b4aaa78f4c
The VIAFB_GET_INFO device ioctl allows unprivileged users to read 246 bytes of uninitialized stack memory, because the "reserved" member of the viafb_ioctl_info struct declared on the stack is not altered or zeroed before being copied back to the user. This patch takes care of it. Signed-off-by: Dan Rosenberg <dan.j.rosenberg@gmail.com> Signed-off-by: Florian Tobias Schandinat <FlorianSchandinat@gmx.de> |
||
---|---|---|
.. | ||
accel.c | ||
accel.h | ||
chip.h | ||
debug.h | ||
dvi.c | ||
dvi.h | ||
global.c | ||
global.h | ||
hw.c | ||
hw.h | ||
ioctl.c | ||
ioctl.h | ||
lcd.c | ||
lcd.h | ||
lcdtbl.h | ||
Makefile | ||
share.h | ||
tbl1636.c | ||
tbl1636.h | ||
tblDPASetting.c | ||
tblDPASetting.h | ||
via-core.c | ||
via-gpio.c | ||
via_i2c.c | ||
via_modesetting.c | ||
via_modesetting.h | ||
via_utility.c | ||
via_utility.h | ||
viafbdev.c | ||
viafbdev.h | ||
viamode.c | ||
viamode.h | ||
vt1636.c | ||
vt1636.h |