On 1/26/19 10:27 PM, Heinrich Schuchardt wrote:
On 1/26/19 10:13 PM, Simon Goldschmidt wrote:
This fixes the automatic lmb initialization and reservation for boards with more than one DRAM bank.
This fixes the CVE-2018-18439 and -18440 fixes that only allowed to load files into the firs DRAM bank from fs and via tftp.
Found-by: Heinrich Schuchardt xypron.glpk@gmx.de Signed-off-by: Simon Goldschmidt simon.k.r.goldschmidt@gmail.com
Thanks for the patch.
With the patch tftp to $loadaddr is possible on vexpress_ca15_tc2. Loading to an address outside DRAM is forbidden.
So for vexpress_ca15_tc2
Tested-by: Heinrich Schuchardt xypron.glpk@gmx.de
I ran this patch through Travis CI together with the efi-next queue and no error occurred.
https://travis-ci.org/xypron2/u-boot/builds/484859383 https://github.com/xypron2/u-boot/commits/21ea2188022313cac9db0f27d46a9dbcad...
Best regards
Heinrich