diff options
| author | Richard Genoud <[email protected]> | 2012-09-12 14:26:26 +0200 |
|---|---|---|
| committer | David Woodhouse <[email protected]> | 2012-09-29 15:54:12 +0100 |
| commit | bb0a13a13411c4ce24c48c8ff3cdf7b48d237240 (patch) | |
| tree | 595cbf4572ee949f58ccfc0337fb43f78101f49d | |
| parent | 5bf3d66a933efb71fa6db08a5043a617b6eadb4a (diff) | |
mtd: nandsim: bugfix: fail if overridesize is too big
If override size is too big, the module was actually loaded instead of
failing, because retval was not set.
This lead to memory corruption with the use of the freed structs nandsim
and nand_chip.
Cc: [email protected]
Signed-off-by: Richard Genoud <[email protected]>
Signed-off-by: Artem Bityutskiy <[email protected]>
Signed-off-by: David Woodhouse <[email protected]>
| -rw-r--r-- | drivers/mtd/nand/nandsim.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/mtd/nand/nandsim.c b/drivers/mtd/nand/nandsim.c index 21e64b5d352b..a932c485eb04 100644 --- a/drivers/mtd/nand/nandsim.c +++ b/drivers/mtd/nand/nandsim.c @@ -2317,6 +2317,7 @@ static int __init ns_init_module(void) uint64_t new_size = (uint64_t)nsmtd->erasesize << overridesize; if (new_size >> overridesize != nsmtd->erasesize) { NS_ERR("overridesize is too big\n"); + retval = -EINVAL; goto err_exit; } /* N.B. This relies on nand_scan not doing anything with the size before we change it */ |