u-boot/fs
Stefan Brüns 0ceef3d371 ext4: Avoid out-of-bounds access of block bitmap
If the blocksize is 1024, count is initialized with 1. Incrementing count
by 8 will never match (count == fs->blksz * 8), and ptr may be
incremented beyond the buffer end if the bitmap is filled. Add the
startblock offset after the loop.

Remove the second loop, as only the first iteration will be done.

Signed-off-by: Stefan Brüns <stefan.bruens@rwth-aachen.de>
Reviewed-by: Lukasz Majewski <l.majewski@samsung.com>
2016-09-23 09:02:40 -04:00
..
cbfs cbfs: Fix incorrect CBFS file header size being used 2016-08-16 11:44:09 +08:00
cramfs kconfig: add blank Kconfig files 2014-09-24 18:30:28 -04:00
ext4 ext4: Avoid out-of-bounds access of block bitmap 2016-09-23 09:02:40 -04:00
fat fs/fat: Correct description of determine_fatent function 2016-09-23 08:55:57 -04:00
jffs2 nand: Embed mtd_info in struct nand_chip 2016-06-03 20:27:48 -05:00
reiserfs dm: Drop the block_dev_desc_t typedef 2016-03-14 15:34:50 -06:00
sandbox dm: Drop the block_dev_desc_t typedef 2016-03-14 15:34:50 -06:00
ubifs ubifs: fix memory corruption in super.c 2016-04-22 11:48:17 +02:00
yaffs2 mtd: nand: Add+use mtd_to/from_nand and nand_get/set_controller_data 2016-06-03 20:27:48 -05:00
zfs dm: Drop the block_dev_desc_t typedef 2016-03-14 15:34:50 -06:00
fs.c dm: blk: Rename get_device_and_partition() 2016-03-14 15:34:50 -06:00
Kconfig kconfig: add blank Kconfig files 2014-09-24 18:30:28 -04:00
Makefile spl: Add EXT support to SPL 2014-10-27 17:54:03 -04:00