[{"id":3679710,"web_url":"http://patchwork.ozlabs.org/comment/3679710/","msgid":"<87jyu07olj.fsf@bootlin.com>","list_archive_url":null,"date":"2026-04-21T07:35:20","subject":"Re: [PATCH] mtd: spi-nor: debugfs: fix out-of-bounds read in\n spi_nor_params_show()","submitter":{"id":73368,"url":"http://patchwork.ozlabs.org/api/people/73368/","name":"Miquel Raynal","email":"miquel.raynal@bootlin.com"},"content":"Hi Tudor,\n\nOn 17/04/2026 at 15:24:39 GMT, Tudor Ambarus wrote:\n\n> Sashiko noticed an out-of-bounds read [1].\n\n[...]\n\n> Cc: stable@vger.kernel.org\n> Fixes: 0257be79fc4a (\"mtd: spi-nor: expose internal parameters via debugfs\")\n> Closes: https://sashiko.dev/#/patchset/20260417-die-erase-fix-v2-1-73bb7004ebad%40infineon.com [1]\n> Signed-off-by: Tudor Ambarus \n> ---\n> We shall assign a CVE to this. I'll look into how next week.\n\nThey are assigned automatically to every fix, no?\n\nIf spi-nor folks want to ack, I might take it through an mtd/fixes PR.\n\nThanks,\nMiquèl","headers":{"Return-Path":"\n ","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n secure) header.d=lists.infradead.org header.i=@lists.infradead.org\n header.a=rsa-sha256 header.s=bombadil.20210309 header.b=SU1hzpkk;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n unprotected) header.d=bootlin.com header.i=@bootlin.com header.a=rsa-sha256\n header.s=dkim header.b=uhy0t4T1;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=none (no SPF record) smtp.mailfrom=lists.infradead.org\n (client-ip=2607:7c80:54:3::133; helo=bombadil.infradead.org;\n envelope-from=linux-mtd-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org;\n receiver=patchwork.ozlabs.org)"],"Received":["from bombadil.infradead.org (bombadil.infradead.org\n [IPv6:2607:7c80:54:3::133])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0Dfh16MCz1yJG\n\tfor ; Tue, 21 Apr 2026 17:35:40 +1000 (AEST)","from localhost ([::1] helo=bombadil.infradead.org)\n\tby bombadil.infradead.org with esmtp (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1wF5du-00000008BwK-1cKl;\n\tTue, 21 Apr 2026 07:35:34 +0000","from smtpout-02.galae.net ([185.246.84.56])\n\tby bombadil.infradead.org with esmtps (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1wF5do-00000008Bva-3mc5\n\tfor linux-mtd@lists.infradead.org;\n\tTue, 21 Apr 2026 07:35:32 +0000","from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233])\n\tby smtpout-02.galae.net (Postfix) with ESMTPS id 84BF51A337C;\n\tTue, 21 Apr 2026 07:35:24 +0000 (UTC)","from mail.galae.net (mail.galae.net [212.83.136.155])\n\tby smtpout-01.galae.net (Postfix) with ESMTPS id 5938F600D2;\n\tTue, 21 Apr 2026 07:35:24 +0000 (UTC)","from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon)\n with ESMTPSA id DD0EA1046093A;\n\tTue, 21 Apr 2026 09:35:20 +0200 (CEST)"],"DKIM-Signature":["v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;\n\td=lists.infradead.org; s=bombadil.20210309; h=Sender:\n\tContent-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post:\n\tList-Archive:List-Unsubscribe:List-Id:MIME-Version:Message-ID:Date:References\n\t:In-Reply-To:Subject:Cc:To:From:Reply-To:Content-ID:Content-Description:\n\tResent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:\n\tList-Owner; bh=yeTge3oViQQzWHR3b5aapG4E5ZeFifc8B6Bmn8jXlek=; b=SU1hzpkk/ohg3P\n\tb0D/PlSKkohQJcOpBkKbINe1sk1Oa5SYVRQd7Lj7ncME7US/ZQQb4Xkv9fkElPuT4pOpqfP2JE6Iv\n\trH1yX25NNMMr/Rkoijk10m89vbuKbLz4ti1Uw3OjGXll66ayUceYCUfAo6e0sQ6V1RCiUQNNmEzMI\n\tqBDVOJ80RZpcvkZBnIRfVklXvwLJnJUQIYRR78dLWyiz5R1ZyCRK/2Q+ocEQPFnsACAId1W67/Q8n\n\trDq+j8w/26gFdKfkk3I9B5UDklfIKQKDcpbRlcAukgFWTpVIDQoyFqjPx7/X5G4GXAlG6y6FzdooP\n\tmJ+O2+ecN3Ql05OKj1gQ==;","v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim;\n\tt=1776756923; h=from:subject:date:message-id:to:cc:mime-version:content-type:\n\t content-transfer-encoding:in-reply-to:references;\n\tbh=tjDRDh3IFRsUTJociGMi2a37LGpLwz5EHWQZhwlDXuk=;\n\tb=uhy0t4T1BIHFXIp8/Zxc/fi1FZ/u4Uk/IJrJNO9pHGIXTBiC6RsEslNnnn+K2E/+na+vny\n\tO/pe0fZpZ0kFg7ff4OXC+4KLr0kB3aCxPrfrGmzPsT4Au2eCoezwdXZ+8Wthf1VHs2ItL2\n\tWttOFoh96fBJJncDn3rG14ak9b9D/KwjzlHkdhXK2MyNYvquGlC3/YWZHjj9iLUv4aGu+b\n\t5M4OSSEMpREAMjyOElrHunp9BScFmx7ZQTcusLvUQ6nLlT9kxNWZKYiU7Cy9vW6PW+P02+\n\tGayWVztPWZzdz2Fqnru0z+q7Y2A8MKxNPC6LN2Ag+gA5lLDABq5Ikqoy1OXlfQ=="],"From":"Miquel Raynal ","To":"Tudor Ambarus ","Cc":"Pratyush Yadav , Michael Walle\n , Takahiro Kuwano ,\n Richard Weinberger , Vignesh Raghavendra\n , Pratyush Yadav , Michael Walle\n , linux-mtd@lists.infradead.org,\n linux-kernel@vger.kernel.org, stable@vger.kernel.org","Subject":"Re: [PATCH] mtd: spi-nor: debugfs: fix out-of-bounds read in\n spi_nor_params_show()","In-Reply-To":"<20260417-fix-oob-read-spi-nor-v1-1-2132e61a684a@linaro.org>\n\t(Tudor Ambarus's message of \"Fri, 17 Apr 2026 15:24:39 +0000\")","References":"<20260417-fix-oob-read-spi-nor-v1-1-2132e61a684a@linaro.org>","User-Agent":"mu4e 1.12.7; emacs 30.2","Date":"Tue, 21 Apr 2026 09:35:20 +0200","Message-ID":"<87jyu07olj.fsf@bootlin.com>","MIME-Version":"1.0","X-Last-TLS-Session-Version":"TLSv1.3","X-CRM114-Version":"20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 ","X-CRM114-CacheID":"sfid-20260421_003531_043294_0C0FA2C3 ","X-CRM114-Status":"UNSURE ( 5.70 )","X-CRM114-Notice":"Please train this message.","X-Spam-Score":"-2.1 (--)","X-Spam-Report":"Spam detection software,\n running on the system \"bombadil.infradead.org\",\n has NOT identified this incoming email as spam. The original\n message has been attached to this so you can view it or label\n similar future email. If you have any questions, see\n the administrator of that system for details.\n Content preview: Hi Tudor, On 17/04/2026 at 15:24:39 GMT,\n Tudor Ambarus \n wrote: > Sashiko noticed an out-of-bounds read [1].\n Content analysis details: (-2.1 points, 5.0 required)\n pts rule name description\n ---- ----------------------\n --------------------------------------------------\n -0.0 SPF_PASS SPF: sender matches SPF record\n -0.0 SPF_HELO_PASS SPF: HELO matches SPF record\n -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from\n envelope-from domain\n -0.1 DKIM_VALID Message has at least one valid DKIM or DK\n signature\n -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from\n author's\n domain\n 0.1 DKIM_SIGNED Message has a DKIM or DK signature,\n not necessarily valid\n -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%\n [score: 0.0000]","X-BeenThere":"linux-mtd@lists.infradead.org","X-Mailman-Version":"2.1.34","Precedence":"list","List-Id":"Linux MTD discussion mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Content-Type":"text/plain; charset=\"utf-8\"","Content-Transfer-Encoding":"base64","Sender":"\"linux-mtd\" ","Errors-To":"linux-mtd-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org"}},{"id":3679763,"web_url":"http://patchwork.ozlabs.org/comment/3679763/","msgid":"<2vxz4il47jka.fsf@kernel.org>","list_archive_url":null,"date":"2026-04-21T09:24:05","subject":"Re: [PATCH] mtd: spi-nor: debugfs: fix out-of-bounds read in\n spi_nor_params_show()","submitter":{"id":84684,"url":"http://patchwork.ozlabs.org/api/people/84684/","name":"Pratyush Yadav","email":"pratyush@kernel.org"},"content":"On Tue, Apr 21 2026, Miquel Raynal wrote:\n\n> Hi Tudor,\n>\n> On 17/04/2026 at 15:24:39 GMT, Tudor Ambarus wrote:\n>\n>> Sashiko noticed an out-of-bounds read [1].\n>\n> [...]\n>\n>> Cc: stable@vger.kernel.org\n>> Fixes: 0257be79fc4a (\"mtd: spi-nor: expose internal parameters via debugfs\")\n>> Closes: https://sashiko.dev/#/patchset/20260417-die-erase-fix-v2-1-73bb7004ebad%40infineon.com [1]\n>> Signed-off-by: Tudor Ambarus \n>> ---\n>> We shall assign a CVE to this. I'll look into how next week.\n>\n> They are assigned automatically to every fix, no?\n>\n> If spi-nor folks want to ack, I might take it through an mtd/fixes PR.\n\nReviewed-by: Pratyush Yadav \n\nPlease do. Thanks!","headers":{"Return-Path":"\n ","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n secure) header.d=lists.infradead.org header.i=@lists.infradead.org\n header.a=rsa-sha256 header.s=bombadil.20210309 header.b=NxWduQ11;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n unprotected) header.d=kernel.org header.i=@kernel.org header.a=rsa-sha256\n header.s=k20201202 header.b=aWGB1ZqA;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=none (no SPF record) smtp.mailfrom=lists.infradead.org\n (client-ip=2607:7c80:54:3::133; helo=bombadil.infradead.org;\n envelope-from=linux-mtd-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org;\n receiver=patchwork.ozlabs.org)"],"Received":["from bombadil.infradead.org (bombadil.infradead.org\n [IPv6:2607:7c80:54:3::133])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0H4T136pz1yCv\n\tfor ; Tue, 21 Apr 2026 19:24:36 +1000 (AEST)","from localhost ([::1] helo=bombadil.infradead.org)\n\tby bombadil.infradead.org with esmtp (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1wF7L4-00000008KBr-12ry;\n\tTue, 21 Apr 2026 09:24:14 +0000","from tor.source.kernel.org ([2600:3c04:e001:324:0:1991:8:25])\n\tby bombadil.infradead.org with esmtps (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1wF7L1-00000008KBk-0Rcg\n\tfor linux-mtd@lists.infradead.org;\n\tTue, 21 Apr 2026 09:24:11 +0000","from smtp.kernel.org (transwarp.subspace.kernel.org [100.75.92.58])\n\tby tor.source.kernel.org (Postfix) with ESMTP id 1E22560018;\n\tTue, 21 Apr 2026 09:24:10 +0000 (UTC)","by smtp.kernel.org (Postfix) with ESMTPSA id 4D54EC2BCB0;\n\tTue, 21 Apr 2026 09:24:07 +0000 (UTC)"],"DKIM-Signature":["v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;\n\td=lists.infradead.org; s=bombadil.20210309; h=Sender:\n\tContent-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post:\n\tList-Archive:List-Unsubscribe:List-Id:MIME-Version:Message-ID:Date:References\n\t:In-Reply-To:Subject:Cc:To:From:Reply-To:Content-ID:Content-Description:\n\tResent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:\n\tList-Owner; bh=csDILsv10Juesh7bdUw3w56vm4TOaYAHCXjbW3KIzXE=; b=NxWduQ11FcEJmI\n\tWigCyV9XvOUamdj9d/35AiJ7/l5J1QFbJ34ESIEuu0XA4vTDzsSAaeCgS5/R3t+vNHZGxyzGPzh0f\n\t26RKV0V+S0G3UhahmdBVezQn/WHB+seoLeUGguMSzKe9bpfFf9sMgiY1P5TQJqaH5dqT82Eaxqg5w\n\twouaziTi0P0DvbTkjo3uqilq0yWvrY93XzUWhOkfRqyrP6Hrvpq4IJWwpwokesz1JMmoWvHLU0aR0\n\tdveZxsWBxzTJGgM51MlT0CWYLygcM5AJbrlpDLnx2vP4c2kOy5cQK/O0T5TKlp5gnOQZaL9k9rXDT\n\tnscCNZAqcprcAJeKVsRA==;","v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org;\n\ts=k20201202; t=1776763449;\n\tbh=z+h5Nnwo0xO4Chm3zN/QoyZZPeeIi/CZAFWRlbq4U+4=;\n\th=From:To:Cc:Subject:In-Reply-To:References:Date:From;\n\tb=aWGB1ZqAhJB5fE0pCS22Z40rhlnNYtTfb1tpD6gC5YbQcAGPc80XmZq+aZbO6NkcM\n\t DhO284RZmDJj+aj8PoJNrZOnPqRBBVaBf9x1WbbbEH5oUkUHvJYwd7BpnGrzEBQdJl\n\t ul/WRlXC5lS0JYHVZ26J8dF6AbXvsK5VHj1FSnDhA4eHo59KzzlIja8YFZS4BU+4hb\n\t etCY7cFsrX1/ZdZq+0KLT+zGe98Ss5FlChMU0awBBRD6BLb8y8qCMrLBxeKvmeGQSh\n\t 65MgdgNF4XM4QimOPWwcxARG6z0PQCIxy62KKSv06iezOY150UHR84092OivE5kwHT\n\t 3M0CyKhpGCWlA=="],"From":"Pratyush Yadav ","To":"Miquel Raynal ","Cc":"Tudor Ambarus , Pratyush Yadav\n , Michael Walle , Takahiro\n Kuwano , Richard Weinberger\n , Vignesh Raghavendra , Pratyush Yadav\n , Michael Walle ,\n linux-mtd@lists.infradead.org, linux-kernel@vger.kernel.org,\n stable@vger.kernel.org","Subject":"Re: [PATCH] mtd: spi-nor: debugfs: fix out-of-bounds read in\n spi_nor_params_show()","In-Reply-To":"<87jyu07olj.fsf@bootlin.com> (Miquel Raynal's message of \"Tue, 21\n\tApr 2026 09:35:20 +0200\")","References":"<20260417-fix-oob-read-spi-nor-v1-1-2132e61a684a@linaro.org>\n\t<87jyu07olj.fsf@bootlin.com>","Date":"Tue, 21 Apr 2026 09:24:05 +0000","Message-ID":"<2vxz4il47jka.fsf@kernel.org>","User-Agent":"Gnus/5.13 (Gnus v5.13)","MIME-Version":"1.0","X-BeenThere":"linux-mtd@lists.infradead.org","X-Mailman-Version":"2.1.34","Precedence":"list","List-Id":"Linux MTD discussion mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Sender":"\"linux-mtd\" ","Errors-To":"linux-mtd-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org"}},{"id":3679829,"web_url":"http://patchwork.ozlabs.org/comment/3679829/","msgid":"","list_archive_url":null,"date":"2026-04-21T11:31:25","subject":"Re: [PATCH] mtd: spi-nor: debugfs: fix out-of-bounds read in\n spi_nor_params_show()","submitter":{"id":4124,"url":"http://patchwork.ozlabs.org/api/people/4124/","name":"Michael Walle","email":"michael@walle.cc"},"content":"On Fri Apr 17, 2026 at 5:24 PM CEST, Tudor Ambarus wrote:\n> Sashiko noticed an out-of-bounds read [1].\n>\n> In spi_nor_params_show(), the snor_f_names array is passed to\n> spi_nor_print_flags() using sizeof(snor_f_names).\n>\n> Since snor_f_names is an array of pointers, sizeof() returns the total\n> number of bytes occupied by the pointers\n> \t(element_count * sizeof(void *))\n> rather than the element count itself. On 64-bit systems, this makes the\n> passed length 8x larger than intended.\n>\n> Inside spi_nor_print_flags(), the 'names_len' argument is used to\n> bounds-check the 'names' array access. An out-of-bounds read occurs\n> if a flag bit is set that exceeds the array's actual element count\n> but is within the inflated byte-size count.\n>\n> Correct this by using ARRAY_SIZE() to pass the actual number of\n> string pointers in the array.\n>\n> Cc: stable@vger.kernel.org\n> Fixes: 0257be79fc4a (\"mtd: spi-nor: expose internal parameters via debugfs\")\n> Closes: https://sashiko.dev/#/patchset/20260417-die-erase-fix-v2-1-73bb7004ebad%40infineon.com [1]\n> Signed-off-by: Tudor Ambarus \n\nReviewed-by: Michael Walle ","headers":{"Return-Path":"\n ","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n secure) header.d=lists.infradead.org header.i=@lists.infradead.org\n header.a=rsa-sha256 header.s=bombadil.20210309 header.b=Bd+r1W+g;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n secure) header.d=walle.cc header.i=@walle.cc header.a=rsa-sha256\n header.s=mail2022082101 header.b=IBi1306X;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=none (no SPF record) smtp.mailfrom=lists.infradead.org\n (client-ip=2607:7c80:54:3::133; helo=bombadil.infradead.org;\n envelope-from=linux-mtd-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org;\n receiver=patchwork.ozlabs.org)"],"Received":["from bombadil.infradead.org (bombadil.infradead.org\n [IPv6:2607:7c80:54:3::133])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0KvD3QxSz1yJG\n\tfor ; Tue, 21 Apr 2026 21:31:52 +1000 (AEST)","from localhost ([::1] helo=bombadil.infradead.org)\n\tby bombadil.infradead.org with esmtp (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1wF9KP-00000008WXd-31O1;\n\tTue, 21 Apr 2026 11:31:41 +0000","from 0001.3ffe.de ([159.69.201.130] helo=mail.3ffe.de)\n\tby bombadil.infradead.org with esmtps (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1wF9KN-00000008WVZ-0uRd\n\tfor linux-mtd@lists.infradead.org;\n\tTue, 21 Apr 2026 11:31:40 +0000","from localhost (unknown [213.135.10.150])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange ECDHE (prime256v1) server-signature RSA-PSS (2048 bits)\n server-digest SHA256)\n\t(No client certificate requested)\n\tby mail.3ffe.de (Postfix) with ESMTPSA id 89D296BF;\n\tTue, 21 Apr 2026 13:31:27 +0200 (CEST)"],"DKIM-Signature":["v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;\n\td=lists.infradead.org; s=bombadil.20210309; h=Sender:Content-Type:\n\tList-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id:\n\tIn-Reply-To:References:To:From:Cc:Subject:Message-Id:Date:Mime-Version:\n\tReply-To:Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date\n\t:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner;\n\tbh=4nf24nSZNVzHju7qudgegWrxfPtci/rMjVCpXE+rp+0=; b=Bd+r1W+gQH6KVPyLRB+zsNU2bH\n\tO1sRaIkKkX1ELSDe9sevcPuYba9OzI5sihgVOtHMVLA/SRtiLB402/N9Yqwg2unw/E8Xb1SbJUaIR\n\tvz0OIk9+iVWTHbgzGf3BhRvlB6YM/b/Q1EtlGfdpIRoRDdtMAMBKXPdyVtfNdLBmyEy3H0URf5O5n\n\tTU96fTTEJOaY5y4RXmp2p9KMhRhwf6uyDp1o5hgQb9kzcR747I0Dmvniw0SIEIINjiFfU9kjrMZNH\n\t7ZOeP09hLNCq7UcGqFHrP/b7wzn1KfnOBG6YJ1ys3pRMVtT1vYEluQL2SEvtEZOFhxgjmlFVGg+C8\n\tTKOh3zoQ==;","v=1; a=rsa-sha256; c=relaxed/relaxed; d=walle.cc;\n s=mail2022082101;\n\tt=1776771087;\n\th=from:from:reply-to:subject:subject:date:date:message-id:message-id:\n\t to:to:cc:cc:mime-version:mime-version:content-type:content-type:\n\t in-reply-to:in-reply-to:references:references;\n\tbh=hhuFXO06bOWCEdQdbRTwVTgeyM0AujBkhd+2NkK3l9w=;\n\tb=IBi1306Xp2a7BD4ZWoIujYfFV3vZRXxdwTV9OeillI8sKbEIEA+rpMtXgudjsvIogfqs8f\n\tyolJqnt85aODRotApLBIlZ7aSc7sNRZzVXZNfypnLfLPwYFygm17nGblteHEDxGs/gHMZJ\n\tAcAcrtW569pj4ZbufPsANYSErX16kbP0SLJjfvDkqowavhjswsUmqYG0+NP9aU1OHJBG65\n\tBEGMr5aeouoXlFIJe0ae4EuEe4zlH6GAhqZqnC2OspEWsJ51R7wcWsV0IR9JVnIagW1fsv\n\tBGK2FkEqUI9dHyH5RxiMDdSKWln9Iyky3KEyQFjINXGH/uDS3sRC8bW/TjuqsA=="],"Mime-Version":"1.0","Date":"Tue, 21 Apr 2026 13:31:25 +0200","Message-Id":"","Subject":"Re: [PATCH] mtd: spi-nor: debugfs: fix out-of-bounds read in\n spi_nor_params_show()","Cc":"\"Pratyush Yadav\" , ,\n , ","From":"\"Michael Walle\" ","To":"\"Tudor Ambarus\" , \"Pratyush Yadav\"\n , \"Michael Walle\" , \"Takahiro\n Kuwano\" , \"Miquel Raynal\"\n , \"Richard Weinberger\" ,\n \"Vignesh Raghavendra\" ","X-Mailer":"aerc 0.20.0","References":"<20260417-fix-oob-read-spi-nor-v1-1-2132e61a684a@linaro.org>","In-Reply-To":"<20260417-fix-oob-read-spi-nor-v1-1-2132e61a684a@linaro.org>","X-CRM114-Version":"20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 ","X-CRM114-CacheID":"sfid-20260421_043139_413340_690ACBE1 ","X-CRM114-Status":"GOOD ( 12.29 )","X-Spam-Score":"-2.1 (--)","X-Spam-Report":"Spam detection software,\n running on the system \"bombadil.infradead.org\",\n has NOT identified this incoming email as spam. The original\n message has been attached to this so you can view it or label\n similar future email. If you have any questions, see\n the administrator of that system for details.