From 3b8e6ccd2573a027aa30c10d08253de1756540c2 Mon Sep 17 00:00:00 2001
From: Thomas Hellstrom <thomas-at-tungstengraphics-dot-com>
Date: Tue, 19 Dec 2006 23:45:59 +0100
Subject: Security fix. Zero pages before they are handed to user space.

TTM pages were not cleared when allocated and handed to user space.
Sensitive information may leak.
---
 linux-core/drm_ttm.c | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'linux-core/drm_ttm.c')

diff --git a/linux-core/drm_ttm.c b/linux-core/drm_ttm.c
index 931972af..c32dfcf9 100644
--- a/linux-core/drm_ttm.c
+++ b/linux-core/drm_ttm.c
@@ -235,6 +235,8 @@ static int drm_ttm_populate(drm_ttm_t * ttm)
 #else
 			SetPageReserved(page);
 #endif
+			clear_page(kmap(page));
+			kunmap(page);
 			ttm->pages[i] = page;
 			++bm->cur_pages;
 		}
-- 
cgit v1.2.3