mirror of
https://github.com/dgibson/dtc.git
synced 2025-12-07 13:45:07 -05:00
a2def54799
The root node is supposed to have an empty name, but at present this is not checked. The behaviour of such a tree is not well defined. Most software rightly assumes that the root node is at offset 0 and does not check the name. This oddity was discovered as part of a security investigation into U-Boot verified boot. Add a check for this to fdt_check_full(). Signed-off-by: Simon Glass <sjg@chromium.org> Reported-by: Arie Haenel <arie.haenel@intel.com> Reported-by: Julien Lenoir <julien.lenoir@intel.com> Message-Id: <20210323010410.3222701-2-sjg@chromium.org> Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
69 lines
1.3 KiB
C
69 lines
1.3 KiB
C
// SPDX-License-Identifier: GPL-2.0-or-later
|
|
/*
|
|
* dumptrees - utility for libfdt testing
|
|
*
|
|
* (C) Copyright David Gibson <dwg@au1.ibm.com>, IBM Corporation. 2006.
|
|
*/
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <unistd.h>
|
|
#include <fcntl.h>
|
|
#include <stdint.h>
|
|
|
|
#include <libfdt.h>
|
|
|
|
#include "testdata.h"
|
|
|
|
static struct {
|
|
void *blob;
|
|
const char *filename;
|
|
} trees[] = {
|
|
#define TREE(name) { &name, #name ".dtb" }
|
|
TREE(test_tree1),
|
|
TREE(bad_node_char), TREE(bad_node_format), TREE(bad_prop_char),
|
|
TREE(ovf_size_strings),
|
|
TREE(truncated_property), TREE(truncated_string),
|
|
TREE(truncated_memrsv),
|
|
TREE(two_roots),
|
|
TREE(named_root)
|
|
};
|
|
|
|
#define NUM_TREES (sizeof(trees) / sizeof(trees[0]))
|
|
|
|
int main(int argc, char *argv[])
|
|
{
|
|
int i;
|
|
|
|
if (argc != 2) {
|
|
fprintf(stderr, "Missing output directory argument\n");
|
|
return 1;
|
|
}
|
|
|
|
if (chdir(argv[1]) != 0) {
|
|
perror("chdir()");
|
|
return 1;
|
|
}
|
|
|
|
for (i = 0; i < NUM_TREES; i++) {
|
|
void *blob = trees[i].blob;
|
|
const char *filename = trees[i].filename;
|
|
int size;
|
|
int fd;
|
|
int ret;
|
|
|
|
size = fdt_totalsize(blob);
|
|
|
|
printf("Tree \"%s\", %d bytes\n", filename, size);
|
|
|
|
fd = open(filename, O_WRONLY | O_CREAT | O_TRUNC, 0666);
|
|
if (fd < 0)
|
|
perror("open()");
|
|
|
|
ret = write(fd, blob, size);
|
|
if (ret != size)
|
|
perror("write()");
|
|
|
|
close(fd);
|
|
}
|
|
exit(0);
|
|
}
|