From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tom Rini Date: Mon, 15 Feb 2021 22:35:53 -0500 Subject: [PATCH 1/8] fdt_region: Check for a single root node of the correct name In-Reply-To: <20210216000812.2091481-2-sjg@chromium.org> References: <20210216000812.2091481-1-sjg@chromium.org> <20210216000812.2091481-2-sjg@chromium.org> Message-ID: <20210216033553.GN10169@bill-the-cat> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de On Mon, Feb 15, 2021 at 05:08:05PM -0700, Simon Glass wrote: > At present fdt_find_regions() assumes that the FIT is a valid devicetree. > If the FIT has two root nodes this is currently not detected in this > function, nor does libfdt's fdt_check_full() notice. Also it is possible > for the root node to have a name even though it should not. > > Add checks for these and return -FDT_ERR_BADSTRUCTURE if a problem is > detected. > > CVE-2021-27097 > > Signed-off-by: Simon Glass > Reported-by: Bruce Monroe > Reported-by: Arie Haenel > Reported-by: Julien Lenoir Applied to u-boot/master, thanks! -- Tom -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 659 bytes Desc: not available URL: