Skip to content
Commit 79af75f7 authored by Simon Glass's avatar Simon Glass Committed by Tom Rini
Browse files

fit: Don't allow verification of images with @ nodes



When searching for a node called 'fred', any unit address appended to the
name is ignored by libfdt, meaning that 'fred' can match 'fred@1'. This
means that we cannot be sure that the node originally intended is the one
that is used.

Disallow use of nodes with unit addresses.

Update the forge test also, since it uses @ addresses.

CVE-2021-27138

Signed-off-by: default avatarSimon Glass <sjg@chromium.org>
Reported-by: default avatarBruce Monroe <bruce.monroe@intel.com>
Reported-by: default avatarArie Haenel <arie.haenel@intel.com>
Reported-by: default avatarJulien Lenoir <julien.lenoir@intel.com>
parent 8a7d4cf9
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment