On Fri, 16 Oct 2026 08:16:22 +0000, Aristo Chen wrote:
> fit_import_data() reads each image's external data at the offset and
> size the FIT declares, without checking them against the file. An
> offset past the end of the file makes mkimage -F segfault, and a size
> running past it silently imports whatever memory follows. U-Boot proper
> and SPL already bound these properties since the series linked below;
> this series adds the same check to mkimage.
>
> [...]
Applied to u-boot/main, thanks!
[1/5] test: py: keep the external payload when editing a FIT with fdtput
commit: 2db652e41249b6c11c12d251ef6d82ff741ab0d5
[2/5] image-fit: check the length of the external data properties
commit: 164a2d9c9533404559cdd1527be7174a936313b5
[3/5] test: boot: check the length of the external data properties
commit: 44c6d8c287bd21f9ddf6c3b2c657ccf380a67db0
[4/5] tools: mkimage: bound external data reads in fit_import_data()
commit: f8b5bfc60d16cae86dd2fe49deb1bcd146d24f10
[5/5] test: py: cover invalid external data properties in fit_import_data()
commit: 5da0f00c237d50ab82de59d1c03512131979fc09
--
Tom
