]> www.infradead.org Git - mtd-utils.git/commit
nand-utils: Fix integer overflow in nandflipbits.c
authorAnton Moryakov <ant.v.moryakov@gmail.com>
Sat, 14 Dec 2024 12:18:35 +0000 (15:18 +0300)
committerDavid Oberhollenzer <david.oberhollenzer@sigma-star.at>
Tue, 17 Dec 2024 13:34:23 +0000 (14:34 +0100)
commitd4710ca5b5105d998e042a77cb66a2a5ac7bafb5
treeb013b3c206c389ccf30b1ed12afb15a298fafe3d
parentcf3b826cac649caac853bc319b19be133372166f
nand-utils: Fix integer overflow in nandflipbits.c

Report of the static analyzer:
The value of an arithmetic expression 'bit_to_flip->block * mtd.eb_size + blkoffs' is a subject to overflow because its operands are not cast to a larger data type before performing arith$

Corrections explained:
Prevent arithmetic overflow in OOB read operation
Resolved an issue where the calculation of the offset in the OOB read operation could overflow due to operands not being cast to a larger data type. Specifically, the multiplication of bi$

Triggers found by static analyzer Svace.

Signed-off-by: Anton Moryakov <ant.v.moryakov@gmail.com>
Reviewed-by: Zhihao Cheng <chengzhihao1@huawei.com>
Signed-off-by: David Oberhollenzer <david.oberhollenzer@sigma-star.at>
nand-utils/nandflipbits.c