Searched hist:b1d6590d357bde2332cb699e2fd2efc7a7c64f38 (Results 1 – 1 of 1) sorted by relevance
| /rk3399_rockchip-uboot/fs/ubifs/ |
| H A D | super.c | b1d6590d357bde2332cb699e2fd2efc7a7c64f38 Thu Apr 21 10:16:58 UTC 2016 Heiko Schocher <hs@denx.de> ubifs: fix memory corruption in super.c
In list "super_blocks" ubifs collects allocated super_block structs. U-Boot frees on unmount the allocated struct, so the pointer stored in this list is free after the umount. On a new ubifs mount, the new allocated super_block struct get inserted into the super_blocks list ... which contains now a freed pointer, and the list_add_tail() corrupts the freed memory ...
2 solutions are possible: - remove the super_block from the super_blocks list on umount
- as U-Boot does not use the super_blocks list ... remove it complete for U-Boot.
Both solutions should not introduce problems for porting to newer linux version, so this patch removes the unused super_blocks list, as it saves code size and execution time.
Signed-off-by: Heiko Schocher <hs@denx.de>
|