Messages in this thread | | | Date | Thu, 10 Jun 2004 03:03:32 +0100 | From | viro@parcelfa ... | Subject | Re: PATCH: 2.6.7-rc3 drivers/char/drm/gamma_dma.c: several user/kernel pointer bugs |
| |
On Wed, Jun 09, 2004 at 03:53:40PM -0700, Robert T. Johnson wrote: > gamma_dma_priority and gamma_dma_send_buffers both deref d->send_indices > and/or d->send_sizes. When these functions are called from gamma_dma, > these pointers are user pointers and are thus not safe to deref. This patch > copies over the pointers inside gamma_dma_priority and > gamma_dma_send_buffers. Let me know if you have any questions or if I've > made a mistake.
ACK. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |