Re: [U-Boot] [U-Boot, v10, 09/10] tftp: prevent overwriting reserved memory

2019-01-26 Thread Simon Goldschmidt
Am 26.01.2019 um 10:56 schrieb Heinrich Schuchardt: On 1/26/19 9:46 AM, Simon Goldschmidt wrote: Am 26.01.2019 um 04:20 schrieb Heinrich Schuchardt: TheOn 1/14/19 10:38 PM, Simon Goldschmidt wrote: This fixes CVE-2018-18439 ("insufficient boundary checks in network image boot") by using lmb to

Re: [U-Boot] [U-Boot, v10, 09/10] tftp: prevent overwriting reserved memory

2019-01-26 Thread Simon Goldschmidt
Am 26.01.2019 um 14:17 schrieb Tom Rini: On Sat, Jan 26, 2019 at 09:46:35AM +0100, Simon Goldschmidt wrote: Am 26.01.2019 um 04:20 schrieb Heinrich Schuchardt: TheOn 1/14/19 10:38 PM, Simon Goldschmidt wrote: This fixes CVE-2018-18439 ("insufficient boundary checks in network image boot") by u

Re: [U-Boot] [U-Boot, v10, 09/10] tftp: prevent overwriting reserved memory

2019-01-26 Thread Heinrich Schuchardt
On 1/26/19 10:56 AM, Heinrich Schuchardt wrote: > On 1/26/19 9:46 AM, Simon Goldschmidt wrote: >> Am 26.01.2019 um 04:20 schrieb Heinrich Schuchardt: >>> TheOn 1/14/19 10:38 PM, Simon Goldschmidt wrote: This fixes CVE-2018-18439 ("insufficient boundary checks in network image boot") by us

Re: [U-Boot] [U-Boot, v10, 09/10] tftp: prevent overwriting reserved memory

2019-01-26 Thread Tom Rini
On Sat, Jan 26, 2019 at 09:46:35AM +0100, Simon Goldschmidt wrote: > Am 26.01.2019 um 04:20 schrieb Heinrich Schuchardt: > >TheOn 1/14/19 10:38 PM, Simon Goldschmidt wrote: > >>This fixes CVE-2018-18439 ("insufficient boundary checks in network > >>image boot") by using lmb to check for a valid ran

Re: [U-Boot] [U-Boot, v10, 09/10] tftp: prevent overwriting reserved memory

2019-01-26 Thread Heinrich Schuchardt
On 1/26/19 9:46 AM, Simon Goldschmidt wrote: > Am 26.01.2019 um 04:20 schrieb Heinrich Schuchardt: >> TheOn 1/14/19 10:38 PM, Simon Goldschmidt wrote: >>> This fixes CVE-2018-18439 ("insufficient boundary checks in network >>> image boot") by using lmb to check for a valid range to store >>> receiv

Re: [U-Boot] [U-Boot, v10, 09/10] tftp: prevent overwriting reserved memory

2019-01-26 Thread Simon Goldschmidt
Am 26.01.2019 um 04:20 schrieb Heinrich Schuchardt: TheOn 1/14/19 10:38 PM, Simon Goldschmidt wrote: This fixes CVE-2018-18439 ("insufficient boundary checks in network image boot") by using lmb to check for a valid range to store received blocks. Signed-off-by: Simon Goldschmidt Acked-by: Joe

Re: [U-Boot] [U-Boot, v10, 09/10] tftp: prevent overwriting reserved memory

2019-01-25 Thread Heinrich Schuchardt
TheOn 1/14/19 10:38 PM, Simon Goldschmidt wrote: > This fixes CVE-2018-18439 ("insufficient boundary checks in network > image boot") by using lmb to check for a valid range to store > received blocks. > > Signed-off-by: Simon Goldschmidt > Acked-by: Joe Hershberger > --- Hello Simon, due to t

Re: [U-Boot] [U-Boot, v10, 09/10] tftp: prevent overwriting reserved memory

2019-01-17 Thread Tom Rini
On Mon, Jan 14, 2019 at 10:38:22PM +0100, Simon Goldschmidt wrote: > This fixes CVE-2018-18439 ("insufficient boundary checks in network > image boot") by using lmb to check for a valid range to store > received blocks. > > Signed-off-by: Simon Goldschmidt > Acked-by: Joe Hershberger With some