_info *bd)
}
if (mc_memory_base != 0) {
- for (i = 0; i <= total_memory_banks; i++) {
+ for (i = 0; i < total_memory_banks; i++) {
if (base[i] == 0 && size[i] == 0) {
base[i] = mc_memory_base;
size[i] = mc_memory_size;
--
2.43.0
More information about the U-Boot
mailing list