From: Miquel Raynal <miquel.raynal@bootlin.com>
To: Raag Jadav <raag.jadav@intel.com>
Cc: Randy Dunlap <rdunlap@infradead.org>,
"Gustavo A. R. Silva" <gustavoars@kernel.org>,
Alexander Usyskin <alexander.usyskin@intel.com>,
Richard Weinberger <richard@nod.at>,
Vignesh Raghavendra <vigneshr@ti.com>,
Rodrigo Vivi <rodrigo.vivi@intel.com>,
Tomas Winkler <tomasw@gmail.com>,
linux-mtd@lists.infradead.org, linux-kernel@vger.kernel.org,
linux-hardening@vger.kernel.org
Subject: Re: [PATCH] mtd: intel-dg: fix array-index-out-of-bounds in intel_dg_mtd_probe()
Date: Fri, 09 Jan 2026 14:50:18 +0100 [thread overview]
Message-ID: <87a4ymyjxh.fsf@bootlin.com> (raw)
In-Reply-To: <aWDNNOoYTa0Mi7LM@black.igk.intel.com> (Raag Jadav's message of "Fri, 9 Jan 2026 10:41:08 +0100")
On 09/01/2026 at 10:41:08 +01, Raag Jadav <raag.jadav@intel.com> wrote:
> On Wed, Jan 07, 2026 at 03:17:40PM -0800, Randy Dunlap wrote:
>> Hi,
>>
>> On 12/19/25 11:07 PM, Raag Jadav wrote:
>> > On Sat, Dec 20, 2025 at 03:41:49PM +0900, Gustavo A. R. Silva wrote:
>> >> Fix the UBSAN: array-index-out-of-bounds issue below by updating
>> >> counter nvm->nregions before the first access to flexible-array
>> >> member nvm->regions[].
>> >>
>> >> from kernel bugzilla:
>> >> https://bugzilla.kernel.org/show_bug.cgi?id=220823
>> >>
>> >> Dec 15 22:01:52 orpheus kernel: UBSAN: array-index-out-of-bounds in
>> >> /var/tmp/portage/sys-kernel/gentoo-kernel-6.18.1/work/linux-6.18/drivers/mtd/devices/mtd_intel_dg.c:750:15
>> >>
>> >> Notice that this flexible array is annotated with the counted_by()
>> >> attribute, hence the counter must always be updated before the
>> >> first access to the array.
>> >
>> > Already fixed[1], but not sure if it's landed yet.
>> >
>> > [1] https://lore.kernel.org/linux-mtd/20251111-mtd-nregions-v1-1-61db61e78c63@intel.com/
>>
>> What's the status of this patch, please?
>
> I'm assuming it'll go through mtd tree? Miquel?
It should indeed. However only the mtd list has been included, so it
won't appear in "my" todo list. Lucas can you please resend, and use a
tool such as b4 to manage the series or at least run get_maintainers.pl?
Thanks,
Miquèl
next prev parent reply other threads:[~2026-01-09 13:50 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-12-20 6:41 [PATCH] mtd: intel-dg: fix array-index-out-of-bounds in intel_dg_mtd_probe() Gustavo A. R. Silva
2025-12-20 7:05 ` Randy Dunlap
2025-12-20 7:07 ` Raag Jadav
2025-12-20 7:12 ` Gustavo A. R. Silva
2026-01-07 23:17 ` Randy Dunlap
2026-01-09 9:41 ` Raag Jadav
2026-01-09 13:50 ` Miquel Raynal [this message]
2026-01-09 15:16 ` Raag Jadav
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87a4ymyjxh.fsf@bootlin.com \
--to=miquel.raynal@bootlin.com \
--cc=alexander.usyskin@intel.com \
--cc=gustavoars@kernel.org \
--cc=linux-hardening@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mtd@lists.infradead.org \
--cc=raag.jadav@intel.com \
--cc=rdunlap@infradead.org \
--cc=richard@nod.at \
--cc=rodrigo.vivi@intel.com \
--cc=tomasw@gmail.com \
--cc=vigneshr@ti.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox