diff options
| author | Geert Uytterhoeven <geert+renesas@linux-m68k.org> | 2014-01-28 10:33:03 +0100 |
|---|---|---|
| committer | Mark Brown <broonie@linaro.org> | 2014-01-28 17:48:40 +0000 |
| commit | 1f802f8249a0da536877842c43c7204064c4de8b (patch) | |
| tree | df680aa6e3b29bb101dd5f9dde26a51e63e09568 /drivers/spi/spi.c | |
| parent | 8b8b773e6b611e6629ac01f85d401c949d153546 (diff) | |
| download | linux-1f802f8249a0da536877842c43c7204064c4de8b.tar.gz | |
spi: Fix crash with double message finalisation on error handling
This reverts commit e120cc0dcf2880a4c5c0a6cb27b655600a1cfa1d. It causes a NULL pointer dereference with drivers using the generic spi_transfer_one_message(), which always calls spi_finalize_current_message(), which zeroes master->cur_msg. Drivers implementing transfer_one_message() theirselves must always call spi_finalize_current_message(), even if the transfer failed: * @transfer_one_message: the subsystem calls the driver to transfer a single * message while queuing transfers that arrive in the meantime. When the * driver is finished with this message, it must call * spi_finalize_current_message() so the subsystem can issue the next * transfer Signed-off-by: Geert Uytterhoeven <geert+renesas@linux-m68k.org> Signed-off-by: Mark Brown <broonie@linaro.org>
Diffstat (limited to 'drivers/spi/spi.c')
| -rw-r--r-- | drivers/spi/spi.c | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/drivers/spi/spi.c b/drivers/spi/spi.c index 63613a96233c..26f4afd19faf 100644 --- a/drivers/spi/spi.c +++ b/drivers/spi/spi.c @@ -745,9 +745,7 @@ static void spi_pump_messages(struct kthread_work *work) ret = master->transfer_one_message(master, master->cur_msg); if (ret) { dev_err(&master->dev, - "failed to transfer one message from queue: %d\n", ret); - master->cur_msg->status = ret; - spi_finalize_current_message(master); + "failed to transfer one message from queue\n"); return; } } |