aboutsummaryrefslogtreecommitdiff
path: root/drivers/mtd/ubi/io.c
Commit message (Collapse)AuthorAgeFilesLines
* UBI: Validate data_sizeRichard Weinberger2016-08-261-0/+5
| | | | | | | | | | | | | commit 281fda27673f833a01d516658a64d22a32c8e072 upstream. Make sure that data_size is less than LEB size. Otherwise a handcrafted UBI image is able to trigger an out of bounds memory access in ubi_compare_lebs(). Signed-off-by: Richard Weinberger <richard@nod.at> Reviewed-by: David Gstir <david@sigma-star.at> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Stefan Guendhoer <stefan@guendhoer.com>
* first commitMeizu OpenSource2016-08-151-0/+1590