Richard Genoud 36de807400 mtd: nand: atmel: fix buffer overflow in atmel_pmecc_user ...

When calculating the size needed by struct atmel_pmecc_user *user,
the dmu and delta buffer sizes were forgotten.
This lead to a memory corruption (especially with a large ecc_strength).

Link: http://lkml.kernel.org/r/1506503157.3016.5.camel@gmail.com
Fixes: f88fc122cc ("mtd: nand: Cleanup/rework the atmel_nand driver")
Cc: stable@vger.kernel.org
Reported-by: Richard Genoud <richard.genoud@gmail.com>
Pointed-at-by: Boris Brezillon <boris.brezillon@free-electrons.com>
Signed-off-by: Richard Genoud <richard.genoud@gmail.com>
Reviewed-by: Nicolas Ferre <nicolas.ferre@microchip.com>
Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>

2017-09-27 17:33:28 +02:00

..

atmel

mtd: nand: atmel: fix buffer overflow in atmel_pmecc_user

2017-09-27 17:33:28 +02:00

bcm47xxnflash

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

brcmnand

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

gpmi-nand

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

ams-delta.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

au1550nd.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

bf5xx_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

cafe_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

cmx270_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

cs553x_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

davinci_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

denali_dt.c

mtd: nand: denali: Handle return value of clk_prepare_enable.

2017-08-23 16:49:18 +02:00

denali_pci.c

mtd: nand: denali: avoid magic numbers and rename for clarification

2017-06-20 09:14:57 +02:00

denali.c

linux/kernel.h: move DIV_ROUND_DOWN_ULL() macro

2017-09-08 18:26:47 -07:00

denali.h

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

diskonchip.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

docg4.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

fsl_elbc_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

fsl_ifc_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

fsl_upm.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

fsmc_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

gpio.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

hisi504_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

jz4740_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

jz4780_bch.c

mtd: nand: jz4780: Update MODULE_AUTHOR email address

2016-07-11 08:40:19 +02:00

jz4780_bch.h

mtd: nand: jz4780: driver for NAND devices on JZ4780 SoCs

2016-01-07 09:35:11 -08:00

jz4780_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

Kconfig

mtd: nand: pxa3xx_nand: enable building on mvebu 64-bit platforms

2017-08-23 16:49:18 +02:00

lpc32xx_mlc.c

mtd: nand: lpc32xx_mlc: Fix an error handling path in lpc32xx_nand_probe()

2017-09-18 12:07:30 +02:00

lpc32xx_slc.c

Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next

2017-08-23 17:00:12 +02:00

Makefile

mtd: nand: Cleanup/rework the atmel_nand driver

2017-04-25 14:18:29 +02:00

mpc5121_nfc.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

mtk_ecc.c

mtd: nand: mtk: fix error return code in mtk_ecc_probe()

2017-08-23 16:49:23 +02:00

mtk_ecc.h

mtd: nand: mediatek: add support for different MTK NAND FLASH Controller IP

2017-06-01 10:09:37 +02:00

mtk_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

mxc_nand.c

Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next

2017-08-23 17:00:12 +02:00

nand_amd.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

nand_base.c

mtd: nand: remove unused blockmask variable

2017-09-18 14:51:02 +02:00

nand_bbt.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

nand_bch.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

nand_ecc.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

nand_hynix.c

Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next

2017-08-23 17:00:12 +02:00

nand_ids.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

nand_macronix.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

nand_micron.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

nand_samsung.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

nand_timings.c

Merge tag 'nand/for-4.14' of git://git.infradead.org/l2-mtd into mtd/next

2017-09-01 15:34:30 +02:00

nand_toshiba.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

nandsim.c

Merge branch 'work.set_fs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2017-09-14 18:13:32 -07:00

ndfc.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

nuc900_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

omap2.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

omap_elm.c

mtd: omap_elm: print interrupt resource using %pr

2015-12-18 10:16:17 -08:00

orion_nand.c

Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next

2017-08-23 17:00:12 +02:00

oxnas_nand.c

Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next

2017-08-23 17:00:12 +02:00

pasemi_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

plat_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

pxa3xx_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

qcom_nandc.c

Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next

2017-08-23 17:00:12 +02:00

r852.c

mtd: nand: make use of nand_set/get_controller_data() helpers

2016-01-07 10:23:41 -08:00

r852.h

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

s3c2410.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

sh_flctl.c

Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next

2017-08-23 17:00:12 +02:00

sharpsl.c

Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next

2017-08-23 17:00:12 +02:00

sm_common.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

sm_common.h

mtd: use __packed shorthand

2014-08-19 11:53:08 -07:00

socrates_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

sunxi_nand.c

Merge tag 'nand/for-4.14' of git://git.infradead.org/l2-mtd into mtd/next

2017-09-01 15:34:30 +02:00

tango_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

tmio_nand.c

Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next

2017-08-23 17:00:12 +02:00

txx9ndfmc.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00

vf610_nfc.c

Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next

2017-08-23 17:00:12 +02:00

xway_nand.c

mtd: nand: Rename nand.h into rawnand.h

2017-08-13 10:11:49 +02:00