linux-uconsole/drivers/video/via
Dan Rosenberg d912e785e2 drivers/video/via/ioctl.c: prevent reading uninitialized stack memory
commit b4aaa78f4c upstream.

The VIAFB_GET_INFO device ioctl allows unprivileged users to read 246
bytes of uninitialized stack memory, because the "reserved" member of
the viafb_ioctl_info struct declared on the stack is not altered or
zeroed before being copied back to the user.  This patch takes care of
it.

Signed-off-by: Dan Rosenberg <dan.j.rosenberg@gmail.com>
Signed-off-by: Florian Tobias Schandinat <FlorianSchandinat@gmx.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2010-09-26 17:21:31 -07:00
..
accel.c viafb: choose acceleration engine for VX855 2009-09-23 07:39:53 -07:00
accel.h viafb: hardware acceleration initialization cleanup 2009-09-23 07:39:53 -07:00
chip.h viafb: add support for the VX855 chipset 2009-09-23 07:39:53 -07:00
debug.h
dvi.c viafb: improve viafb_par 2009-09-23 07:39:52 -07:00
dvi.h viafb: dvi.c, dvi.h, global.c and global.h 2008-10-16 11:21:41 -07:00
global.c viafb: hardware acceleration initialization cleanup 2009-09-23 07:39:53 -07:00
global.h viafb: cleanup viafb_cursor 2009-09-23 07:39:53 -07:00
hw.c viafb: make viafb a first-class citizen using pci_driver 2009-09-23 07:39:53 -07:00
hw.h viafb: make viafb a first-class citizen using pci_driver 2009-09-23 07:39:53 -07:00
iface.c viafb: iface.c, iface.h, ioctl.c, ioctl.h 2008-10-16 11:21:41 -07:00
iface.h viafb: iface.c, iface.h, ioctl.c, ioctl.h 2008-10-16 11:21:41 -07:00
ioctl.c drivers/video/via/ioctl.c: prevent reading uninitialized stack memory 2010-09-26 17:21:31 -07:00
ioctl.h viafb: remove unused video device stuff 2009-09-23 07:39:52 -07:00
lcd.c viafb: improve pitch handling 2009-09-23 07:39:53 -07:00
lcd.h viafb: lcd.c, lcd.h, lcdtbl.h 2008-10-16 11:21:41 -07:00
lcdtbl.h viafb: lcd.c, lcd.h, lcdtbl.h 2008-10-16 11:21:41 -07:00
Makefile viafb: Makefile, share.h 2008-10-16 11:21:41 -07:00
share.h viafb: add support for the VX855 chipset 2009-09-23 07:39:53 -07:00
tbl1636.c viafb: tbl1636.c, tbl1636.h, tblDPASetting.c, tblDPASetting.h 2008-10-16 11:21:41 -07:00
tbl1636.h viafb: tbl1636.c, tbl1636.h, tblDPASetting.c, tblDPASetting.h 2008-10-16 11:21:41 -07:00
tblDPASetting.c viafb: tbl1636.c, tbl1636.h, tblDPASetting.c, tblDPASetting.h 2008-10-16 11:21:41 -07:00
tblDPASetting.h viafb: tbl1636.c, tbl1636.h, tblDPASetting.c, tblDPASetting.h 2008-10-16 11:21:41 -07:00
via_i2c.c viafb: improve viafb_par 2009-09-23 07:39:52 -07:00
via_i2c.h viafb: via_i2c.c, via_i2c.h, viamode.c, viamode.h 2008-10-16 11:21:42 -07:00
via_utility.c viafb: via_utility.c, via_utility.h, vt1636.c, vt1636.h 2008-10-16 11:21:42 -07:00
via_utility.h viafb: via_utility.c, via_utility.h, vt1636.c, vt1636.h 2008-10-16 11:21:42 -07:00
viafbdev.c viafb: pass reference to pci device when calling framebuffer_alloc() 2009-09-23 07:39:55 -07:00
viafbdev.h viafb: hardware acceleration initialization cleanup 2009-09-23 07:39:53 -07:00
viamode.c viafb: add support for the VX855 chipset 2009-09-23 07:39:53 -07:00
viamode.h viafb: add support for the VX855 chipset 2009-09-23 07:39:53 -07:00
vt1636.c viafb: improve viafb_par 2009-09-23 07:39:52 -07:00
vt1636.h viafb: via_utility.c, via_utility.h, vt1636.c, vt1636.h 2008-10-16 11:21:42 -07:00