\n Content preview: On Fri Apr 17, 2026 at 5:24 PM CEST, Tudor Ambarus wrote:\n > Sashiko noticed an out-of-bounds read [1]. > > In spi_nor_params_show(),\n the snor_f_names array is passed to > spi_nor_print_flags() using s [...] \n Content analysis details: (-2.1 points, 5.0 required)\n pts rule name description\n ---- ----------------------\n --------------------------------------------------\n -0.0 SPF_PASS SPF: sender matches SPF record\n 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record\n -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from\n envelope-from domain\n -0.1 DKIM_VALID Message has at least one valid DKIM or DK\n signature\n -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from\n author's\n domain\n 0.1 DKIM_SIGNED Message has a DKIM or DK signature,\n not necessarily valid\n -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%\n [score: 0.0000]","X-BeenThere":"linux-mtd@lists.infradead.org","X-Mailman-Version":"2.1.34","Precedence":"list","List-Id":"Linux MTD discussion mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Content-Type":"multipart/mixed; boundary=\"===============0834963059076042281==\"","Sender":"\"linux-mtd\" ","Errors-To":"linux-mtd-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org"}},{"id":3679853,"web_url":"http://patchwork.ozlabs.org/comment/3679853/","msgid":"","list_archive_url":null,"date":"2026-04-21T12:30:47","subject":"Re: [PATCH] mtd: spi-nor: debugfs: fix out-of-bounds read in\n spi_nor_params_show()","submitter":{"id":85360,"url":"http://patchwork.ozlabs.org/api/people/85360/","name":"Tudor Ambarus","email":"tudor.ambarus@linaro.org"},"content":"On 4/21/26 10:35 AM, Miquel Raynal wrote:\n>> We shall assign a CVE to this. I'll look into how next week.\n> They are assigned automatically to every fix, no?\n\nIndeed, it seems there's a dedicated team assigning CVEs to\nsecurity bugs, I didn't know:\nhttps://docs.kernel.org/process/cve.html\n\nCheers,\nta","headers":{"Return-Path":"\n ","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n secure) header.d=lists.infradead.org header.i=@lists.infradead.org\n header.a=rsa-sha256 header.s=bombadil.20210309 header.b=CKrONlsN;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n unprotected) header.d=linaro.org header.i=@linaro.org header.a=rsa-sha256\n header.s=google header.b=Y44upiEO;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=none (no SPF record) smtp.mailfrom=lists.infradead.org\n (client-ip=2607:7c80:54:3::133; helo=bombadil.infradead.org;\n envelope-from=linux-mtd-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org;\n receiver=patchwork.ozlabs.org)"],"Received":["from bombadil.infradead.org (bombadil.infradead.org\n [IPv6:2607:7c80:54:3::133])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0MCl1CS4z1yGt\n\tfor ; Tue, 21 Apr 2026 22:31:10 +1000 (AEST)","from localhost ([::1] helo=bombadil.infradead.org)\n\tby bombadil.infradead.org with esmtp (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1wFAFm-00000008aa7-2if4;\n\tTue, 21 Apr 2026 12:30:58 +0000","from mail-wm1-x32f.google.com ([2a00:1450:4864:20::32f])\n\tby bombadil.infradead.org with esmtps (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1wFAFj-00000008aZk-34KG\n\tfor linux-mtd@lists.infradead.org;\n\tTue, 21 Apr 2026 12:30:57 +0000","by mail-wm1-x32f.google.com with SMTP id\n 5b1f17b1804b1-4891e86fabeso26627435e9.1\n for ;\n Tue, 21 Apr 2026 05:30:54 -0700 (PDT)","from [10.11.12.108] ([86.127.43.116])\n by smtp.gmail.com with ESMTPSA id\n 5b1f17b1804b1-4891b46cffasm179118705e9.13.2026.04.21.05.30.51\n (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);\n Tue, 21 Apr 2026 05:30:52 -0700 (PDT)"],"DKIM-Signature":["v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;\n\td=lists.infradead.org; s=bombadil.20210309; h=Sender:\n\tContent-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post:\n\tList-Archive:List-Unsubscribe:List-Id:In-Reply-To:From:References:Cc:To:\n\tSubject:MIME-Version:Date:Message-ID:Reply-To:Content-ID:Content-Description:\n\tResent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:\n\tList-Owner; bh=i2C5K7y+w82TPuhxoE0eCiQ9BrD97DHEfSA3kKyNiks=; b=CKrONlsN0XWp/S\n\tpUrMXFM/Xt0vJcNhrjPzL9jW6ZYwxQAGC724RCuMU9lO6URRabD2vwT12VKqXZ/B5j8gHcc7j2Deu\n\tQuYTVRDlizLltVKwAErOXYMyUA+Gb9stpDbZKMs4A25uuYrI2aW9lnNM+WP6z0ZIixPJduqrGx2nd\n\tfYG77QNWpUT1Pd2YrPnFNbdiF1RRjtcS6KW+tQ08l/75nAHiNnoa8l0bmcdBbtQ4VLbIaDBlB2Vst\n\tv34sRHBB3M/HzN6tefTlR1USBiNwCueWetOnRLsFsH3zNYxGOmzV5LLfedwi9w8ZLS+SIU97VGycD\n\tYCNJQqr36eoUOgjC3eng==;","v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=linaro.org; s=google; t=1776774653; x=1777379453;\n