Google Git
Sign in
android / platform / system / libufdt / 46493e9936878b033ca4056486054ca8432a806e
commit46493e9936878b033ca4056486054ca8432a806e[log] [tgz]
authorMike McTernan <mikemcternan@google.com>Mon Oct 31 21:07:09 2022 +0000
committerMike McTernan <mikemcternan@google.com>Thu Nov 03 10:17:51 2022 +0000
tree5c23f51b7b172709f700711a615a0821dfdea53b
parent14f8b87308455fce6ab72cf86adccb335a28abeb [diff]
libufdt: fix potential reading beyond property value in fixup arrays

Fail if the fixup offset property isn't a list of fdt32_t.

Bug: 254929746
Test: mmma system/libufdt && system/libufdt/tests/run_tests.sh
Test: mmma system/libufdt && system/libufdt/tests/run_performance_test.sh
Test: manual; run with reproducer from fuzzer
Test: manual; run with test corpus from fuzzer
Change-Id: I8db038ae0f3ac93b800c2c086c6b765dbd14a2ad
(cherry picked from commit b9e866a28fb72e13f8f769a7eb9966827bedff89)
1 file changed
tree: 5c23f51b7b172709f700711a615a0821dfdea53b
  1. include/
  2. sysdeps/
  3. tests/
  4. utils/
  5. .clang-format
  6. Android.bp
  7. METADATA
  8. MODULE_LICENSE_APACHE2
  9. NOTICE
  10. OWNERS
  11. PREUPLOAD.cfg
  12. ufdt_convert.c
  13. ufdt_node.c
  14. ufdt_node_pool.c
  15. ufdt_overlay.c
  16. ufdt_prop_dict.c
  17. ufdt_prop_dict.h