ACPI / util: cast data to u64 before shifting to fix sign extension
authorColin Ian King <colin.king@canonical.com>
Fri, 18 Mar 2016 15:08:01 +0000 (15:08 +0000)
committerRafael J. Wysocki <rafael.j.wysocki@intel.com>
Tue, 22 Mar 2016 00:23:00 +0000 (01:23 +0100)
obj->buffer.pointer[i] should be cast to u64 to prevent an unintentional
sign extension.  For example, if pointer[7] is 0x80, then the value
0xffffffffff000000 is or'd into mask rather than the intended value
0xff00000000000000

Detected with static analysis by CoverityScan

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
drivers/acpi/utils.c

index f12a72428aacc76eef7a24845fe847ff55919e94..050673f0c0b3e4e382ad223e03ac4d655eb1be60 100644 (file)
@@ -692,7 +692,7 @@ bool acpi_check_dsm(acpi_handle handle, const u8 *uuid, int rev, u64 funcs)
                mask = obj->integer.value;
        else if (obj->type == ACPI_TYPE_BUFFER)
                for (i = 0; i < obj->buffer.length && i < 8; i++)
-                       mask |= (((u8)obj->buffer.pointer[i]) << (i * 8));
+                       mask |= (((u64)obj->buffer.pointer[i]) << (i * 8));
        ACPI_FREE(obj);
 
        /*