projects / wrapfs-3.19.y.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3124dbf) | patch
UBI: fix out of bounds write
authorBrian Norris <computersforpeace@gmail.com>
Sat, 28 Feb 2015 10:23:26 +0000 (02:23 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 6 May 2015 20:01:54 +0000 (22:01 +0200)
commite48647022b8a9d21f21a83d1db9c28df2f6b6b00
treeb19a967d8bedbaa030f52f5cfe33448def59bd66tree | snapshot
parent3124dbf1bce530328c3f97b0ab454c2572c4c49acommit | diff
UBI: fix out of bounds write

commit d74adbdb9abf0d2506a6c4afa534d894f28b763f upstream.

If aeb->len >= vol->reserved_pebs, we should not be writing aeb into the
PEB->LEB mapping.

Caught by Coverity, CID #711212.

Signed-off-by: Brian Norris <computersforpeace@gmail.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/mtd/ubi/eba.c diff | blob | history
wrapfs-3.19.y