mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-09-04 20:19:47 +08:00
![]() The function do_otp_read() does not set the output parameter *retlen,
which is expected to contain the number of bytes actually read.
As a result, in onenand_otp_walk(), the tmp_retlen variable remains
uninitialized after calling do_otp_walk() and used to change
the values of the buf, len and retlen variables.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Fixes:
|
||
---|---|---|
.. | ||
generic.c | ||
Kconfig | ||
Makefile | ||
onenand_base.c | ||
onenand_bbt.c | ||
onenand_omap2.c | ||
onenand_samsung.c | ||
samsung.h |