Re: [PATCH v2] rtc: spacemit: handle regmap_test_bits() error return

[email protected] Fri, 24 Jul 2026 14:06:33 +0000
Newsgroups org.kernel.vger.linux-rtc
Message-ID <[email protected]>
Thank you for your contribution! Sashiko AI review found 1 potential issue(=
s) to consider:

Pre-existing issues:
- [High] The RTC time read retry loop in `p1_rtc_read_time` is vulnerable t=
o a torn read (time corruption) if a time roll-over occurs during the regis=
ter read.
--

--- Patch [1]: [PATCH v2] rtc: spacemit: handle regmap_test_bits() error re=
turn ---
commit a044092d776fab1e96ae2f8b48ace64aa0ab2325
Author: Surendra Singh Chouhan <[email protected]>

rtc: spacemit: handle regmap_test_bits() error return

p1_rtc_read_time() called if (!regmap_test_bits(regmap, RTC_CTRL, RTC_EN))
to check if the RTC was enabled. This evaluates negative error codes as
boolean false, causing read failures to be ignored. Fix this by capturing
the return value of regmap_test_bits() and returning the error code.

> diff --git a/drivers/rtc/rtc-spacemit-p1.c b/drivers/rtc/rtc-spacemit-p1.c
> index 43ab62494bb4b..1de7bd995d296 100644
> --- a/drivers/rtc/rtc-spacemit-p1.c
> +++ b/drivers/rtc/rtc-spacemit-p1.c
> @@ -57,8 +57,9 @@ static int p1_rtc_read_time(struct device *dev, struct =
rtc_time *t)
>  	u8 time[6];
>  	int ret;
> =20
> -	if (!regmap_test_bits(regmap, RTC_CTRL, RTC_EN))
> -		return -EINVAL;		/* RTC is disabled */
> +	ret =3D regmap_test_bits(regmap, RTC_CTRL, RTC_EN);
> +	if (ret <=3D 0)
> +		return ret ?: -EINVAL;	/* RTC is disabled or error */
> =20
>  	ret =3D regmap_bulk_read(regmap, RTC_TIME, time, sizeof(time));
>  	if (ret)
>  		return ret;
> =20
>  	do {
>  		seconds =3D time[0];
>  		ret =3D regmap_bulk_read(regmap, RTC_TIME, time, sizeof(time));
>  		if (ret)
>  			return ret;
>  	} while (time[0] !=3D seconds && --count);

[Severity: High]
This is a pre-existing issue, but does this loop correctly detect time
roll-overs that happen during the read?

If a time roll-over occurs during the second regmap_bulk_read() in
p1_rtc_read_time(), specifically after reading time[0] (seconds) but before
reading higher units, time[0] will match the seconds from the previous read.

This would cause the loop to terminate early and accept the newly read time
array.

Could this return a torn time from the RTC (for example, 14:00:59 instead of
13:59:59 or 14:00:00)?

--=20
Sashiko AI review =C2=B7 https://sashiko.dev/#/patchset/20260724135803.8122=
[email protected]?part=3D1