From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754017AbcEBOpF (ORCPT ); Mon, 2 May 2016 10:45:05 -0400 Received: from mail.linuxfoundation.org ([140.211.169.12]:47355 "EHLO mail.linuxfoundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752211AbcEBOpA (ORCPT ); Mon, 2 May 2016 10:45:00 -0400 Date: Mon, 2 May 2016 07:44:58 -0700 From: Greg Kroah-Hartman To: Stefan Wahren Cc: Srinivas Kandagatla , Stanislav Meduna , linux-kernel@vger.kernel.org, "linux-arm-kernel@lists.infradead.org" , Maxime Ripard Subject: Re: [PATCH v2] nvmem/mxs-ocotp: fix buffer overflow in read Message-ID: <20160502144458.GA15555@kroah.com> References: <1f26dfe5-c75f-39df-e21e-77aeea408258@meduna.org> <57275C69.9060902@i2se.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <57275C69.9060902@i2se.com> User-Agent: Mutt/1.6.0 (2016-04-01) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, May 02, 2016 at 03:55:53PM +0200, Stefan Wahren wrote: > Hi Srinivas, > hi Greg, > > Am 27.04.2016 um 14:39 schrieb Stanislav Meduna: > > This patch fixes the issue where the mxs_ocotp_read is reading > > the ocotp in reg_size steps but decrements the remaining size > > by 1. The number of iterations is thus four times higher, > > overwriting the area behind the output buffer. > > > > Fixes: c01e9a11ab6f ("nvmem: add driver for ocotp in i.MX23 and i.MX28") > > Tested-by: Stefan Wahren > > Signed-off-by: Stanislav Meduna > > any change to get this critical fix into 4.6? This is the first I've seen this patch :( Can you resend it in a format I can apply it in? thanks, greg k-h