re: hwmon: add MP2925 and MP2929 driver
From: Colin King (gmail)
Date: Fri Sep 26 2025 - 10:17:57 EST
Hi,
Static analysis on linux-next has found an issue in function mp2925_write_word_data with the following commit:
commit b3a4efc88601cb5fc97b4ae23c478700a60302da
Author: Wensheng Wang <wenswang@xxxxxxxx>
Date: Thu Sep 18 16:06:03 2025 +0800
hwmon: add MP2925 and MP2929 driver
The issue is as follows:
case PMBUS_VOUT_OV_FAULT_LIMIT:
case PMBUS_VOUT_UV_FAULT_LIMIT:
ret = pmbus_write_word_data(client, page, reg,
(ret & ~GENMASK(11, 0)) |
FIELD_PREP(GENMASK(11, 0),
DIV_ROUND_CLOSEST(word * MP2925_VOUT_OVUV_DIV,
MP2925_VOUT_OVUV_UINT)));
break;
The call to pmbus_write_word_data() is accessing variable ret via the mask ~GENMASK(11, 0) however at this point ret has not been initialized so it contains a garbage value.
Colin
Attachment:
OpenPGP_0x68C287DFC6A80226.asc
Description: OpenPGP public key
Attachment:
OpenPGP_signature.asc
Description: OpenPGP digital signature