geemili
/
drm
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Security fix. Zero pages before they are handed to user space. 

TTM pages were not cleared when allocated and handed to user space.
Sensitive information may leak.
main
Thomas Hellstrom 2006-12-19 23:45:59 +01:00
parent 72b5d1507a
commit 3b8e6ccd25
3 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
linux-core/drm_compat.c
View File

@ -259,6 +259,8 @@ struct page *drm_vm_ttm_nopage(struct vm_area_struct *vma,
} }
++bm->cur_pages; ++bm->cur_pages;
SetPageLocked(page); SetPageLocked(page);
clear_page(kmap(page));
kunmap(page);
} }
get_page(page); get_page(page);

2
linux-core/drm_ttm.c
View File

@ -235,6 +235,8 @@ static int drm_ttm_populate(drm_ttm_t * ttm)
#else #else
SetPageReserved(page); SetPageReserved(page);
#endif #endif
clear_page(kmap(page));
kunmap(page);
ttm->pages[i] = page; ttm->pages[i] = page;
++bm->cur_pages; ++bm->cur_pages;
} }

2
linux-core/drm_vm.c
View File

@ -220,6 +220,8 @@ struct page *drm_vm_ttm_fault(struct vm_area_struct *vma,
#else #else
SetPageReserved(page); SetPageReserved(page);
#endif #endif
clear_page(kmap(page));
kunmap(page);
} }
if (ttm->page_flags & DRM_TTM_PAGE_UNCACHED) { if (ttm->page_flags & DRM_TTM_PAGE_UNCACHED) {