Konrad Beckmann f1c85688ab image-sig: Ensure that hashed-nodes is null-terminated ...

A specially crafted FIT image leads to memory corruption in the stack
when using the verified boot feature. The function fit_config_check_sig
has a logic error that makes it possible to write past the end of the
stack allocated array node_inc. This could potentially be used to bypass
the signature check when using verified boot.

This change ensures that the number of strings is correct when counted.

Signed-off-by: Konrad Beckmann <konrad.beckmann@gmail.com>
Reviewed-by: Simon Glass <sjg@chromium.org>

2018-11-16 16:52:01 -05:00

..

eeprom

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

init

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

spl

spl: fix debug prints for tiny printf

2018-11-09 10:44:50 -05:00

autoboot.c

bootcount: Rewrite autoboot to use wrapper functions from bootcount.h

2018-05-10 20:38:25 -04:00

avb_verify.c

avb_verify: support using OP-TEE TA AVB

2018-10-07 11:07:25 -04:00

bedbug.c

…

board_f.c

arm: at91: wdt: Convert watchdog driver to dm/dt

2018-11-16 13:34:34 -05:00

board_info.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

board_r.c

configs: drop CONFIG_SYS_EXTRA_ENV_RELOC

2018-10-06 09:04:18 -04:00

boot_fit.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

bootm_os.c

bootm: Add board specific OS preboot hook

2018-10-10 13:35:09 -04:00

bootm.c

sandbox: Fix set_working_fdt_addr users

2018-09-26 15:03:12 +02:00

bootretry.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

bootstage.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

bouncebuf.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

cli_hush.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

cli_readline.c

cli: handle getch error

2018-09-10 20:20:34 -04:00

cli_simple.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

cli.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

command.c

common: command: Handle USAGE failure separately

2018-07-19 10:49:53 +02:00

common_fit.c

common: Compile error with CONFIG_MULTI_DTB_FIT and not SPL

2018-11-09 10:44:50 -05:00

console.c

console: unify fgetc function when console MUX is deactivated

2018-09-10 20:20:34 -04:00

cros_ec.c

cros: Adjust board_get_cros_ec_dev() to return a udevice

2018-10-09 04:40:27 -06:00

ddr_spd.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

dfu.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

dlmalloc.c

malloc: Use malloc simple before malloc is fully initialized in memalign()

2018-05-26 18:19:19 -04:00

dlmalloc.src

…

edid.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

exports.c

…

fdt_support.c

Remove <inttypes.h> includes and PRI* usages in printf() entirely

2018-09-10 20:48:17 -04:00

flash.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

hash.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

hwconfig.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

image-android-dt.c

common: Add support for Android DT image

2018-08-20 07:21:29 -04:00

image-android.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

image-fdt.c

sandbox: Fix set_working_fdt_addr users

2018-09-26 15:03:12 +02:00

image-fit.c

fit: Verify all configuration signatures

2018-07-10 16:55:56 -04:00

image-sig.c

image-sig: Ensure that hashed-nodes is null-terminated

2018-11-16 16:52:01 -05:00

image.c

tools: add i.MX8/8X image support

2018-10-22 13:01:27 +02:00

iomux.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

iotrace.c

iotrace: fix behaviour when buffer is full

2018-06-18 14:02:04 -04:00

kallsyms.c

…

Kconfig

ARC: Enable DISPLAY_CPUINFO & DISPLAY_BOARDINFO

2018-10-05 16:55:42 +03:00

kgdb_stubs.c

…

kgdb.c

…

lcd_console_rotation.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

lcd_console.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

lcd_simplefb.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

lcd.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

log_console.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

log.c

sandbox: Add a flag to set the default log level

2018-10-09 04:40:26 -06:00

lynxkdi.c

Remove unnecessary instances of DECLARE_GLOBAL_DATA_PTR

2018-04-27 14:54:48 -04:00

main.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

Makefile

common: build ymodem only on need

2018-11-09 13:45:42 -05:00

malloc_simple.c

malloc_simple: calloc: don't call memset if malloc failed

2018-08-24 13:20:19 -04:00

memsize.c

common/memsize.c: Increase save array for supporting memory size > 4GB

2018-07-10 16:55:59 -04:00

menu.c

menu: fix timeout duration

2018-06-05 20:19:08 -04:00

miiphyutil.c

miiphy: Add function to retrieve MDIO bus list head

2018-10-24 14:45:36 -05:00

s_record.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

splash_source.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

splash.c

env: Rename getenv/_f() to env_get()

2017-08-16 08:30:24 -04:00

stdio.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

system_map.c

…

update.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

usb_hub.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

usb_kbd.c

usb_kdb: Get stdio_dev directly from sdev pointer

2018-07-19 10:49:54 +02:00

usb_storage.c

blk: Call part_init() in the post_probe() method

2018-11-14 09:16:27 -08:00

usb.c

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

xyzModem.c

xyz-modem: va_start() must be matched by va_end()

2018-05-10 20:38:34 -04:00