Richard Weinberger e4f6daac20 ubi: Fix out of bounds write in volume update code
ubi_start_leb_change() allocates too few bytes.
ubi_more_leb_change_data() will write up to req->upd_bytes +
ubi->min_io_size bytes.

Cc: stable@vger.kernel.org
Signed-off-by: Richard Weinberger <richard@nod.at>
Reviewed-by: Boris Brezillon <boris.brezillon@free-electrons.com>
2016-03-05 21:56:23 +01:00
..
2016-01-13 11:25:54 -08:00
2015-11-10 17:56:05 -08:00
2014-04-14 11:23:01 -07:00
2015-02-18 08:01:44 -08:00
2014-08-19 11:53:08 -07:00
2014-03-10 22:42:25 -07:00
2015-11-16 15:07:16 -08:00