darn=lists.infradead.org;\n h=content-transfer-encoding:in-reply-to:from:content-language\n :references:cc:to:subject:user-agent:mime-version:date:message-id\n :from:to:cc:subject:date:message-id:reply-to;\n bh=XwOo9xRWLW6tG6sZmBXLKlDtnsoM7zgsn7Qwt0pNS28=;\n b=Y44upiEOY1E9A72D1JIecqi94xzpOsnk+Vd5ex5wIKL3r03hNvCgDbeK7pDCyi7q3M\n sPlpsPvENG1pFXoia6UMNvTHkMuc679nTAI6Q4JCxhmzytl5rsj2KKv5eFNKwe5Z1MoX\n GSnffK09KjBXv7YGZBemcrazklFFD7k8IRA+Ps75pPpLGVUyU/b5boIsyO+Kg88GL1af\n gztx/JIVrAcur2jVC1LKU3NTJdkbHB3EWx31KLjGYyweEzWSw9074rpiTbb1LCWqX/uC\n c/j0qQn4uXot2K/kVLjnVCfPirlyNHKO0xTYvrfvgagRpNUb4dVMSN4m2qu/W+MM+PO0\n Agpw=="],"X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776774653; x=1777379453;\n h=content-transfer-encoding:in-reply-to:from:content-language\n :references:cc:to:subject:user-agent:mime-version:date:message-id\n :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id\n :reply-to;\n bh=XwOo9xRWLW6tG6sZmBXLKlDtnsoM7zgsn7Qwt0pNS28=;\n b=rtwFZkxrAtrD7TGztnEZUWoS8+dDC79jSLTDkOxtkVQLxsGhDCn0OqtZELfEDSJA2B\n DcruBsaMs2byUxFbrstJuLwmrTmIRmUjC5UfRd5Or0cp/9yHNjFDS0Qs8z9cTqMvHvH5\n Syp5qcX4Bcw6RIQkR6Rfa1BAlyaqJ+k/y0e9wwf52muxw0CV6GVir0w/suZEDwMrbtjv\n GVSJpC5XFqbbLZcFzll3QG4ovwtQB//8+Qav0HgmsfxLDxuzqGleZI9WhfUsa0hSRqy5\n VXQX1WbHy8Eoopeh6FhkKKphYJvVSDVHe3iDjXOhNUun4nM1d7BeOO7tZnc3X4DXoUHO\n TVeg==","X-Forwarded-Encrypted":"i=1;\n AFNElJ+RqlwXv78MRAGMl4xvVcJr25NE5+CK2t15T+Uuor+1JGJOxPffxA6Oh/6LMPy6gCMK5Yksj3ZPKjM=@lists.infradead.org","X-Gm-Message-State":"AOJu0Yw9qI7FTZasxZIb37zCI3Lpmkxx9P4Th2IhSKSXnp498VoB3dTO\n\tA7Cr59QNBPeUnynqjwoPiXJMxEusmywnphUNmcA6eGTjJ3O5l8g0LcSPziWW49bzSJw=","X-Gm-Gg":"AeBDiev9QkkZ8bmqKQidSrqMym/+K/HCgQNU9qfEOc/F/o2624eFjnoqPPP7WXxBb3B\n\ts/EH1wCAh+h9kVWK5jogacXs36wbG82+qoR9kP1+y4tRzwLIHG26Epr4stn42+HQjLmQK49E8vM\n\t8WyUpZss7cTjg2X/w5MMKRT3LYHcrK6OYr7sduICsu5C20woDGPZC4FoQJaiG11IpfikiEUG7NN\n\tMXmXzm7HHsRhCFQz1/RypVr6gLKlByRsLZpK5eJfC+iO/B+s3/6MDuQi65SgyjgZ5+Kpd31jKV4\n\t9SHOfxHh19DeNFlPt0WHmyTayNYpkdi2x6oiJyjed12ZTN2xrM42dMxKah/+CLK33XPwLEDlest\n\tSCUfDsPAXBJYsWhvBaY8k9MR7vjARiILTJocbvYMTd5fBTjBFUCqHd95yePHUMXTz5RAvYq+1Xb\n\tPqQm7mW0tvw8bjhVqgG3xqFaVhMVekzqb9Y1usArD9pNQ=","X-Received":"by 2002:a05:600c:350e:b0:488:b811:51c4 with SMTP id\n 5b1f17b1804b1-488fb788231mr265072705e9.25.1776774652851;\n Tue, 21 Apr 2026 05:30:52 -0700 (PDT)","Message-ID":"","Date":"Tue, 21 Apr 2026 15:30:47 +0300","MIME-Version":"1.0","User-Agent":"Mozilla Thunderbird","Subject":"Re: [PATCH] mtd: spi-nor: debugfs: fix out-of-bounds read in\n spi_nor_params_show()","To":"Miquel Raynal ","Cc":"Pratyush Yadav , Michael Walle ,\n Takahiro Kuwano ,\n Richard Weinberger , Vignesh Raghavendra ,\n Pratyush Yadav , Michael Walle ,\n linux-mtd@lists.infradead.org, linux-kernel@vger.kernel.org,\n stable@vger.kernel.org","References":"<20260417-fix-oob-read-spi-nor-v1-1-2132e61a684a@linaro.org>\n <87jyu07olj.fsf@bootlin.com>","Content-Language":"en-US","From":"Tudor Ambarus ","In-Reply-To":"<87jyu07olj.fsf@bootlin.com>","X-CRM114-Version":"20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 ","X-CRM114-CacheID":"sfid-20260421_053055_953672_49AC595B ","X-CRM114-Status":"UNSURE ( 6.62 )","X-CRM114-Notice":"Please train this message.","X-Spam-Score":"-2.1 (--)","X-Spam-Report":"Spam detection software,\n running on the system \"bombadil.infradead.org\",\n has NOT identified this incoming email as spam. The original\n message has been attached to this so you can view it or label\n similar future email. If you have any questions, see\n the administrator of that system for details.