u-boot/fs/fat
Stefano Babic 11c8dd36ed FAT: buffer overflow with FAT12/16
Last commit 3831530dcb7b71329c272ccd6181f8038b6a6dd0a was intended
"explicitly specify FAT12/16 root directory parsing buffer size, instead
of relying on cluster size". Howver, the underlying function requires
the size of the buffer in blocks, not in bytes, and instead of passing
a double sector size a request for 1024 blocks is sent. This generates
a buffer overflow with overwriting of other structure (in the case seen,
USB structures were overwritten).

Signed-off-by: Stefano Babic <sbabic@denx.de>
CC: Mikhail Zolotaryov <lebon@lebon.org.ua>
2010-10-20 09:14:38 +02:00
..
fat.c FAT: buffer overflow with FAT12/16 2010-10-20 09:14:38 +02:00
file.c fs/fat: Big code cleanup. 2010-07-24 20:54:46 +02:00
Makefile fs: Move conditional compilation to Makefile 2008-08-31 04:24:56 +02:00