diff options
| author | Pengpeng Hou <pengpeng@iscas.ac.cn> | 2026-07-01 13:39:09 +0800 |
|---|---|---|
| committer | Miquel Raynal <miquel.raynal@bootlin.com> | 2026-07-03 15:48:08 +0200 |
| commit | adfc275b317c02cd043b0cf28b8cfb7459b041f0 (patch) | |
| tree | fb3448e22fadef80ca5b1c5c2d0bcdac2e6275b2 /tools/lib/python | |
| parent | 591b5ac17301acfbc8204dfa377353f2b20efc5b (diff) | |
| download | linux-adfc275b317c02cd043b0cf28b8cfb7459b041f0.tar.gz linux-adfc275b317c02cd043b0cf28b8cfb7459b041f0.zip | |
mtd: parsers: redboot: reject unterminated FIS names
RedBoot FIS partition names are stored in a fixed 16-byte field that is
expected to be NUL-terminated. parse_redboot_partitions() used strlen()
to size the names area and later copied the same field with strcpy(), so
a malformed table entry without a terminator could make both operations
read beyond the descriptor.
Validate each accepted FIS name with strnlen() before adding it to the
partition list.
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com>
Diffstat (limited to 'tools/lib/python')
0 files changed, 0 insertions, 0 deletions