libpciaccess ROM read reads more than advertised

Pierre Willenbrock pierre at
Sat Dec 6 08:16:33 PST 2008


i noticed the amount of data read by pci_device_linux_sysfs_read_rom is
determined by the file size from sysfs, while the rom_size reported to
the drivers is calculated using a different algorithm. This leads to
invalid memory writes if the file size is greater than the calculated
size. Possible patch attached.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: libpciaccess-romread.patch
Type: text/x-patch
Size: 738 bytes
Desc: not available
URL: <>

More information about the xorg mailing list