Anton Ivanov 69f6272b24 image-fit: Validate external data offset and size ...

fit_image_get_data() uses the data-position, data-offset, and
data-size FIT properties without bounds checking. A crafted FIT
image can specify values that cause out-of-bounds read during
signature verification of an untrusted FIT.

Validate that the external data offset and size are non-negative,
and that the data region fits within the FIT image bounds.

Signed-off-by: Anton Ivanov <anton@binarly.io>
Reviewed-by: Simon Glass <sjg@chromium.org>

2026-06-12 15:38:27 -06:00

..

android_ab.c

boot/android_ab.c: Make use of LBAF for printing lbaint_t

2025-07-16 10:56:28 -06:00

boot_fit.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

bootdev-uclass.c

bootdev: Fix the case where the driver ops field is null.

2026-05-19 07:53:50 -06:00

bootflow_internal.h

expo: Improve the visual appearance of the menu

2025-05-30 09:49:32 +01:00

bootflow_menu.c

expo: Drop the special theme code for bootflow_menu

2025-05-30 09:49:33 +01:00

bootflow.c

boot: Run global bootmeths after all bootdevs are exhausted

2025-10-22 14:16:56 -06:00

bootm_os.c

bootm: bound-check OS index in bootm_os_get_boot_func()

2026-06-11 12:00:34 -06:00

bootm.c

boot: fit: support generating DM verity cmdline parameters

2026-05-27 13:41:33 -06:00

bootmeth_android.c

bootstd: android: Add missing free in android_read_bootflow

2026-01-15 09:26:22 +01:00

bootmeth_android.h

bootstd: Add a bootmeth for Android

2024-07-18 13:51:30 -06:00

bootmeth_cros.c

Revert "Merge patch series "pxe: Precursor series for supporting read_all() in extlinux / PXE""

2025-04-07 16:35:43 -06:00

bootmeth_cros.h

bootstd: cros: Bring in some ChromiumOS structures

2023-08-10 18:34:54 -06:00

bootmeth_efi_mgr.c

efi_loader: centralize messaging for efi_init_obj_list

2026-05-01 10:30:03 +02:00

bootmeth_efi.c

bootstd: efi: Handle prior-stage FDT in network path

2026-04-17 08:09:41 +02:00

bootmeth_extlinux.c

membuf: Rename struct

2025-04-03 16:54:49 -06:00

bootmeth_pxe.c

global: Avoid indirect inclusion of <env.h> from <net.h>

2025-05-29 08:30:25 -06:00

bootmeth_qfw.c

bootmeth: Update the read_file() method to include a type

2025-01-15 08:48:42 -06:00

bootmeth_rauc.c

bootstd: rauc: Fix null pointer access while checking root part

2026-02-16 11:52:01 -06:00

bootmeth_sandbox.c

bootmeth: Update the read_file() method to include a type

2025-01-15 08:48:42 -06:00

bootmeth_script.c

bootstd: make it possible to use tftp for netboot with standardboot

2025-10-24 13:47:50 -06:00

bootmeth-uclass.c

treewide: Clean up DECLARE_GLOBAL_DATA_PTR usage

2026-02-17 13:50:22 -06:00

bootretry.c

bootretry: check for bootretry variable changes

2025-04-11 15:28:14 +02:00

bootstd-uclass.c

bootstd: Move the bootflow list into an alist

2025-01-15 08:48:42 -06:00

cedit.c

boot: cedit: Check ofnode_read_prop return value

2026-05-29 14:23:11 -06:00

common_fit.c

boot/fit: use constants for property strings

2025-12-16 11:39:38 -06:00

expo_build_cb.c

x86: coreboot: Allow building an expo for editing CMOS config

2024-11-03 21:27:12 -06:00

expo_build.c

expo: Drop scene_title_set()

2024-10-18 14:10:22 -06:00

expo.c

expo: Drop the render from expo_poll()

