Re: [gentoo-hardened] pciutils / lspci -vv buffer overflow

[Rumen Yotov]

On пн, 2004-07-26 at 06:34, Ned Ludd wrote:
> Rimer can you verify the fix please?
>
> On Sun, 2004-07-25 at 23:27, Rumen Yotov wrote:
> > On пн, 2004-07-26 at 03:56, Pascal de Bruijn wrote:
> > > Hi,
> > >
> > > I have investigated the lspci -vv buffer overflow... This only seemed to
> > > occur on certain installations, this should be on systems which have
> > > AGPx1 and AGPx2 and AGPx4 support.
> > >
> > > For more information:
> > > http://members.home.nl/keizerflipje/hacks/lspci/lspci.txt
> > > http://members.home.nl/keizerflipje/hacks/lspci/lspci.diff
> > >
> > > I really like to get this verified...
> > >
> > > Greets,
> > > Pascal de Bruijn
> > >
> > > --
> > > gentoo-hardened@g.o mailing list
> > >
> > Hi,
> > Can confirm lspci -vv buffer overflow on K7VM2 mobo with following
> > message:
> > ...CUT...
> > 0000:00:00.0 Host bridge: VIA Technologies, Inc. VT8375 [KM266/KL266]
> > Host Bridge
> >         Subsystem: Unknown device 1849:3156
> >         Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop-
> > ParErr- Stepping- SERR- FastB2B-
> >         Status: Cap+ 66Mhz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort-
> > <TAbort- <MAbort+ >SERR- <PERR-
> >         Latency: 8
> >         Region 0: Memory at e0000000 (32-bit, prefetchable)
> >         Capabilities: [a0] AGP version 2.0
> >                 Status: RQ=32 Iso- ArqSz=0 Cal=0 SBA+ ITACoh- GART64-
> > HTrans- 64bit- FW+ AGP3-
> > Rate=x1,x2,x4
> >                 Command: RQ=1 ArqSz=0 Cal=0 SBA- AGP- GART64- 64bit- FW-
> > Rate=<none>
> > lspci: stack smashing attack in function show_agp()
> > ................................^^^^^^^^^^^^^^^^^^^
> > Aborted
> > ...END CUT...
> > Rumen
Hi,
Certanly, but which is the better way to go:
1.ebuild ... clean, fetch, unpack, APPLY PATCH, compile, install, qmerge
or;
2.Change the ebuild to include the patch?
Looks rather i'll opt for 1
TIA
Rumen