Skip to content
Commit 2d1b2ac1 authored by Mikhail Ilin's avatar Mikhail Ilin Committed by Tom Rini
Browse files

tool: ifwitool: Fix buffer overflow



An incorrect 1st parameter is passed to the fix_member()
 function. Should use a pointer to the beginning of the parent structure
 (bpdt or subpart_dir, because are boxed), not to their fields. Otherwise,
 this leads to an overrun of the structure boundary, since in the
 fix_member() function, an 'offset' is made, relative to the 1st argument,
 which itself is an 'offset' from the beginning of the structure.

Signed-off-by: default avatarMikhail Ilin <ilin.mikhail.ol@gmail.com>
Reviewed-by: default avatarSimon Glass <sjg@chromium.org>
parent 16423294
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment