libpciaccess ROM read reads more than advertised
pierre at pirsoft.de
Sat Dec 6 08:16:33 PST 2008
i noticed the amount of data read by pci_device_linux_sysfs_read_rom is
determined by the file size from sysfs, while the rom_size reported to
the drivers is calculated using a different algorithm. This leads to
invalid memory writes if the file size is greater than the calculated
size. Possible patch attached.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 738 bytes
Desc: not available
More information about the xorg