
17 Jan
2019
17 Jan
'19
11:44 p.m.
On Mon, Jan 14, 2019 at 10:38:19PM +0100, Simon Goldschmidt wrote:
This fixes CVE-2018-18440 ("insufficient boundary checks in filesystem image load") by using lmb to check the load size of a file against reserved memory addresses.
Signed-off-by: Simon Goldschmidt simon.k.r.goldschmidt@gmail.com Reviewed-by: Simon Glass sjg@chromium.org
Applied to u-boot/master, thanks!
--
Tom