Skip to content
Commit 98934def authored by William Lee Irwin III's avatar William Lee Irwin III Committed by Len Brown
Browse files

ACPI: video_device_list corruption



The ->cap fields of struct acpi_video_device and struct acpi_video_bus
are 1B each, not 4B. The oversized memset()'s corrupted the subsequent
list_head fields. This resulted in silent corruption without
CONFIG_DEBUG_LIST and BUG's with it. This patch uses sizeof() to pass
the proper bounds to the memset() calls and thereby correct the bugs.

Signed-off-by: default avatarWilliam Irwin <wli@holomorphy.com>
Acked-by: default avatarMikael Pettersson <mikpe@it.uu.se>
Signed-off-by: default avatarLen Brown <len.brown@intel.com>
parent da8cadb3
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment