From: Dominik B. <li...@do...> - 2005-09-17 09:13:57
|
Hi, On Fri, Sep 16, 2005 at 09:03:36PM +0200, Janosch Machowinski wrote: > @@ -678,6 +669,13 @@ > > (pr->power.count)++; > memcpy(&(pr->power.states[pr->power.count]), &cx, sizeof(cx)); > + > + /* We support up to ACPI_PROCESSOR_MAX_POWER. */ > + if (pr->power.count >= ACPI_PROCESSOR_MAX_POWER) { > + printk(KERN_WARNING "Limiting number of power states to max (%d)\n", ACPI_PROCESSOR_MAX_POWER); > + printk(KERN_WARNING "Please increase ACPI_PROCESSOR_MAX_POWER if needed.\n"); > + break; > + } Memory corruption: If pr->power.count is ACPI_PROCESSOR_MAX_POWER (or larger), pr->power.states[pr->power.count] is pointing to an invalid memory address. Therefore, the check needs to stay at the place it was before. Dominik |