| commit | 83afa38eb20ca27e30683edc7729880e091387fc | |
| author | Gerd Hoffmann <kraxel@redhat.com> | |
| Mon, 6 Oct 2014 09:42:34 +0000 (6 11:42 +0200) | ||
| committer | Gerd Hoffmann <kraxel@redhat.com> | |
| Tue, 28 Oct 2014 09:39:58 +0000 (28 10:39 +0100) | ||
| tree | ae7e85d197e219506cbf0154ac3b807c09f050a7 | treesnapshot (tar.gz zip) |
| parent | 3e9418e160cd8901c83a3c88967158084f5b5c03 | commitdiff |
vmware-vga: CVE-2014-3689: turn off hw accel
Quick & easy stopgap for CVE-2014-3689: We just compile out the
hardware acceleration functions which lack sanity checks. Thankfully
we have capability bits for them (SVGA_CAP_RECT_COPY and
SVGA_CAP_RECT_FILL), so guests should deal just fine, in theory.
Subsequent patches will add the missing checks and re-enable the
hardware acceleration emulation.
Cc: qemu-stable@nongnu.org
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Don Koch <dkoch@verizon.com>
Quick & easy stopgap for CVE-2014-3689: We just compile out the
hardware acceleration functions which lack sanity checks. Thankfully
we have capability bits for them (SVGA_CAP_RECT_COPY and
SVGA_CAP_RECT_FILL), so guests should deal just fine, in theory.
Subsequent patches will add the missing checks and re-enable the
hardware acceleration emulation.
Cc: qemu-stable@nongnu.org
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Don Koch <dkoch@verizon.com>
| hw/display/vmware_vga.c | diffblobblamehistory |