diff options
| author | Gerd Hoffmann | 2014-11-19 11:37:42 +0100 |
|---|---|---|
| committer | Gerd Hoffmann | 2014-12-01 10:25:12 +0100 |
| commit | d3532a0db02296e687711b8cdc7791924efccea0 (patch) | |
| tree | f1b35defb8a47354f105aa4a3f443025131a0273 /scripts/switch-timer-api | |
| parent | Fix for crash after migration in virtio-rng on bi-endian targets (diff) | |
| download | qemu-d3532a0db02296e687711b8cdc7791924efccea0.tar.gz qemu-d3532a0db02296e687711b8cdc7791924efccea0.tar.xz qemu-d3532a0db02296e687711b8cdc7791924efccea0.zip | |
cirrus: fix blit region check
Issues:
* Doesn't check pitches correctly in case it is negative.
* Doesn't check width at all.
Turn macro into functions while being at it, also factor out the check
for one region which we then can simply call twice for src + dst.
This is CVE-2014-8106.
Reported-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'scripts/switch-timer-api')
0 files changed, 0 insertions, 0 deletions