Dan Carpenter c37a3c9477 xen/acpi: off by one in read_acpi_id() ... If acpi_id is == nr_acpi_bits, then we access one element beyond the end of the acpi_psd[] array or we set one bit beyond the end of the bit map when we do __set_bit(acpi_id, acpi_id_present); Fixes: 59a5680291 ("xen/acpi-processor: C and P-state driver that uploads said data to hypervisor.") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: Joao Martins <joao.m.martins@oracle.com> Reviewed-by: Juergen Gross <jgross@suse.com> Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>		2018-03-30 11:30:13 -04:00
..
events	xen/pirq: fix error path cleanup when binding MSIs	2018-02-28 20:20:01 +01:00
xen-pciback
xenbus	xen: xenbus_dev_frontend: Verify body of XS_TRANSACTION_END	2018-03-21 08:28:53 -04:00
xenfs
acpi.c
arm-device.c
balloon.c
biomerge.c
cpu_hotplug.c
dbgp.c
efi.c
evtchn.c	vfs: do bulk POLL* -> EPOLL* replacement	2018-02-11 14:34:03 -08:00
fallback.c
features.c
gntalloc.c
gntdev.c
grant-table.c
Kconfig
Makefile
manage.c
mcelog.c	vfs: do bulk POLL* -> EPOLL* replacement	2018-02-11 14:34:03 -08:00
pci.c
pcpu.c
platform-pci.c
preempt.c
privcmd.c
privcmd.h
pvcalls-back.c	xen/pvcalls: fix null pointer dereference on map->sock	2018-02-26 17:13:12 +01:00
pvcalls-front.c	pvcalls-front: 64-bit align flags	2018-03-01 07:23:36 +01:00
pvcalls-front.h
swiotlb-xen.c
sys-hypervisor.c
time.c
tmem.c	mm, swap, frontswap: fix THP swap if frontswap enabled	2018-02-21 15:35:43 -08:00
xen-acpi-cpuhotplug.c
xen-acpi-memhotplug.c
xen-acpi-pad.c
xen-acpi-processor.c	xen/acpi: off by one in read_acpi_id()	2018-03-30 11:30:13 -04:00
xen-balloon.c
xen-scsiback.c
xen-selfballoon.c
xen-stub.c
xlate_mmu.c