mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2025-08-18 03:39:02 +00:00
![]() The function do_otp_read() does not set the output parameter *retlen,
which is expected to contain the number of bytes actually read.
As a result, in onenand_otp_walk(), the tmp_retlen variable remains
uninitialized after calling do_otp_walk() and used to change
the values of the buf, len and retlen variables.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Fixes:
|
||
---|---|---|
.. | ||
generic.c | ||
Kconfig | ||
Makefile | ||
onenand_base.c | ||
onenand_bbt.c | ||
onenand_omap2.c | ||
onenand_samsung.c | ||
samsung.h |