[haiku-bugs] Re: [Haiku] #5118: Haiku panics on HDA sound card
- From: "stippi" <trac@xxxxxxxxxxxx>
- Date: Sun, 13 Dec 2009 16:51:44 -0000
#5118: Haiku panics on HDA sound card
---------------------------+------------------------------------------------
Reporter: flaggy | Owner: nobody
Type: bug | Status: new
Priority: normal | Milestone: Unscheduled
Component: Audio & Video | Version: R1/Development
Keywords: | Blockedby:
Platform: x86 | Blocking:
---------------------------+------------------------------------------------
Comment(by stippi):
The code looks very unhealthy. The MultiAudioDevice passes a buffer in an
ioctl() which is a structure "multi_description". This structure contains
a pointer to another memory location allocated in the media_addon_server
memory space, "channels" of type "multi_channel_info*". Then the driver
later copies to this memory location which is of course not part of the
original buffer passed to the ioctl(), but points to random kernel memory
in the driver address space.
--
Ticket URL: <http://dev.haiku-os.org/ticket/5118#comment:1>
Haiku <http://dev.haiku-os.org>
Haiku - the operating system.
Other related posts:
