[PATCH 3.12 35/58] ubi: Fix out of bounds write in volume update code

From: Richard Weinberger 3.12-stable review patch. If anyone has any objections, please let me know. === commit e4f6daac20332448529b11f09388f1d55ef2084c upstream. ubi_start_leb_change() allocates too few bytes. ubi_more_leb_change_data() will write up to

[PATCH 3.12 35/58] ubi: Fix out of bounds write in volume update code

From: Richard Weinberger 3.12-stable review patch. If anyone has any objections, please let me know. === commit e4f6daac20332448529b11f09388f1d55ef2084c upstream. ubi_start_leb_change() allocates too few bytes. ubi_more_leb_change_data() will write up to req->upd_bytes +