diff options
| author | Lv Zheng <lv.zheng@intel.com> | 2013-09-13 13:13:30 +0800 |
|---|---|---|
| committer | Rafael J. Wysocki <rafael.j.wysocki@intel.com> | 2013-09-30 19:46:11 +0200 |
| commit | 6b68f03f95e3f0aeea0c47799aecb296276a7cd6 (patch) | |
| tree | bdb6018d8a6f2a9661c1a2fa0351fe0491b33d27 /drivers/acpi/device_pm.c | |
| parent | 15c03dd4859ab16f9212238f29dd315654aa94f6 (diff) | |
ACPI / IPMI: Fix potential response buffer overflow
This patch enhances sanity checks on message size to avoid potential buffer
overflow.
The kernel IPMI message size is IPMI_MAX_MSG_LENGTH(272 bytes) while the
ACPI specification defined IPMI message size is 64 bytes. The difference
is not handled by the original codes. This may cause crash in the response
handling codes.
This patch closes this gap and also combines rx_data/tx_data to use single
data/len pair since they need not be seperate.
Signed-off-by: Lv Zheng <lv.zheng@intel.com>
Reviewed-by: Huang Ying <ying.huang@intel.com>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Diffstat (limited to 'drivers/acpi/device_pm.c')
0 files changed, 0 insertions, 0 deletions