Re: [PATCH] UBI: Validate data_size

2015-09-25 Thread Richard Weinberger
Am 24.09.2015 um 12:37 schrieb David Gstir: > >> On 22.09.2015, at 23:58, Richard Weinberger wrote: >> >> Make sure that data_size is less than LEB size. >> Otherwise a handcrafted UBI image is able to trigger >> an out of bounds memory access in ubi_compare_lebs(). >> >> Cc: sta...@vger.kernel.o

Re: [PATCH] UBI: Validate data_size

2015-09-24 Thread David Gstir
> On 22.09.2015, at 23:58, Richard Weinberger wrote: > > Make sure that data_size is less than LEB size. > Otherwise a handcrafted UBI image is able to trigger > an out of bounds memory access in ubi_compare_lebs(). > > Cc: sta...@vger.kernel.org > Signed-off-by: Richard Weinberger > --- > dri

[PATCH] UBI: Validate data_size

2015-09-22 Thread Richard Weinberger
Make sure that data_size is less than LEB size. Otherwise a handcrafted UBI image is able to trigger an out of bounds memory access in ubi_compare_lebs(). Cc: sta...@vger.kernel.org Signed-off-by: Richard Weinberger --- drivers/mtd/ubi/io.c | 5 + 1 file changed, 5 insertions(+) diff --git