fdo-mirrors/mesa-drm
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/mesa/drm.git synced 2026-05-08 03:28:05 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Security fix. Zero pages before they are handed to user space.

Browse source 
TTM pages were not cleared when allocated and handed to user space.
Sensitive information may leak.
This commit is contained in:
Thomas Hellstrom 2006-12-19 23:45:59 +01:00
parent 72b5d1507a
commit 3b8e6ccd25
3 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
linux-core/drm_compat.c
View file

@ -259,6 +259,8 @@ struct page *drm_vm_ttm_nopage(struct vm_area_struct *vma,
}
++bm->cur_pages;
SetPageLocked(page);
clear_page(kmap(page));
kunmap(page);
}
get_page(page);

2
linux-core/drm_ttm.c
View file

@ -235,6 +235,8 @@ static int drm_ttm_populate(drm_ttm_t * ttm)
#else
SetPageReserved(page);
#endif
clear_page(kmap(page));
kunmap(page);
ttm->pages[i] = page;
++bm->cur_pages;
}

2
linux-core/drm_vm.c
View file

@ -220,6 +220,8 @@ struct page *drm_vm_ttm_fault(struct vm_area_struct *vma,
#else
SetPageReserved(page);
#endif
clear_page(kmap(page));
kunmap(page);
}
if (ttm->page_flags & DRM_TTM_PAGE_UNCACHED) {