mtd: spi-nor: Potential oops on error path in quad_enable()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 5 May 2017 05:33:56 +0000 (08:33 +0300)
committerCyrille Pitchen <cyrille.pitchen@wedev4u.fr>
Mon, 15 May 2017 19:56:18 +0000 (21:56 +0200)
Before commit cff959958832 ("mtd: spi-nor: introduce SPI 1-2-2 and SPI
1-4-4 protocols") then we treated 1 as -EINVAL in the caller but after
that commit we changed to propagate the return.  My static checker
complains that it's eventually passed to an ERR_PTR() and later
dereferenced, but I'm not totally certain if that's true.  Regardless,
returning 1 is wrong.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Cyrille Pitchen <cyrille.pitchen@wedev4u.fr>
drivers/mtd/spi-nor/spi-nor.c

index 060a59e..eef55b5 100644 (file)
@@ -1389,8 +1389,9 @@ static int macronix_quad_enable(struct spi_nor *nor)
 
        write_sr(nor, val | SR_QUAD_EN_MX);
 
-       if (spi_nor_wait_till_ready(nor))
-               return 1;
+       ret = spi_nor_wait_till_ready(nor);
+       if (ret)
+               return ret;
 
        ret = read_sr(nor);
        if (!(ret > 0 && (ret & SR_QUAD_EN_MX))) {