Re: [PATCH] UBI: Validate data_size

2015-09-25 Thread Richard Weinberger
Am 24.09.2015 um 12:37 schrieb David Gstir: > >> On 22.09.2015, at 23:58, Richard Weinberger wrote: >> >> Make sure that data_size is less than LEB size. >> Otherwise a handcrafted UBI image is able to trigger >> an out of bounds memory access in ubi_compare_lebs(). >> >> Cc: sta...@vger.kernel.o

Re: [PATCH] UBI: Validate data_size

2015-09-24 Thread David Gstir
> On 22.09.2015, at 23:58, Richard Weinberger wrote: > > Make sure that data_size is less than LEB size. > Otherwise a handcrafted UBI image is able to trigger > an out of bounds memory access in ubi_compare_lebs(). > > Cc: sta...@vger.kernel.org > Signed-off-by: Richard Weinberger > --- > dri