Ngo Luong Thanh Tra 564e180d70 board: toradex: fix tdx-cfg-block prompt buffer overflow
Replace unbounded sprintf() with snprintf() using sizeof(message)
as the bound for all prompt string assignments in
get_cfgblock_interactive(), get_cfgblock_carrier_interactive(),
do_cfgblock_carrier_create() and do_cfgblock_create(). The
previous calls had no size limit and could overflow the
CONFIG_SYS_CBSIZE-sized stack buffer if SYS_CBSIZE was configured
smaller than the longest prompt string (71 bytes).

Fixes: 8b6dc5d3943c ("toradex: tdx-cfg-block: Cleanup interactive cfg block creation")
Signed-off-by: Ngo Luong Thanh Tra <S4210155@student.rmit.edu.au>
To: u-boot@lists.denx.de
2026-04-13 17:42:58 -06:00
..
2025-11-29 14:42:24 -03:00
2025-05-09 15:05:14 -06:00
2025-06-02 17:26:16 -06:00
2024-07-22 10:51:47 -06:00
2026-03-18 13:07:36 -06:00
2025-05-09 15:05:14 -06:00
2026-03-09 15:26:34 -06:00
2025-04-11 12:16:44 -06:00
2026-04-06 12:16:57 -06:00
2026-04-02 11:12:22 -03:00
2025-04-11 12:16:44 -06:00