Hi, Andrey:

Thanks, exactly as you explained, it's to fix CVE-2021-27138, will add more
commit messages.

//Ming Liu

Andrey Zhizhikin <[email protected]> 於 2021年5月21日 週五 下午6:04寫道:

> On Fri, May 21, 2021 at 4:44 PM Bruce Ashfield <[email protected]>
> wrote:
> >
> > On Fri, May 21, 2021 at 10:28 AM Richard Purdie
> > <[email protected]> wrote:
> > >
> > > On Fri, 2021-05-21 at 14:20 +0200, Ming Liu wrote:
> > > > From: Ming Liu <[email protected]>
> > > >
> > > > Change to use '-' rather than '@' as separators.
> > >
> > > Why? The commit message needs more information.
> > >
> >
> > I had exactly the same question/comment!
>
> I guess this comes from the attempt to fix CVE-2021-27138, which was
> already addressed in U-Boot with commit 3f04db891a35 ("image: Check
> for unit addresses in FITs").
>
> `@` is prohibied, so the `-` should be used instead.
>
> I believe it would throw the build error, somethign like this:
> | ./tools/mkimage: verify_header failed for FIT Image support with exit
> | code 1
>
> I do agree though - commit message should state this reason for this
> change.
>
> >
> > Bruce
> >
> > > Cheers,
> > >
> > > Richard
> > >
> > >
> > >
> > >
> >
> >
> > --
> > - Thou shalt not follow the NULL pointer, for chaos and madness await
> > thee at its end
> > - "Use the force Harry" - Gandalf, Star Trek II
> >
> > 
> >
>
>
> --
> Regards,
> Andrey.
>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#152134): 
https://lists.openembedded.org/g/openembedded-core/message/152134
Mute This Topic: https://lists.openembedded.org/mt/82984249/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to