Cover Letter Detail
Show a cover letter.
GET /api/1.1/covers/2229309/?format=api
{ "id": 2229309, "url": "http://patchwork.ozlabs.org/api/1.1/covers/2229309/?format=api", "web_url": "http://patchwork.ozlabs.org/project/qemu-devel/cover/20260428055254.76581-1-kane_chen@aspeedtech.com/", "project": { "id": 14, "url": "http://patchwork.ozlabs.org/api/1.1/projects/14/?format=api", "name": "QEMU Development", "link_name": "qemu-devel", "list_id": "qemu-devel.nongnu.org", "list_email": "qemu-devel@nongnu.org", "web_url": "", "scm_url": "", "webscm_url": "" }, "msgid": "<20260428055254.76581-1-kane_chen@aspeedtech.com>", "date": "2026-04-28T05:52:55", "name": "[v1,0/1] hw/misc/aspeed_sbc: Add bounds checking for OTP write operations", "submitter": { "id": 92037, "url": "http://patchwork.ozlabs.org/api/1.1/people/92037/?format=api", "name": "Kane Chen", "email": "kane_chen@aspeedtech.com" }, "mbox": "http://patchwork.ozlabs.org/project/qemu-devel/cover/20260428055254.76581-1-kane_chen@aspeedtech.com/mbox/", "series": [ { "id": 501764, "url": "http://patchwork.ozlabs.org/api/1.1/series/501764/?format=api", "web_url": "http://patchwork.ozlabs.org/project/qemu-devel/list/?series=501764", "date": "2026-04-28T05:52:55", "name": "hw/misc/aspeed_sbc: Add bounds checking for OTP write operations", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/501764/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/covers/2229309/comments/", "headers": { "Return-Path": "<qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=aspeedtech.com header.i=@aspeedtech.com\n header.a=rsa-sha256 header.s=selector1 header.b=E9EJDS6J;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=nongnu.org\n (client-ip=209.51.188.17; helo=lists1p.gnu.org;\n envelope-from=qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org;\n receiver=patchwork.ozlabs.org)", "dkim=none (message not signed)\n header.d=none;dmarc=none action=none header.from=aspeedtech.com;" ], "Received": [ "from lists1p.gnu.org (lists1p.gnu.org [209.51.188.17])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g4V5T4l4Tz1yHX\n\tfor <incoming@patchwork.ozlabs.org>; Tue, 28 Apr 2026 15:55:09 +1000 (AEST)", "from localhost ([::1] helo=lists1p.gnu.org)\n\tby lists1p.gnu.org with esmtp (Exim 4.90_1)\n\t(envelope-from <qemu-devel-bounces@nongnu.org>)\n\tid 1wHbOw-0001kA-US; Tue, 28 Apr 2026 01:54:46 -0400", "from eggs.gnu.org ([2001:470:142:3::10])\n by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)\n (Exim 4.90_1) (envelope-from <kane_chen@aspeedtech.com>)\n id 1wHbNc-0001Yt-5s; Tue, 28 Apr 2026 01:53:09 -0400", "from mail-japaneastazlp170130007.outbound.protection.outlook.com\n ([2a01:111:f403:c405::7] helo=TYDPR03CU002.outbound.protection.outlook.com)\n by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)\n (Exim 4.90_1) (envelope-from <kane_chen@aspeedtech.com>)\n id 1wHbNX-0002G9-ON; Tue, 28 Apr 2026 01:53:07 -0400", "from SI6PR06MB7631.apcprd06.prod.outlook.com (2603:1096:4:239::11)\n by TYZPR06MB6073.apcprd06.prod.outlook.com (2603:1096:400:333::16) with\n Microsoft SMTP Server (version=TLS1_2,\n cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9846.22; Tue, 28 Apr\n 2026 05:52:55 +0000", "from SI6PR06MB7631.apcprd06.prod.outlook.com\n ([fe80::afe5:a3f1:b435:e43c]) by SI6PR06MB7631.apcprd06.prod.outlook.com\n ([fe80::afe5:a3f1:b435:e43c%4]) with mapi id 15.20.9846.025; Tue, 28 Apr 2026\n 05:52:55 +0000" ], "ARC-Seal": "i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;\n b=rlf1+laiMND/HudOnXOWaDtiNIK/qsk4O5RAoSdgu2umNMXk8Fr3MV1EDD6osQl68UGFJjogR5xUOR8fOUJlrP98hDqakNfWn7QJCf+wZQnpTs9F6pRr4j+7gw33B4L1vMQTfeHwUS3bJXo61uRoqjNYr5NWS1P8C/hZ18oeLuQfjIEi9Y9vliW8ThaWNqcnEiM8q4/mZByF9yodUiZ2z+SD+xLZmh3H9LtGUN92t82TvVNnTAFQ1rWad0HQP2bxmkMnaA/FWyn91MJDJNJaV+OkTQeAnEq+MlZj3BIkxGnavJMRahfnU4CcT88FQZozriv2wPq2usS56R18CuOGcA==", "ARC-Message-Signature": "i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;\n s=arcselector10001;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;\n bh=wyipqzX6uxXXdrNaRq5oHr90uBsHqBlh9dpeMN8rTzc=;\n b=vx8HZ+j/Dy1U0biI6vy6bsW/PqEVusLbZ6aJUO3ywDKGQAb8n+CCRTWPMkDJA9BayUWIqPp0FR7fYnbCVmvWUcNnsfE+981gAs8m/olGqRq/bZ5iBWb6SHrFRPJnT1VOM5ETtih1GMb00dUxYdQI/gXqe0yJSKQzjFDKvixQwv71xxxJiRFULDe3J4kq8cfYRGFunJT8p1+2jxdCBl3yGNlUon/8NpxsDTr0ZYN5E3VuSxSV175N1EbpQXF/RBb+radgicc/cWPSaLSNSXFkSzyDrWIOCy7HO+JMHmp8w3s4qTQL5xap02/NoNreOYEgjLh+/c17lsrtmGsyeKb/xA==", "ARC-Authentication-Results": "i=1; mx.microsoft.com 1; spf=pass\n smtp.mailfrom=aspeedtech.com; dmarc=pass action=none\n header.from=aspeedtech.com; dkim=pass header.d=aspeedtech.com; arc=none", "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=aspeedtech.com;\n s=selector1;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;\n bh=wyipqzX6uxXXdrNaRq5oHr90uBsHqBlh9dpeMN8rTzc=;\n b=E9EJDS6J6kkyBgKk7Bn8/x9VWDkvPbY6Lz63NjSIDkRq1JUJ7Mb9Uv+hl+yU8BiEtlA7tQf4qlKDovzgaJcQlEvIH/KTwlWE5BzXAn9zhYuqEIrdWGRRylvxu9jCzlbJ0MrzJ5kLuFA8WEMpVU/NDzkiIJA6pH5sLglnNvTo/T2JuCQInUkCI8kgX9QSkrrmVhyll6mhgHzz7WhD48gPHkZKxtfT/S67vIPwgGwdNa4Pk5gAebOX+SAKMxoFCSBEjay/p0yYkYW31WjGAlpnTqJYm20iMyLlxODrkigSn6lSF8xFhAErtG3Vr8z8PqgFniWBJVOXNLQGDLbLGvR5qg==", "From": "Kane Chen <kane_chen@aspeedtech.com>", "To": "=?iso-8859-1?q?C=E9dric_Le_Goater?