2025-05-30 09:49:32 +01:00

extension-uclass.c

boot: extension: Move overlay apply custom logic to command level

2025-11-03 10:02:39 -06:00

fdt_region.c

fdt_region: Check return value of fdt_get_property_by_offset() calls

2026-06-12 15:35:56 -06:00

fdt_simplefb.c

treewide: Clean up DECLARE_GLOBAL_DATA_PTR usage

2026-02-17 13:50:22 -06:00

fdt_support.c

Merge patch series "fdt_support: validate property lengths in chosen and dma-range fixups"

2026-06-11 12:01:23 -06:00

image-android-dt.c

global: Use CONFIG_XPL_BUILD instead of CONFIG_SPL_BUILD

2024-10-11 11:44:48 -06:00

image-android.c

boot: android: Add bootconfig support

2026-01-15 14:00:24 +01:00

image-board.c

boot: fit: support generating DM verity cmdline parameters

2026-05-27 13:41:33 -06:00

image-cipher.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

image-fdt.c

boot: Warn users about fdt_high=~0 usage

2025-12-27 09:40:35 -06:00

image-fit-sig.c

image-fit-sig: Validate hashed-strings region size

2026-06-12 15:35:54 -06:00

image-fit.c

image-fit: Validate external data offset and size

2026-06-12 15:38:27 -06:00

image-host.c

Create a new boot/ directory

2021-11-11 19:01:56 -05:00

image-pre-load.c

global: Add <linux/string.h> instead of long indirect include path

2025-05-29 08:29:16 -06:00

image-sig.c

treewide: Clean up DECLARE_GLOBAL_DATA_PTR usage

2026-02-17 13:50:22 -06:00

image.c

Merge patch series "led: remove legacy API"

2026-03-18 13:13:57 -06:00

Kconfig

Merge patch series "allow control DTB to double as "FIT image""

2026-06-11 07:56:52 -06:00

Makefile

boot: Remove legacy extension board support

2025-11-03 10:02:39 -06:00

prog_boot.c

bootstd: Introduce programmatic boot

2023-12-13 11:51:24 -05:00

pxe_utils.c

boot: pxe_utils: Fix potential initrd_filesize buffer overflow

2026-06-03 17:22:24 +02:00

scene_internal.h

expo: Add forward declarations to scene_internal.h

2025-05-30 09:49:32 +01:00

scene_menu.c

boot: menu: Do not dereference pointer if pointer is NULL

2025-07-08 18:15:20 -06:00

scene_textedit.c

expo: Begin implementation of a text editor

2025-05-30 09:49:32 +01:00

scene_textline.c

expo: Create a struct for generic text attributes

2025-05-30 09:49:32 +01:00

scene.c

expo: Provide a way to position things relative to display

2025-05-30 09:49:32 +01:00

upl_common.c

upl: Add support for reading a upl handoff

2024-08-09 16:03:19 -06:00

upl_common.h

upl: Add support for reading a upl handoff

2024-08-09 16:03:19 -06:00

upl_read.c

upl: fix parsing of DT property

2024-11-14 18:14:06 -06:00

upl_write.c

upl: Fix buf array size

2025-11-22 08:48:13 -06:00

vbe_abrec_fw.c

vbe: Add an implementation of VBE-ABrec

2025-02-03 16:01:36 -06:00

vbe_abrec.c

vbe: Add an implementation of VBE-ABrec

2025-02-03 16:01:36 -06:00

vbe_abrec.h

vbe: Add an implementation of VBE-ABrec

2025-02-03 16:01:36 -06:00

vbe_common.c

vbe: Add an implementation of VBE-ABrec

2025-02-03 16:01:36 -06:00

vbe_common.h

vbe: Add an implementation of VBE-ABrec

2025-02-03 16:01:36 -06:00

vbe_request.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

vbe_simple_fw.c

vbe: Update simple-fw to support using the SPL loader

2025-01-22 09:47:50 -06:00

vbe_simple_os.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

vbe_simple.c

Merge patch series "vbe: Series part F"

2025-01-22 11:21:58 -06:00

vbe_simple.h

vbe: Start a common header file

2025-01-22 09:47:49 -06:00

vbe.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00