On 11/13/25 11:46 PM, Simon Glass wrote:

Hello Simon,

diff --git a/drivers/core/ofnode.c b/drivers/core/ofnode.c
index 071d998a0a5..55c2b3a10bb 100644
--- a/drivers/core/ofnode.c
+++ b/drivers/core/ofnode.c
@@ -335,7 +335,7 @@ bool ofnode_name_eq_unit(ofnode node, const char *name)
   int ofnode_read_u8(ofnode node, const char *propname, u8 *outp)
   {
          const u8 *cell;
-       int len;
+       int len, off;

          assert(ofnode_valid(node));
          log_debug("%s: %s: ", __func__, propname);
@@ -343,8 +343,13 @@ int ofnode_read_u8(ofnode node, const char *propname, u8 
*outp)
          if (ofnode_is_np(node))
                  return of_read_u8(ofnode_to_np(node), propname, outp);

-       cell = fdt_getprop(gd->fdt_blob, ofnode_to_offset(node), propname,
-                          &len);
+       off = ofnode_to_offset(node);
+       if (off < 0) {
+               log_debug("(not valid)\n");
+               return -EINVAL;
+       }

Ugh this is really horrible, sorry :-)

Better to put a wrapper around it than add all these checks, extra
code size, etc. Also in many cases the ofnode is known to be valid(TM)
so it might just be a waste.

How would you propose the wrapper should look like ?

Keep in mind, not everything is fdt_getprop( ... ofnode_to_offset() ...)
in this patch.

I was thinking of

my_fdt_getprop(fdt, node, propname, lenp)
{
if (node is not valid)
    return NULL;
return fdt_getprop();
}

We would need a wrapper for almost every libfdt call, which isn't really better.

What does fdt_getprop() return when the offset is -1 ?
If can_assume(VALID_DTB) , then crash on NULL pointer dereference .
If not, I think FDT_END (premature end) or an error code.

Reply via email to