mirror of https://github.com/torvalds/linux.git
70a71f8151
The function do_otp_read() does not set the output parameter *retlen,
which is expected to contain the number of bytes actually read.
As a result, in onenand_otp_walk(), the tmp_retlen variable remains
uninitialized after calling do_otp_walk() and used to change
the values of the buf, len and retlen variables.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Fixes:
|
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| generic.c | ||
| onenand_base.c | ||
| onenand_bbt.c | ||
| onenand_omap2.c | ||
| onenand_samsung.c | ||
| samsung.h | ||