Commit 9df758d9 authored May 08, 2018 by Colin Ian King Committed by Rafael J. Wysocki May 15, 2018

ACPICA: Fix potential infinite loop in acpi_rs_dump_byte_list



There is a potenial infinite loop if acpi_rs_dump_byte_list is
called with a Length greater than 255 since the current loop
counter is just a u8 and will wrap to zero and never reach
the desired value in Length.  Fix this by making the loop
counter the size type as Length.

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Erik Schmauss <erik.schmauss@intel.com>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>

parent 0e8f62eb

drivers/acpi/acpica/rsdump.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -539,7 +539,7 @@ static void acpi_rs_out_title(const char *title)

		static void acpi_rs_dump_byte_list(u16 length, u8 * data)
		{
		u8 i;
		u16 i;

		for (i = 0; i < length; i++) {
		acpi_os_printf("%25s%2.2X : %2.2X\n", "Byte", i, data[i]);

Admin message