[PATCH 0/6] fs: ubootvarfs: harden parser
Sascha Hauer
s.hauer at pengutronix.de
Thu Oct 15 01:24:18 PDT 2026
On Fri, 02 Oct 2026 13:40:03 +0200, Ahmad Fatoum wrote:
> Fix a number of issues in our U-Boot env support, mostly unearthed by
> fuzzing with some LLM assistance.
>
> Ahmad Fatoum (6):
> fs: skip directory entries whose name does not fit struct dirent
> fs: reject negative lengths in ftruncate()
> fs: ubootvarfs: range-check the new size in truncate
> fs: ubootvarfs: do not form pointers past the end of the environment
> fs: ubootvarfs: reject variable names containing '='
> fs: ubootvarfs: handle removal of variables that are still open
>
> [...]
Applied, thanks!
[1/6] fs: skip directory entries whose name does not fit struct dirent
https://git.pengutronix.de/cgit/barebox/commit/?id=e0f9224055fa (link may not be stable)
[2/6] fs: reject negative lengths in ftruncate()
https://git.pengutronix.de/cgit/barebox/commit/?id=69481b108050 (link may not be stable)
[3/6] fs: ubootvarfs: range-check the new size in truncate
https://git.pengutronix.de/cgit/barebox/commit/?id=23c4e760fa04 (link may not be stable)
[4/6] fs: ubootvarfs: do not form pointers past the end of the environment
https://git.pengutronix.de/cgit/barebox/commit/?id=dc811b55bb47 (link may not be stable)
[5/6] fs: ubootvarfs: reject variable names containing '='
https://git.pengutronix.de/cgit/barebox/commit/?id=ce79a7e7c3be (link may not be stable)
[6/6] fs: ubootvarfs: handle removal of variables that are still open
https://git.pengutronix.de/cgit/barebox/commit/?id=7b42e5e3eb32 (link may not be stable)
Best regards,
--
Sascha Hauer <s.hauer at pengutronix.de>
More information about the barebox
mailing list