Grant Likely 8f1bc28408 tftp: don't implicity trust the format of recevied packets ...

The TFTP OACK code trusts that the incoming packet is formated as
ASCII text and can be processed by string functions. It also has a
loop limit overflow bug where if the packet length is less than 8, it
ends up looping over *all* of memory to find the 'blksize' string.

This patch solves the problem by forcing the packet to be null
terminated and using strstr() to search for the sub string.

Signed-off-by: Grant Likely <grant.likely@secretlab.ca>

2007-08-30 09:16:16 +02:00

..

bootp.c

New CONFIG_BOOTP_SERVERIP option

2007-08-13 23:07:53 -04:00

bootp.h

net/: Remove obsolete references to CONFIG_COMMANDS

2007-07-09 17:45:14 -05:00

eth.c

Merge with git://www.denx.de/git/u-boot.git

2007-08-15 14:51:27 +02:00

Makefile

Move "ar" flags to config.mk to allow for silent "make -s"

2006-10-09 01:02:05 +02:00

net.c

Coding style cleanup; rebuild CHANGELOG

2007-08-14 09:47:27 +02:00

nfs.c

Fix some compile problems introduced by the latest CFG_CMD_xxx cleanup

2007-07-11 23:03:06 +02:00

nfs.h

* Patch by Steven Scholz, 25 Feb 2004:

2004-02-27 00:07:27 +00:00

rarp.c

net/: Remove lingering references to CFG_CMD_* symbols.

2007-07-10 11:05:02 -05:00

rarp.h

Initial revision

2002-07-20 20:14:13 +00:00

sntp.c

Fix some compile problems introduced by the latest CFG_CMD_xxx cleanup

2007-07-11 23:03:06 +02:00

sntp.h

* Patch by Masami Komiya, 30 Mar 2005:

2005-04-01 00:25:43 +00:00

tftp.c

tftp: don't implicity trust the format of recevied packets

2007-08-30 09:16:16 +02:00

tftp.h

Initial revision

2000-12-28 11:02:30 +00:00