Richard Weinberger 189a87d73a ubifs: wbuf: Don't leak kernel memory to flash ...

commit 20f1431160 upstream

Write buffers use a kmalloc()'ed buffer, they can leak
up to seven bytes of kernel memory to flash if writes are not
aligned.
So use ubifs_pad() to fill these gaps with padding bytes.
This was never a problem while scanning because the scanner logic
manually aligns node lengths and skips over these gaps.

Cc: <stable@vger.kernel.org>
Fixes: 1e51764a3c ("UBIFS: add new flash file system")
Signed-off-by: Richard Weinberger <richard@nod.at>
Reviewed-by: Zhihao Cheng <chengzhihao1@huawei.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
[sudip: adjust context]
Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-16 10:26:05 +09:00

..

budget.c

UBIFS: extend debug/message capabilities

2015-03-25 11:08:41 +02:00

commit.c

UBIFS: extend debug/message capabilities

2015-03-25 11:08:41 +02:00

compress.c

UBIFS: extend debug/message capabilities

2015-03-25 11:08:41 +02:00

debug.c

ubifs: dent: Fix some potential memory leaks while iterating entries

2023-05-16 09:45:33 +09:00

debug.h

UBIFS: print less

2012-08-31 17:32:58 +03:00

dir.c

ubifs: Fix O_TMPFILE corner case in ubifs_link()

2017-04-27 09:10:38 +02:00

file.c

ubifs: Fix deadlock in concurrent bulk-read and writepage

2023-05-15 16:55:42 +09:00

find.c

UBIFS: fix mounting problems after power cuts

2012-10-26 16:26:44 +03:00

gc.c

UBIFS: improve function-level documentation

2016-10-02 22:55:02 +02:00

io.c

ubifs: wbuf: Don't leak kernel memory to flash

2023-05-16 10:26:05 +09:00

ioctl.c

UBIFS: extend debug/message capabilities

2015-03-25 11:08:41 +02:00

journal.c

ubifs: Fix synced_i_size calculation for xattr inodes

2023-05-12 17:24:32 +09:00

Kconfig

ubifs: introduce UBIFS_ATIME_SUPPORT to ubifs

2015-11-07 11:35:08 +01:00

key.h

UBIFS: add a comment in key.h for unused parameter

2016-01-10 12:33:30 +01:00

log.c

UBIFS: extend debug/message capabilities

2015-03-25 11:08:41 +02:00

lprops.c

ubifs: Fix memory leak in lprobs self-check

2023-05-12 17:24:25 +09:00

lpt_commit.c

UBIFS: improve function-level documentation

2016-10-02 22:55:02 +02:00

lpt.c

UBIFS: use kmemdup rather than duplicating its implementation

2015-10-03 20:03:14 +02:00

Makefile

ubifs: Add logging functions for ubifs_msg, ubifs_err and ubifs_warn

2016-03-20 21:36:05 +01:00

master.c

UBIFS: extend debug/message capabilities

2015-03-25 11:08:41 +02:00

misc.c

ubifs: Add logging functions for ubifs_msg, ubifs_err and ubifs_warn

2016-03-20 21:36:05 +01:00

misc.h

fs/ubifs: remove unnecessary new_valid_dev check

2015-11-06 23:26:48 +01:00

orphan.c

UBIFS: extend debug/message capabilities

2015-03-25 11:08:41 +02:00

recovery.c

UBIFS: Delete unnecessary checks before the function call "iput"

2015-11-06 23:26:52 +01:00

replay.c

ubifs: Handle re-linking of inodes correctly while recovery

2023-05-15 10:45:32 +09:00

sb.c

lib/uuid.c: move generate_random_uuid() to uuid.c

2016-05-20 17:58:30 -07:00

scan.c

UBIFS: extend debug/message capabilities

2015-03-25 11:08:41 +02:00

shrinker.c

UBIFS: Remove incorrect assertion in shrink_tnc()

2014-06-02 11:28:24 +03:00

super.c

ubifs: Check for name being NULL while mounting

2023-05-15 08:58:13 +09:00

tnc_commit.c

ubifs: Fix assertion in layout_in_gaps()

2016-08-23 23:02:40 +02:00

tnc_misc.c

UBIFS: extend debug/message capabilities

2015-03-25 11:08:41 +02:00

tnc.c

ubifs: Fix journal replay wrt. xattr nodes

2017-01-26 08:24:40 +01:00

ubifs-media.h

UBIFS: add a superblock flag for free space fix-up

2011-05-16 14:12:14 +03:00

ubifs.h

ubifs: Implement RENAME_EXCHANGE

2016-10-02 22:55:02 +02:00

xattr.c

ubifs: Massage assert in ubifs_xattr_set() wrt. init_xattrs

2018-02-17 13:21:14 +01:00