vmwgfx: information leak in vmw_execbuf_copy_fence_user()

Browse source

If ret is non-zero then we don't initialize the struct which leaks
stack information to user space.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Thomas Hellstrom <thellstrom@vmware.com>
Reviewed-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>

...

This commit is contained in:

Dan Carpenter 2011-10-18 09:10:12 +03:00 • committed by Dave Airlie

parent 0c5d37033b

commit 80d9b24a65

1 changed files with 2 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c

View file