Re: [PATCH] mtd: afs: validate v2 image info bounds

[Miquel Raynal]

On 06/07/2026 at 17:40:59 +08, Pengpeng Hou <pengpeng@xxxxxxxxxxx> wrote:

> The AFS v2 parser uses footer[8] to locate the image information block
> inside the current erase block, then uses the image information
> region_count to walk entries from a fixed local array. The footer offset
> and region count come from flash contents and were not checked against the
> erase block or the local image-info array before use.
>
> Reject v2 entries whose image information offset would underflow the erase
> block calculation, and reject region counts that cannot fit in the local
> image-info array before walking region entries.
>
> Signed-off-by: Pengpeng Hou <pengpeng@xxxxxxxxxxx>

I'll let you guess what is missing in this contribution?

Thanks,
Miquèl