--- fbcon.c.orig	2003-10-31 20:20:30.000000000 +0100
+++ fbcon.c	2003-11-30 21:43:24.000000000 +0100
@@ -1046,13 +1046,14 @@
                         dst = kmalloc(size, GFP_ATOMIC);
                         if (!dst)
                                 return;
+                        memset(dst, 0, size);
                         
                         cursor.set |= FB_CUR_SETSHAPE;
                         if (info->cursor.mask)
                                 kfree(info->cursor.mask);
                         info->cursor.mask = dst;
 
-                        for (i = 0; i < cur_height; i++) {
+                        for (i = 0; i < vc->vc_font.height; i++) {
                                 for (c = 0; c < s_pitch; c++)
                                         *dst++ = 0xff ^ *src++;
                         }