Since this is Fix day, I went over this old bug: https://gitlab.com/qemu-project/qemu/-/issues/487 It happens to be a QEMU implementation detail not really related to the spec.
Philippe Mathieu-Daudé (2): hw/sd/sdcard: Avoid OOB in sd_read_byte() during unexpected CMD switch hw/sd/sdcard: Assert @data_offset is in range hw/sd/sd.c | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) -- 2.41.0