[MPlayer-dev-eng] [PATCH] svgalib_helper root vuln

[Diego Biurrun]

D Richard Felker III writes:
> On Wed, Oct 06, 2004 at 12:03:47PM +0200, Diego Biurrun wrote:
> > D Richard Felker III writes:
> > > 
> > > ok i'm attaching the fix. it's not a great patch but it should work.
> > > note that it also prevents mapping some low memory that was
> > > unconditionally allowed before. some stupid drivers may need this low
> > > area, but it's inherently a security hole. i doubt any vidix drivers
> > > need it, just bad svgalib drivers...
> > 
> > Have you sent this upstream?
> 
> no, i hadn't done anything with it until i cleaned up my changes and
> sent that patch to our list. who's the appropriate upstream?

These look like good starting points, there are some mail addresses on
these pages:

http://freshmeat.net/projects/svgalib/
http://www.svgalib.org/
http://www.svgalib.org/helpdesk.html

Diego