diff options
| author | Stefan Brüns <stefan.bruens@rwth-aachen.de> | 2016-09-06 04:36:50 +0200 |
|---|---|---|
| committer | Tom Rini <trini@konsulko.com> | 2016-09-23 09:02:40 -0400 |
| commit | 0ceef3d3710960347fde6c57f12f3de6fe9cfaaf (patch) | |
| tree | 72cac3cf807debecfaffe262c6d6994667a88edd /configs/vexpress_ca9x4_defconfig | |
| parent | a9fa0ed183b7e156db0c711f2aad8d573fae3498 (diff) | |
| download | u-boot-imx-0ceef3d3710960347fde6c57f12f3de6fe9cfaaf.zip u-boot-imx-0ceef3d3710960347fde6c57f12f3de6fe9cfaaf.tar.gz u-boot-imx-0ceef3d3710960347fde6c57f12f3de6fe9cfaaf.tar.bz2 | |
ext4: Avoid out-of-bounds access of block bitmap
If the blocksize is 1024, count is initialized with 1. Incrementing count
by 8 will never match (count == fs->blksz * 8), and ptr may be
incremented beyond the buffer end if the bitmap is filled. Add the
startblock offset after the loop.
Remove the second loop, as only the first iteration will be done.
Signed-off-by: Stefan Brüns <stefan.bruens@rwth-aachen.de>
Reviewed-by: Lukasz Majewski <l.majewski@samsung.com>
Diffstat (limited to 'configs/vexpress_ca9x4_defconfig')
0 files changed, 0 insertions, 0 deletions