]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
authorNikita Kiryushin <kiryushin@ancud.ru>
Fri, 22 Mar 2024 18:07:53 +0000 (21:07 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 10 Apr 2024 14:35:42 +0000 (16:35 +0200)
commit77ffc72b497e43e6a8f832729eb2358c3492b9c1
tree0be80a863f7893ae88d8806f716f116ada380503
parent7fb8b3de7f22adfee1a40562c249974b31e0697e
ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()

[ Upstream commit 40e2710860e57411ab57a1529c5a2748abbe8a19 ]

ACPICA commit 9061cd9aa131205657c811a52a9f8325a040c6c9

Errors in acpi_evaluate_object() can lead to incorrect state of buffer.

This can lead to access to data in previously ACPI_FREEd buffer and
secondary ACPI_FREE to the same buffer later.

Handle errors in acpi_evaluate_object the same way it is done earlier
with acpi_ns_handle_to_pathname.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Link: https://github.com/acpica/acpica/commit/9061cd9a
Fixes: 5fd033288a86 ("ACPICA: debugger: add command to dump all fields of particular subtype")
Signed-off-by: Nikita Kiryushin <kiryushin@ancud.ru>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/acpi/acpica/dbnames.c