diff options
| author | seteiro <[email protected]> | 2026-11-12 00:48:23 +0800 |
|---|---|---|
| committer | Rbb666 <[email protected]> | 2026-11-13 09:38:24 +0800 |
| commit | 4014174e525b200e8c64b48deb2af83b955233a2 (patch) | |
| tree | 84d8a7ab27c5f2b9623ca11f6f85914c678a3612 /components/external/SQLite-3.8.1 | |
| parent | e69e6620322f3394f7da5c56ebfcfed408669efb (diff) | |
[drivers][mtd] fix CFI sector table off-by-one bound
Complete the CFI erase-region and sector-table bounds hardening after #11558:
- When sect_count >= RT_ARRAY_SIZE(fdev->sect), log the actual >= limit
using %lu and fail probe with -RT_EINVAL via goto _fail instead of only
breaking the inner erase-region loop and registering a truncated flash.
- Reject zero sector counts, invalid size_ratio/dev_size shifts, and
ioremap failures during probe, guard cfi_flash_find() against
sect_count == 0 underflow, and clear fdev->sect[0] after rt_iounmap()
in _fail to avoid double-unmap from cfi_flash_probe().
Fixes #11272
Diffstat (limited to 'components/external/SQLite-3.8.1')
0 files changed, 0 insertions, 0 deletions
