[PATCH] tlv: check incoming TLV headers for size
Sascha Hauer
s.hauer at pengutronix.de
Tue Mar 10 03:09:43 PDT 2026
On Thu, 05 Mar 2026 08:44:48 +0100, Sascha Hauer wrote:
> tlv_register_device() gets untrusted data in the incoming TLV header.
> Add a size argument and check if the TLV is within the size boundaries
> before processing it.
> While at it check that the reserved field in the TLV header is set to
> zero which is necessary should we later want to use it.
>
>
> [...]
Applied, thanks!
[1/1] tlv: check incoming TLV headers for size
https://git.pengutronix.de/cgit/barebox/commit/?id=fedf2ea1985f (link may not be stable)
Best regards,
--
Sascha Hauer <s.hauer at pengutronix.de>
More information about the barebox
mailing list