Francois Berder fac46e5aa7 boot: pxe_utils: Fix potential initrd_filesize buffer overflow ...

ulong is 64 bits on 64-bit platforms. Hence, simple_xtoa can
produce up to 16 hex characters + NULL byte. The initrd_filesize
buffer is only 10 bytes which can cause a buffer overflow on
every PXE boot that loads an initrd on an address greater than
4GB.

Increase buffer size to 17 bytes to hold the maximum hex
representation of a 64-bit address.

Signed-off-by: Francois Berder <fberder@outlook.fr>
Reviewed-by: Jerome Forissier <jerome.forissier@arm.com>

2026-06-03 17:22:24 +02:00

..

android_ab.c

boot/android_ab.c: Make use of LBAF for printing lbaint_t

2025-07-16 10:56:28 -06:00

boot_fit.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

bootdev-uclass.c

uclass: Cleanup uclass_find_next_device

2025-07-24 11:49:18 -06:00

bootflow_internal.h

expo: Improve the visual appearance of the menu

2025-05-30 09:49:32 +01:00

bootflow_menu.c

expo: Drop the special theme code for bootflow_menu

2025-05-30 09:49:33 +01:00

bootflow.c

boot: Run global bootmeths after all bootdevs are exhausted

2025-10-22 14:16:56 -06:00

bootm_os.c

bootm: fix boot failure from compressed image for IH_OS_EFI

2026-01-19 10:31:21 +01:00

bootm.c

Merge patch series "bootm: Clean up arch-specific, pre-OS clean-up"

2026-03-18 18:36:50 -06:00

bootmeth_android.c

bootstd: android: Add missing free in android_read_bootflow

2026-01-15 09:26:22 +01:00

bootmeth_android.h

bootstd: Add a bootmeth for Android

2024-07-18 13:51:30 -06:00

bootmeth_cros.c

Revert "Merge patch series "pxe: Precursor series for supporting read_all() in extlinux / PXE""

2025-04-07 16:35:43 -06:00

bootmeth_cros.h

bootstd: cros: Bring in some ChromiumOS structures

2023-08-10 18:34:54 -06:00

bootmeth_efi_mgr.c

efi_loader: centralize messaging for efi_init_obj_list

2026-05-01 10:30:03 +02:00

bootmeth_efi.c

bootstd: efi: Handle prior-stage FDT in network path

2026-04-17 08:09:41 +02:00

bootmeth_extlinux.c

membuf: Rename struct

2025-04-03 16:54:49 -06:00

bootmeth_pxe.c

global: Avoid indirect inclusion of <env.h> from <net.h>

2025-05-29 08:30:25 -06:00

bootmeth_qfw.c

bootmeth: Update the read_file() method to include a type

2025-01-15 08:48:42 -06:00

bootmeth_rauc.c

bootstd: rauc: Fix null pointer access while checking root part

2026-02-16 11:52:01 -06:00

bootmeth_sandbox.c

bootmeth: Update the read_file() method to include a type

2025-01-15 08:48:42 -06:00

bootmeth_script.c

bootstd: make it possible to use tftp for netboot with standardboot

2025-10-24 13:47:50 -06:00

bootmeth-uclass.c

treewide: Clean up DECLARE_GLOBAL_DATA_PTR usage

2026-02-17 13:50:22 -06:00

bootretry.c

bootretry: check for bootretry variable changes

2025-04-11 15:28:14 +02:00

bootstd-uclass.c

bootstd: Move the bootflow list into an alist

2025-01-15 08:48:42 -06:00

cedit.c

expo: Drop the render from expo_poll()

2025-05-30 09:49:32 +01:00

common_fit.c

boot/fit: use constants for property strings

2025-12-16 11:39:38 -06:00

expo_build_cb.c

x86: coreboot: Allow building an expo for editing CMOS config

2024-11-03 21:27:12 -06:00

expo_build.c

expo: Drop scene_title_set()

2024-10-18 14:10:22 -06:00

expo.c

expo: Drop the render from expo_poll()

