rust-osdev/acpi

RSDP search is slightly unsafe

A0lson opened this issue · 0 comments

The BIOS-based RSDP search code doesn't take into account the RSDP 'length' field before calling validate(). Thus, it would be possible to cause the validate() routine to perform an out-of-bounds read during the BIOS-based search.