From d5e8ab13ff5399531eb1927dcd4535aeeed18c94 Mon Sep 17 00:00:00 2001 From: Thomas Hellstrom Date: Wed, 10 Aug 2005 19:46:46 +0000 Subject: Security fix on via: Checking that the specified context belongs to the caller on fb / agp memory alloc and free. Otherwise malicious clients can register allocations on other clients or free memory used by other clients which will lead to severe memory manager inconsistensies. --- linux-core/drmP.h | 1 + 1 file changed, 1 insertion(+) (limited to 'linux-core/drmP.h') diff --git a/linux-core/drmP.h b/linux-core/drmP.h index 2b4dbcf6..8fed5e72 100644 --- a/linux-core/drmP.h +++ b/linux-core/drmP.h @@ -838,6 +838,7 @@ extern int drm_context_switch_complete(drm_device_t * dev, int new); extern int drm_ctxbitmap_init(drm_device_t * dev); extern void drm_ctxbitmap_cleanup(drm_device_t * dev); extern void drm_ctxbitmap_free(drm_device_t * dev, int ctx_handle); +extern int drm_check_context(drm_file_t *priv, drm_context_t handle); extern int drm_setsareactx(struct inode *inode, struct file *filp, unsigned int cmd, unsigned long arg); -- cgit v1.2.3