Re: [PATCH v2 0/2] mtd: spi-nor: sfdp: bound two optional parameter tables

From: Michael Walle

Date: Fri Sep 04 2026 - 09:58:10 EST



On Mon, 20 Jul 2026 23:11:02 +0900, HyeongJun An wrote:
> Two of the optional SFDP parameter table parsers size a buffer from the
> table length the flash reports, then index it at fixed offsets without
> checking the table is long enough.
>
> spi_nor_parse_profile1() reads up to DWORD5, never checks the length
> spi_nor_parse_sccr() reads up to DWORD22, never checks the length
>
> [...]

Applied, thanks!

[1/2] mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table
commit: b9f34a95a81021fa1f3c9cb8cfd458e66824cad6
[2/2] mtd: spi-nor: sfdp: check the length of the SCCR map
commit: 1413f38f37194673502e61cd3749e091c031370b

Best regards,
--
Michael Walle <mwalle@xxxxxxxxxx>