Unverified Commit 16f04147 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14790 acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl 

Merge Pull Request from: @ci-robot 
 
PR sync from: Heyuan Wang <wangheyuan2@h-partners.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/5EUKFD3EFNMEFF3O33KY76F3BCSZTLEJ/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBEAMX 
 
Link:https://gitee.com/openeuler/kernel/pulls/14790

 

Reviewed-by: default avatarXiongfeng Wang <wangxiongfeng2@huawei.com>
Reviewed-by: default avatarLi Nan <linan122@huawei.com>
Signed-off-by: default avatarLi Nan <linan122@huawei.com>
parents 7f8660b2 5b4febf5

drivers/acpi/nfit/core.c

+6 −1
Original line number Diff line number Diff line
@@ -453,8 +453,13 @@ int acpi_nfit_ctl(struct nvdimm_bus_descriptor *nd_desc, struct nvdimm *nvdimm, 
	if (cmd_rc)

		*cmd_rc = -EINVAL;



	if (cmd == ND_CMD_CALL)

	if (cmd == ND_CMD_CALL) {

		if (!buf || buf_len < sizeof(*call_pkg))

			return -EINVAL;



		call_pkg = buf;

	}



	func = cmd_to_func(nfit_mem, cmd, call_pkg, &family);

	if (func < 0)

		return func;