| |||||||||||||
2.6.31 merge window, week 22.6.31 merge window, week 2Posted Jun 25, 2009 14:08 UTC (Thu) by nix (subscriber, #2304)Parent article: 2.6.31 merge window, week 2
A command stream checker for Radeon r3xx-r5xx hardware has been added to stop user-space processes from accessing memory outside of what they own.This wasn't already present?! Wasn't this a gigantic security hole? (If not, why not?)
(Log in to post comments)
2.6.31 merge window, week 2 Posted Jun 25, 2009 16:23 UTC (Thu) by elanthis (guest, #6227) [Link]
Yes, but that was experimental code, not meant to be used by the general populace just yet and hence not enabled by default in kernel builds. The whole radeon-CP, TTM, DRI2, KMS stuff is all brand new, after all. Some distros have been enabling it by default, granted, but that's their security failing. :)
Note that the new checker is about video memory, not general process memory, so the security implications are a bit limited (although still serious enough to warrant fixing on multi-user systems, of course).
2.6.31 merge window, week 2 Posted Jun 25, 2009 19:07 UTC (Thu) by nix (subscriber, #2304) [Link]
Ah, good, it's not as bad as the mach64 DRI, which was never merged
anywhere because it allowed the video card to be instructed to DMA over *anything*.
2.6.31 merge window, week 2 Posted Jul 3, 2009 1:17 UTC (Fri) by kabloom (guest, #59417) [Link]
It appears from last week's story about the merge window that this code is the second part of Radeon Kernel Modesetting which was merged last week, and it wasn't necessary before.
|
|||||||||||||