http://bugzilla.kernel.org/show_bug.cgi?id=8573





------- Comment #17 from [EMAIL PROTECTED]  2008-01-29 16:03 -------

I've tried to reproduce this here, no luck so far.

There exists the possibility that the caller to acpi_evaluate_object is passing
in an acpi_buffer object with an incorrect length. In other words, the battery
driver may be reporting a pre-allocated buffer of sufficient length, but the
actual buffer is smaller than reported. This could result in the buffer
overflow, as the acpica code will trust the reported length of the buffer.

Alexey, please take a look at what parameters are being passed to
evaluate_object.
Thanks.


-- 
Configure bugmail: http://bugzilla.kernel.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
acpi-bugzilla mailing list
acpi-bugzilla@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acpi-bugzilla

Reply via email to