diff options
| author | Anton Ivanov <[email protected]> | 2026-06-04 11:39:50 +0100 |
|---|---|---|
| committer | Tom Rini <[email protected]> | 2026-06-12 15:38:27 -0600 |
| commit | 69f6272b24a26c17a5b6de3b041218ec57239943 (patch) | |
| tree | 27f19e7a0d1216fe546a1da807f1f9d2a9a0a08a /include/linux/kernel.h | |
| parent | 9e0d2fb429657c6692a059ff18e427baf8046f12 (diff) | |
image-fit: Validate external data offset and size
fit_image_get_data() uses the data-position, data-offset, and
data-size FIT properties without bounds checking. A crafted FIT
image can specify values that cause out-of-bounds read during
signature verification of an untrusted FIT.
Validate that the external data offset and size are non-negative,
and that the data region fits within the FIT image bounds.
Signed-off-by: Anton Ivanov <[email protected]>
Reviewed-by: Simon Glass <[email protected]>
Diffstat (limited to 'include/linux/kernel.h')
0 files changed, 0 insertions, 0 deletions