morgan/systemd
1
0
Fork 0
mirror of https://github.com/morgan9e/systemd synced 2026-04-15 08:56:15 +09:00
Code Issues Packages Projects Releases Wiki Activity

acpi-fpdt: break on zero or negative length read

Browse Source 
https://bugzilla.redhat.com/show_bug.cgi?id=1027478
This commit is contained in:
Pavel Holica
2013-11-06 23:24:16 +01:00
committed by Zbigniew Jędrzejewski-Szmek
parent fd201fda7d
commit f576cd2092
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/shared/acpi-fpdt.c
View File

@@ -109,6 +109,8 @@ int acpi_get_boot_usec(usec_t *loader_start, usec_t *loader_exit) {
for (rec = (struct acpi_fpdt_header *)(buf + sizeof(struct acpi_table_header));
(char *)rec < buf + l;
rec = (struct acpi_fpdt_header *)((char *)rec + rec->length)) {
if (rec->length <= 0)
break;
if (rec->type != ACPI_FPDT_TYPE_BOOT)
continue;
if (rec->length != sizeof(struct acpi_fpdt_header))