forked from luck/tmp_suning_uos_patched
ACPI / util: cast data to u64 before shifting to fix sign extension
obj->buffer.pointer[i] should be cast to u64 to prevent an unintentional sign extension. For example, if pointer[7] is 0x80, then the value 0xffffffffff000000 is or'd into mask rather than the intended value 0xff00000000000000 Detected with static analysis by CoverityScan Signed-off-by: Colin Ian King <colin.king@canonical.com> Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
This commit is contained in:
parent
bea3c377c2
commit
4a798f508f
|
@ -692,7 +692,7 @@ bool acpi_check_dsm(acpi_handle handle, const u8 *uuid, int rev, u64 funcs)
|
|||
mask = obj->integer.value;
|
||||
else if (obj->type == ACPI_TYPE_BUFFER)
|
||||
for (i = 0; i < obj->buffer.length && i < 8; i++)
|
||||
mask |= (((u8)obj->buffer.pointer[i]) << (i * 8));
|
||||
mask |= (((u64)obj->buffer.pointer[i]) << (i * 8));
|
||||
ACPI_FREE(obj);
|
||||
|
||||
/*
|
||||
|
|
Loading…
Reference in New Issue
Block a user