• Dave Airlie's avatar
    drm: stop information leak of old kernel stack. · b9f0aee8
    Dave Airlie authored
    non-critical issue, CVE-2010-2803
    
    Userspace controls the amount of memory to be allocate, so it can
    get the ioctl to allocate more memory than the kernel uses, and get
    access to kernel stack. This can only be done for processes authenticated
    to the X server for DRI access, and if the user has DRI access.
    
    Fix is to just memset the data to 0 if the user doesn't copy into
    it in the first place.
    Reported-by: default avatarKees Cook <kees@ubuntu.com>
    Signed-off-by: default avatarDave Airlie <airlied@redhat.com>
    b9f0aee8
drm_drv.c 16.8 KB