= <clg@kaod.org>,\n Peter Maydell <peter.maydell@linaro.org>,\n Steven Lee <steven_lee@aspeedtech.com>, Troy Lee <leetroy@gmail.com>,\n Jamin Lin <jamin_lin@aspeedtech.com>,\n Andrew Jeffery <andrew@codeconstruct.com.au>, Joel Stanley <joel@jms.id.au>,\n \"open list:ASPEED BMCs\" <qemu-arm@nongnu.org>,\n \"open list:All patches CC here\" <qemu-devel@nongnu.org>", "CC": "Troy Lee <troy_lee@aspeedtech.com>, Kane Chen <kane_chen@aspeedtech.com>", "Subject": "[PATCH v1 0/1] hw/misc/aspeed_sbc: Add bounds checking for OTP write\n operations", "Thread-Topic": "[PATCH v1 0/1] hw/misc/aspeed_sbc: Add bounds checking for OTP\n write operations", "Thread-Index": "AQHc1tNCG4WknDPCO0aJKjbbCZMokQ==", "Date": "Tue, 28 Apr 2026 05:52:55 +0000", "Message-ID": "<20260428055254.76581-1-kane_chen@aspeedtech.com>", "Accept-Language": "zh-TW, en-US", "Content-Language": "en-US", "X-MS-Has-Attach": "", "X-MS-TNEF-Correlator": "", "authentication-results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=aspeedtech.com header.i=@aspeedtech.com\n header.a=rsa-sha256 header.s=selector1 header.b=E9EJDS6J;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=nongnu.org\n (client-ip=209.51.188.17; helo=lists1p.gnu.org;\n envelope-from=qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org;\n receiver=patchwork.ozlabs.org)", "dkim=none (message not signed)\n header.d=none;dmarc=none action=none header.from=aspeedtech.com;" ], "x-ms-publictraffictype": "Email", "x-ms-traffictypediagnostic": "SI6PR06MB7631:EE_|TYZPR06MB6073:EE_", "x-ms-office365-filtering-correlation-id": "a36d661c-9529-4e6f-8f0b-08dea4ea64ce", "x-ms-exchange-senderadcheck": "1", "x-ms-exchange-antispam-relay": "0", "x-microsoft-antispam": "BCL:0;\n ARA:13230040|366016|376014|1800799024|18002099003|56012099003|38070700021;", "x-microsoft-antispam-message-info": "\n 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", "x-forefront-antispam-report": "CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;\n IPV:NLI; SFV:NSPM; H:SI6PR06MB7631.apcprd06.prod.outlook.com; PTR:; CAT:NONE;\n SFS:(13230040)(366016)(376014)(1800799024)(18002099003)(56012099003)(38070700021);\n DIR:OUT; SFP:1102;", "x-ms-exchange-antispam-messagedata-chunkcount": "1", "x-ms-exchange-antispam-messagedata-0": "=?iso-8859-1?q?Bz+ArDMlWcN2XdIm4+w1v/z?=\n\t=?iso-8859-1?q?gD4xmjGKbo05ELL6x3Ij3dHR7/58BOTAis1QN+0WRIpnV6SYuFcgDiDnZ5Ob?=\n\t=?iso-8859-1?q?6oSg0HEzVIa3Tng653YQ6bSFY9HqH15WxBZP084W4cIi9JyVJQi/lK4hFY1J?=\n\t=?iso-8859-1?q?d0djYgLZZyHDQfWg3TR6/nUZaY6Kwe66crfpkbnRqlCI6eWeNIkf84CoeMtG?=\n\t=?iso-8859-1?q?/vGnvXXlfWSa+aCohESWY6xbNBifVPqyQGggKUQvuAkjGe7pjL6adrC78RNb?=\n\t=?iso-8859-1?q?FrtfVNfPB1RKwR7lWz10j3KD1G0AanhwZyUJC4QWakC0SPPPC0yEq0Fvzgof?