This is the mail archive of the
ecos-bugs@sourceware.org
mailing list for the eCos project.
[Bug 1001151] New: fisdir_size when combined FIS and config
- From: bugzilla-daemon at bugs dot ecos dot sourceware dot org
- To: unassigned at bugs dot ecos dot sourceware dot org
- Date: Mon, 14 Feb 2011 22:05:06 +0000
- Subject: [Bug 1001151] New: fisdir_size when combined FIS and config
- Auto-submitted: auto-generated
Please do not reply to this email. Use the web interface provided at:
http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001151
Summary: fisdir_size when combined FIS and config
Product: eCos
Version: CVS
Platform: All
OS/Version: Other
Status: UNCONFIRMED
Severity: normal
Priority: low
Component: RedBoot
AssignedTo: unassigned@bugs.ecos.sourceware.org
ReportedBy: stano@meduna.org
CC: ecos-bugs@ecos.sourceware.org
Class: Advice Request
In redboot/current/src/flash.c:
do_flash_init:
workspace_end = (unsigned char *)(workspace_end-fisdir_size);
fis_work_block = workspace_end;
fis_update_directory:
#ifdef CYGSEM_REDBOOT_FLASH_COMBINED_FIS_AND_CONFIG
memcpy((char *)fis_work_block+fisdir_size, config, cfg_size);
conf_endian_fixup((char *)fis_work_block+fisdir_size);
blk_size += cfg_size;
#endif
In the case the workspace_end is at the end of the usable memory, there is no
sufficiently large common ZLIB buffer and
CYGSEM_REDBOOT_FLASH_COMBINED_FIS_AND_CONFIG is set, the memcpy writes past the
end of the memory - either generating a fault or possibly wrapping around
overwriting whatever happens to be there.
--
Configure bugmail: http://bugs.ecos.sourceware.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.