Hi Aristo, On 2026-06-21T14:39:32, Aristo Chen <[email protected]> wrote:
> One open question: should the external-data blk_read() in vbe_read_fit() > also be deferred until after the phase has been signature-verified, > rather than just bounded? The bounded read is the right first step. Deferring until after verification touches the SPL/TPL/VPL call paths and the bootmeth flow, so that could be done as a separate series. > Patch 2 adds the missing range check ... This could use a sandbox test that gives vbe_read_fit() a FIT with an out-of-range data-position or oversized data-size and checks it returns -E2BIG Regards, Simon