=\n\t=?iso-8859-1?q?ClsmdnpYp3wRZHxKQ0D1a9i441ZsI1IqRI5op+vTnlbFgxJTna6vpxhVl2af?=\n\t=?iso-8859-1?q?xNpKqsK9eFxYCBlWV2Pgwkg75q1m8wRihU/Yy5eAPByyG7qQ/mWMnyLb6Zpr?=\n\t=?iso-8859-1?q?UhPoQxPbkUo6swhHdxXdIPnnE6De1q9dsB4fdSjKKHBRC1xRsue3jWnpIbCM?=\n\t=?iso-8859-1?q?a1c03Vjz6Q0Q1NOChZ6bri6CgLmA0BntIbxZWktT1p0dceCD3j1NPT5AdfS9?=\n\t=?iso-8859-1?q?OGWdXWGjogAqVQcZaJifx+3sWg5z+SqninyznQnKpYROsuzEhQe/EoLVlLIB?=\n\t=?iso-8859-1?q?PlkA/CjMe0tl0XQLQeCSyDEHnlCHivHu9NWSPBcGcXDzsoHTrHJMbNTfTKE0?=\n\t=?iso-8859-1?q?8k/X+X/c4/H3JRqyo+hyeTyLcCMqsohbZHJ/s4idAu4aXSffwbkR0pjWVg6b?=\n\t=?iso-8859-1?q?uhX0/K5HSEQlDBQ/qfBkziytEnKzhYIYJjJ5Wn53FIjsNHlhyMKIa6Kv5tts?=\n\t=?iso-8859-1?q?biClfFKa4Gn0fDTzDTv9+pmwE05WUhOZIKtc9RwUd/Ju2OJrrz02a9IcYByB?=\n\t=?iso-8859-1?q?F5KOE7dA/RDjlRHmY+QN4AYUjG+FhsNFLgB8RAclnchotEYTwJrP4HyeWUrK?=\n\t=?iso-8859-1?q?zsHc2Is9FOp63QXI7MyE+N5UFTMs2cXFvqTkkGZop19P6smGwKVl61IqjvtY?=\n\t=?iso-8859-1?q?FyfLQW6LK0B0eBdc9Z0w1StoPbECgCWEBWfZTSmfe6hQzGeZfNHngloyPF9Y?=\n\t=?iso-8859-1?q?LiH7qRcNCEbaByraA1gNA4smb2dL2joThCpYEtRjZ17xNOOMEATi0jsq82gq?=\n\t=?iso-8859-1?q?s9B8/YSRl6rDLXC0UXok3QgsI2g6oxrWQZzYLnmFXSdcsPXApstkR0DkA/Rd?=\n\t=?iso-8859-1?q?wwHkxo+cPndaP0NRmGC/jsNMkq4VUUHkKxBxqDJdavVUq6zrBOqvDkIWE03y?=\n\t=?iso-8859-1?q?uOp5WJXxyT4T+ufAqDqw9wWK397zcVXmpOM5Ilmvzc6xEFEptBnCWlPW5KDv?=\n\t=?iso-8859-1?q?7fXxF2UVjxgnvzG63FJun5X3hQ9he9bPm8/uAz4it4UFRJ7P+xYxsbUbUrfG?=\n\t=?iso-8859-1?q?Nwx3hwZuA5UvxSWy19/c5SV9/qHeP2ekVmJVch0F4wo+swho0vMtS2daScjd?=\n\t=?iso-8859-1?q?XH9nlg8WWfmhhT/qmVl8gcaWi6jrZDljZY1+ClsxkEr32naTg3HBYOsR70cu?=\n\t=?iso-8859-1?q?iLS/qKN+X3/dXe8Ef0HtUNwH8EcekpMQnbqfNVO9hCjiRK57jDREksqDyrr8?=\n\t=?iso-8859-1?q?kLhD+MIvVmBqoXikOA9YEhdACHkRhSLWMijQJ9rrmACtwjw3vkfXNsF3hVUp?=\n\t=?iso-8859-1?q?Xe8as95WU9tfVXc6QDmnuLKgg7BHtWc40BAHnKi8ZnZcicn6qKurk8oEC+2y?=\n\t=?iso-8859-1?q?s2LRZK095jjUpK13AnZhlrqUsg7Z4x8E8hk+mQ2icTtY1RcLrYiVdwCw8oKF?=\n\t=?iso-8859-1?q?SRl9zYuIQOkBrhyQ/TW9Hu9BXBAVXxvyzqqYi2XDVqf7uIg=3D=3D?=", "Content-Type": "text/plain; charset=\"iso-8859-1\"", "Content-Transfer-Encoding": "quoted-printable", "MIME-Version": "1.0", "X-Exchange-RoutingPolicyChecked": "\n Su9eppooxHDoX+czZVt3Y3452U5+xBVgSdeoXjltJ52ybUMU84owuVX2bbCTOfNDqd1lQ8kubPzDl7G+4SKNmwTAtdl/aTTjCK9TvZSVClXqqTGmD124cfwp0WGAWxXUyk+jRN668xfGesqzYOzg5tTc4rPBlbYORce6D1/HFaImAWcUddYN+mlPlPVWVzA7/8D0hL/mZAEfDgakW3KLZ2ZV/o6CO/A92EdlEWo/KOAJTw4VNAGT1jj36jjB9Oed4BSZzknMKZIBQcOkQ/N1Yc6zUpoXrbqFDJugnVrxYVUc/k0M+gd595fPPKW/EDR2km/fVrFTLuGkU35sXU3E2w==", "X-OriginatorOrg": "aspeedtech.com", "X-MS-Exchange-CrossTenant-AuthAs": "Internal", "X-MS-Exchange-CrossTenant-AuthSource": "SI6PR06MB7631.apcprd06.prod.outlook.com", "X-MS-Exchange-CrossTenant-Network-Message-Id": "\n