Alan Cox posted this on the kernel list. Matrox should fix this in their
driver. 

                                                - |Daryll

> [BUG]  ouch x 2: no check either way.
> 
>/u2/engler/mc/oses/linux/2.4.5-ac8/drivers/char/drm/mga_state.c:835:mga_iload:+ERROR:RANGE:827:835:
> Using user length "idx"as an array index for "buflist" set+by
> 'copy_from_user':827 [val=800]

Nasty - left for the X folks to fix


PGP signature

Reply via email to