
26 Jan
2019
26 Jan
'19
10:27 p.m.
On 1/26/19 10:13 PM, Simon Goldschmidt wrote:
This fixes the automatic lmb initialization and reservation for boards with more than one DRAM bank.
This fixes the CVE-2018-18439 and -18440 fixes that only allowed to load files into the firs DRAM bank from fs and via tftp.
Found-by: Heinrich Schuchardt xypron.glpk@gmx.de Signed-off-by: Simon Goldschmidt simon.k.r.goldschmidt@gmail.com
Thanks for the patch.
With the patch tftp to $loadaddr is possible on vexpress_ca15_tc2. Loading to an address outside DRAM is forbidden.
So for vexpress_ca15_tc2
Tested-by: Heinrich Schuchardt xypron.glpk@gmx.de