Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 957c9840 authored by Sahitya Tummala's avatar Sahitya Tummala
Browse files

mtd: msm_qpic_nand: Fix buffer overflow issue 



Correct the size argument passed to memset() in function
msm_nand_block_isbad() to fix buffer overflow issue.

CRs-fixed: 561236
Change-Id: I1c664ef529a42901d1f3d5d1d7b747cf58f886b6
Signed-off-by: default avatarSahitya Tummala <stummala@codeaurora.org>
parent c936945a

drivers/mtd/devices/msm_qpic_nand.c

+1 −1
Original line number Diff line number Diff line
@@ -2176,7 +2176,7 @@ static int msm_nand_block_isbad(struct mtd_info *mtd, loff_t ofs) 
	buf = (uint8_t *)dma_buffer + sizeof(*dma_buffer);



	cmd = dma_buffer->cmd;

	memset(&data, 0, sizeof(struct msm_nand_erase_reg_data));

	memset(&data, 0, sizeof(struct msm_nand_blk_isbad_data));

	data.cfg.cmd = MSM_NAND_CMD_PAGE_READ_ALL;

	data.cfg.cfg0 = chip->cfg0_raw & ~(7U << CW_PER_PAGE);

	data.cfg.cfg1 = chip->cfg1_raw;