[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <tencent_4A21A2865B8B0A0D12CAEBEB84708EDDB505@qq.com>
Date: Thu, 18 Jul 2024 14:05:48 +0800
From: xiaopeitux@...mail.com
To: robert.moore@...el.com,
rafael.j.wysocki@...el.com
Cc: acpica-devel@...ts.linux.dev,
linux-kernel@...r.kernel.org,
linux-acpi@...r.kernel.org,
xiaopei01@...inos.cn
Subject: [PATCH] ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_convert_to_package ACPICA commit 4d4547cf13cca820ff7e0f859ba83e1a610b9fd0
From: Pei Xiao <xiaopei01@...inos.cn>
ACPI_ALLOCATE_ZEROED may fails, elements might be null and will cause
null pointer dereference later.
Link: https://github.com/acpica/acpica/commit/4d4547cf
Signed-off-by: Pei Xiao <xiaopei01@...inos.cn>
---
drivers/acpi/acpica/dbconvert.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/drivers/acpi/acpica/dbconvert.c b/drivers/acpi/acpica/dbconvert.c
index 2b84ac093698..8dbab6932049 100644
--- a/drivers/acpi/acpica/dbconvert.c
+++ b/drivers/acpi/acpica/dbconvert.c
@@ -174,6 +174,8 @@ acpi_status acpi_db_convert_to_package(char *string, union acpi_object *object)
elements =
ACPI_ALLOCATE_ZEROED(DB_DEFAULT_PKG_ELEMENTS *
sizeof(union acpi_object));
+ if (!elements)
+ return (AE_NO_MEMORY);
this = string;
for (i = 0; i < (DB_DEFAULT_PKG_ELEMENTS - 1); i++) {
--
2.34.1
Powered by blists - more mailing lists