On Thu, Nov 22, 2012 at 04:48:09PM +0200, Artem Bityutskiy wrote: > On Thu, 2012-11-22 at 15:33 +0300, Dan Carpenter wrote: > > It's actually dn->size that we care about here. That's not checked > > in ubifs_check_node(). :( It may be checked somewhere else, I'm > > still looking. > > Wow, despite us trying to be very careful about validating what we read > from flash, it seems we indeed never validate 'size'... Let me invent a > fix for this, which should also be sent to -stable. > Thanks. Could you give me the Reported-by tag? regards, dan carpenter -- To unsubscribe from this list: send the line "unsubscribe kernel-janitors" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html