mirror of
git://git.openwrt.org/openwrt/openwrt.git
synced 2025-12-21 03:52:10 -05:00
27adf03f70
uImage.FIT validation was restricted to certain sub-image types which is problematic as it then won't validate eg. 'filesystem' type subimages. Also prevent decompressing sub-images into a arbitrary sized buffer just to then free that buffer -- there is not need to do this and creating malicious compressed payloads which overflow the buffer is too easy. Signed-off-by: Daniel Golle <daniel@makrotopia.org> |
||
|---|---|---|
| .. | ||
| 001-envtools-compile.patch | ||
| 002-envtools-revert-tools-env-use-run-to-store-lockfile.patch | ||
| 003-tools-dumpimage-fix-tools-compile.patch | ||
| 010-image-fit-sig-skip-in-tools-build-if-key-is-missing.patch | ||
| 011-tools-fit_check_sign-make-key-optional.patch | ||
| 012-tools-fit_check_sign-no-libcrypto.patch | ||
| 013-tools-fit_check_sign-all-image-types.patch | ||
| 014-tools-fit_check_sign-no-decompress.patch | ||