[PATCH 0/6] fs: ubootvarfs: harden parser

Sascha Hauer s.hauer at pengutronix.de
Thu Oct 15 01:24:18 PDT 2026


On Fri, 02 Oct 2026 13:40:03 +0200, Ahmad Fatoum wrote:
> Fix a number of issues in our U-Boot env support, mostly unearthed by
> fuzzing with some LLM assistance.
> 
> Ahmad Fatoum (6):
>   fs: skip directory entries whose name does not fit struct dirent
>   fs: reject negative lengths in ftruncate()
>   fs: ubootvarfs: range-check the new size in truncate
>   fs: ubootvarfs: do not form pointers past the end of the environment
>   fs: ubootvarfs: reject variable names containing '='
>   fs: ubootvarfs: handle removal of variables that are still open
> 
> [...]

Applied, thanks!

[1/6] fs: skip directory entries whose name does not fit struct dirent
      https://git.pengutronix.de/cgit/barebox/commit/?id=e0f9224055fa (link may not be stable)
[2/6] fs: reject negative lengths in ftruncate()
      https://git.pengutronix.de/cgit/barebox/commit/?id=69481b108050 (link may not be stable)
[3/6] fs: ubootvarfs: range-check the new size in truncate
      https://git.pengutronix.de/cgit/barebox/commit/?id=23c4e760fa04 (link may not be stable)
[4/6] fs: ubootvarfs: do not form pointers past the end of the environment
      https://git.pengutronix.de/cgit/barebox/commit/?id=dc811b55bb47 (link may not be stable)
[5/6] fs: ubootvarfs: reject variable names containing '='
      https://git.pengutronix.de/cgit/barebox/commit/?id=ce79a7e7c3be (link may not be stable)
[6/6] fs: ubootvarfs: handle removal of variables that are still open
      https://git.pengutronix.de/cgit/barebox/commit/?id=7b42e5e3eb32 (link may not be stable)

Best regards,
-- 
Sascha Hauer <s.hauer at pengutronix.de>




More information about the barebox mailing list