android_kernel_motorola_sm6375/drivers/mtd
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Ivan Stepchenko 2535f15d31 mtd: onenand: Fix uninitialized retlen in do_otp_read()
commit 70a71f8151b9879b0950668ce3ad76263261fee0 upstream.

The function do_otp_read() does not set the output parameter *retlen,
which is expected to contain the number of bytes actually read.
As a result, in onenand_otp_walk(), the tmp_retlen variable remains
uninitialized after calling do_otp_walk() and used to change
the values of the buf, len and retlen variables.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 49dc08eeda ("[MTD] [OneNAND] fix numerous races")
Cc: stable@vger.kernel.org
Signed-off-by: Ivan Stepchenko <sid@itb.spb.ru>
Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-03-13 12:43:11 +01:00
..
chips mtd: cfi_cmdset_0001: Byte swap OTP info 2023-12-08 08:44:27 +01:00
devices mtd: powernv: Add check devm_kasprintf() returned value 2024-11-08 16:20:28 +01:00
hyperbus
lpddr
maps mtd: maps: physmap-core: fix flash size larger than 32-bit 2024-03-26 18:22:21 -04:00
nand mtd: onenand: Fix uninitialized retlen in do_otp_read() 2025-03-13 12:43:11 +01:00
parsers mtd: partitions: redboot: Added conversion of operands to a larger type 2024-07-05 09:08:27 +02:00
spi-nor
tests mtd: make mtd_test.c a separate module 2024-08-19 05:33:33 +02:00
ubi ubi: fastmap: Fix duplicate slab cache names while attaching 2024-12-14 19:44:40 +01:00
ftl.c
inftlcore.c
inftlmount.c
Kconfig
Makefile
mtd_blkdevs.c mtd: Fix gluebi NULL pointer dereference caused by ftl notifier 2024-01-25 14:34:23 -08:00
mtdblock.c
mtdblock_ro.c
mtdchar.c
mtdconcat.c
mtdcore.c
mtdcore.h
mtdoops.c
mtdpart.c
mtdsuper.c
mtdswap.c
nftlcore.c
nftlmount.c
rfd_ftl.c
sm_ftl.c
sm_ftl.h
ssfdc.c