Bug 218867 - UBSAN: array-index-out-of-bounds in drivers/acpi/acpica/dswexec.c:401:12
Summary: UBSAN: array-index-out-of-bounds in drivers/acpi/acpica/dswexec.c:401:12
Status: NEEDINFO
Alias: None
Product: ACPI
Classification: Unclassified
Component: ACPICA-Core (show other bugs)
Hardware: All Linux
: P3 normal
Assignee: acpi_acpica-core@kernel-bugs.osdl.org
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-21 12:39 UTC by sander44
Modified: 2024-05-26 20:35 UTC (History)
0 users

See Also:
Kernel Version: 6.1.25
Subsystem:
Regression: No
Bisected commit-id:


Attachments

Description sander44 2024-05-21 12:39:40 UTC
[    0.662597] ================================================================================
[    0.662604] UBSAN: array-index-out-of-bounds in drivers/acpi/acpica/dswexec.c:401:12
[    0.662611] index -1 is out of range for type 'acpi_operand_object *[9]'
[    0.662615] CPU: 0 PID: 18 Comm: kworker/0:1 Not tainted 6.1.25-1-lowlatency #1
[    0.662618] Hardware name: Intel(R) Client Systems NUC9i7QNX/NUC9i7QNB, BIOS QXCFL579.0034.2019.1125.1436 11/25/2019
[    0.662620] Workqueue: kacpid acpi_os_execute_deferred
[    0.662626] Call Trace:
[    0.662628]  <TASK>
[    0.662630]  dump_stack_lvl+0x4a/0x6f
[    0.662635]  dump_stack+0x10/0x18
[    0.662639]  ubsan_epilogue+0x9/0x3a
[    0.662642]  __ubsan_handle_out_of_bounds.cold+0x46/0x4b
[    0.662645]  acpi_ds_exec_end_op+0x943/0x950
[    0.662650]  acpi_ps_parse_loop+0x28e/0xa30
[    0.662654]  acpi_ps_parse_aml+0x226/0x5f0
[    0.662657]  acpi_ps_execute_method+0x172/0x3e0
[    0.662661]  acpi_ns_evaluate+0x2f2/0x5e0
[    0.662663]  acpi_ev_asynch_execute_gpe_method+0x14b/0x1d0
[    0.662668]  acpi_os_execute_deferred+0x17/0x40
[    0.662671]  process_one_work+0x222/0x3f0
[    0.662675]  worker_thread+0x50/0x480
[    0.662679]  ? process_one_work+0x3f0/0x3f0
[    0.662682]  kthread+0xea/0x120
[    0.662684]  ? kthread_complete_and_exit+0x20/0x20
[    0.662687]  ret_from_fork+0x1f/0x30
[    0.662694]  </TASK>
[    0.662695] ================================================================================e
Comment 1 Artem S. Tashkinov 2024-05-23 07:13:14 UTC
6.1.25 is really old and unlikely to get any fixes.

Is this reproducible in 6.6.31/6.9.1?

Note You need to log in before you can comment on or make changes to this bug.