Thread (3 messages) 3 messages, 3 authors, 2021-02-26

Re: [PATCH] drm/compat: Clear bounce structures

From: Maxime Ripard <hidden>
Date: 2021-02-25 16:52:16
Also in: dri-devel, intel-gfx

On Mon, Feb 22, 2021 at 11:06:43AM +0100, Daniel Vetter wrote:
Some of them have gaps, or fields we don't clear. Native ioctl code
does full copies plus zero-extends on size mismatch, so nothing can
leak. But compat is more hand-rolled so need to be careful.

None of these matter for performance, so just memset.

Also I didn't fix up the CONFIG_DRM_LEGACY or CONFIG_DRM_AGP ioctl, those
are security holes anyway.

Reported-by: syzbot+620cf21140fc7e772a5d@syzkaller.appspotmail.com # vblank ioctl
Cc: syzbot+620cf21140fc7e772a5d@syzkaller.appspotmail.com
Cc: stable@vger.kernel.org
Signed-off-by: Daniel Vetter <redacted>
Acked-by: Maxime Ripard <mripard@kernel.org>

Maxime

Attachments

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help