[PATCH v2 0/2] mtd: spi-nor: sfdp: bound two optional parameter tables

Michael Walle mwalle at kernel.org
Fri Sep 4 06:40:35 PDT 2026


On Mon, 20 Jul 2026 23:11:02 +0900, HyeongJun An wrote:
> Two of the optional SFDP parameter table parsers size a buffer from the
> table length the flash reports, then index it at fixed offsets without
> checking the table is long enough.
> 
>   spi_nor_parse_profile1()  reads up to DWORD5,  never checks the length
>   spi_nor_parse_sccr()      reads up to DWORD22, never checks the length
> 
> [...]

Applied, thanks!

[1/2] mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table
      commit: b9f34a95a81021fa1f3c9cb8cfd458e66824cad6
[2/2] mtd: spi-nor: sfdp: check the length of the SCCR map
      commit: 1413f38f37194673502e61cd3749e091c031370b

Best regards,
-- 
Michael Walle <mwalle at kernel.org>




More information about the linux-mtd mailing list