| commit | 281fda27673f833a01d516658a64d22a32c8e072 | [log] [tgz] |
|---|---|---|
| author | Richard Weinberger <richard@nod.at> | Tue Sep 22 23:58:07 2015 +0200 |
| committer | Richard Weinberger <richard@nod.at> | Tue Sep 29 12:47:04 2015 +0200 |
| tree | b00db9a22f925bc2156238f0065b0b4525b2ef5e | |
| parent | cf6f54e3f133229f02a90c04fe0ff9dd9d3264b4 [diff] |
UBI: Validate data_size Make sure that data_size is less than LEB size. Otherwise a handcrafted UBI image is able to trigger an out of bounds memory access in ubi_compare_lebs(). Cc: stable@vger.kernel.org Signed-off-by: Richard Weinberger <richard@nod.at> Reviewed-by: David Gstir <david@sigma-star.at>