<feed xmlns='http://www.w3.org/2005/Atom'>
<title>u-boot.git/fs, branch v2019.10-rc2</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.</subtitle>
<id>http://cgit.235523.xyz/u-boot.git/atom/fs?h=v2019.10-rc2</id>
<link rel='self' href='http://cgit.235523.xyz/u-boot.git/atom/fs?h=v2019.10-rc2'/>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/u-boot.git/'/>
<updated>2019-08-11T20:43:41Z</updated>
<entry>
<title>env: Move env_set_hex() to env.h</title>
<updated>2019-08-11T20:43:41Z</updated>
<author>
<name>Simon Glass</name>
<email>sjg@chromium.org</email>
</author>
<published>2019-08-01T15:46:46Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/u-boot.git/commit/?id=c7694dd4837ba12db3bcda872a1047a44566e0e8'/>
<id>urn:sha1:c7694dd4837ba12db3bcda872a1047a44566e0e8</id>
<content type='text'>
Move env_set_hex() over to the new header file along with env_set_addr()
which uses it.

Signed-off-by: Simon Glass &lt;sjg@chromium.org&gt;
Acked-by: Joe Hershberger &lt;joe.hershberger@ni.com&gt;
</content>
</entry>
<entry>
<title>common: Move gzip functions into a new gzip header</title>
<updated>2019-08-11T20:43:41Z</updated>
<author>
<name>Simon Glass</name>
<email>sjg@chromium.org</email>
</author>
<published>2019-08-01T15:46:36Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/u-boot.git/commit/?id=0c670fc1481d2296f1f5837ea5c15cfbdaed710c'/>
<id>urn:sha1:0c670fc1481d2296f1f5837ea5c15cfbdaed710c</id>
<content type='text'>
As part of the effort to remove things from common.h, create a new header
for the gzip functions. Move the function declarations to it and add
missing documentation.

Signed-off-by: Simon Glass &lt;sjg@chromium.org&gt;
Reviewed-by: Simon Goldschmidt &lt;simon.k.r.goldschmidt@gmail.com&gt;
</content>
</entry>
<entry>
<title>cbfs: Rename checksum to attributes_offset</title>
<updated>2019-07-24T03:27:57Z</updated>
<author>
<name>Simon Glass</name>
<email>sjg@chromium.org</email>
</author>
<published>2019-07-08T19:18:22Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/u-boot.git/commit/?id=ababe101d3797cdc6c1c8ab703ce4dc8fd9ac326'/>
<id>urn:sha1:ababe101d3797cdc6c1c8ab703ce4dc8fd9ac326</id>
<content type='text'>
It seems that this field has been renamed in later version of coreboot.
Update it.

Signed-off-by: Simon Glass &lt;sjg@chromium.org&gt;
</content>
</entry>
<entry>
<title>CVE-2019-13106: ext4: fix out-of-bounds memset</title>
<updated>2019-07-18T15:31:29Z</updated>
<author>
<name>Paul Emge</name>
<email>paulemge@forallsecure.com</email>
</author>
<published>2019-07-08T23:37:07Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/u-boot.git/commit/?id=e205896c5383c938274262524adceb2775fb03ba'/>
<id>urn:sha1:e205896c5383c938274262524adceb2775fb03ba</id>
<content type='text'>
In ext4fs_read_file in ext4fs.c, a memset can overwrite the bounds of
the destination memory region. This patch adds a check to disallow
this.

Signed-off-by: Paul Emge &lt;paulemge@forallsecure.com&gt;
</content>
</entry>
<entry>
<title>ext4: gracefully fail on divide-by-0</title>
<updated>2019-07-18T15:31:29Z</updated>
<author>
<name>Paul Emge</name>
<email>paulemge@forallsecure.com</email>
</author>
<published>2019-07-08T23:37:06Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/u-boot.git/commit/?id=084be43b751df7133c94c6bf556bc61bd6297406'/>
<id>urn:sha1:084be43b751df7133c94c6bf556bc61bd6297406</id>
<content type='text'>
This patch checks for 0 in several ext4 headers and gracefully
fails instead of raising a divide-by-0 exception.

Signed-off-by: Paul Emge &lt;paulemge@forallsecure.com&gt;
</content>
</entry>
<entry>
<title>CVE-2019-13104: ext4: check for underflow in ext4fs_read_file</title>
<updated>2019-07-18T15:31:29Z</updated>
<author>
<name>Paul Emge</name>
<email>paulemge@forallsecure.com</email>
</author>
<published>2019-07-08T23:37:05Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/u-boot.git/commit/?id=878269dbe74229005dd7f27aca66c554e31dad8e'/>
<id>urn:sha1:878269dbe74229005dd7f27aca66c554e31dad8e</id>
<content type='text'>
in ext4fs_read_file, it is possible for a broken/malicious file
system to cause a memcpy of a negative number of bytes, which
overflows all memory. This patch fixes the issue by checking for
a negative length.

