diff options
| author | Brian Paul <[email protected]> | 2019-10-09 12:05:16 -0600 |
|---|---|---|
| committer | Brian Paul <[email protected]> | 2019-11-18 12:28:59 -0700 |
| commit | 02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc (patch) | |
| tree | 701aeb05da830be270d1ff8a663c1dd8c991a871 /src/loader/loader.c | |
| parent | fdaf8144a8bf65afa7dc66b8d827da38e27a850a (diff) | |
Call shmget() with permission 0600 instead of 0777
A security advisory (TALOS-2019-0857/CVE-2019-5068) found that
creating shared memory regions with permission mode 0777 could allow
any user to access that memory. Several Mesa drivers use shared-
memory XImages to implement back buffers for improved performance.
This path changes the shmget() calls to use 0600 (user r/w).
Tested with legacy Xlib driver and llvmpipe.
Cc: [email protected]
Reviewed-by: Kristian H. Kristensen <[email protected]>
Diffstat (limited to 'src/loader/loader.c')
0 files changed, 0 insertions, 0 deletions