mirrors/u-boot
1
0
Fork 0
mirror of https://source.denx.de/u-boot/u-boot.git synced 2026-05-05 12:46:14 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

liebherr: btt: Fix buffer overflow in board_fit_config_name_match

Browse Source 
The maximum length of the board name is not 11 characters
but 14: 11 bytes for the prefix + 3 bytes for the u8 + 1 NULL byte.
Hence, this commit increases the size of the name buffer variable
to 15. Also, this commit fixes the format specifier for the rev_id
variable.

Signed-off-by: Francois Berder <fberder@outlook.fr>
This commit is contained in:
Francois Berder 2026-03-05 17:40:05 +01:00 committed by Fabio Estevam
parent 7d39e29350
commit 262258dc75
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
board/liebherr/btt/btt.c
View File

@ -393,9 +393,9 @@ int board_fdt_blob_setup(void **fdtp)
int board_fit_config_name_match(const char *name)
{
u8 rev_id = get_som_rev();
char board[12];
char board[15];
sprintf(board, "imx28-btt3-%d", rev_id);
sprintf(board, "imx28-btt3-%u", rev_id);
if (!strncmp(name, board, sizeof(board)))
return 0;