<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW --- - arbitrary memory access corrupts kernel memory, eventually crashing the kernel" href="https://bugs.freedesktop.org/show_bug.cgi?id=61953#c6">Comment # 6</a> on <a class="bz_bug_link bz_status_NEW " title="NEW --- - arbitrary memory access corrupts kernel memory, eventually crashing the kernel" href="https://bugs.freedesktop.org/show_bug.cgi?id=61953">bug 61953</a> from <a class="email" href="mailto:adi@drcomp.erfurt.thur.de" title="Adrian Knoth <adi@drcomp.erfurt.thur.de>"> Adrian Knoth</a> <pre>(In reply to <a href="show_bug.cgi?id=61953#c5">comment #5</a>) > Unaffected: Kernel 3.2.x and before Correction, 3.2.x is affected, too. On earlier 3.2.x kernels (sorry for the lack of precision), it takes weeks to trigger the bug, but with the recent update in Debian unstable (3.2.42-2), it crashes as fast as hand-rolled 3.8.x (and basically every version in between). For the sake of reproducibility, is there a tool that mimics the behaviour of a GTK canvas? Or basically something to allocate video memory from the X server and then moving this area around? I've noticed that especially hover effects (images that change on onMouseOver) in chromium are among the first elements to show screen corruption. My hypothesis is that these elements are already rendered off-screen and then moved to the visible area. During this process (off-screen rendering or moving), something goes wrong. And maybe this something has the potential to write at arbitrary physical addresses.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the assignee for the bug.</li> </ul> </body> </html>