Re: Needs a check in the device tree

hi Simon, yes, you are right, I forgot to call this checking function, thanks! Best regards Jianqiang Simon Glass 于2024年6月6日周四 17:04写道： > Hi Jianqiang, > > On Wed, 5 Jun 2024 at 07:40, jianqiang wang wrote: > > > > Dear Das U-Boot developers, > > > > I

Needs a check in the device tree

Dear Das U-Boot developers, I found that the u-boot device tree implementation lacks a check for the off_dt_struct field in the device tree. In file scripts\dtc\libfdt\libfdt_internal.h, fdt_offset_ptr_ returns the dt struct address. It calculates the address by adding the header address, fdt off

Re: Several potential vulnerabilities in the filesystem

Could you please forward the issues to whoever is responsible for them? Gao Xiang 于2024年6月5日周三 13:35写道： > > > > On 2024/6/5 19:26, jianqiang wang wrote: > > Hi Xiang, > > > > I just checked the second crash, the patch can solve this issue. Did > > you also loo

Re: Several potential vulnerabilities in the filesystem

Hi Xiang, I just checked the second crash, the patch can solve this issue. Did you also look into the other two issues? Best Jianqiang Gao Xiang 于2024年6月5日周三 13:18写道： > > Hi Jianqiang, > > On 2024/6/5 19:00, jianqiang wang wrote: > > Hi, > > > &g

Re: Several potential vulnerabilities in the filesystem

nd third may not trigger a crash however, can be observed by inserting logging before the memset/memcpy function. Best regards Gao Xiang 于2024年6月5日周三 05:10写道： > > > > On 2024/6/5 06:53, jianqiang wang wrote: > > Hi Das U-Boot developers, > > > > ... > > > >

Several potential vulnerabilities in the filesystem

Hi Das U-Boot developers, I found several vulnerabilities in the u-boot filesysetm implementation, 1. in file fs/squashfs/sqfs_inode.c function sqfs_inode_size. The parameter blk_size is directly or indirectly from the storage data. Howver, without a sanity check, this value is directly used in t

Fwd: A potential bug in das u-boot nfs implemnetation

Hi, I sent this email to das u-boot one month ago, however, I haven't gotten a reply yet. Do you know what happened? Best -- Forwarded message - 发件人： jianqiang wang Date: 2024年5月1日周三 16:14 Subject: A potential bug in das u-boot nfs implemnetation To: Dear all I fo