Richard Weinberger c5c2ce3560 ubi: Fix out of bounds write in volume update code ...

commit e4f6daac20 upstream.

ubi_start_leb_change() allocates too few bytes.
ubi_more_leb_change_data() will write up to req->upd_bytes +
ubi->min_io_size bytes.

Signed-off-by: Richard Weinberger <richard@nod.at>
Reviewed-by: Boris Brezillon <boris.brezillon@free-electrons.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-03-09 15:34:56 -08:00

..

chips

mtd: chips: fixup dependencies, to prevent build error

2015-05-28 11:07:48 -07:00

devices

Merge tag 'for-linus-20151106' of git://git.infradead.org/linux-mtd

2015-11-06 11:50:24 -08:00

lpddr

mtd: lpddr: show parent device in sysfs

2015-10-13 09:21:17 -07:00

maps

mtd: maps: rbtx4939-flash: fix compile error

2015-10-19 18:21:25 -07:00

nand

mtd: nand: assign reasonable default name for NAND drivers

2016-02-17 12:30:56 -08:00

onenand

mtd: onenand: omap2: drop owner and name assignment

2015-10-13 12:56:43 -07:00

spi-nor

mtd: spi-nor: fix stm_is_locked_sr() parameters

2016-01-05 16:00:41 -08:00

tests

mtd: tests: Replace timeval with ktime_t

2015-10-26 13:23:47 -07:00

ubi

ubi: Fix out of bounds write in volume update code

2016-03-09 15:34:56 -08:00

afs.c

mtd: make register_mtd_parser return void

2014-01-03 11:22:22 -08:00

ar7part.c

mtd: make register_mtd_parser return void

2014-01-03 11:22:22 -08:00

bcm47xxpart.c

mtd: bcm47xxpart: support SquashFS with an original magic

2015-01-07 12:24:23 -08:00

bcm63xxpart.c

mtd: make register_mtd_parser return void

2014-01-03 11:22:22 -08:00

cmdlinepart.c

mtd: cmdlinepart: convert printk() to pr_*()

2015-09-28 18:37:32 -07:00

ftl.c

mtd/ftl: fix the double free of the buffers allocated in build_maps()

2014-07-14 18:41:20 -07:00

inftlcore.c

mtd: nand: add a helper to detect the nand type

2013-10-27 16:27:06 -07:00

inftlmount.c

mtd: intflmount: fix off by one error in INFTL_dumpVUchains()

2014-11-05 13:19:21 -08:00

Kconfig

mtd: part: Create the master device node when partitioned

2015-04-05 17:44:01 -07:00

Makefile

mtd: spi-nor: shorten Kconfig naming

2014-04-14 11:23:01 -07:00

mtd_blkdevs.c

mtd: blkdevs: fix potential deadlock + lockdep warnings

2015-10-30 17:24:43 -07:00

mtdblock_ro.c

mtd: Move major number definitions to major.h

2013-11-06 23:32:59 -08:00

mtdblock.c

mtd: mtdblock: remove the needless mtdblks_lock

2015-01-07 12:51:56 -08:00

mtdchar.c

mtd: provide proper 32/64-bit compat_ioctl() support for BLKPG

2015-09-29 13:37:04 -07:00

mtdconcat.c

Merge tag 'for-linus-20150216' of git://git.infradead.org/linux-mtd

2015-02-18 08:01:44 -08:00

mtdcore.c

mtd: fix cmdlinepart parser, early naming for auto-filled MTD

2016-01-04 10:54:18 -08:00

mtdcore.h

…

mtdoops.c

…

mtdpart.c

mtd: mtdpart: Do not fail mtd probe when parsing partitions fails

2015-10-26 18:43:48 -07:00

mtdsuper.c

mtd: Move major number definitions to major.h

2013-11-06 23:32:59 -08:00

mtdswap.c

mtd: use __packed shorthand

2014-08-19 11:53:08 -07:00

nftlcore.c

mtd: nand: add a helper to detect the nand type

2013-10-27 16:27:06 -07:00

nftlmount.c

mtd: nftl: reorganize operations in condition check

2015-01-09 15:26:29 -08:00

ofpart.c

doc: dt: mtd: partitions: add compatible property to "partitions" node

2015-12-08 17:10:20 -08:00

redboot.c

mtd: make register_mtd_parser return void

2014-01-03 11:22:22 -08:00

rfd_ftl.c

mtd: remove some duplicative checks

2014-03-10 22:42:25 -07:00

sm_ftl.c

mtd: sm_ftl: initialize error code

2014-08-19 11:53:07 -07:00

sm_ftl.h

…

ssfdc.c

mtd: nand: add a helper to detect the nand type

2013-10-27 16:27:06 -07:00