kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-20 19:23:40 +00:00
Code Issues Releases Packages Activity
linux/drivers/mtd/ubi
History
Richard Weinberger c3ad177420 ubi: Fix out of bounds write in volume update code 
commit e4f6daac20 upstream.

ubi_start_leb_change() allocates too few bytes.
ubi_more_leb_change_data() will write up to req->upd_bytes +
ubi->min_io_size bytes.

Signed-off-by: Richard Weinberger <richard@nod.at>
Reviewed-by: Boris Brezillon <boris.brezillon@free-electrons.com>
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
History 2016-03-24 10:01:05 +00:00
..
attach.c UBI: account for bitflips in both the VID header and data 2015-05-05 11:09:35 +01:00
block.c UBI: block: Add missing cache flushes 2015-09-30 13:20:56 +01:00
build.c UBI: R/O block driver on top of UBI volumes 2014-02-28 16:29:48 +02:00
cdev.c UBI: fix check for "too many bytes" 2015-05-05 11:09:36 +01:00
debug.c UBI: embed ubi_debug_info field in ubi_device struct 2012-12-10 13:38:59 +02:00
debug.h mtd: rename random32() to prandom_u32() 2013-02-04 09:26:28 +02:00
eba.c UBI: fix out of bounds write 2015-05-05 11:09:35 +01:00
fastmap.c UBI: add missing kmem_cache_free() in process_pool_aeb error path 2014-11-17 14:11:53 +00:00
gluebi.c UBI: gluebi: rename misleading variables 2012-11-30 13:54:41 +02:00
io.c UBI: Validate data_size 2015-10-19 15:42:37 +01:00
kapi.c UBI: modify ubi_wl_flush function to clear work queue for a lnum 2012-05-21 11:34:41 +03:00
Kconfig UBI: block: Add CONFIG_BLOCK dependency 2014-03-04 14:49:53 +02:00
Makefile UBI: R/O block driver on top of UBI volumes 2014-02-28 16:29:48 +02:00
misc.c UBI: fix soft lockup in ubi_check_volume() 2015-05-12 09:36:35 +01:00
ubi-media.h UBI: Add fastmap on-flash data structures 2012-10-03 12:29:37 +03:00
ubi.h MTD updates for 3.15: 2014-04-07 10:17:30 -07:00
upd.c ubi: Fix out of bounds write in volume update code 2016-03-24 10:01:05 +00:00
vmt.c UBI: introduce helpers dbg_chk_{io, gen} 2012-12-10 13:38:59 +02:00
vtbl.c UBI: return ENOSPC if no enough space available 2015-10-19 15:47:00 +01:00
wl.c UBI: return ENOSPC if no enough space available 2015-10-19 15:47:00 +01:00