d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Prevent reading from the ACPI_RESOURCE past its actual end. For

Browse Source 
paranoia limit to the size of the ACPI_RESOURCE as well.

Reviewd by:	jhb (in spirit)
MFC after:	1 week
This commit is contained in:
Matthew D Fleming 2011-02-14 17:20:20 +00:00
parent 4673c751f8
commit 224e25e117
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
sys/dev/acpica/acpi_resource.c
View File

@ -60,6 +60,7 @@ static ACPI_STATUS
acpi_lookup_irq_handler(ACPI_RESOURCE *res, void *context)
{
struct lookup_irq_request *req;
size_t len;
u_int irqnum, irq;
switch (res->Type) {
@ -82,7 +83,10 @@ acpi_lookup_irq_handler(ACPI_RESOURCE *res, void *context)
req->found = 1;
KASSERT(irq == rman_get_start(req->res),
("IRQ resources do not match"));
bcopy(res, req->acpi_res, sizeof(ACPI_RESOURCE));
len = res->Length;
if (len > sizeof(ACPI_RESOURCE))
len = sizeof(ACPI_RESOURCE);
bcopy(res, req->acpi_res, len);
return (AE_CTRL_TERMINATE);
}
return (AE_OK);