fix :cirrus_vga fix OOB read case qemu Segmentation fault
commit215902d7b6fb50c6fc216fc74f770858278ed904
authorhangaohuai <hangaohuai@huawei.com>
Tue, 14 Mar 2017 06:39:19 +0000 (14 14:39 +0800)
committerGerd Hoffmann <kraxel@redhat.com>
Thu, 16 Mar 2017 07:58:15 +0000 (16 08:58 +0100)
treec8167baf32fb221b518785dd596ae53dfc815fae
parent1883ff34b540daacae948f493b0ba525edf5f642
fix :cirrus_vga fix OOB read case qemu Segmentation fault

check the validity of parameters in cirrus_bitblt_rop_fwd_transp_xxx
and cirrus_bitblt_rop_fwd_xxx to avoid the OOB read which causes qemu Segmentation fault.

After the fix, we will touch the assert in
cirrus_invalidate_region:
assert(off_cur_end >= off_cur);

Signed-off-by: fangying <fangying1@huawei.com>
Signed-off-by: hangaohuai <hangaohuai@huawei.com>
Message-id: 20170314063919.16200-1-hangaohuai@huawei.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
hw/display/cirrus_vga_rop.h