[PATCH 0/6] fs: ubootvarfs: harden parser

Ahmad Fatoum a.fatoum at pengutronix.de
Fri Oct 2 04:40:03 PDT 2026


Fix a number of issues in our U-Boot env support, mostly unearthed by
fuzzing with some LLM assistance.

Ahmad Fatoum (6):
  fs: skip directory entries whose name does not fit struct dirent
  fs: reject negative lengths in ftruncate()
  fs: ubootvarfs: range-check the new size in truncate
  fs: ubootvarfs: do not form pointers past the end of the environment
  fs: ubootvarfs: reject variable names containing '='
  fs: ubootvarfs: handle removal of variables that are still open

 fs/fs.c         |  8 ++++++++
 fs/ubootvarfs.c | 36 ++++++++++++++++++++++++++++--------
 2 files changed, 36 insertions(+), 8 deletions(-)

-- 
2.47.3




More information about the barebox mailing list