On Tue, Jun 02, 2026 at 07:31:30PM +0100, Anton Ivanov wrote:

> fdt_check_no_at() recurses into every subnode without a depth
> limit. A deeply nested FIT image can exhaust the stack and crash
> U-Boot during signature verification of an untrusted FIT.
> 
> Add a depth check using FDT_MAX_DEPTH to bound the recursion.
> 
> Signed-off-by: Anton Ivanov <[email protected]>

Applied to u-boot/next, thanks!

-- 
Tom

Attachment: signature.asc
Description: PGP signature

Reply via email to