]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)
authorikaros <void0red@gmail.com>
Wed, 27 May 2026 18:02:06 +0000 (20:02 +0200)
committerRafael J. Wysocki <rafael.j.wysocki@intel.com>
Wed, 27 May 2026 18:18:46 +0000 (20:18 +0200)
commit0e2021f49e64b3c8a9aa880d0c62a218bfe147ce
tree32ad961a49f73711b9a13718c443d64207045267
parent6e8c55e13a5e3a9f38921d62924f18ceba3330eb
ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)

Add overflow check for Index + Length to prevent integer overflow
when calculating the truncation length. This prevents negative
size parameter being passed to memcpy().

Link: https://github.com/acpica/acpica/commit/d281ec1ac84e
Signed-off-by: ikaros <void0red@gmail.com>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Link: https://patch.msgid.link/3760974.R56niFO833@rafael.j.wysocki
drivers/acpi/acpica/exoparg3.c