From: Richard Weinberger <richard@nod.at>
Date: Sun, 21 Feb 2016 09:53:03 +0000 (+0100)
Subject: ubi: Fix out of bounds write in volume update code
X-Git-Tag: v3.2.79~6
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7aae79649d6a88e7104d4d22aa4ba21f4e699e40;p=pandora-kernel.git

ubi: Fix out of bounds write in volume update code

commit e4f6daac20332448529b11f09388f1d55ef2084c upstream.

ubi_start_leb_change() allocates too few bytes.
ubi_more_leb_change_data() will write up to req->upd_bytes +
ubi->min_io_size bytes.

Signed-off-by: Richard Weinberger <richard@nod.at>
Reviewed-by: Boris Brezillon <boris.brezillon@free-electrons.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---

Reading git-diff-tree failed