bootutil: fix null pointer dereference in logging.

rbrscoleman · de-nordic · commit ec26273f3d26 · 2025-09-10T11:00:31.000+02:00
`bootutil_tlv_iter_next()` may be called with `type == NULL`.

Signed-off-by: Samuel Coleman &lt;samuel.coleman@rbr-global.com&gt;
diff --git a/boot/bootutil/src/tlv.c b/boot/bootutil/src/tlv.c
@@ -142,7 +142,7 @@ bootutil_tlv_iter_next(struct image_tlv_iter *it, uint32_t *off, uint16_t *len,
             *len = tlv.it_len;
             it->tlv_off += sizeof(tlv) + tlv.it_len;
             BOOT_LOG_DBG("bootutil_tlv_iter_next: TLV %d found at %d (size %d)",
-                         *type, *off, *len);
+                         tlv.it_type, *off, *len);
             return 0;
         }
 

Original file line number	Diff line number	Diff line change
`@@ -142,7 +142,7 @@ bootutil_tlv_iter_next(struct image_tlv_iter it, uint32_t off, uint16_t *len,`
`142`	`142`	`*len = tlv.it_len;`
`143`	`143`	`it->tlv_off += sizeof(tlv) + tlv.it_len;`
`144`	`144`	`BOOT_LOG_DBG("bootutil_tlv_iter_next: TLV %d found at %d (size %d)",`
`145`		`- type, off, *len);`
	`145`	`+ tlv.it_type, off, len);`
`146`	`146`	`return 0;`
`147`	`147`	`}`
`148`	`148`