From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 59461C433FE for ; Mon, 14 Nov 2022 09:36:11 +0000 (UTC) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 401EF82163; Mon, 14 Nov 2022 10:36:09 +0100 (CET) Authentication-Results: phobos.denx.de; dmarc=pass (p=reject dis=none) header.from=prevas.dk Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (1024-bit key; unprotected) header.d=prevas.dk header.i=@prevas.dk header.b="kpll1X+A"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id 92C0582A38; Mon, 14 Nov 2022 10:36:07 +0100 (CET) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70124.outbound.protection.outlook.com [40.107.7.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 66E3182163 for ; Mon, 14 Nov 2022 10:36:01 +0100 (CET) Authentication-Results: phobos.denx.de; dmarc=pass (p=reject dis=none) header.from=prevas.dk Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=rasmus.villemoes@prevas.dk ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=m1z6BL+ZHj+5R4nDO1ximfz+YEqvrA6MSRPpkXtUWr1qw+Qnck2dLINdYkHMYnZQPdiarJH+xyLtjgASsfK+BNS9P+5mcQYGOu/2bFE3eQfaRqIFMZaHDvQiTGE/BNXrtQUDf3ldOnvV0ZMvPggnrtveoXI5yTXde8fuWv91JlLfD5JE59/1Vk8uQ18bxQHM0JDlM0ZPQ4mNUSEYKtV4WPC/X+ahpNU4W/MNVWJi9DrnMA6YvAftLhq/P2GYX4iqHZNcWJ+VoPLNayuANepmh5xyR71af1AlTuc0Z0hmsDalKoWeZflk/wHZj1ZJv2XmwdJqdXSVahzW7DGudRm5cQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=gcbn+aW10fxVKymB24xzbxFWpAAQJ3V7Hn/NSl4jAQA=; b=AnoMCkw/TqXYA7sDBRC7DILEbeJr1MC/YzGFS3e2c8KiIHoD8X7fFyx+Fj0sN/7krOM//FsgBHAc+Y/66T8Cb60tmrmr9F+MBUCtxsLPivbUiAsio7+Dy1TQ0/nMtD4E+9asK/T8tVNp3gU2cSRSuE4WZnv7Vu+1KkFEWS7MBNJq7nxKHYfUTABcz2h8rJQZIWHYzTlOzBmr1wglf62PQJ4phUbpTLnW7b/s6acmmcSkK/TPF8M3Tr3AtPr+/hj6NEhq95SgKKT5aNLvGDRP0bsQvFH79Fdet7+4kQOnE8xND0AB8FkbxLTqyvkGtz5JJ0UcLMPyWb/cCNAcfm9KBA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=prevas.dk; dmarc=pass action=none header.from=prevas.dk; dkim=pass header.d=prevas.dk; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=prevas.dk; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gcbn+aW10fxVKymB24xzbxFWpAAQJ3V7Hn/NSl4jAQA=; b=kpll1X+A7om5Dt0tjYOVlnflM1WqyTP9HT/UP2z0O/2g1hdnQkW664kntiJ1pUyzJ67bmFXShggtJkxjucJN1MtfxnyoVAEqSPzhnyqod4jp+XCxESzSDhNoevnsv8ou0Kj1hNLkqG7N1fwOj9gv35boH6QW6rhiHO0cWBjk34E= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=prevas.dk; Received: from DU0PR10MB5266.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:34a::22) by PA4PR10MB5683.