[Skiboot] [PATCH] firmware-versions: Add test case for parsing VERSION

Stewart Smith stewart at linux.ibm.com
Thu Feb 14 15:56:09 AEDT 2019


Stewart Smith <stewart at linux.ibm.com> writes:
> Also make it possible to use with afl-lop/afl-fuzz just to help make
> *sure* we're all good.
>
> Additionally, if we hit a entry in VERSION that is larger than our
> buffer size, we skip over it gracefully rather than overwriting the
> stack. This is only a problem if VERSION isn't trusted, which as of
> 4b8cc05a94513816d43fb8bd6178896b430af08f it is verified as part of
> Secure Boot.
>
> CC: stable # v5.9+
> Fixes: 9727fe384b8685270d344201f7e051475eea3a0b
> Signed-off-by: Stewart Smith <stewart at linux.ibm.com>

Merged to master as of 3170270be92ad945600d25ced9352c39fc7f156a
and 6.2.x as of 6bb72e8f7b9d0136bb682bc032c7c736619fe4ff
and 6.0.x as of cc7945c73469a9258acd0affe579c380915f1f26

-- 
Stewart Smith
OPAL Architect, IBM.



More information about the Skiboot mailing list