On Tue, Jun 02, 2026 at 07:31:30PM +0100, Anton Ivanov wrote: > fdt_check_no_at() recurses into every subnode without a depth > limit. A deeply nested FIT image can exhaust the stack and crash > U-Boot during signature verification of an untrusted FIT. > > Add a depth check using FDT_MAX_DEPTH to bound the recursion. > > Signed-off-by: Anton Ivanov <[email protected]>
Applied to u-boot/next, thanks! -- Tom
signature.asc
Description: PGP signature