\n Content preview: On 4/21/26 10:35 AM,\n Miquel Raynal wrote: >> We shall assign\n a CVE to this. I'll look into how next week. > They are assigned\n automatically\n to every fix, no? Indeed, it seems there's a dedicated team assigning CVEs\n to security bugs, I didn't know: https://docs.kernel.org/process/cve.html \n Content analysis details: (-2.1 points, 5.0 required)\n pts rule name description\n ---- ----------------------\n --------------------------------------------------\n -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no\n trust\n [2a00:1450:4864:20:0:0:0:32f listed in]\n [list.dnswl.org]\n -0.0 SPF_PASS SPF: sender matches SPF record\n 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record\n -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from\n envelope-from domain\n -0.1 DKIM_VALID Message has at least one valid DKIM or DK\n signature\n -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from\n author's\n domain\n 0.1 DKIM_SIGNED Message has a DKIM or DK signature,\n not necessarily valid\n -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%\n [score: 0.0000]","X-BeenThere":"linux-mtd@lists.infradead.org","X-Mailman-Version":"2.1.34","Precedence":"list","List-Id":"Linux MTD discussion mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Sender":"\"linux-mtd\" ","Errors-To":"linux-mtd-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org"}},{"id":3679916,"web_url":"http://patchwork.ozlabs.org/comment/3679916/","msgid":"<308e7510718f46169d9465658f2c385a@infineon.com>","list_archive_url":null,"date":"2026-04-21T14:32:45","subject":"RE: [PATCH] mtd: spi-nor: debugfs: fix out-of-bounds read in\n spi_nor_params_show()","submitter":{"id":79570,"url":"http://patchwork.ozlabs.org/api/people/79570/","name":"Takahiro Kuwano","email":"takahiro.kuwano@infineon.com"},"content":"> Sashiko noticed an out-of-bounds read [1].\n> \n> In spi_nor_params_show(), the snor_f_names array is passed to\n> spi_nor_print_flags() using sizeof(snor_f_names).\n> \n> Since snor_f_names is an array of pointers, sizeof() returns the total\n> number of bytes occupied by the pointers\n> (element_count * sizeof(void *))\n> rather than the element count itself. On 64-bit systems, this makes the\n> passed length 8x larger than intended.\n> \n> Inside spi_nor_print_flags(), the 'names_len' argument is used to\n> bounds-check the 'names' array access. An out-of-bounds read occurs\n> if a flag bit is set that exceeds the array's actual element count\n> but is within the inflated byte-size count.\n> \n> Correct this by using ARRAY_SIZE() to pass the actual number of\n> string pointers in the array.\n> \n> Cc: stable@vger.kernel.org\n> Fixes: 0257be79fc4a (\"mtd: spi-nor: expose internal parameters via debugfs\")\n> Closes: https://sashiko.dev/#/patchset/20260417-die-erase-fix-v2-1-73bb7004ebad%40infineon.com [1]\n> Signed-off-by: Tudor Ambarus \n\nReviewed-by: Takahiro Kuwano ","headers":{"Return-Path":"\n ","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n secure) header.d=lists.infradead.org header.i=@lists.infradead.org\n header.a=rsa-sha256 header.s=bombadil.20210309 header.b=zvs49Td6;\n\tdkim=fail reason=\"signature verification failed\" (1024-bit key;\n unprotected) header.d=infineon.com header.i=@infineon.com header.a=rsa-sha256\n header.s=IFXMAIL header.b=M0Azxz4Z;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=none (no SPF record) smtp.mailfrom=lists.infradead.org\n (client-ip=2607:7c80:54:3::133; helo=bombadil.infradead.org;\n envelope-from=linux-mtd-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org;\n receiver=patchwork.ozlabs.org)"],"Received":["from bombadil.infradead.org (bombadil.infradead.org\n [IPv6:2607:7c80:54:3::133])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0Pxd1QV0z1yGt\n\tfor ; Wed, 22 Apr 2026 00:34:09 +1000 (AEST)","from localhost ([::1] helo=bombadil.infradead.org)\n\tby bombadil.infradead.org with esmtp (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1wFCAj-00000008k3c-3m68;\n\tTue, 21 Apr 2026 14:33:53 +0000","from smtp9.infineon.com ([217.10.52.204])\n\tby bombadil.infradead.org with esmtps (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1wFCAh-00000008k2X-0C07\n\tfor linux-mtd@lists.infradead.org;\n\tTue, 21 Apr 2026 14:33:52 +0000","from unknown (HELO MUCSE812.infineon.com) ([172.23.29.38])\n by smtp9.infineon.