Re: drm/i915: Possible security hole in command parsing

Kees Cook
2015-06-05T00:29:25Z

[Since this has been publicly reported, I'm moving security@kernel.org to Bcc]

On Tue, May 5, 2015 at 2:39 PM, Rebecca N. Palmer
<rebecca_palmer@zoho.com> wrote:
> Repeating those tests[1] on linux-next 20150505 gave the same results,
> but having seen the intermittent "no window title bar" problem twice
> more, I now have to consider it a result of my patch[0], and hence
> withdraw it.
>
> However, that doesn't mean there isn't a security problem here,
> only that we need a different way to fix it.
>
> [0] http://lists.freedesktop.org/archives/intel-gfx/2015-April/065627.html
> [1] http://lists.freedesktop.org/archives/intel-gfx/2015-May/065705.html

Has this issue been resolved? (I have no idea what "secure" means in
this graphics context.)

Thanks!

-Kees

--
Kees Cook
Chrome OS Security