bug in drivers/mtd/onenand/onenand_base.c?

Adrian Hunter ext-adrian.hunter at nokia.com
Thu Mar 22 06:40:07 EDT 2007


ext Artem Bityutskiy wrote:
> On Thu, 2007-03-22 at 12:36 +0300, Vitaly Wool wrote:
>> The problem is, the entry of oobfree past the last valid 
>> one should have length 0.
>>
>> Here it's not the case: all the entries are occupied by 
>> OOB chunks. Therefore, once we get into a loop like
>>
>>         for (free = this->ecclayout->oobfree; free->length; ++free) {
>>
>> we might end up scanning past the real oobfree array.
> 
> We have this fixed in OneNAND.
> 

No we don't

I thought Kyungmin Park was going to fix it 
(see http://lists.infradead.org/pipermail/linux-mtd/2007-February/017479.html)
, then I forgot about it, sorry :-(









More information about the linux-mtd mailing list