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384;\n 21 Apr 2026 16:32:46 +0200","from MUCSE820.infineon.com (172.23.29.46) by MUCSE812.infineon.com\n (172.23.29.38) with Microsoft SMTP Server (version=TLS1_2,\n cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Tue, 21 Apr\n 2026 16:32:46 +0200","from MUCSE815.infineon.com (172.23.29.41) by MUCSE820.infineon.com\n (172.23.29.46) with Microsoft SMTP Server (version=TLS1_2,\n cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Tue, 21 Apr\n 2026 16:32:45 +0200","from MUCSE815.infineon.com ([fe80::b54c:c0bd:546c:c9be]) by\n MUCSE815.infineon.com ([fe80::b54c:c0bd:546c:c9be%12]) with mapi id\n 15.02.2562.037; Tue, 21 Apr 2026 16:32:45 +0200"],"DKIM-Signature":["v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;\n\td=lists.infradead.org; s=bombadil.20210309; h=Sender:\n\tContent-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post:\n\tList-Archive:List-Unsubscribe:List-Id:MIME-Version:In-Reply-To:References:\n\tMessage-ID:Date:Subject:CC:To:From:Reply-To:Content-ID:Content-Description:\n\tResent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:\n\tList-Owner; bh=rRZg8QbxJai4PZBUS1PuogDYVYMod+VvN1VPDAge68w=; b=zvs49Td6OgVenc\n\t/ImgTsNWUR/4XchmQlIaNddkiutBj6Pc0DhRYX7NfprwVkBMQZGHtWJkM8AcR0kOvELDSvmjh77gg\n\tPccPGDC32W5W/tpb5cqWNtJdeemEF1lcIbaf1KUsxsPvgVZklhEgw/F73yL46Xi3DyAo+c8G/nY+l\n\tcjVKx6im9VyJH59R5X/cFX0l+MaZSrqskjNIG2tDUG9NDtR2i0cYiTH086MHeL4vfIJQo0BYZCmer\n\t1CqLV4e3TgPUMEtUyyAF5Oxm+aoluflEkdFIRrIwSPDVUEUZR6lxbWC3NmtOcOYwjHZIoU4B9tS5a\n\tFCrqxiStsZSXqzpfZeaw==;","v=1; a=rsa-sha256; c=simple/simple;\n d=infineon.com; i=@infineon.com; q=dns/txt; s=IFXMAIL;\n t=1776782031; x=1808318031;\n h=from:to:cc:subject:date:message-id:references:\n in-reply-to:content-transfer-encoding:mime-version;\n bh=ArMpXotcTeEwyqUdj8I1RO41SIFb1S0fVagj1cHmjlc=;\n b=M0Azxz4ZAVrT1dsnhK6xJLtUUo/mnTDa9y9qx9FHH0ZHkWkBsAtWQhdv\n TgakFr8lK3TvnnZhwZ8T7EEVGpnqa/xfww6mToWxUDjkDdJC9brEmz8+1\n o1PjIJ4P3pJDUunneIdjYg/0doMWjsjpbsYy1WJn1ydhrS+9oSru0+zYT\n 0=;"],"X-CSE-ConnectionGUID":"+FeV1V4KQSyIe2LMbQyvdg==","X-CSE-MsgGUID":"A+6UxzbISeGE7osJaVQCWg==","X-IronPort-AV":["E=McAfee;i=\"6800,10657,11763\"; a=\"90661278\"","E=Sophos;i=\"6.23,191,1770591600\";\n d=\"scan'208\";a=\"90661278\""],"X-Amp-Result":"SKIPPED(no attachment in message)","From":"","To":", , ,\n\t, , ","CC":", , ,\n\t, ","Subject":"RE: [PATCH] mtd: spi-nor: debugfs: fix out-of-bounds read in\n spi_nor_params_show()","Thread-Topic":"[PATCH] mtd: spi-nor: debugfs: fix out-of-bounds read in\n spi_nor_params_show()","Thread-Index":"AQHczn5R2lmDsActuEKo+AhMPfaN4bXpmZig","Date":"Tue, 21 Apr 2026 14:32:45 +0000","Message-ID":"<308e7510718f46169d9465658f2c385a@infineon.com>","References":"<20260417-fix-oob-read-spi-nor-v1-1-2132e61a684a@linaro.org>","In-Reply-To":"<20260417-fix-oob-read-spi-nor-v1-1-2132e61a684a@linaro.org>","Accept-Language":"en-US","Content-Language":"en-US","X-MS-Has-Attach":"","X-MS-TNEF-Correlator":"","x-originating-ip":"[10.161.6.196]","MIME-Version":"1.0","X-CRM114-Version":"20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 ","X-CRM114-CacheID":"sfid-20260421_073351_485744_D7143217 ","X-CRM114-Status":"GOOD ( 12.77 )","X-Spam-Score":"-2.8 (--)","X-Spam-Report":"Spam detection software,\n running on the system \"bombadil.infradead.org\",\n has NOT identified this incoming email as spam. The original\n message has been attached to this so you can view it or label\n similar future email. If you have any questions, see\n the administrator of that system for details.\n Content preview: > Sashiko noticed an out-of-bounds read [1]. > > In\n spi_nor_params_show(),\n the snor_f_names array is passed to > spi_nor_print_flags() using\n sizeof(snor_f_names).\n > > Since snor_f_names is an array of [...]\n Content analysis details: (-2.8 points, 5.0 required)\n pts rule name description\n ---- ----------------------\n --------------------------------------------------\n -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low\n trust\n [217.10.52.204 listed in list.dnswl.org]\n -0.0 SPF_PASS SPF: sender matches SPF record\n 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record\n -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from\n envelope-from domain\n -0.1 DKIM_VALID Message has at least one valid DKIM or DK\n signature\n -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from\n author's\n domain\n 0.1 DKIM_SIGNED Message has a DKIM or DK signature,\n not necessarily valid\n -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%\n [score: 0.0000]","X-BeenThere":"linux-mtd@lists.infradead.org","X-Mailman-Version":"2.1.34","Precedence":"list","List-Id":"Linux MTD discussion mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Sender":"\"linux-mtd\" ","Errors-To":"linux-mtd-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org"}}]