Richard Weinberger e4f6daac20 ubi: Fix out of bounds write in volume update code ...

ubi_start_leb_change() allocates too few bytes.
ubi_more_leb_change_data() will write up to req->upd_bytes +
ubi->min_io_size bytes.

Cc: stable@vger.kernel.org
Signed-off-by: Richard Weinberger <richard@nod.at>
Reviewed-by: Boris Brezillon <boris.brezillon@free-electrons.com>

2016-03-05 21:56:23 +01:00

..

chips

mtd: cfi_cmdset_0001: fixing memory leak and handling failed kmalloc

2016-01-06 17:23:10 -08:00

devices

mtd: m25p80: replace leftover "nor-jedec" with "spi-nor" in comments

2015-11-19 16:46:49 -08:00

lpddr

…

maps

MTD updates for v4.5:

2016-01-13 11:25:54 -08:00

nand

mtd: jz4780_nand: replace if/else blocks with switch/case

2016-01-08 09:49:03 -08:00

onenand

…

spi-nor

mtd: spi-nor: wait until lock/unlock operations are ready

2016-01-06 17:18:34 -08:00

tests

mtd: tests: consolidate kmalloc/memset 0 call to kzalloc

2016-01-06 15:17:42 -08:00

ubi

ubi: Fix out of bounds write in volume update code

2016-03-05 21:56:23 +01:00

afs.c

mtd: partitions: make parsers return 'const' partition arrays

2015-12-09 10:21:57 -08:00

ar7part.c

mtd: partitions: make parsers return 'const' partition arrays

2015-12-09 10:21:57 -08:00

bcm47xxpart.c

mtd: partitions: make parsers return 'const' partition arrays

2015-12-09 10:21:57 -08:00

bcm63xxpart.c

Merge branch 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus

2016-01-24 12:50:56 -08:00

cmdlinepart.c

mtd: partitions: make parsers return 'const' partition arrays

2015-12-09 10:21:57 -08:00

ftl.c

mtd: ftl: use swap() in copy_erase_unit()

2015-12-18 16:56:07 -08:00

inftlcore.c

…

inftlmount.c

…

Kconfig

…

Makefile

…

mtd_blkdevs.c

…

mtdblock_ro.c

…

mtdblock.c

…

mtdchar.c

…

mtdconcat.c

…

mtdcore.c

mtd: merge MTD development from v4.4 into for-v4.5 development

2016-01-05 16:05:56 -08:00

mtdcore.h

mtd: partitions: support a cleanup callback for parsers

2015-12-09 14:57:44 -08:00

mtdoops.c

…

mtdpart.c

mtd: partitions: support a cleanup callback for parsers

2015-12-09 14:57:44 -08:00

mtdsuper.c

…

mtdswap.c

…

nftlcore.c

…

nftlmount.c

…

ofpart.c

mtd: partitions: make parsers return 'const' partition arrays

2015-12-09 10:21:57 -08:00

redboot.c

mtd: partitions: make parsers return 'const' partition arrays

2015-12-09 10:21:57 -08:00

rfd_ftl.c

…

sm_ftl.c

…

sm_ftl.h

…

ssfdc.c

…