| commit | 215902d7b6fb50c6fc216fc74f770858278ed904 | |
| author | hangaohuai <hangaohuai@huawei.com> | |
| Tue, 14 Mar 2017 06:39:19 +0000 (14 14:39 +0800) | ||
| committer | Gerd Hoffmann <kraxel@redhat.com> | |
| Thu, 16 Mar 2017 07:58:15 +0000 (16 08:58 +0100) | ||
| tree | c8167baf32fb221b518785dd596ae53dfc815fae | treesnapshot (tar.gz zip) |
| parent | 1883ff34b540daacae948f493b0ba525edf5f642 | commitdiff |
fix :cirrus_vga fix OOB read case qemu Segmentation fault
check the validity of parameters in cirrus_bitblt_rop_fwd_transp_xxx
and cirrus_bitblt_rop_fwd_xxx to avoid the OOB read which causes qemu Segmentation fault.
After the fix, we will touch the assert in
cirrus_invalidate_region:
assert(off_cur_end >= off_cur);
Signed-off-by: fangying <fangying1@huawei.com>
Signed-off-by: hangaohuai <hangaohuai@huawei.com>
Message-id: 20170314063919.16200-1-hangaohuai@huawei.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
check the validity of parameters in cirrus_bitblt_rop_fwd_transp_xxx
and cirrus_bitblt_rop_fwd_xxx to avoid the OOB read which causes qemu Segmentation fault.
After the fix, we will touch the assert in
cirrus_invalidate_region:
assert(off_cur_end >= off_cur);
Signed-off-by: fangying <fangying1@huawei.com>
Signed-off-by: hangaohuai <hangaohuai@huawei.com>
Message-id: 20170314063919.16200-1-hangaohuai@huawei.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
| hw/display/cirrus_vga_rop.h | diffblobblamehistory |