David Gibson 491c7b6f42 libfdt: Fix undefined behaviour in fdt_offset_ptr() ...

Using pointer arithmetic to generate a pointer outside a known object is,
technically, undefined behaviour in C.  Unfortunately, we were using that
in fdt_offset_ptr() to detect overflows.

To fix this we need to do our bounds / overflow checking on the offsets
before constructing pointers from them.

Reported-by: David Binderman <dcb314@hotmail.com>
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
Signed-off-by: Simon Glass <sjg@chromium.org>

2016-10-13 13:54:10 -06:00

4.3 KiB

Raw Blame History

View Raw