From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtpout-02.galae.net (smtpout-02.galae.net [185.246.84.56]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 576E535CB75 for ; Fri, 9 Jan 2026 13:50:31 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=185.246.84.56 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1767966633; cv=none; b=ZhJNSgmSqBIlmnTqC0YitWZBhEu66/yoQ6NifRn+HFYhAw4asB62lb1gHlFnSa4AYRf82qXX/dXsBPAZPPtvoGM1lUD43+Q4ve6l1I/CsFG3m/FzaxPoHAi8eTV6DUTdRKVAGxX+IohrMt8kZHgifcKEaPLDFCGRWDwRu8temis= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1767966633; c=relaxed/simple; bh=7zjuKf+UIxL3bVA44Jw3Yx6helDynPKRicBwZQnETMM=; h=From:To:Cc:Subject:In-Reply-To:References:Date:Message-ID: MIME-Version:Content-Type; b=WrHM5xSubKeaIoE7sFwgfPLOtbtq22xLVwig0ez49XYf/WHMFGVScdg+4hwNYVVVT9X5eg4124tvB0xulJpJwhM3nY2h1OjxlLRRUeIADbEC53HGUv2YBvk8S7gYcK6iqPjcxctZS0+j3sSEEI4bbEG+2+gpnCrHXUDRTyFKII8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=bootlin.com; spf=pass smtp.mailfrom=bootlin.com; dkim=pass (2048-bit key) header.d=bootlin.com header.i=@bootlin.com header.b=d0aTQxGs; arc=none smtp.client-ip=185.246.84.56 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=bootlin.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=bootlin.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=bootlin.com header.i=@bootlin.com header.b="d0aTQxGs" Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-02.galae.net (Postfix) with ESMTPS id E61F21A272C; Fri, 9 Jan 2026 13:50:23 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id B428E606C6; Fri, 9 Jan 2026 13:50:23 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id EE4EA103C8329; Fri, 9 Jan 2026 14:50:19 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1767966623; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=7zjuKf+UIxL3bVA44Jw3Yx6helDynPKRicBwZQnETMM=; b=d0aTQxGsylzWCcJ5fUfL8+ZNebSEojE2M/GcU0sjfELjBB41JEP78+mhpOsqLNVRRdgqB5 EoucvonRbo3e914sIVvlidNUHYWsEPClnCO9pKYvAd3mnNMFW/gI1PwNLsG0mHhrJ7IfRh rixwSyhKoIwZ1vHTVdICtZCC0a/RMFCfu6sILe8sAU8fMgGRlj0ikxutSud32ieKdgvPVX kJSGCyhHNubMt7NDeqZfUuq3HuvwGsd0a+7F9febBhoefUyU/CUg4IRjdQpk+2tiBlhADp r8fuKUqHaNiTa4wu1pcNc/YiVHiKe6MhsE3n3QflzWzvy+rSy/3r5WrAv9ta0A== From: Miquel Raynal To: Raag Jadav Cc: Randy Dunlap , "Gustavo A. R. Silva" , Alexander Usyskin , Richard Weinberger , Vignesh Raghavendra , Rodrigo Vivi , Tomas Winkler , linux-mtd@lists.infradead.org, linux-kernel@vger.kernel.org, linux-hardening@vger.kernel.org Subject: Re: [PATCH] mtd: intel-dg: fix array-index-out-of-bounds in intel_dg_mtd_probe() In-Reply-To: (Raag Jadav's message of "Fri, 9 Jan 2026 10:41:08 +0100") References: <0c69b711-4c88-4e64-afe7-f7de147a490b@infradead.org> User-Agent: mu4e 1.12.7; emacs 30.2 Date: Fri, 09 Jan 2026 14:50:18 +0100 Message-ID: <87a4ymyjxh.fsf@bootlin.com> Precedence: bulk X-Mailing-List: linux-hardening@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Last-TLS-Session-Version: TLSv1.3 On 09/01/2026 at 10:41:08 +01, Raag Jadav wrote: > On Wed, Jan 07, 2026 at 03:17:40PM -0800, Randy Dunlap wrote: >> Hi, >>=20 >> On 12/19/25 