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:265::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5813.17; Mon, 14 Nov 2022 09:35:59 +0000 Received: from DU0PR10MB5266.EURPRD10.PROD.OUTLOOK.COM ([fe80::732f:4316:a0be:bdbc]) by DU0PR10MB5266.EURPRD10.PROD.OUTLOOK.COM ([fe80::732f:4316:a0be:bdbc%4]) with mapi id 15.20.5813.013; Mon, 14 Nov 2022 09:35:58 +0000 Message-ID: <4476ff8a-dbe3-df53-c98c-955e6cdad547@prevas.dk> Date: Mon, 14 Nov 2022 10:35:51 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.2.2 Subject: Re: [PATCH 0/6] broken CVE fix (b85d130ea0ca) Content-Language: en-US, da To: u-boot@lists.denx.de Cc: Fabio Estevam , Nicolas Bidron , Tom Rini , Joe Hershberger , Ramon Fried References: <20221014174342.3216982-1-rasmus.villemoes@prevas.dk> From: Rasmus Villemoes In-Reply-To: <20221014174342.3216982-1-rasmus.villemoes@prevas.dk> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-ClientProxiedBy: MM0P280CA0070.SWEP280.PROD.OUTLOOK.COM (2603:10a6:190:8::29) To DU0PR10MB5266.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:34a::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DU0PR10MB5266:EE_|PA4PR10MB5683:EE_ X-MS-Office365-Filtering-Correlation-Id: eafdf675-d035-42cb-756a-08dac623a2f0 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DU0PR10MB5266.EURPRD10.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230022)(346002)(39850400004)(136003)(396003)(376002)(366004)(451199015)(83380400001)(2616005)(186003)(38350700002)(52116002)(2906002)(8936002)(38100700002)(8976002)(44832011)(4744005)(6486002)(478600001)(26005)(6506007)(6512007)(6666004)(8676002)(5660300002)(66556008)(4326008)(66946007)(66476007)(41300700001)(6916009)(54906003)(316002)(31686004)(36756003)(31696002)(86362001)(45980500001)(43740500002); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?VklSakRGMDFKcEI4cTVFdHJyTEYwRTRaaFRMQXJ2aG56bW1rT29uak5hczFC?= =?utf-8?B?Qy9iS21LMTRPSnBvekdqNm9XaWxiMWRSMi9aMjBwcW1tWFAxRzRaN0FVd2hZ?= =?utf-8?B?QXZsMzJDRkVaNHVFOWlxUlkzSHlOQjVQR2VlZjNVNVNOcDA2K3QydkRteThC?= =?utf-8?B?SExJK21JQ3UzZEJ5WEU2WjFiM0gyTWFHWTEzS3V1c3orLzBTa1lmeklQanV2?= =?utf-8?B?OFZBOGhGZ0gyWTZWSnNoNVRXdU9ETEdSMnYraG02enJNVUwvTldzL01SUDQy?= =?utf-8?B?NnJ6YW5mWXhsU1lwb3A0cFd6MncvdEhDNXh6VUtCVEljWEFYUXFGS3NBQXAy?= =?utf-8?B?MGlzZDlzaU1OY2pZc1U4d09sa2pISE85ZWoyZDVTUmRZeUwvMm9DamdHTGFj?= =?utf-8?B?WWtpS3ExTkkxWGRtNXZPbHl1TGV1aUpadzdmTDQvcDNZb1lNRGJBS0h6N05l?= =?utf-8?B?NGFSUmVLTnc5YW11MmZZbFdwamN5NzdIVUZlaHVSS3NrUXR5dnpFSFU0QlVv?= =?utf-8?B?eXdidmtDMDBUT2RZQmUxOHlCWkxuUlBGcGY2T0pJVFBlVDlGc0VobE5nMFly?= =?utf-8?B?ZEpHUys5MmpWSldCVW5ldUovN2NHdUM0TzdtS0ZHVTNKUlNQZTJSWjVQOTF4?= =?utf-8?B?N3lEajNlUzQ5T0RyQ0JmM3NhS3lVZVhWTFRCcnB1UDF1K2tWdmEzTVA4ZXo5?= =?utf-8?B?RVF5dy9mSURVQjBnTC9nMWpyN3p2eXBRcHhIeGtDSG91YVJ5V2UwU3Qvc1lP?= =?utf-8?B?M3BPS0JQa253a296ZnNyTE1mTXVNVS8wRnpWR3VMU0N4a0FmUGV2cGcwMlVq?= =?utf-8?B?cTd5YTFXcDlaNUpjaGNGTEdDR1hhUUxGUFZjbW5HbzEyTW9TQkZyamtxSWdy?