From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jerry Van Baren Date: Tue, 05 Apr 2011 09:30:03 -0400 Subject: [U-Boot] [PATCHv2] fdt_support: Fix buffer overflow in fdt_fixup_memory_banks In-Reply-To: <4D7308F8.7020501@cideas.com> References: <1298477904-21221-1-git-send-email-Kyle.D.Moffett@boeing.com> <4D7308F8.7020501@cideas.com> Message-ID: <4D9B195B.1080808@gmail.com> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de On 02/23/2011 11:18 AM, Kyle Moffett wrote: > When fdt_fixup_memory_banks is called with 2-cell address and size > fields in the device-tree (IE: 64-bit address and size), then it will > overflow its on-stack "tmp" buffer. > > This fixes the buffer size and adds a comment explaining how many bytes > need to be allocated per record. > > Signed-off-by: Kyle Moffett > Cc: Jerry Van Baren > --- > Changelog: > v2: Resubmitted separately from the other HWW-1U-1A changes. Applied to u-boot-fdt, thanks. gvb