Signed-off-by: Paul Emge &lt;paulemge@forallsecure.com&gt;
</content>
</entry>
<entry>
<title>CVE-2019-13105: ext4: fix double-free in ext4_cache_read</title>
<updated>2019-07-18T15:31:28Z</updated>
<author>
<name>Paul Emge</name>
<email>paulemge@forallsecure.com</email>
</author>
<published>2019-07-08T23:37:04Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/u-boot.git/commit/?id=6e5a79de658cb1c8012c86e0837379aa6eabd024'/>
<id>urn:sha1:6e5a79de658cb1c8012c86e0837379aa6eabd024</id>
<content type='text'>
ext_cache_read doesn't null cache-&gt;buf, after freeing, which results
in a later function double-freeing it. This patch fixes
ext_cache_read to call ext_cache_fini instead of free.

Signed-off-by: Paul Emge &lt;paulemge@forallsecure.com&gt;
</content>
</entry>
<entry>
<title>ext4: add support for filesystems without JOURNAL</title>
<updated>2019-07-18T15:31:24Z</updated>
<author>
<name>Marek Szyprowski</name>
<email>m.szyprowski@samsung.com</email>
</author>
<published>2019-06-21T13:35:35Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/u-boot.git/commit/?id=bd8fbd8a13b8a696aed312753f46432b19b61fd6'/>
<id>urn:sha1:bd8fbd8a13b8a696aed312753f46432b19b61fd6</id>
<content type='text'>
JOURNAL is optional for EXT4 (and EXT3) filesystems, so add support for
skipping it. This fixes corrupting EXT4 volumes without JOURNAL after
using uboot's 'ext4write' command.

Signed-off-by: Marek Szyprowski &lt;m.szyprowski@samsung.com&gt;
Reviewed-by: Lukasz Majewski &lt;lukma@denx.de&gt;
</content>
</entry>
<entry>
<title>ext4: fix calculating inode blkcount for non-512 blocksize filesystems</title>
<updated>2019-07-18T15:31:24Z</updated>
<author>
<name>Marek Szyprowski</name>
<email>m.szyprowski@samsung.com</email>
</author>
<published>2019-06-21T13:32:51Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/u-boot.git/commit/?id=1c9f8f6412de4447c4f6fadeac1919c89de005f7'/>
<id>urn:sha1:1c9f8f6412de4447c4f6fadeac1919c89de005f7</id>
<content type='text'>
The block count entry in the EXT4 filesystem disk structures uses
standard 512-bytes units for most of the typical files. The only
exception are HUGE files, which use the filesystem block size, but those
are not supported by uboot's EXT4 implementation anyway. This patch fixes
the EXT4 code to use proper unit count for inode block count. This fixes
errors reported by fsck.ext4 on disks with non-standard (i.e. 4KiB, in
case of new flash drives) PHYSICAL block size after using 'ext4write'
uboot's command.

Signed-off-by: Marek Szyprowski &lt;m.szyprowski@samsung.com&gt;
Reviewed-by: Lukasz Majewski &lt;lukma@denx.de&gt;
</content>
</entry>
<entry>
<title>fs: do_load: pass device path for efi payload</title>
<updated>2019-06-20T22:26:20Z</updated>
<author>
<name>Mian Yousaf Kaukab</name>
<email>ykaukab@suse.de</email>
</author>
<published>2019-06-18T13:03:44Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/u-boot.git/commit/?id=ee88eacbdd840199a3dec707234579fb15ddd46a'/>
<id>urn:sha1:ee88eacbdd840199a3dec707234579fb15ddd46a</id>
<content type='text'>
fatload command can be used to load the EFI payload since EFI system
partition is always a FAT partition. Call into EFI code from do_load()
to set the device path from which the last binary was loaded. An EFI
application like grub2 can’t find its configuration file without the
device path set.

Since device path is now set in do_load() there is no need to set it
in do_load_wrapper() for the load command.

Signed-off-by: Mian Yousaf Kaukab &lt;ykaukab@suse.de&gt;
Reviewed-by: Heinrich Schuchardt &lt;xypron.glpk@gmx.de&gt;
</content>
</entry>
</feed>
