Commit a90d7a42 authored by Pei Xiao's avatar Pei Xiao Committed by Wen Zhiwei
Browse files

ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() 

stable inclusion
from stable-v6.6.55
commit 4588ea78d3904bebb613b0bb025669e75800f546
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/IB0MX4

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=4588ea78d3904bebb613b0bb025669e75800f546

--------------------------------

[ Upstream commit a5242874488eba2b9062985bf13743c029821330 ]

ACPICA commit 4d4547cf13cca820ff7e0f859ba83e1a610b9fd0

ACPI_ALLOCATE_ZEROED() may fail, elements might be NULL and will cause
NULL pointer dereference later.

Link: https://github.com/acpica/acpica/commit/4d4547cf


Signed-off-by: default avatarPei Xiao <xiaopei01@kylinos.cn>
Link: https://patch.msgid.link/tencent_4A21A2865B8B0A0D12CAEBEB84708EDDB505@qq.com


[ rjw: Subject and changelog edits ]
Signed-off-by: default avatarRafael J. Wysocki <rafael.j.wysocki@intel.com>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarWen Zhiwei <wenzhiwei@kylinos.cn>
parent 9d857696

drivers/acpi/acpica/dbconvert.c

+2 −0
Original line number Diff line number Diff line
@@ -174,6 +174,8 @@ acpi_status acpi_db_convert_to_package(char *string, union acpi_object *object) 
	elements =

	    ACPI_ALLOCATE_ZEROED(DB_DEFAULT_PKG_ELEMENTS *

				 sizeof(union acpi_object));

	if (!elements)

		return (AE_NO_MEMORY);



	this = string;

	for (i = 0; i < (DB_DEFAULT_PKG_ELEMENTS - 1); i++) {