[PATCH] tlv: check incoming TLV headers for size

Sascha Hauer s.hauer at pengutronix.de
Tue Mar 10 03:09:43 PDT 2026


On Thu, 05 Mar 2026 08:44:48 +0100, Sascha Hauer wrote:
> tlv_register_device() gets untrusted data in the incoming TLV header.
> Add a size argument and check if the TLV is within the size boundaries
> before processing it.
> While at it check that the reserved field in the TLV header is set to
> zero which is necessary should we later want to use it.
> 
> 
> [...]

Applied, thanks!

[1/1] tlv: check incoming TLV headers for size
      https://git.pengutronix.de/cgit/barebox/commit/?id=fedf2ea1985f (link may not be stable)

Best regards,
-- 
Sascha Hauer <s.hauer at pengutronix.de>




More information about the barebox mailing list