|
Description
|
The following code in acpica_get_handle_cpu() has an obvious bug that could cause
a system panic:
if ((ddi_prop_lookup_string(DDI_DEV_T_ANY, dip, 0,
"device_type", &device_type_prop) != DDI_PROP_SUCCESS) ||
(strcmp("cpu", device_type_prop) != 0)) {
ddi_prop_free(device_type_prop);
return (AE_ERROR);
}
ddi_prop_free(device_type_prop);
In the case where the ddi_prop_lookup_string() fails, the first ddi_prop_free() would result in a panic. Fortunately, the ddi_prop_lookup_string() should never fail.
*** (#1 of 1): [ UNSAVED ] xxxxx@xxxxx.com
|
