Richard Genoud 36de807400 mtd: nand: atmel: fix buffer overflow in atmel_pmecc_user ... When calculating the size needed by struct atmel_pmecc_user *user, the dmu and delta buffer sizes were forgotten. This lead to a memory corruption (especially with a large ecc_strength). Link: http://lkml.kernel.org/r/1506503157.3016.5.camel@gmail.com Fixes: f88fc122cc ("mtd: nand: Cleanup/rework the atmel_nand driver") Cc: stable@vger.kernel.org Reported-by: Richard Genoud <richard.genoud@gmail.com> Pointed-at-by: Boris Brezillon <boris.brezillon@free-electrons.com> Signed-off-by: Richard Genoud <richard.genoud@gmail.com> Reviewed-by: Nicolas Ferre <nicolas.ferre@microchip.com> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>		2017-09-27 17:33:28 +02:00
..
atmel	mtd: nand: atmel: fix buffer overflow in atmel_pmecc_user	2017-09-27 17:33:28 +02:00
bcm47xxnflash	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
brcmnand	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
gpmi-nand	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
ams-delta.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
au1550nd.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
bf5xx_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
cafe_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
cmx270_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
cs553x_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
davinci_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
denali_dt.c	mtd: nand: denali: Handle return value of clk_prepare_enable.	2017-08-23 16:49:18 +02:00
denali_pci.c	mtd: nand: denali: avoid magic numbers and rename for clarification	2017-06-20 09:14:57 +02:00
denali.c	linux/kernel.h: move DIV_ROUND_DOWN_ULL() macro	2017-09-08 18:26:47 -07:00
denali.h	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
diskonchip.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
docg4.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
fsl_elbc_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
fsl_ifc_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
fsl_upm.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
fsmc_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
gpio.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
hisi504_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
jz4740_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
jz4780_bch.c	mtd: nand: jz4780: Update MODULE_AUTHOR email address	2016-07-11 08:40:19 +02:00
jz4780_bch.h	mtd: nand: jz4780: driver for NAND devices on JZ4780 SoCs	2016-01-07 09:35:11 -08:00
jz4780_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
Kconfig	mtd: nand: pxa3xx_nand: enable building on mvebu 64-bit platforms	2017-08-23 16:49:18 +02:00
lpc32xx_mlc.c	mtd: nand: lpc32xx_mlc: Fix an error handling path in lpc32xx_nand_probe()	2017-09-18 12:07:30 +02:00
lpc32xx_slc.c	Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next	2017-08-23 17:00:12 +02:00
Makefile	mtd: nand: Cleanup/rework the atmel_nand driver	2017-04-25 14:18:29 +02:00
mpc5121_nfc.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
mtk_ecc.c	mtd: nand: mtk: fix error return code in mtk_ecc_probe()	2017-08-23 16:49:23 +02:00
mtk_ecc.h	mtd: nand: mediatek: add support for different MTK NAND FLASH Controller IP	2017-06-01 10:09:37 +02:00
mtk_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
mxc_nand.c	Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next	2017-08-23 17:00:12 +02:00
nand_amd.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
nand_base.c	mtd: nand: remove unused blockmask variable	2017-09-18 14:51:02 +02:00
nand_bbt.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
nand_bch.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
nand_ecc.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
nand_hynix.c	Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next	2017-08-23 17:00:12 +02:00
nand_ids.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
nand_macronix.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
nand_micron.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
nand_samsung.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
nand_timings.c	This pull request contains the following core changes:	2017-09-01 15:34:30 +02:00
nand_toshiba.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
nandsim.c	Merge branch 'work.set_fs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-09-14 18:13:32 -07:00
ndfc.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
nuc900_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
omap2.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
omap_elm.c	mtd: omap_elm: print interrupt resource using %pr	2015-12-18 10:16:17 -08:00
orion_nand.c	Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next	2017-08-23 17:00:12 +02:00
oxnas_nand.c	Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next	2017-08-23 17:00:12 +02:00
pasemi_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
plat_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
pxa3xx_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
qcom_nandc.c	Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next	2017-08-23 17:00:12 +02:00
r852.c	mtd: nand: make use of nand_set/get_controller_data() helpers	2016-01-07 10:23:41 -08:00
r852.h	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
s3c2410.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
sh_flctl.c	Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next	2017-08-23 17:00:12 +02:00
sharpsl.c	Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next	2017-08-23 17:00:12 +02:00
sm_common.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
sm_common.h	mtd: use __packed shorthand	2014-08-19 11:53:08 -07:00
socrates_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
sunxi_nand.c	This pull request contains the following core changes:	2017-09-01 15:34:30 +02:00
tango_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
tmio_nand.c	Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next	2017-08-23 17:00:12 +02:00
txx9ndfmc.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00
vf610_nfc.c	Merge branch 'nand/rename-header-file' of git://git.infradead.org/l2-mtd into nand/next	2017-08-23 17:00:12 +02:00
xway_nand.c	mtd: nand: Rename nand.h into rawnand.h	2017-08-13 10:11:49 +02:00