redonkable
/
remarkable-uboot
1
0
Fork 0
Code Releases Activity

imximage: header.length of 4 is valid 

Signed-off-by: Troy Kisky <troy.kisky@boundarydevices.com>
utp
Troy Kisky 2015-09-21 14:02:48 -07:00 committed by Stefano Babic
parent 7daaac5281
commit 835c30e368
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tools/imximage.c
View File

@ -361,8 +361,8 @@ static void print_hdr_v2(struct imx_header *imx_hdr)
dcd_v2_t *dcd_v2 = &hdr_v2->dcd_table;
uint32_t size, version;
size = be16_to_cpu(dcd_v2->header.length) - 8;
if (size > (MAX_HW_CFG_SIZE_V2 * sizeof(dcd_addr_data_t))) {
size = be16_to_cpu(dcd_v2->header.length);
if (size > (MAX_HW_CFG_SIZE_V2 * sizeof(dcd_addr_data_t)) + 8) {
fprintf(stderr,
"Error: Image corrupt DCD size %d exceed maximum %d\n",
(uint32_t)(size / sizeof(dcd_addr_data_t)),