mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-04-24 22:05:40 +00:00
![]() The function read_uuid() zeroes the UUID destination buffer on error. However, it mistakenly uses the dest pointer that has been incremented many times during the parsing, leading to an out-of-bounds write. To fix this, retain a pointer to the start of the buffer, and use this when clearing it instead. Signed-off-by: David Horstmann <david.horstmann@arm.com> Change-Id: Iee8857be5d3f383ca2eab86cde99a43bf606f306 |
||
---|---|---|
.. | ||
aarch32 | ||
aarch64 | ||
backtrace | ||
bl_common.c | ||
desc_image_load.c | ||
fdt_fixup.c | ||
fdt_wrappers.c | ||
hw_crc32.c | ||
image_decompress.c | ||
runtime_svc.c | ||
tf_log.c | ||
uuid.c |