* [Bug 74532] New: Sanitize all freed GPU memory
@ 2014-02-04 19:21 bugzilla-daemon
2019-10-14 13:20 ` [Bug 74532] " bugzilla-daemon
0 siblings, 1 reply; 2+ messages in thread
From: bugzilla-daemon @ 2014-02-04 19:21 UTC (permalink / raw)
To: dri-devel
[-- Attachment #1.1: Type: text/plain, Size: 1584 bytes --]
https://bugs.freedesktop.org/show_bug.cgi?id=74532
Priority: medium
Bug ID: 74532
Keywords: security
Assignee: dri-devel@lists.freedesktop.org
Summary: Sanitize all freed GPU memory
Severity: normal
Classification: Unclassified
OS: Linux (All)
Reporter: nikoli@gmx.us
Hardware: All
Status: NEW
Version: unspecified
Component: General
Product: DRI
X11 applications are able to get and display in human readable form parts of
closed applications, see:
https://github.com/mpv-player/mpv/issues/521
It means applications like skype can silently send much more data, then you
expect, even when you run them as separate user.
Asked about this security problem in #gentoo-hardened, #radeon and #dri-devel,
summarizing:
0) Currently GPU memory is not sanitized by kernel, nothing enforces and
ensures its sanitizing.
1) https://grsecurity.net Linux kernel patches add ability to sanitize all
freed memory, but they do not affect GPU memory:
https://en.wikibooks.org/wiki/Grsecurity/Appendix/Grsecurity_and_PaX_Configuration_Options#Sanitize_all_freed_memory
2) The only secure place to clean memory is kernel, because if application or X
server crashes, memory will not be erased.
3) Some applications possibly will work slower, so better make sanitizing
configurable by adding build and run time kernel options.
4) Most likely this problem affects opencl too.
--
You are receiving this mail because:
You are the assignee for the bug.
[-- Attachment #1.2: Type: text/html, Size: 3162 bytes --]
[-- Attachment #2: Type: text/plain, Size: 159 bytes --]
_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/dri-devel
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2019-10-14 13:20 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-02-04 19:21 [Bug 74532] New: Sanitize all freed GPU memory bugzilla-daemon
2019-10-14 13:20 ` [Bug 74532] " bugzilla-daemon
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.