Commit 868801e5 authored Nov 05, 2005 by Todd Poynor Committed by Thomas Gleixner Nov 07, 2005

[MTD] NAND: nand_write_ecc memory and OOB corruption



Nathan Roberts noticed the nand_write_ecc index into oobbuf goes out of
bounds when crossing an erase block boundary, causing incorrect OOB data
to be written and corrupting memory.  Reset the index to zero after
re-preparing oobbuf for a new erase block.

Signed-off-by: Todd Poynor <tpoynor@mvista.com>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>

parent 49196f33

drivers/mtd/nand/nand_base.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -1722,6 +1722,7 @@ static int nand_write_ecc (struct mtd_info *mtd, loff_t to, size_t len,
		startpage = page;
		oobbuf = nand_prepare_oobbuf (mtd, eccbuf, oobsel,
		autoplace, numpages);
		oob = 0;
		/* Check, if we cross a chip boundary */
		if (!page) {
		chipnr++;

Admin message