diff options
| author | Sascha Hauer <s.hauer@pengutronix.de> | 2020-06-03 09:50:40 +0200 |
|---|---|---|
| committer | Sascha Hauer <s.hauer@pengutronix.de> | 2020-06-03 09:50:44 +0200 |
| commit | c0f0cbd1759a6ca6cbda4001dff5764f6633c825 (patch) | |
| tree | 6d734abb2000ac4c18984632d0947a501d048983 /arch/mips/lib/reloc.c | |
| parent | 1b57c7381c781e3cf39a10a2a01ce8e1fe5aca66 (diff) | |
| download | barebox-c0f0cbd1759a6ca6cbda4001dff5764f6633c825.tar.gz barebox-c0f0cbd1759a6ca6cbda4001dff5764f6633c825.tar.xz | |
nfs: Fix out of bounds read
nfs_read_reply() interprets the fields of an incoming packet directly
as a field length without checking the boundaries. Clamp the maximum
length to the packet length to avoid reading out of bounds.
Reported-by: Jai Verma <jai2.verma@outlook.com>
Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>
Diffstat (limited to 'arch/mips/lib/reloc.c')
0 files changed, 0 insertions, 0 deletions