[patch] UBIFS: use kmalloc_array() in recomp_data_node()
Dan Carpenter
dan.carpenter at oracle.com
Thu Nov 22 11:41:54 EST 2012
On Thu, Nov 22, 2012 at 04:48:09PM +0200, Artem Bityutskiy wrote:
> On Thu, 2012-11-22 at 15:33 +0300, Dan Carpenter wrote:
> > It's actually dn->size that we care about here. That's not checked
> > in ubifs_check_node(). :( It may be checked somewhere else, I'm
> > still looking.
>
> Wow, despite us trying to be very careful about validating what we read
> from flash, it seems we indeed never validate 'size'... Let me invent a
> fix for this, which should also be sent to -stable.
>
Thanks. Could you give me the Reported-by tag?
regards,
dan carpenter
More information about the linux-mtd
mailing list