projects / qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: db12451) | patch
cirrus: fix blit region check
authorGerd Hoffmann <kraxel@redhat.com>
Wed, 19 Nov 2014 10:37:42 +0000 (11:37 +0100)
committerGerd Hoffmann <kraxel@redhat.com>
Mon, 1 Dec 2014 09:25:12 +0000 (10:25 +0100)
commitd3532a0db02296e687711b8cdc7791924efccea0
treef1b35defb8a47354f105aa4a3f443025131a0273tree | snapshot
parentdb12451decf7dfe0f083564183e135f2095228b9commit | diff
cirrus: fix blit region check

Issues:
 * Doesn't check pitches correctly in case it is negative.
 * Doesn't check width at all.

Turn macro into functions while being at it, also factor out the check
for one region which we then can simply call twice for src + dst.

This is CVE-2014-8106.

Reported-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
hw/display/cirrus_vga.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.