Dan Carpenter a1b03156db xen/acpi: off by one in read_acpi_id() ... [ Upstream commit c37a3c9477 ] If acpi_id is == nr_acpi_bits, then we access one element beyond the end of the acpi_psd[] array or we set one bit beyond the end of the bit map when we do __set_bit(acpi_id, acpi_id_present); Fixes: 59a5680291 ("xen/acpi-processor: C and P-state driver that uploads said data to hypervisor.") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: Joao Martins <joao.m.martins@oracle.com> Reviewed-by: Juergen Gross <jgross@suse.com> Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> Signed-off-by: Sasha Levin <alexander.levin@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-05-30 07:49:09 +02:00
..
events	xen/pirq: fix error path cleanup when binding MSIs	2018-05-30 07:49:02 +02:00
xen-pciback	xen/pciback: Fix conf_space read/write overlap check.	2016-08-10 11:49:26 +02:00
xenbus	xen: xenbus: use put_device() instead of kfree()	2018-05-30 07:49:04 +02:00
xenfs
acpi.c
balloon.c	xen/balloon: Fix declared-but-not-defined warning	2016-07-27 09:47:36 -07:00
biomerge.c	xen: fix bio vec merging	2017-08-24 17:02:36 -07:00
cpu_hotplug.c
dbgp.c
efi.c
evtchn.c	xen/evtchn: fix ring resize when binding new events	2016-05-11 11:21:15 +02:00
fallback.c
features.c
gntalloc.c
gntdev.c	xen/gntdev: Fix partial gntdev_mmap() cleanup	2018-03-03 10:19:45 +01:00
grant-table.c	xen/grant-table: Use put_page instead of free_page	2018-05-30 07:48:56 +02:00
Kconfig	xen: XEN_ACPI_PROCESSOR is Dom0-only	2018-02-25 11:03:41 +01:00
Makefile
manage.c	xen: don't print error message in case of missing Xenstore entry	2017-11-08 10:06:30 +01:00
mcelog.c
pci.c
pcpu.c
platform-pci.c
preempt.c
privcmd.c	xen/privcmd: Support correctly 64KB page granularity when mapping memory	2017-06-14 13:16:22 +02:00
privcmd.h
swiotlb-xen.c	xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent	2018-05-30 07:48:51 +02:00
sys-hypervisor.c
tmem.c
xen-acpi-cpuhotplug.c
xen-acpi-memhotplug.c
xen-acpi-pad.c
xen-acpi-processor.c	xen/acpi: off by one in read_acpi_id()	2018-05-30 07:49:09 +02:00
xen-balloon.c
xen-scsiback.c
xen-selfballoon.c
xen-stub.c
xlate_mmu.c