Richard Weinberger ccebbb7e53 UBI: Fix double free after do_sync_erase() ...

commit aa5ad3b6eb8feb2399a5d26c8fb0060561bb9534 upstream.

If the erase worker is unable to erase a PEB it will
free the ubi_wl_entry itself.
The failing ubi_wl_entry must not free()'d again after
do_sync_erase() returns.

Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Artem Bityutskiy <artem.bityutskiy@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2015-01-16 06:59:01 -08:00

..

chips

…

devices

…

lpddr

…

maps

…

nand

mtd: nand: omap: Fix 1-bit Hamming code scheme, omap_calculate_ecc()

2014-09-17 09:04:02 -07:00

onenand

…

tests

…

ubi

UBI: Fix double free after do_sync_erase()

2015-01-16 06:59:01 -08:00

afs.c

…

ar7part.c

…

bcm47xxpart.c

…

bcm63xxpart.c

…

cmdlinepart.c

…

ftl.c

mtd/ftl: fix the double free of the buffers allocated in build_maps()

2014-09-17 09:04:02 -07:00

inftlcore.c

…

inftlmount.c

…

Kconfig

…

Makefile

…

mtd_blkdevs.c

…

mtdblock_ro.c

…

mtdblock.c

…

mtdchar.c

…

mtdconcat.c

…

mtdcore.c

…

mtdcore.h

…

mtdoops.c

…

mtdpart.c

…

mtdsuper.c

…

mtdswap.c

…

nftlcore.c

…

nftlmount.c

…

ofpart.c

…

redboot.c

…

rfd_ftl.c

…

sm_ftl.c

mtd: sm_ftl: heap corruption in sm_create_sysfs_attributes()

2014-05-13 13:59:45 +02:00

sm_ftl.h

…

ssfdc.c

…