]> asedeno.scripts.mit.edu Git - linux.git/commit
ACPICA: Fix potential infinite loop in acpi_rs_dump_byte_list
authorColin Ian King <colin.king@canonical.com>
Tue, 8 May 2018 21:06:10 +0000 (14:06 -0700)
committerRafael J. Wysocki <rafael.j.wysocki@intel.com>
Tue, 15 May 2018 08:16:10 +0000 (10:16 +0200)
commit9df758d96df5773eb7f52878f8875f1c989993da
treefb985da3345c372aece1927add46d47418ffa985
parent0e8f62ebf40f4e2bdcbbb58ce422b54d8d69018a
ACPICA: Fix potential infinite loop in acpi_rs_dump_byte_list

There is a potenial infinite loop if acpi_rs_dump_byte_list is
called with a Length greater than 255 since the current loop
counter is just a u8 and will wrap to zero and never reach
the desired value in Length.  Fix this by making the loop
counter the size type as Length.

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Erik Schmauss <erik.schmauss@intel.com>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
drivers/acpi/acpica/rsdump.c