11:07 PM, Raag Jadav wrote: >> > On Sat, Dec 20, 2025 at 03:41:49PM +0900, Gustavo A. R. Silva wrote: >> >> Fix the UBSAN: array-index-out-of-bounds issue below by updating >> >> counter nvm->nregions before the first access to flexible-array >> >> member nvm->regions[]. >> >> >> >> from kernel bugzilla: >> >> https://bugzilla.kernel.org/show_bug.cgi?id=3D220823 >> >> >> >> Dec 15 22:01:52 orpheus kernel: UBSAN: array-index-out-of-bounds in >> >> /var/tmp/portage/sys-kernel/gentoo-kernel-6.18.1/work/linux-6.18/driv= ers/mtd/devices/mtd_intel_dg.c:750:15 >> >> >> >> Notice that this flexible array is annotated with the counted_by() >> >> attribute, hence the counter must always be updated before the >> >> first access to the array. >> >=20 >> > Already fixed[1], but not sure if it's landed yet. >> >=20 >> > [1] https://lore.kernel.org/linux-mtd/20251111-mtd-nregions-v1-1-61db6= 1e78c63@intel.com/ >>=20 >> What's the status of this patch, please? > > I'm assuming it'll go through mtd tree? Miquel? It should indeed. However only the mtd list has been included, so it won't appear in "my" todo list. Lucas can you please resend, and use a tool such as b4 to manage the series or at least run get_maintainers.pl? Thanks, Miqu=C3=A8l From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 4F995D1A623 for ; Fri, 9 Jan 2026 13:50:42 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:MIME-Version:Message-ID:Date:References :In-Reply-To:Subject:Cc:To:From:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=V9hvhq2rb01FAK3hpp15nKe3BUMP5VohhVusQpzl7yI=; b=2Mhwcmt1CTrs2k 2b54Ty/Z7M5OMgoHBT0GEJH2sxDRt64ItfAeH6eLx0B5hANgAy2T2kpMenStLQVuamCdQIHoSjqxv m+ZaZbTLgrAowekje8FCTCcmJ6nCEKgvWHHKi2TTqchYcaqk84R8CDfTzv4YQvjPd8gWMj65nXp+c 401UMSi/CEpefQAHKJFujbG/KE+puvehdxzOVhQMiSKelZfmZjkjAqTHYFxywEPViXhDHy5oJvab+ ymNCbfpysFkqc35FnHJJzLPtm65Xy+27HEvjrZKSFV/Of4RCw/pyygysYFdlgUQFyisW57CZ3OQca WrQ7y1u6CQZEsaKORTxA==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.98.2 #2 (Red Hat Linux)) id 1veCsr-00000002NGQ-4Asl; Fri, 09 Jan 2026 13:50:33 +0000 Received: from smtpout-03.galae.net ([185.246.85.4]) by bombadil.infradead.org with esmtps (Exim 4.98.2 #2 (Red Hat Linux)) id 1veCsm-00000002NFn-1AR7 for linux-mtd@lists.infradead.org; Fri, 09 Jan 2026 13:50:30 +0000 Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-03.galae.net (Postfix) with ESMTPS id ED7B74E42023; Fri, 9 Jan 2026 13:50:23 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id B428E606C6; Fri, 9 Jan 2026 13:50:23 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id EE4EA103C8329; Fri, 9 Jan 2026 14:50:19 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1767966623; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=7zjuKf+UIxL3bVA44Jw3Yx6helDynPKRicBwZQnETMM=; b=d0aTQxGsylzWCcJ5fUfL8+ZNebSEojE2M/GcU0sjfELjBB41JEP78+mhpOsqLNVRRdgqB5 EoucvonRbo3e914sIVvlidNUHYWsEPClnCO9pKYvAd3mnNMFW/gI1PwNLsG0mHhrJ7IfRh rixwSyhKoIwZ1vHTVdICtZCC0a/RMFCfu6sILe8sAU8fMgGRlj0ikxutSud32ieKdgvPVX kJSGCyhHNubMt7NDeqZfUuq3HuvwGsd0a+7F9febBhoefUyU/CUg4IRjdQpk+2tiBlhADp r8fuKUqHaNiTa4wu1pcNc/YiVHiKe6MhsE3n3QflzWzvy+rSy/3r5WrAv9ta0A== From: Miquel Raynal To: Raag Jadav Cc: Randy Dunlap , "Gustavo A. R. Silva" , Alexander Usyskin , Richard Weinberger , Vignesh Raghavendra , Rodrigo Vivi , Tomas Winkler , linux-mtd@lists.infradead.org, linux-kernel@vger.kernel.org, linux-hardening@vger.kernel.org Subject: Re: [PATCH] mtd: intel-dg: fix array-index-out-of-bounds in intel_dg_mtd_probe() In-Reply-To: (Raag Jadav's message of "Fri, 9 Jan 2026 10:41:08 +0100") References: <0c69b711-4c88-4e64-afe7-f7de147a490b@infradead.org> User-Agent: mu4e 1.12.7; emacs 30.2 Date: Fri, 09 Jan 2026 14:50:18 +0100 Message-ID: <87a4ymyjxh.fsf@bootlin.com> MIME-Version: 1.0 X-Last-TLS-Session-Version: TLSv1.3 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20260109_055028_825253_022E9852 X-CRM114-Status: GOOD ( 13.52 ) X-BeenThere: linux-mtd@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: Linux MTD discussion mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-mtd" Errors-To: linux-mtd-bounces+linux-mtd=archiver.kernel.org@lists.infradead.org T24gMDkvMDEvMjAyNiBhdCAxMDo0MTowOCArMDEsIFJhYWcgSmFkYXYgPHJhYWcuamFkYXZAaW50 ZWwuY29tPiB3cm90ZToKCj4gT24gV2VkLCBKYW4gMDcsIDIwMjYgYXQgMDM6MTc6NDBQTSAtMDgw MCwgUmFuZHkgRHVubGFwIHdyb3RlOgo+PiBIaSwKPj4gCj4+IE9uIDEyLzE5LzI1IDExOjA3IFBN LCBSYWFnIEphZGF2IHdyb3RlOgo+PiA+IE9uIFNhdCwgRGVjIDIwLCAyMDI1IGF0IDAzOjQxOjQ5 UE0gKzA5MDAsIEd1c3Rhdm8gQS4gUi4gU2lsdmEgd3JvdGU6Cj4+ID4+IEZpeCB0aGUgVUJTQU46 IGFycmF5LWluZGV4LW91dC1vZi1ib3VuZHMgaXNzdWUgYmVsb3cgYnkgdXBkYXRpbmcKPj4gPj4g Y291bnRlciBudm0tPm5yZWdpb25zIGJlZm9yZSB0aGUgZmlyc3QgYWNjZXNzIHRvIGZsZXhpYmxl LWFycmF5Cj4+ID4+IG1lbWJlciBudm0tPnJlZ2lvbnNbXS4KPj4gPj4KPj4gPj4gZnJvbSBrZXJu ZWwgYnVnemlsbGE6Cj4+ID4+IGh0dHBzOi8vYnVnemlsbGEua2VybmVsLm9yZy9zaG93X2J1Zy5j Z2k/aWQ9MjIwODIzCj4+ID4+Cj4+ID4+IERlYyAxNSAyMjowMTo1MiBvcnBoZXVzIGtlcm5lbDog VUJTQU46IGFycmF5LWluZGV4LW91dC1vZi1ib3VuZHMgaW4KPj4gPj4gL3Zhci90bXAvcG9ydGFn ZS9zeXMta2VybmVsL2dlbnRvby1rZXJuZWwtNi4xOC4xL3dvcmsvbGludXgtNi4xOC9kcml2ZXJz L210ZC9kZXZpY2VzL210ZF9pbnRlbF9kZy5jOjc1MDoxNQo+PiA+Pgo+PiA+PiBOb3RpY2UgdGhh dCB0aGlzIGZsZXhpYmxlIGFycmF5IGlzIGFubm90YXRlZCB3aXRoIHRoZSBjb3VudGVkX2J5KCkK Pj4gPj4gYXR0cmlidXRlLCBoZW5jZSB0aGUgY291bnRlciBtdXN0IGFsd2F5cyBiZSB1cGRhdGVk IGJlZm9yZSB0aGUKPj4gPj4gZmlyc3QgYWNjZXNzIHRvIHRoZSBhcnJheS4KPj4gPiAKPj4gPiBB bHJlYWR5IGZpeGVkWzFdLCBidXQgbm90IHN1cmUgaWYgaXQncyBsYW5kZWQgeWV0Lgo+PiA+IAo+ PiA+IFsxXSBodHRwczovL2xvcmUua2VybmVsLm9yZy9saW51eC1tdGQvMjAyNTExMTEtbXRkLW5y ZWdpb25zLXYxLTEtNjFkYjYxZTc4YzYzQGludGVsLmNvbS8KPj4gCj4+IFdoYXQncyB0aGUgc3Rh dHVzIG9mIHRoaXMgcGF0Y2gsIHBsZWFzZT8KPgo+IEknbSBhc3N1bWluZyBpdCdsbCBnbyB0aHJv dWdoIG10ZCB0cmVlPyBNaXF1ZWw/CgpJdCBzaG91bGQgaW5kZWVkLiBIb3dldmVyIG9ubHkgdGhl IG10ZCBsaXN0IGhhcyBiZWVuIGluY2x1ZGVkLCBzbyBpdAp3b24ndCBhcHBlYXIgaW4gIm15IiB0 b2RvIGxpc3QuIEx1Y2FzIGNhbiB5b3UgcGxlYXNlIHJlc2VuZCwgYW5kIHVzZSBhCnRvb2wgc3Vj aCBhcyBiNCB0byBtYW5hZ2UgdGhlIHNlcmllcyBvciBhdCBsZWFzdCBydW4gZ2V0X21haW50YWlu ZXJzLnBsPwoKVGhhbmtzLApNaXF1w6hsCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18KTGludXggTVREIGRpc2N1c3Npb24gbWFpbGluZyBsaXN0 Cmh0dHA6Ly9saXN0cy5pbmZyYWRlYWQub3JnL21haWxtYW4vbGlzdGluZm8vbGludXgtbXRkLwo=