Re: [PATCH v2] fs/squashfs: sqfs_read: Prevent arbitrary code execution

2022-06-17 Thread Tom Rini
On Thu, Jun 09, 2022 at 04:02:06PM +0200, Miquel Raynal wrote: > Following Jincheng's report, an out-of-band write leading to arbitrary > code execution is possible because on one side the squashfs logic > accepts directory names up to 65535 bytes (u16), while U-Boot fs logic > accepts directory n

Re: [PATCH v2] fs/squashfs: sqfs_read: Prevent arbitrary code execution

2022-06-09 Thread Jincheng Wang
It works well. Tested-by: Jincheng Wang Miquel Raynal 于2022年6月9日周四 22:02写道: > Following Jincheng's report, an out-of-band write leading to arbitrary > code execution is possible because on one side the squashfs logic > accepts directory names up to 65535 bytes (u16), while U-Boot fs logic > ac