kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-26 19:14:18 +00:00
Code Issues Releases Packages Activity
linux/drivers/mtd/ubi
History
Richard Weinberger 325940deb7 ubi: Fix out of bounds write in volume update code 
[ Upstream commit e4f6daac20 ]

ubi_start_leb_change() allocates too few bytes.
ubi_more_leb_change_data() will write up to req->upd_bytes +
ubi->min_io_size bytes.

Cc: stable@vger.kernel.org
Signed-off-by: Richard Weinberger <richard@nod.at>
Reviewed-by: Boris Brezillon <boris.brezillon@free-electrons.com>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
History 2016-03-14 12:42:31 -04:00
..
attach.c UBI: Fastmap: Fall back to scanning mode after ECC error 2015-03-26 23:03:15 +01:00
block.c UBI: block: Add missing cache flushes 2015-05-06 22:52:22 +02:00
build.c Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2015-04-26 17:22:07 -07:00
cdev.c UBI: fix check for "too many bytes" 2015-03-26 12:07:18 +01:00
debug.c UBI: power cut emulation for testing 2015-04-13 21:05:17 +02:00
debug.h UBI: power cut emulation for testing 2015-04-13 21:05:17 +02:00
eba.c UBI: Fastmap: Locking updates 2015-03-26 22:46:02 +01:00
fastmap-wl.c UBI: Fastmap: Remove is_fm_block() 2015-03-26 22:47:38 +01:00
fastmap.c UBI: Fastmap: Wire up WL accessor functions 2015-03-26 22:47:35 +01:00
gluebi.c UBI: gluebi: rename misleading variables 2012-11-30 13:54:41 +02:00
io.c UBI: Validate data_size 2015-10-22 14:43:24 -07:00
kapi.c VFS: assorted d_backing_inode() annotations 2015-04-15 15:06:59 -04:00
Kconfig UBI: block: Add CONFIG_BLOCK dependency 2014-03-04 14:49:53 +02:00
Makefile UBI: R/O block driver on top of UBI volumes 2014-02-28 16:29:48 +02:00
misc.c UBI: fix soft lockup in ubi_check_volume() 2015-01-28 16:18:09 +01:00
ubi-media.h UBI: Fastmap: Make WL pool size 50% of user pool size 2015-03-26 22:46:00 +01:00
ubi.h UBI: power cut emulation for testing 2015-04-13 21:05:17 +02:00
upd.c ubi: Fix out of bounds write in volume update code 2016-03-14 12:42:31 -04:00
vmt.c UBI: Extend UBI layer debug/messaging capabilities 2014-11-07 12:08:51 +02:00
vtbl.c UBI: return ENOSPC if no enough space available 2015-10-22 14:43:24 -07:00
wl.c UBI: return ENOSPC if no enough space available 2015-10-22 14:43:24 -07:00
wl.h UBI: Fastmap: Remove is_fm_block() 2015-03-26 22:47:38 +01:00