Paul HENRYS 81e5708cc2 net: bootp: Prevent buffer overflow to avoid leaking the RAM content ...

CVE-2024-42040 describes a possible buffer overflow when calling
bootp_process_vendor() in bootp_handler() since the total length
of the packet is passed to bootp_process_vendor() without being
reduced to len-(offsetof(struct bootp_hdr,bp_vend)+4).

The packet length is also checked against its minimum size to avoid
reading data from struct bootp_hdr outside of the packet length.

Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
Signed-off-by: Philippe Reynes <philippe.reynes@softathome.com>

2025-10-22 14:28:33 +02:00

..

lwip

net: make dhcp_run() common for NET and NET_LWIP

2025-10-22 14:28:33 +02:00

arp.c

net: add missing SPDX-License-Identifier for files originating from LiMon

2025-08-18 15:47:57 +02:00

arp.h

net: add missing SPDX-License-Identifier for files originating from LiMon

2025-08-18 15:47:57 +02:00

bootp.c

net: bootp: Prevent buffer overflow to avoid leaking the RAM content

2025-10-22 14:28:33 +02:00

bootp.h

net: Remove BOOTP_VENDOREX support

2025-10-22 11:16:09 +02:00

cdp.c

net: add missing SPDX-License-Identifier for files originating from LiMon

2025-08-18 15:47:57 +02:00

cdp.h

net: add missing SPDX-License-Identifier for files originating from LiMon

2025-08-18 15:47:57 +02:00

dhcpv6.c

net: consolidate PXE processor architecture type Kconfig

2025-06-26 08:17:17 -06:00

dhcpv6.h

net: dhcp6: Send DHCPv6 using multicast MAC

2025-04-23 09:58:07 +02:00

dns.c

net: Remove duplicate newlines

2024-07-15 12:12:18 -06:00

dns.h

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

dsa-uclass.c

net: dsa: Fix OF fallback lookup for ports

2023-06-14 18:38:25 +08:00

eth_bootdev.c

net: eth_bootdev_hunt() should not run DHCP

2025-01-05 02:30:48 +01:00

eth_common.c

miiphy: define mii_devs with LIST_HEAD()

2025-03-04 08:03:47 -06:00

eth_internal.h

net: remove duplicate eth_env_set_enetaddr_by_index() declaration

2024-07-31 17:55:08 -06:00

eth-uclass.c

net: tftp: don't call stop callback from UDP handler

2025-05-23 11:33:18 -06:00

fastboot_tcp.c

net/tcp: improve tcp framework, use better state machine

2024-12-28 11:59:42 -06:00

fastboot_udp.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

Kconfig

net: Add SYS_FAULT_MII_ADDR to Kconfig

2025-10-22 11:16:09 +02:00

link_local.c

net: Remove env_get_ip helper() function

2025-05-29 08:30:24 -06:00

link_local.h

global: Drop common.h inclusion

2023-12-21 08:54:37 -05:00

Makefile

net: introduce CONFIG_DNS

2025-08-18 15:47:58 +02:00

mdio-mux-uclass.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

mdio-uclass.c

net: mdio-uclass: introduce dm_eth_phy_connect_interface()

2025-10-10 11:07:44 -06:00

ndisc.c

Fix neighbor discovery ethernet address saving

2025-01-01 14:40:04 -06:00

net6.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

net_rand.h

net: add missing SPDX-License-Identifier for files originating from LiMon

2025-08-18 15:47:57 +02:00

net-common.c

net: make dhcp_run() common for NET and NET_LWIP

2025-10-22 14:28:33 +02:00

net.c

net: introduce CONFIG_DNS

2025-08-18 15:47:58 +02:00

nfs.c

net: Remove duplicate newlines

2024-07-15 12:12:18 -06:00

nfs.h

net: Remove duplicate newlines

2024-07-15 12:12:18 -06:00

pcap.c

net: Include env.h in pcap.c

2025-05-29 08:30:25 -06:00

ping6.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

ping.c

net: add missing SPDX-License-Identifier for files originating from LiMon

2025-08-18 15:47:57 +02:00

ping.h

net: add missing SPDX-License-Identifier for files originating from LiMon

2025-08-18 15:47:57 +02:00

rarp.c

net: Remove duplicate newlines

2024-07-15 12:12:18 -06:00

rarp.h

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07 09:34:12 -04:00

sntp.c

net: extract function net_sntp_set_rtc() from sntp_handler()

2025-07-08 11:07:37 +02:00

tcp.c

net: Incorrect NOP macro used for test

2025-08-01 09:30:47 +02:00

tftp.c

tftp: make TFTP ports unconditionally configurable

2025-10-22 11:09:24 +02:00

udp.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

wget.c

net: introduce CONFIG_DNS

2025-08-18 15:47:58 +02:00

wol.c

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

wol.h

net: Add new wol command - Wake on LAN

2018-07-02 14:14:20 -05:00