u-boot/lib
Simon Goldschmidt a156c47e39 tftp: prevent overwriting reserved memory
This fixes CVE-2018-18439 ("insufficient boundary checks in network
image boot") by using lmb to check for a valid range to store
received blocks.

Signed-off-by: Simon Goldschmidt <simon.k.r.goldschmidt@gmail.com>
Acked-by: Joe Hershberger <joe.hershberger@ni.com>
[trini: Always build lib/lmb.o on LMB and lib/fdtdec.o on OF_LIBFDT]
Signed-off-by: Tom Rini <trini@konsulko.com>
2019-01-16 23:15:53 -05:00
..
at91
bzip2
dhry
efi efi_loader: typedef struct efi_object *efi_handle_t 2018-12-02 21:59:36 +01:00
efi_driver blk: Call part_init() in the post_probe() method 2018-11-14 09:16:27 -08:00
efi_loader efi_loader: Add a wchar_t cast in efi_file_open() 2019-01-14 17:47:13 -07:00
efi_selftest efi_selftest: block device: avoid read after free 2018-12-23 02:04:25 +01:00
libavb libavb: Handle wrong hashtree_error_mode in avb_append_options() 2018-08-24 13:19:53 -04:00
libfdt fdt_region: Ensure that depth never goes below -1 2018-11-16 16:52:01 -05:00
lzma
lzo
optee optee: adjust dependencies and default values for dram 2018-10-22 14:37:28 +02:00
rsa rsa: add support of padding pss 2018-12-03 10:44:10 -05:00
tizen
zlib
addr_map.c
aes.c
asm-offsets.c
bch.c
bitrev.c lib: bitrev: Sync with Linux kernel v4.17 2018-09-18 00:01:18 -06:00
charset.c efi_loader: error handling in read_console() 2018-10-16 16:39:19 +02:00
circbuf.c
crc7.c
crc8.c
crc16.c Roll CRC16-CCITT into the hash infrastructure 2018-12-08 20:18:44 -05:00
crc32.c lib: crc32: mark static variable as __efi_runtime_data 2018-12-23 02:39:52 +01:00
crc32c.c
ctype.c
display_options.c Remove <inttypes.h> includes and PRI* usages in printf() entirely 2018-09-10 20:48:17 -04:00
div64.c
errno.c
errno_str.c
fdtdec.c lib: fdtdec: fdtdec_get_addr_size_fixed remove checks 2019-01-14 17:47:20 -07:00
fdtdec_common.c
fdtdec_test.c
gunzip.c
gzip.c
hang.c serial: Allow serial to be absent in TPL 2018-10-09 04:40:27 -06:00
hashtable.c hashtable: fix length calculation in hexport_r 2018-12-15 11:49:19 -05:00
hexdump.c lib: Add hexdump 2018-06-13 07:49:12 -04:00
image-sparse.c mmc: Separate "mmc swrite" from fastboot 2018-05-30 11:59:21 +02:00
initcall.c
Kconfig spl: lz4: Allow use of lz4 compression in SPL 2018-11-20 19:14:22 -07:00
ldiv.c
linux_compat.c Make kmalloc'ed memory really DMA-safe 2018-08-31 11:59:44 -04:00
linux_string.c
list_sort.c
lmb.c fs: prevent overwriting reserved memory 2019-01-16 16:37:05 -05:00
lz4.c SPDX: Convert a few files that were missed before 2018-05-10 20:38:35 -04:00
lz4_wrapper.c
Makefile tftp: prevent overwriting reserved memory 2019-01-16 23:15:53 -05:00
md5.c
membuff.c
net_utils.c
of_live.c
panic.c
physmem.c sandbox: physmem: Use mapping to support sandbox 2018-12-05 06:01:34 -07:00
qsort.c
rand.c
rbtree.c
rc4.c
sha1.c
sha256.c
slre.c lib/slre: remove superfluous assignment 2018-09-05 16:02:34 -04:00
smbios.c sandbox: smbios: Update to support sandbox 2018-12-02 21:59:37 +01:00
string.c string: Include the config header 2018-11-20 19:14:22 -07:00
strmhz.c
strto.c lib: strto: fix metric suffix parsing in strtoul[l] 2018-09-20 20:11:01 +05:30
tables_csum.c
time.c
tiny-printf.c
tpm-common.c tpm: Fix a logging warning in unpack_byte_string() 2018-12-05 06:01:34 -07:00
tpm-utils.h tpm: Convert to use a device parameter 2018-11-29 09:30:06 -07:00
tpm-v1.c tpm: Remove use of build-time TPM versions 2018-12-05 06:01:34 -07:00
tpm-v2.c tpm: Convert to use a device parameter 2018-11-29 09:30:06 -07:00
trace.c
uuid.c lib: uuid: Do not enable UUID command SPL 2019-01-15 15:28:45 -05:00
vsprintf.c lib: vsprintf: correct printing of Unicode strings 2018-09-23 21:55:29 +02:00