u-boot-2016/net
Grant Likely 8f1bc28408 tftp: don't implicity trust the format of recevied packets
The TFTP OACK code trusts that the incoming packet is formated as
ASCII text and can be processed by string functions. It also has a
loop limit overflow bug where if the packet length is less than 8, it
ends up looping over *all* of memory to find the 'blksize' string.

This patch solves the problem by forcing the packet to be null
terminated and using strstr() to search for the sub string.

Signed-off-by: Grant Likely <grant.likely@secretlab.ca>
2007-08-30 09:16:16 +02:00
..
bootp.c New CONFIG_BOOTP_SERVERIP option 2007-08-13 23:07:53 -04:00
bootp.h net/: Remove obsolete references to CONFIG_COMMANDS 2007-07-09 17:45:14 -05:00
eth.c Merge with git://www.denx.de/git/u-boot.git 2007-08-15 14:51:27 +02:00
Makefile Move "ar" flags to config.mk to allow for silent "make -s" 2006-10-09 01:02:05 +02:00
net.c Coding style cleanup; rebuild CHANGELOG 2007-08-14 09:47:27 +02:00
nfs.c Fix some compile problems introduced by the latest CFG_CMD_xxx cleanup 2007-07-11 23:03:06 +02:00
nfs.h * Patch by Steven Scholz, 25 Feb 2004: 2004-02-27 00:07:27 +00:00
rarp.c net/: Remove lingering references to CFG_CMD_* symbols. 2007-07-10 11:05:02 -05:00
rarp.h Initial revision 2002-07-20 20:14:13 +00:00
sntp.c Fix some compile problems introduced by the latest CFG_CMD_xxx cleanup 2007-07-11 23:03:06 +02:00
sntp.h * Patch by Masami Komiya, 30 Mar 2005: 2005-04-01 00:25:43 +00:00
tftp.c tftp: don't implicity trust the format of recevied packets 2007-08-30 09:16:16 +02:00
tftp.h Initial revision 2000-12-28 11:02:30 +00:00