linux/drivers/mtd/ubi
Denis Arefev 9a6550bbe4 ubi: Add a check for ubi_num
commit 97bbf9e312 upstream.

Added a check for ubi_num for negative numbers
If the variable ubi_num takes negative values then we get:

qemu-system-arm ... -append "ubi.mtd=0,0,0,-22222345" ...
[    0.745065]  ubi_attach_mtd_dev from ubi_init+0x178/0x218
[    0.745230]  ubi_init from do_one_initcall+0x70/0x1ac
[    0.745344]  do_one_initcall from kernel_init_freeable+0x198/0x224
[    0.745474]  kernel_init_freeable from kernel_init+0x18/0x134
[    0.745600]  kernel_init from ret_from_fork+0x14/0x28
[    0.745727] Exception stack(0x90015fb0 to 0x90015ff8)

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 83ff59a066 ("UBI: support ubi_num on mtd.ubi command line")
Cc: stable@vger.kernel.org
Signed-off-by: Denis Arefev <arefev@swemel.ru>
Reviewed-by: Zhihao Cheng <chengzhihao1@huawei.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2025-02-17 09:40:27 +01:00
..
attach.c ubi: fastmap: Fix duplicate slab cache names while attaching 2024-12-09 10:32:55 +01:00
block.c block: replace fmode_t with a block-specific type for block open flags 2023-06-12 08:04:05 -06:00
build.c ubi: Add a check for ubi_num 2025-02-17 09:40:27 +01:00
cdev.c ubi: fastmap: Add fastmap control support for 'UBI_IOCATT' ioctl 2022-09-21 18:29:18 +02:00
debug.c ubi: Fix permission display of the debugfs files 2023-02-02 21:13:45 +01:00
debug.h treewide: use get_random_u32_below() instead of deprecated function 2022-11-18 02:15:15 +01:00
eba.c ubi: eba: properly rollback inside self_check_eba 2024-08-03 08:54:23 +02:00
fastmap-wl.c ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty 2024-12-09 10:32:55 +01:00
fastmap.c ubi: correct the calculation of fastmap size 2024-04-03 15:28:21 +02:00
gluebi.c mtd: ubi: gluebi: Fix misnamed function parameter documentation 2020-11-20 12:37:32 +01:00
io.c ubi: Fix repeated words in comments 2022-09-21 11:32:27 +02:00
kapi.c mtd: ubi: block: wire-up device parent 2023-02-13 22:24:10 +01:00
Kconfig treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
misc.c ubi: use correct names in function kernel-doc comments 2023-02-05 22:36:39 +01:00
ubi-media.h ubi: ubi-media.h: Fix comment typo 2022-09-21 11:12:18 +02:00
ubi.h ubi: fastmap: Add fastmap control support for 'UBI_IOCATT' ioctl 2022-09-21 18:29:18 +02:00
upd.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156 2019-05-30 11:26:35 -07:00
vmt.c ubi: Fix possible null-ptr-deref in ubi_free_volume() 2023-02-02 21:13:44 +01:00
vtbl.c ubi: Check for too small LEB size in VTBL code 2024-04-03 15:28:20 +02:00
wl.c ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty 2024-12-09 10:32:55 +01:00
wl.h ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty 2024-12-09 10:32:55 +01:00