a36d661c-9529-4e6f-8f0b-08dea4ea64ce", "X-MS-Exchange-CrossTenant-originalarrivaltime": "28 Apr 2026 05:52:55.3584 (UTC)", "X-MS-Exchange-CrossTenant-fromentityheader": "Hosted", "X-MS-Exchange-CrossTenant-id": "43d4aa98-e35b-4575-8939-080e90d5a249", "X-MS-Exchange-CrossTenant-mailboxtype": "HOSTED", "X-MS-Exchange-CrossTenant-userprincipalname": "\n YkoU3SIHaMWd9vDHZczPAQakDeV1sbWBvy+AJu+beSQVjpgk/aJgkM3NLp/iK7j6BsbFpConXdcsyND+HHFuw20n4A+qXUOQi106WlcTaK8=", "X-MS-Exchange-Transport-CrossTenantHeadersStamped": "TYZPR06MB6073", "Received-SPF": "pass client-ip=2a01:111:f403:c405::7;\n envelope-from=kane_chen@aspeedtech.com;\n helo=TYDPR03CU002.outbound.protection.outlook.com", "X-Spam_score_int": "-20", "X-Spam_score": "-2.1", "X-Spam_bar": "--", "X-Spam_report": "(-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,\n DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001,\n SPF_PASS=-0.001 autolearn=ham autolearn_force=no", "X-Spam_action": "no action", "X-BeenThere": "qemu-devel@nongnu.org", "X-Mailman-Version": "2.1.29", "Precedence": "list", "List-Id": "qemu development <qemu-devel.nongnu.org>", "List-Unsubscribe": "<https://lists.nongnu.org/mailman/options/qemu-devel>,\n <mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>", "List-Archive": "<https://lists.nongnu.org/archive/html/qemu-devel>", "List-Post": "<mailto:qemu-devel@nongnu.org>", "List-Help": "<mailto:qemu-devel-request@nongnu.org?subject=help>", "List-Subscribe": "<https://lists.nongnu.org/mailman/listinfo/qemu-devel>,\n <mailto:qemu-devel-request@nongnu.org?subject=subscribe>", "Errors-To": "qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org", "Sender": "qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org" }, "content": "This series fixes a bounds issue in Aspeed OTP programming through the\nSecure Boot Controller path.\n\nThe guest-provided OTP address is word-indexed in the SBC model, but\nthe OTP device write path operates on byte offsets. Passing the value\nthrough without validation/conversion could lead to out-of-range writes.\n\nThe patch adds bounds checking in aspeed_sbc_otp_prog() before\nconverting the address to a byte offset, and aligns the OTP write\nhelper interfaces with byte-offset semantics.\n\nThe patch has been validated by a functional test and by the boundary\ntest documented at:\nhttps://gitlab.com/qemu-project/qemu/-/work_items/3436\n\nKane-Chen-AS (1):\n hw/misc/aspeed_sbc: Add bounds checking for OTP write operations\n\n hw/misc/aspeed_sbc.c | 14 +++++++++++---\n hw/nvram/aspeed_otp.c | 13 ++++++-------\n 2 files changed, 17 insertions(+), 10 deletions(-)" }