Skip to content
Commit eceeb437 authored by Dan Carpenter's avatar Dan Carpenter Committed by Matthew Garrett
Browse files

thinkpad_acpi: buffer overflow in fan_get_status()



The acpi_evalf() function modifies four bytes of data but in
fan_get_status() we pass a pointer to u8.  I have modified the
function to use type checking now.

Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarMatthew Garrett <mjg@redhat.com>
parent f661848b
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment