Via DRM security status (WAS Re: Kernel Oopses in recent DRMs)

[Thomas H. <uni...@sh...>]

Dave Airlie wrote:

>
>Well via isn't shipped as it still (??) has security problems, or if they
>are fixed no-one as requested me to pull it up to the kernel yet ...
>  
>
The via drm still needs command verification checks of the AGP ring-buffer,
the 3D driver to be ported to use the ring-buffer and finally the DDX to 
export the
MMIO area as read-only instead of read-write.  From what I know that 
should take care of the
security problems.

Last time I talked to Erdi Chen he was short of time of doing the 
command verification and 3D driver updates.

One option is to do command verification for 2D commands only, and 
tighten up the DDX. In this way the DRM could go into the kernel and be 
usable with XvMC. OpenGL possibly as root, until someone has the time to 
fix up the 3D driver and implement a full command verification.

/Thomas

>
>Dave.
>
>  
>