[U-Boot] [PATCH 1/2 V3] mmc: add boundary check for mmc operation

[Lei Wen]

Hi,

Is it ok now for merging....?

Thanks,
Lei

On Mon, Sep 13, 2010 at 10:07 PM, Lei Wen <leiwen at marvell.com> wrote:
>
> Signed-off-by: Lei Wen <leiwen at marvell.com>
> ---
> V2:
> Change log:
> change the puts to printf to better formating.
>
>  drivers/mmc/mmc.c |   10 ++++++++++
>  1 files changed, 10 insertions(+), 0 deletions(-)
>
> diff --git a/drivers/mmc/mmc.c b/drivers/mmc/mmc.c
> index cf4ea16..23928c1 100644
> --- a/drivers/mmc/mmc.c
> +++ b/drivers/mmc/mmc.c
> @@ -92,6 +92,11 @@ mmc_bwrite(int dev_num, ulong start, lbaint_t blkcnt, const void*src)
>
>        blklen = mmc->write_bl_len;
>
> +       if ((start + blkcnt) > mmc->block_dev.lba) {
> +               printf("MMC: block number 0x%x exceeds max(0x%x)",
> +                       start + blkcnt, mmc->block_dev.lba);
> +               return 0;
> +       }
>        err = mmc_set_blocklen(mmc, mmc->write_bl_len);
>
>        if (err) {
> @@ -219,6 +224,11 @@ static ulong mmc_bread(int dev_num, ulong start, lbaint_t blkcnt, void *dst)
>        if (!mmc)
>                return 0;
>
> +       if ((start + blkcnt) > mmc->block_dev.lba) {
> +               printf("MMC: block number 0x%x exceeds max(0x%x)",
> +                       start + blkcnt, mmc->block_dev.lba);
> +               return 0;
> +       }
>        /* We always do full block reads from the card */
>        err = mmc_set_blocklen(mmc, mmc->read_bl_len);
>
> --
> 1.7.0.4
>
>