### Eclipse Workspace Patch 1.0
#P ecos
Index: io/flash/current/ChangeLog
===================================================================
RCS file: /cvs/ecos/ecos/packages/io/flash/current/ChangeLog,v
retrieving revision 1.43
diff -u -r1.43 ChangeLog
--- io/flash/current/ChangeLog	25 Feb 2006 14:07:43 -0000	1.43
+++ io/flash/current/ChangeLog	11 Dec 2007 08:57:50 -0000
@@ -1,3 +1,8 @@
+2007-12-11  Oyvind Harboe  <oyvind.harboe@zylin.com>
+
+	* src/flash.c: flase_erase/flash_program_buf: return error for illegal 
+	address ranges.
+
 2006-02-21  Oliver Munz  <munz@speag.ch>
 	    Andrew Lunn  <andrew.lunn@ascom.ch>
 
Index: io/flash/current/src/flash.c
===================================================================
RCS file: /cvs/ecos/ecos/packages/io/flash/current/src/flash.c,v
retrieving revision 1.27
diff -u -r1.27 flash.c
--- io/flash/current/src/flash.c	25 Feb 2006 14:07:43 -0000	1.27
+++ io/flash/current/src/flash.c	11 Dec 2007 08:57:51 -0000
@@ -179,14 +179,15 @@
 
      _flash_erase_block = (code_fun*) __anonymizer(&flash_erase_block);
 
+    // Return error for illegal addresses
+    if ((addr<flash_info.start)||(addr>flash_info.end))
+    	return FLASH_ERR_INVALID;
+    if ((((cyg_uint8 *)addr)+len)>(cyg_uint8 *)flash_info.end)
+    	return FLASH_ERR_INVALID;
+     
     block = (unsigned short *)((CYG_ADDRESS)addr & flash_info.block_mask);
     end_addr = (unsigned short *)((CYG_ADDRESS)addr+len);
 
-    /* Check to see if end_addr overflowed */
-    if( (end_addr < block) && (len > 0) ){
-        end_addr = (unsigned short *) ((CYG_ADDRESS) flash_info.end - 1);
-    }
-
 #ifdef CYGSEM_IO_FLASH_CHATTER
     (*flash_info.pf)("... Erase from %p-%p: ", (void*)block, (void*)end_addr);
 #endif
@@ -257,6 +258,12 @@
     if (!flash_info.init) {
         return FLASH_ERR_NOT_INIT;
     }
+    
+    // Return error for illegal addresses
+    if ((addr<flash_info.start)||(addr>flash_info.end))
+    	return FLASH_ERR_INVALID;
+    if ((((cyg_uint8 *)addr)+len)>(cyg_uint8 *)flash_info.end)
+    	return FLASH_ERR_INVALID;
 
 #ifdef CYGSEM_IO_FLASH_SOFT_WRITE_PROTECT
     if (plf_flash_query_soft_wp(addr,len))