oss-sec mailing list archives
Re: CVE request: kernel: drm/radeon/kms: check AA resolve registers on r300
From: Eugene Teo <eugene () redhat com>
Date: Fri, 25 Feb 2011 09:03:21 +0800
On 02/24/2011 11:43 AM, Eugene Teo wrote:
Check values passed in to AARESOLVE_OFFSET on r300. It can be used to write arbitrary data to VRAM, GTT, etc. This is specific to a range of GPUs only. drm/radeon/kms: check AA resolve registers on r300 http://git.kernel.org/linus/fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef [PATCH] drm/radeon: fix regression with AA resolve checking https://patchwork.kernel.org/patch/576101/
http://git.kernel.org/linus/45e4039c3aea597ede44a264cea322908cdedfe9
https://bugzilla.redhat.com/show_bug.cgi?id=680000
Eugene -- Eugene Teo / Red Hat Security Response Team
Current thread:
- CVE request: kernel: drm/radeon/kms: check AA resolve registers on r300 Eugene Teo (Feb 23)
- Re: CVE request: kernel: drm/radeon/kms: check AA resolve registers on r300 Josh Bressers (Feb 24)
- Re: CVE request: kernel: drm/radeon/kms: check AA resolve registers on r300 Eugene Teo (Feb 24)