
16 Feb
2021
16 Feb
'21
4:36 a.m.
On Mon, Feb 15, 2021 at 05:08:11PM -0700, Simon Glass wrote:
It is possible to construct a devicetree blob with multiple root nodes. Update fdt_check_full() to check for this, along with a root node with an invalid name.
CVE-2021-27097
Signed-off-by: Simon Glass sjg@chromium.org Reported-by: Bruce Monroe bruce.monroe@intel.com Reported-by: Arie Haenel arie.haenel@intel.com Reported-by: Julien Lenoir julien.lenoir@intel.com
Applied to u-boot/master, thanks!
--
Tom