When sect_size is greater than the CONFIG_ENV_SIZE, this wild
pointer will cause CPU halt or system crash.

Fixes: 03fb08d4aef8 ("env: Introduce support for MTD")
Signed-off-by: Shiji Yang <yangshij...@outlook.com>
---
 env/mtd.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/env/mtd.c b/env/mtd.c
index ad263ed4b29..b26ee80985a 100644
--- a/env/mtd.c
+++ b/env/mtd.c
@@ -201,7 +201,7 @@ static int env_mtd_erase(void)
 {
        struct mtd_info *mtd_env;
        u32 sect_size, sect_num;
-       char *saved_buf, *tmp;
+       char *saved_buf = NULL, *tmp;
        struct erase_info ei;
        size_t ret_len;
        int remaining;
-- 
2.50.0

Reply via email to