Re: [PATCH 8/8] image: Check for unit addresses in FITs

On Mon, Feb 15, 2021 at 05:08:12PM -0700, Simon Glass wrote:

Using unit addresses in a FIT is a security risk. Add a check for this and disallow it.

CVE-2021-27138

Signed-off-by: Simon Glass sjg@chromium.org Reported-by: Bruce Monroe bruce.monroe@intel.com Reported-by: Arie Haenel arie.haenel@intel.com Reported-by: Julien Lenoir julien.lenoir@intel.com

Applied to u-boot/master, thanks!