Mirrors/u-boot
2
0
Fork 0
mirror of https://github.com/AsahiLinux/u-boot synced 2024-11-10 07:04:28 +00:00
Code Issues Projects Releases Packages Wiki Activity

image-host: refactor and protect for very long filenames

Browse source 
This patch adds a function fit_image_read_key_iv_data that checks the
return value of snprintf and allows to generate a sensible error
message when generating binary images using filenames that are too
long for the OS to handle.

This is especially relevant for automated builds such as Buildroot and
Yocto builds.

Signed-off-by: Hugo Cornelis <hugo.cornelis@essensium.com>
This commit is contained in:
Hugo Cornelis 2024-01-08 15:24:30 +01:00 committed by Tom Rini
parent 9ba8187a84
commit bc01d9ff93
1 changed files with 32 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

42
tools/image-host.c
View file

@ -342,6 +342,28 @@ err:
return ret;
}
static int fit_image_read_key_iv_data(const char *keydir, const char *key_iv_name,
unsigned char *key_iv_data, int expected_size)
{
char filename[PATH_MAX];
int ret = -1;
ret = snprintf(filename, sizeof(filename), "%s/%s%s",
keydir, key_iv_name, ".bin");
if (ret >= sizeof(filename)) {
printf("Can't format the key or IV filename when setting up the cipher: insufficient buffer space\n");
ret = -1;
}
if (ret < 0) {
printf("Can't format the key or IV filename when setting up the cipher: snprintf error\n");
ret = -1;
}
ret = fit_image_read_data(filename, key_iv_data, expected_size);
return ret;
}
static int get_random_data(void *data, int size)
{
unsigned char *tmp = data;
@ -378,7 +400,6 @@ static int fit_image_setup_cipher(struct image_cipher_info *info,
int noffset)
{
char *algo_name;
char filename[128];
int ret = -1;
if (fit_image_cipher_get_algo(fit, noffset, &algo_name)) {
@ -415,17 +436,17 @@ static int fit_image_setup_cipher(struct image_cipher_info *info,
goto out;
}
/* Read the key in the file */
snprintf(filename, sizeof(filename), "%s/%s%s",
info->keydir, info->keyname, ".bin");
info->key = malloc(info->cipher->key_len);
if (!info->key) {
fprintf(stderr, "Can't allocate memory for key\n");
ret = -1;
goto out;
}
ret = fit_image_read_data(filename, (unsigned char *)info->key,
info->cipher->key_len);
/* Read the key in the file */
ret = fit_image_read_key_iv_data(info->keydir, info->keyname,
(unsigned char *)info->key,
info->cipher->key_len);
if (ret < 0)
goto out;
@ -438,10 +459,11 @@ static int fit_image_setup_cipher(struct image_cipher_info *info,
if (info->ivname) {
/* Read the IV in the file */
snprintf(filename, sizeof(filename), "%s/%s%s",
info->keydir, info->ivname, ".bin");
ret = fit_image_read_data(filename, (unsigned char *)info->iv,
info->cipher->iv_len);
ret = fit_image_read_key_iv_data(info->keydir, info->ivname,
(unsigned char *)info->iv,
info->cipher->iv_len);
if (ret < 0)
goto out;
} else {
/* Generate an ramdom IV */
ret = get_random_data((void *)info->iv, info->cipher->iv_len);