libpciaccess ROM read reads more than advertised

Pierre Willenbrock pierre at pirsoft.de
Sat Dec 6 08:16:33 PST 2008


Hi,

i noticed the amount of data read by pci_device_linux_sysfs_read_rom is
determined by the file size from sysfs, while the rom_size reported to
the drivers is calculated using a different algorithm. This leads to
invalid memory writes if the file size is greater than the calculated
size. Possible patch attached.

Regards,
  Pierre
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libpciaccess-romread.patch
Type: text/x-patch
Size: 738 bytes
Desc: not available
URL: <http://lists.x.org/archives/xorg/attachments/20081206/231df8e1/attachment.bin>


More information about the xorg mailing list