spi: flash: the JEDEC ID should be at most three bytes in length

source/drivers/spi_flash.c

@@ -52,7 +52,7 @@ static size_t spi_flash_get_jedec_id(struct flash_dev *dev, uint8_t *jedec_id,
 	size_t len)
 {
 	uint8_t cmd[1] = { SPI_FLASH_JEDEC_ID };
-	uint8_t buf[6];
+	uint8_t buf[3];
 	struct spi_dev *spi_dev = dev->priv;
 
 	spi_tx_rx(spi_dev, buf, sizeof buf, cmd, sizeof cmd);