Richard Genoud 36de807400 mtd: nand: atmel: fix buffer overflow in atmel_pmecc_user ...

When calculating the size needed by struct atmel_pmecc_user *user,
the dmu and delta buffer sizes were forgotten.
This lead to a memory corruption (especially with a large ecc_strength).

Link: http://lkml.kernel.org/r/1506503157.3016.5.camel@gmail.com
Fixes: f88fc122cc ("mtd: nand: Cleanup/rework the atmel_nand driver")
Cc: stable@vger.kernel.org
Reported-by: Richard Genoud <richard.genoud@gmail.com>
Pointed-at-by: Boris Brezillon <boris.brezillon@free-electrons.com>
Signed-off-by: Richard Genoud <richard.genoud@gmail.com>
Reviewed-by: Nicolas Ferre <nicolas.ferre@microchip.com>
Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>

2017-09-27 17:33:28 +02:00

..

chips

mtd: cfi_cmdset_0020: Drop unnecessary static

2017-05-11 11:49:20 -07:00

devices

Merge tag 'nand/for-4.14' of git://git.infradead.org/l2-mtd into mtd/next

2017-09-01 15:34:30 +02:00

lpddr

…

maps

Merge branch '4.14-features' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus

2017-09-15 20:43:33 -07:00

nand

mtd: nand: atmel: fix buffer overflow in atmel_pmecc_user

2017-09-27 17:33:28 +02:00

onenand

…

parsers

mtd: parsers: trx: fix pr_err format for printing offset

2017-06-23 10:47:54 -07:00

spi-nor

mtd: spi-nor: fix DMA unsafe buffer issue in spi_nor_read_sfdp()

2017-09-18 09:53:27 +02:00

tests

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

ubi

UBI: Fix two typos in comments

2017-09-13 22:05:30 +02:00

afs.c

…

ar7part.c

…

bcm47xxpart.c

mtd: extract TRX parser out of bcm47xxpart into a separated module

2017-06-22 13:13:10 -07:00

bcm63xxpart.c

…

cmdlinepart.c

…

ftl.c

…

inftlcore.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

inftlmount.c

…

Kconfig

mtd: extract TRX parser out of bcm47xxpart into a separated module

2017-06-22 13:13:10 -07:00

Makefile

mtd: extract TRX parser out of bcm47xxpart into a separated module

2017-06-22 13:13:10 -07:00

mtd_blkdevs.c

mtd: blkdevs: Fix mtd block write failure

2017-08-12 14:53:24 -07:00

mtdblock_ro.c

…

mtdblock.c

…

mtdchar.c

…

mtdconcat.c

…

mtdcore.c

mtd: make device_type const

2017-08-21 14:33:50 +02:00

mtdcore.h

…

mtdoops.c

…

mtdpart.c

mtd: Fix partition alignment check on multi-erasesize devices

2017-09-27 13:53:20 +02:00

mtdsuper.c

fs: Remove SB_I_DYNBDI flag

2017-04-20 12:09:55 -06:00

mtdswap.c

mtd: mtdswap: remove unused variables 'dev' and 'gd'

2017-07-24 17:04:33 -07:00

nftlcore.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

nftlmount.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

ofpart.c

mtd: Convert to using %pOF instead of full_name

2017-08-15 14:00:43 +02:00

redboot.c

…

rfd_ftl.c

…

sm_ftl.c

…

sm_ftl.h

…

ssfdc.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00