MdeModulePkg FaultTolerantWrite: Error handling for erase operation failure

There may be anti-flash wear out feature to forbid erase operation after end of dxe.
The code is missing some error handling for erase operation failure,
it should return directly after the erase operation failed.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Star Zeng <star.zeng@intel.com>
Reviewed-by: Liming Gao <liming.gao@intel.com>

git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@18320 6f19259b-4bc3-4df7-8a09-765794883524

2 files changed, 24 insertions, 3 deletions

diff --git a/MdeModulePkg/Universal/FaultTolerantWriteDxe/FaultTolerantWrite.c b/MdeModulePkg/Universal/FaultTolerantWriteDxe/FaultTolerantWrite.c
index f08f280..7a6c377 100644
--- a/MdeModulePkg/Universal/FaultTolerantWriteDxe/FaultTolerantWrite.c
+++ b/MdeModulePkg/Universal/FaultTolerantWriteDxe/FaultTolerantWrite.c
@@ -3,7 +3,7 @@
   These are the common Fault Tolerant Write (FTW) functions that are shared 

   by DXE FTW driver and SMM FTW driver.

 

-Copyright (c) 2006 - 2014, Intel Corporation. All rights reserved.<BR>

+Copyright (c) 2006 - 2015, Intel Corporation. All rights reserved.<BR>

 This program and the accompanying materials                          

 are licensed and made available under the terms and conditions of the BSD License         

 which accompanies this distribution.  The full text of the license may be found at        

@@ -526,6 +526,11 @@ FtwWrite (
   // Do not assume Spare Block and Target Block have same block size

   //

   Status  = FtwEraseSpareBlock (FtwDevice);

+  if (EFI_ERROR (Status)) {

+    FreePool (MyBuffer);

+    FreePool (SpareBuffer);

+    return EFI_ABORTED;

+  }

   Ptr     = MyBuffer;

   for (Index = 0; MyBufferSize > 0; Index += 1) {

     if (MyBufferSize > FtwDevice->SpareBlockSize) {

@@ -585,6 +590,10 @@ FtwWrite (
   // Restore spare backup buffer into spare block , if no failure happened during FtwWrite.

   //

   Status  = FtwEraseSpareBlock (FtwDevice);

+  if (EFI_ERROR (Status)) {

+    FreePool (SpareBuffer);

+    return EFI_ABORTED;

+  }

   Ptr     = SpareBuffer;

   for (Index = 0; Index < FtwDevice->NumberOfSpareBlock; Index += 1) {

     MyLength = FtwDevice->SpareBlockSize;

@@ -706,7 +715,10 @@ FtwRestart (
   // Erase Spare block

   // This is restart, no need to keep spareblock content.

   //

-  FtwEraseSpareBlock (FtwDevice);

+  Status = FtwEraseSpareBlock (FtwDevice);

+  if (EFI_ERROR (Status)) {

+    return EFI_ABORTED;

+  }

 

   DEBUG ((EFI_D_ERROR, "Ftw: Restart() success \n"));

   return EFI_SUCCESS;

diff --git a/MdeModulePkg/Universal/FaultTolerantWriteDxe/UpdateWorkingBlock.c b/MdeModulePkg/Universal/FaultTolerantWriteDxe/UpdateWorkingBlock.c
index f3e6eac..31f1e0b 100644
--- a/MdeModulePkg/Universal/FaultTolerantWriteDxe/UpdateWorkingBlock.c
+++ b/MdeModulePkg/Universal/FaultTolerantWriteDxe/UpdateWorkingBlock.c
@@ -2,7 +2,7 @@
 

    Internal functions to operate Working Block Space.

 

-Copyright (c) 2006 - 2014, Intel Corporation. All rights reserved.<BR>

+Copyright (c) 2006 - 2015, Intel Corporation. All rights reserved.<BR>

 This program and the accompanying materials                          

 are licensed and made available under the terms and conditions of the BSD License         

 which accompanies this distribution.  The full text of the license may be found at        

@@ -510,6 +510,11 @@ FtwReclaimWorkSpace (
   // Write the memory buffer to spare block

   //

   Status  = FtwEraseSpareBlock (FtwDevice);

+  if (EFI_ERROR (Status)) {

+    FreePool (TempBuffer);

+    FreePool (SpareBuffer);

+    return EFI_ABORTED;

+  }

   Ptr     = TempBuffer;

   for (Index = 0; TempBufferSize > 0; Index += 1) {

     if (TempBufferSize > FtwDevice->SpareBlockSize) {

@@ -584,6 +589,10 @@ FtwReclaimWorkSpace (
   // Restore spare backup buffer into spare block , if no failure happened during FtwWrite.

   //

   Status  = FtwEraseSpareBlock (FtwDevice);

+  if (EFI_ERROR (Status)) {

+    FreePool (SpareBuffer);

+    return EFI_ABORTED;

+  }

   Ptr     = SpareBuffer;

   for (Index = 0; Index < FtwDevice->NumberOfSpareBlock; Index += 1) {

     Length = FtwDevice->SpareBlockSize;