Alan Cox posted this on the kernel list. Matrox should fix this in their driver. - |Daryll > [BUG] ouch x 2: no check either way. > >/u2/engler/mc/oses/linux/2.4.5-ac8/drivers/char/drm/mga_state.c:835:mga_iload:+ERROR:RANGE:827:835: > Using user length "idx"as an array index for "buflist" set+by > 'copy_from_user':827 [val=800] Nasty - left for the X folks to fix