summaryrefslogtreecommitdiff
path: root/linux-core
diff options
context:
space:
mode:
authorThomas Hellstrom <thomas-at-tungstengraphics-dot-com>2006-12-19 23:23:17 +0100
committerThomas Hellstrom <thomas-at-tungstengraphics-dot-com>2006-12-19 23:23:17 +0100
commit72b5d1507a7e9c18fc0141c13819ea01c0813924 (patch)
tree71b23b8199d1fb3ead995746171ada6d2663be28 /linux-core
parent81251bf78f06dc26e26c3edb09639850371fe540 (diff)
Security fix. Zero pages before they are handed to user space.
Shared memory areas were not cleared when they are allocated and handed to user space. Sensitive information may leak.
Diffstat (limited to 'linux-core')
-rw-r--r--linux-core/drm_bufs.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/linux-core/drm_bufs.c b/linux-core/drm_bufs.c
index d6ebc8d1..ef110c28 100644
--- a/linux-core/drm_bufs.c
+++ b/linux-core/drm_bufs.c
@@ -202,6 +202,7 @@ static int drm_addmap_core(drm_device_t * dev, unsigned int offset,
drm_free(map, sizeof(*map), DRM_MEM_MAPS);
return -ENOMEM;
}
+ memset(map->handle, 0, map->size);
map->offset = (unsigned long)map->handle;
if (map->flags & _DRM_CONTAINS_LOCK) {
/* Prevent a 2nd X Server from creating a 2nd lock */