xiaomi-sm8450/android_kernel_xiaomi_sm8450
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ACPI] fix kmalloc size bug in acpi/video.c

Browse Source 
acpi_video_device_find_cap() used &p instead of *p
when calculating storage size, thus allocating
only 4 or 8 bytes instead of 12...

Also, kfree(NULL) is legal, so remove some unneeded checks.

From: Paulo Marques <pmarques@grupopie.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Len Brown <len.brown@intel.com>
This commit is contained in:
Paulo Marques
2005-03-30 22:39:49 -05:00
committed by Len Brown
parent 7334571f72
commit d1dd0c2391
1 changed files with 6 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
drivers/acpi/video.c
View File

@@ -564,12 +564,13 @@ acpi_video_device_find_cap (struct acpi_video_device *device)
int count = 0; int count = 0;
union acpi_object *o; union acpi_object *o;
br = kmalloc(sizeof &br, GFP_KERNEL); br = kmalloc(sizeof(*br), GFP_KERNEL);
if (!br) { if (!br) {
printk(KERN_ERR "can't allocate memory\n"); printk(KERN_ERR "can't allocate memory\n");
} else { } else {
memset(br, 0, sizeof &br); memset(br, 0, sizeof(*br));
br->levels = kmalloc(obj->package.count * sizeof &br->levels, GFP_KERNEL); br->levels = kmalloc(obj->package.count *
sizeof *(br->levels), GFP_KERNEL);
if (!br->levels) if (!br->levels)
goto out; goto out;
@@ -584,7 +585,6 @@ acpi_video_device_find_cap (struct acpi_video_device *device)
} }
out: out:
if (count < 2) { if (count < 2) {
if (br->levels)
kfree(br->levels); kfree(br->levels);
kfree(br); kfree(br);
} else { } else {
@@ -595,7 +595,6 @@ out:
} }
} }
if (obj)
kfree(obj); kfree(obj);
return_VOID; return_VOID;