From ce98400f8a9ebd4e62e76b9e292b7598d0d66cc0 Mon Sep 17 00:00:00 2001
From: Marvin Borner
Date: Fri, 2 Apr 2021 23:26:28 +0200
Subject: Added kernel section clear/protect after init

This is a huge security improvement as it prevents potential exploits
of using or modifying internal kernel functions or data.
---
 kernel/drivers/fb.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'kernel/drivers/fb.c')

diff --git a/kernel/drivers/fb.c b/kernel/drivers/fb.c
index 0a9494a..577debf 100644
--- a/kernel/drivers/fb.c
+++ b/kernel/drivers/fb.c
@@ -21,8 +21,8 @@ struct vbe_basic {
 	u8 stuff3[212];
 };
 
-static u32 dev_id = 0;
-static struct vid_info *info = NULL;
+PROTECTED static u32 dev_id = 0;
+PROTECTED static struct vid_info *info = NULL;
 
 static u32 fb_owner = 0;
 static res fb_ioctl(u32 request, void *arg1, void *arg2, void *arg3, struct device *dev)
@@ -65,7 +65,7 @@ void fb_map_buffer(struct page_dir *dir, struct vid_info *boot)
 	memory_map_identity(dir, memory_range_around((u32)vbe->fb, size), MEMORY_USER);
 }
 
-void fb_install(struct vid_info *boot)
+CLEAR void fb_install(struct vid_info *boot)
 {
 	info = boot;
 
-- 
cgit v1.2.3