= =?utf-8?B?ZDdXMk4wa3pHYlZVQk9SdmE0bVpWUFhBWnJVYmN3dFRxbFB6TG5tTGJqU2Vk?= =?utf-8?B?VXRhVEVLK0lxM242aFY3c3ZMUEd5cDBsaWh1anR3ZmlCTkRqV28yWGxyZDk3?= =?utf-8?B?bU5SU2N0dlU4V1BsOGpTdmQvODNGcjQ5V0thUEp3WldRMFNXczhpZTV0M0h2?= =?utf-8?B?eVRsQU1TTndKS0tScVJRMk80c2NrUWNaMmVLUkFJVXJtUXFJQWs1ajE2VGhP?= =?utf-8?B?STZhWERTOWxEZ21RWXRVZTRXR3ZqZk9VM05CcEFOL3FWV1ZVdnMvWVpmNnEr?= =?utf-8?B?OXBCaHY3SzNSdUEvUHF6UktzUmppaFhWSFdBckozR2szcGRFTzNZb0VTMVpE?= =?utf-8?B?dkd0eHhDZDlmbS9tTEo4SFI3OVVjTlJPenBVc0lsdEY1YXJuT3drT2xCa3Rj?= =?utf-8?B?T2hSUk1YbVFOb3o5R2RJN1F0OWIyeXd6NlF0ODFSNGNGd1l6RW9FMUVidGJ4?= =?utf-8?B?aFNObU1vcGl4YjZ0c2pVeGJBYmFkT1l3Ryt3RlE4eWw4U2JoRG9KOFdaQVhz?= =?utf-8?B?ZDArbTlQbmcvekZPRER5SkdnMURnREcrdENSbHc4NUNlWW53VXVQQzRpdEYx?= =?utf-8?B?TUhUcnIyREtLS3ZiSE1nTnNoOFZNMEdMdmNTNHVBclNCWkFseXVJSTZCUStI?= =?utf-8?B?M2VMYU5tNFFldUg4ZTF3SHJucGVNY3ZrMk5MZWVXQkk2NnFxWnBnbVBwTVE5?= =?utf-8?B?M2xITWc3OG1QdU4xRnhrc2toeTk2aHQwOHh6dFJmN0dSVUI1RkRxclEwSHlR?= =?utf-8?B?NGk2dFlpWFN1UjIxc3p0RlZpdGE2dkZPT1J3UUJNeUtUdEZ3Ums0TGVFVlB4?= =?utf-8?B?a1o2UzBWYmtsZjhISENNQjk5ZmtQZXErWlB2TDN0a1FwL0dIMTdRYUgxYktQ?= =?utf-8?B?cXlsbGRDRkJMeEhQSHpES3M3L2Fid0ZIcThUOHhsUy9sNXVaaGxKWnhjTngw?= =?utf-8?B?MVdndi9YaFAxd2NTaHBBdldIcFRTQldPQno5WEdjaW9MSmIvQWxhM1RjdUVa?= =?utf-8?B?KzkrbDdzWTNGZ3Fvd2FINWlUYlFlZFFxMFBIMXVDbk01OXppN3ZoN0I0cUxH?= =?utf-8?B?blpjOWszZHpUSEpkVWZoTUxubjdTcHh0cjNOcDJqV1dEcU4xR29ySDdyVzlH?= =?utf-8?B?RmJ3Qlp4SlJGSTgxNDViTWFST0ZoNlZjeDI3OWlSSUgyMDd1OVUwSGFjdExm?= =?utf-8?B?aStGMzBrQlRPQjl6dDdCQkQzVVBDSzhvQnZRMzRYMUo0clhTYm1FY05LSTlF?= =?utf-8?B?TFE9PQ==?= X-OriginatorOrg: prevas.dk X-MS-Exchange-CrossTenant-Network-Message-Id: eafdf675-d035-42cb-756a-08dac623a2f0 X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB5266.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Nov 2022 09:35:58.8524 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: d350cf71-778d-4780-88f5-071a4cb1ed61 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: hQnTyEYVukKbMfB3u48sZ06+1xP1xW4n3Y/c+lLx0Sm/NsCSzbaInl0RQiZbCeGQxn+kEwUFEWxU0aTqwtkkkbS1wVVqs3w6ReaQwkXQcsM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA4PR10MB5683 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.6 at phobos.denx.de X-Virus-Status: Clean On 14/10/2022 19.43, Rasmus Villemoes wrote: > tl;dr: b85d130ea0ca didn't fix the CVE(s), but did break tftp of > certain file sizes - which is somewhat lucky, since that's how I > noticed in the first place. > At this point it seems unlikely that any more comments or reviews will come, so perhaps its time to get these (all 7) merged to master, so that they will get some wider testing before the January release? Rasmus