Anton Ivanov 69f6272b24 image-fit: Validate external data offset and size ...

fit_image_get_data() uses the data-position, data-offset, and
data-size FIT properties without bounds checking. A crafted FIT
image can specify values that cause out-of-bounds read during
signature verification of an untrusted FIT.

Validate that the external data offset and size are non-negative,
and that the data region fits within the FIT image bounds.

Signed-off-by: Anton Ivanov <anton@binarly.io>
Reviewed-by: Simon Glass <sjg@chromium.org>

2026-06-12 15:38:27 -06:00

..

tests

image-fit: Validate external data offset and size

2026-06-12 15:38:27 -06:00

.gitignore

test/py: Implement pytest infrastructure

2016-01-20 19:06:23 -07:00

conftest.py

test/py: Fix spelling of source_dir in docstring

2026-02-16 11:52:01 -06:00

console_base.py

test/py: Add a helper to send characters

2025-04-03 11:41:55 -06:00

console_board.py

test/py: Drop u_boot_ prefix on test files

2025-03-15 11:02:04 +00:00

console_sandbox.py

test/py: Drop u_boot_ prefix on test files

2025-03-15 11:02:04 +00:00

multiplexed_log.css

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

multiplexed_log.py

test/py: multiplexed_log.py: Clean up and correct RunAndLog()

2025-11-07 14:19:46 -06:00

pytest.ini

test/py: Allow tests to be filtered by role

2025-04-03 11:41:55 -06:00

requirements.txt

test/py, buildman: Update filelock package version

2026-01-19 13:08:19 -06:00

spawn.py

test/py: Drop u_boot_ prefix on test files

2025-03-15 11:02:04 +00:00

test.py

test: remove unused import from pkg_resources

2024-04-12 08:53:31 -06:00

utils.py

test: fs: Use shared generate_file from utils

2026-05-25 13:43:21 -06:00