Dan Carpenter wrote: > The "einj_buf" buffer is 32 chars. If "count" is larger than that it > results in memory corruption. Cap it at 31 so that we leave the last > character as a NUL terminator. By the way, the highest reasonable value > for "count" is 24. > > Fixes: 0c6176e1e186 ("ACPI: APEI: EINJ: Enable the discovery of EINJv2 capabilities") > Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> Reviewed-by: Ira Weiny <ira.weiny@xxxxxxxxx> [snip]