Skip to content

Commit

Permalink
ACPICA: Fix possible fault if return Package objects contain NULL ele…
Browse files Browse the repository at this point in the history
…ments

For predefined name validation. Also adds a warning if a NULL
element is followed by any non-null elements.  ACPICA BZ 813, 814.

http://www.acpica.org/bugzilla/show_bug.cgi?id=813
http://www.acpica.org/bugzilla/show_bug.cgi?id=814

Signed-off-by: Bob Moore <robert.moore@intel.com>
Signed-off-by: Lin Ming <ming.m.lin@intel.com>
Signed-off-by: Len Brown <len.brown@intel.com>
  • Loading branch information
Bob Moore authored and Len Brown committed Nov 25, 2009
1 parent 2263576 commit 419a909
Showing 1 changed file with 42 additions and 1 deletion.
43 changes: 42 additions & 1 deletion drivers/acpi/acpica/nspredef.c
Original file line number Diff line number Diff line change
Expand Up @@ -601,7 +601,8 @@ acpi_ns_check_package(struct acpi_predefined_data *data,
* there is only one entry). We may be able to repair this by
* wrapping the returned Package with a new outer Package.
*/
if ((*elements)->common.type != ACPI_TYPE_PACKAGE) {
if (*elements
&& ((*elements)->common.type != ACPI_TYPE_PACKAGE)) {

/* Create the new outer package and populate it */

Expand Down Expand Up @@ -673,13 +674,53 @@ acpi_ns_check_package_list(struct acpi_predefined_data *data,
union acpi_operand_object *sub_package;
union acpi_operand_object **sub_elements;
acpi_status status;
u8 non_trailing_null = FALSE;
u32 expected_count;
u32 i;
u32 j;

/* Validate each sub-Package in the parent Package */

for (i = 0; i < count; i++) {
/*
* Handling for NULL package elements. For now, we will simply allow
* a parent package with trailing NULL elements. This can happen if
* the package was defined to be longer than the initializer list.
* This is legal as per the ACPI specification. It is often used
* to allow for dynamic initialization of a Package.
*
* A future enhancement may be to simply truncate the package to
* remove the trailing NULL elements.
*/
if (!(*elements)) {
if (!non_trailing_null) {

/* Ensure the remaining elements are all NULL */

for (j = 1; j < (count - i + 1); j++) {
if (elements[j]) {
non_trailing_null = TRUE;
}
}

if (!non_trailing_null) {

/* Ignore the trailing NULL elements */

return (AE_OK);
}
}

/* There are trailing non-null elements, issue warning */

ACPI_WARN_PREDEFINED((AE_INFO, data->pathname,
data->node_flags,
"Found NULL element at package index %u",
i));
elements++;
continue;
}

sub_package = *elements;
sub_elements = sub_package->package.elements;

Expand Down

0 comments on commit 419a909

Please sign in to comment.