On Tue, Jun 02, 2026 at 07:30:17PM +0100, Anton Ivanov wrote: > fdt_get_property_by_offset() returns NULL for FDT with version > less than 0x10. fdt_find_regions() dereferences the result without > checking, leading to a NULL pointer dereference during signature > verification of an untrusted FIT. fdt_add_alias_regions() and > fdt_next_region() also lack validation. > > Add NULL checks before accessing the returned property pointer. > Also add a missing NULL check for fdt_string() in > fdt_add_alias_regions() and fdt_next_region(). > > Signed-off-by: Anton Ivanov <[email protected]>
Applied to u-boot/next, thanks! -- Tom
signature.asc
Description: PGP signature
