diff options
author | Mikhail Ilin <ilin.mikhail.ol@gmail.com> | 2022-11-18 14:50:24 +0300 |
---|---|---|
committer | Tom Rini <trini@konsulko.com> | 2022-12-08 17:25:44 +0300 |
commit | 2d1b2ac13fe5be6aa149e7a8ab5b059f0ad05476 (patch) | |
tree | c6b73ec6631bbe3536f6fc316545c8b9d52917c1 /fs | |
parent | 164232943c77409921f0d1add63d1e41f0460715 (diff) | |
download | u-boot-2d1b2ac13fe5be6aa149e7a8ab5b059f0ad05476.tar.xz |
tool: ifwitool: Fix buffer overflow
An incorrect 1st parameter is passed to the fix_member()
function. Should use a pointer to the beginning of the parent structure
(bpdt or subpart_dir, because are boxed), not to their fields. Otherwise,
this leads to an overrun of the structure boundary, since in the
fix_member() function, an 'offset' is made, relative to the 1st argument,
which itself is an 'offset' from the beginning of the structure.
Signed-off-by: Mikhail Ilin <ilin.mikhail.ol@gmail.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
Diffstat (limited to 'fs')
0 files changed, 0 insertions, 0 deletions