On Tue, Aug 19, 2014 at 06:16:49PM +0300, Mika Westerberg wrote: > On Tue, Aug 19, 2014 at 10:03:55AM -0500, Wolfram Sang wrote: > > On Tue, Aug 12, 2014 at 10:33:38AM +0800, Xiubo Li wrote: > > > Since we cannot make sure the 'data_len' will always be none zero here, > > > and then if 'data_len' equals to zero, the kzalloc() will return ZERO_SIZE_PTR, > > > which equals to ((void *)16). > > > > I assume the read request with length == 0 comes from a broken BIOS? > > I'm also interested. Does this trigger in a real system? Even if not now, we should consider potentially broken BIOSes, or? Which extends the question to: Do we need even more sanity checks when taking broken BIOSes into account?
Attachment:
signature.asc
Description: Digital signature