2025-05-30 09:49:32 +01:00

extension-uclass.c

boot: extension: Move overlay apply custom logic to command level

2025-11-03 10:02:39 -06:00

fdt_region.c

doc: replace @return by Return:

2022-01-19 18:11:34 +01:00

fdt_simplefb.c

treewide: Clean up DECLARE_GLOBAL_DATA_PTR usage

2026-02-17 13:50:22 -06:00

fdt_support.c

boot/bootfdt: Add smbios3-entrypoint to FDT for non-EFI boots

2025-12-02 16:34:27 -06:00

image-android-dt.c

global: Use CONFIG_XPL_BUILD instead of CONFIG_SPL_BUILD

2024-10-11 11:44:48 -06:00

image-android.c

boot: android: Add bootconfig support

2026-01-15 14:00:24 +01:00

image-board.c

lmb: replace the lmb_alloc() and lmb_alloc_base() API's

2025-06-25 09:50:37 -06:00

image-cipher.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

image-fdt.c

boot: Warn users about fdt_high=~0 usage

2025-12-27 09:40:35 -06:00

image-fit-sig.c

Remove confusing NULL from error message

2026-03-27 13:10:00 -06:00

image-fit.c

boot: image-fit.c: check target, not source, for 8-byte alignment when loading FDT

2026-05-08 15:49:27 -06:00

image-host.c

Create a new boot/ directory

2021-11-11 19:01:56 -05:00

image-pre-load.c

global: Add <linux/string.h> instead of long indirect include path

2025-05-29 08:29:16 -06:00

image-sig.c

treewide: Clean up DECLARE_GLOBAL_DATA_PTR usage

2026-02-17 13:50:22 -06:00

image.c

Merge patch series "led: remove legacy API"

2026-03-18 13:13:57 -06:00

Kconfig

boot: remove NO_NET use

2026-04-27 11:26:40 -06:00

Makefile

boot: Remove legacy extension board support

2025-11-03 10:02:39 -06:00

prog_boot.c

bootstd: Introduce programmatic boot

2023-12-13 11:51:24 -05:00

pxe_utils.c

boot: pxe_utils: Fix potential initrd_filesize buffer overflow

2026-06-03 17:22:24 +02:00

scene_internal.h

expo: Add forward declarations to scene_internal.h

2025-05-30 09:49:32 +01:00

scene_menu.c

boot: menu: Do not dereference pointer if pointer is NULL

2025-07-08 18:15:20 -06:00

scene_textedit.c

expo: Begin implementation of a text editor

2025-05-30 09:49:32 +01:00

scene_textline.c

expo: Create a struct for generic text attributes

2025-05-30 09:49:32 +01:00

scene.c

expo: Provide a way to position things relative to display

2025-05-30 09:49:32 +01:00

upl_common.c

upl: Add support for reading a upl handoff

2024-08-09 16:03:19 -06:00

upl_common.h

upl: Add support for reading a upl handoff

2024-08-09 16:03:19 -06:00

upl_read.c

upl: fix parsing of DT property

2024-11-14 18:14:06 -06:00

upl_write.c

upl: Fix buf array size

2025-11-22 08:48:13 -06:00

vbe_abrec_fw.c

vbe: Add an implementation of VBE-ABrec

2025-02-03 16:01:36 -06:00

vbe_abrec.c

vbe: Add an implementation of VBE-ABrec

2025-02-03 16:01:36 -06:00

vbe_abrec.h

vbe: Add an implementation of VBE-ABrec

2025-02-03 16:01:36 -06:00

vbe_common.c

vbe: Add an implementation of VBE-ABrec

2025-02-03 16:01:36 -06:00

vbe_common.h

vbe: Add an implementation of VBE-ABrec

2025-02-03 16:01:36 -06:00

vbe_request.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

vbe_simple_fw.c

vbe: Update simple-fw to support using the SPL loader

2025-01-22 09:47:50 -06:00

vbe_simple_os.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

vbe_simple.c

Merge patch series "vbe: Series part F"

2025-01-22 11:21:58 -06:00

vbe_simple.h

vbe: Start a common header file

2025-01-22 09:47:49 -06:00

vbe.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00