starfive-tech/u-boot.git/net/nfs.c, branch master

common: Drop log.h from common header

2020-05-19T01:19:18+00:00

Move this header out of the common header. Signed-off-by: Simon Glass

common: Move the image globals into image.h

2020-01-17T19:02:35+00:00

These three globals relate to image handling. Move them to the image header file. Signed-off-by: Simon Glass

image: Rename load_addr, save_addr, save_size

2020-01-17T19:02:35+00:00

These global variables are quite short and generic. In fact the same name is more often used locally for struct members and function arguments. Add a image_ prefix to make them easier to distinguish. Signed-off-by: Simon Glass

common: Move flash_perror() to flash.h

2020-01-17T18:26:48+00:00

This function belongs more in flash.h than common.h so move it. Also remove the space before the bracket in some calls. Signed-off-by: Simon Glass

common: Move get_ticks() function out of common.h

2019-12-02T23:23:13+00:00

This function belongs in time.h so move it over and add a comment. Signed-off-by: Simon Glass Reviewed-by: Tom Rini

net: nfs: remove superfluous conversions

2019-09-04T16:37:19+00:00

rpc_pkt.u.call.data is an array of uint32_t. There is no need to convert it to uint32_t *. memcpy() expects void * as it 1st and 2nd argument. There is no point in converting pointers to char * before passing them to memcpy(). In ntohl(data[1]) != 0 calling ntohl() is superfluous. If the value is zero, does not depend on the byte order. Signed-off-by: Heinrich Schuchardt Reviewed-by: Bin Meng Acked-by: Joe Hershberger

CVE-2019-14196: nfs: fix unbounded memcpy with a failed length check at nfs_lookup_reply

2019-09-04T16:37:19+00:00

This patch adds a check to rpc_pkt.u.reply.data at nfs_lookup_reply. Signed-off-by: Cheng Liu Reported-by: Fermín Serna Acked-by: Joe Hershberger

CVE-2019-14195: nfs: fix unbounded memcpy with unvalidated length at nfs_readlink_reply

2019-09-04T16:37:19+00:00

This patch adds a check to rpc_pkt.u.reply.data at nfs_readlink_reply. Signed-off-by: Cheng Liu Reported-by: Fermín Serna Acked-by: Joe Hershberger

CVE-2019-14194/CVE-2019-14198: nfs: fix unbounded memcpy with a failed length check at nfs_read_reply

2019-09-04T16:37:19+00:00

This patch adds a check to rpc_pkt.u.reply.data at nfs_read_reply. Signed-off-by: Cheng Liu Reported-by: Fermín Serna Acked-by: Joe Hershberger

CVE: nfs: fix stack-based buffer overflow in some nfs_handler reply helper functions

2019-09-04T16:37:19+00:00

This patch adds a check to nfs_handler to fix buffer overflow for CVE-2019-14197, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203 and CVE-2019-14204. Signed-off-by: Cheng Liu Reported-by: Fermín Serna Acked-by: Joe Hershberger