From mboxrd@z Thu Jan 1 00:00:00 1970 From: Thomas Renninger Subject: [PATCH 1/3] [2.6.25-rc5] Fix a memory overflow bug when copying NULL internal package element object to external. Date: Wed, 12 Mar 2008 01:06:16 +0100 Message-ID: <1205280376.8194.44.camel@linux-2bdv.site> Reply-To: trenn@suse.de Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: QUOTED-PRINTABLE Return-path: Received: from mx2.suse.de ([195.135.220.15]:44805 "EHLO mx2.suse.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753551AbYCLAGD (ORCPT ); Tue, 11 Mar 2008 20:06:03 -0400 Sender: linux-acpi-owner@vger.kernel.org List-Id: linux-acpi@vger.kernel.org To: Len Brown Cc: linux-acpi , "Zhang, Rui" , ming.m.lin@intel.com =46rom: Lin Ming =46ix a memory overflow bug when copying NULL internal package element object to external. Signed-off-by: Lin Ming Signed-off-by: Zhang Rui =EF=BB=BFTested-by: Thomas Renninger --- drivers/acpi/utilities/utobject.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Index: linux-2.6/drivers/acpi/utilities/utobject.c =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D --- linux-2.6.orig/drivers/acpi/utilities/utobject.c +++ linux-2.6/drivers/acpi/utilities/utobject.c @@ -432,7 +432,7 @@ acpi_ut_get_simple_object_size(union acp * element -- which is legal) */ if (!internal_object) { - *obj_length =3D 0; + *obj_length =3D sizeof(union acpi_object); return_ACPI_STATUS(AE_OK); } =20 -- To unsubscribe from this list: send the line "unsubscribe linux-acpi" i= n the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html