author | Simon Glass <sjg@chromium.org> | |
Tue, 16 Feb 2021 00:08:11 +0000 (17:08 -0700) | ||
committer | Tom Rini <trini@konsulko.com> | |
Tue, 16 Feb 2021 03:31:53 +0000 (22:31 -0500) | ||
commit | 124c255731c76a2b09587378b2bcce561bcd3f2d | |
tree | 03e9ce18107e891c917d48b177560370fc2f6708 | tree | snapshot (tar.xz tar.gz zip) |
parent | 6f3c2d8aa5e6cbd80b5e869bbbddecb66c329d01 | commit | diff |
libfdt: Check for multiple/invalid root nodes
It is possible to construct a devicetree blob with multiple root nodes.
Update fdt_check_full() to check for this, along with a root node with an
invalid name.
CVE-2021-27097
Signed-off-by: Simon Glass <sjg@chromium.org>
Reported-by: Bruce Monroe <bruce.monroe@intel.com>
Reported-by: Arie Haenel <arie.haenel@intel.com>
Reported-by: Julien Lenoir <julien.lenoir@intel.com>
It is possible to construct a devicetree blob with multiple root nodes.
Update fdt_check_full() to check for this, along with a root node with an
invalid name.
CVE-2021-27097
Signed-off-by: Simon Glass <sjg@chromium.org>
Reported-by: Bruce Monroe <bruce.monroe@intel.com>
Reported-by: Arie Haenel <arie.haenel@intel.com>
Reported-by: Julien Lenoir <julien.lenoir@intel.com>
scripts/dtc/libfdt/fdt_ro.c | diff | blob | history | |
test/py/tests/test_vboot.py | diff | blob | history |