]> git.ipfire.org Git - thirdparty/qemu.git/commit
projects / thirdparty / qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8d1439b) | patch
ati-vga: Fix checks in ati_2d_blt() to avoid crash
authorBALATON Zoltan <balaton@eik.bme.hu>
Mon, 6 Apr 2020 20:34:26 +0000 (22:34 +0200)
committerGerd Hoffmann <kraxel@redhat.com>
Tue, 7 Apr 2020 07:25:23 +0000 (09:25 +0200)
commitac2071c3791b67fc7af78b8ceb320c01ca1b5df7
tree0e951ae17812aac4ca3ca98d695e6b676480a4e2tree | snapshot
parent8d1439b692c5dc8edc4d4a1d334afd7070458029commit | diff
ati-vga: Fix checks in ati_2d_blt() to avoid crash

In some corner cases (that never happen during normal operation but a
malicious guest could program wrong values) pixman functions were
called with parameters that result in a crash. Fix this and add more
checks to disallow such cases.

Reported-by: Ziming Zhang <ezrakiez@gmail.com>
Signed-off-by: BALATON Zoltan <balaton@eik.bme.hu>
Message-id: 20200406204029.19559747D5D@zero.eik.bme.hu
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
hw/display/ati_2d.c diff | blob | blame | history
Mirror of https://git.qemu.org/git/qemu.git